Cisco 3850 Series Switches
Item added to cartProceed to Checkout Proceed to Get a Quote
Cisco 3850 Series Switches
The Cisco® Catalyst® 3850 Series Switches is the next generation of enterprise-class stackable access-layer switches that provide full convergence between wired and wireless on a single platform. Cisco's new Unified Access Data Plane (UADP) application-specific integrated circuit (ASIC) powers the switch and enables uniform wired-wireless policy enforcement, application visibility, flexibility and application optimization. This convergence is built on the resilience of the new and improved Cisco StackWise-480. The Cisco Catalyst 3850 Series Switches support full IEEE 802.3at Power over Ethernet Plus (PoE+), Cisco Universal Power over Ethernet (Cisco UPOE), modular and field-replaceable network modules, redundant fans and power supplies.
Cisco Catalyst 3850 Series Switches Features:
- Integrated wireless controller capability with:
- 24 and 48 10/100/1000 data PoE+ and Cisco UPOE models with energy-efficient Ethernet (EEE)
- Software support for IPv4 and IPv6 routing, multicast routing, modular quality of service (QoS), Flexible NetFlow (FNF) Version 9, and enhanced security features
- Single universal Cisco IOS® Software image across all license levels, providing an easy upgrade path for software features
- Enhanced limited lifetime warranty (E-LLW) with next business day (NBD) advance hardware replacement and 90-day access to Cisco Technical Assistance Center (TAC) support
- Up to 40G of wireless capacity per switch (48-port models)
- Support for up to 50 access points and 2000 wireless clients on each switching entity (switch or stack)
- Cisco StackWise-480 technology provides scalability and resiliency with 480 Gbps of stack throughput
- Cisco StackPower™ technology provides power stacking among stack members for power redundancy
- Three optional uplink modules with 4 x Gigabit Ethernet, 2 x 10 Gigabit Ethernet, or 4 x 10 Gigabit Ethernet ports
- Dual redundant, modular power supplies and three modular fans providing redundancy
- Full IEEE 802.3at (PoE+) with 30W power on all ports in 1 rack unit (RU) form factor
- Cisco UPOE with 60W power per port in 1 rack unit (RU) form factor
Cisco 3850 Series SwitchesNetwork Modules
The Cisco Catalyst 3850 Series Switches support three optional network modules for uplink ports. The default switch configuration doesn't include the uplink module. At the time of switch purchase the customer has the flexibility to choose from the network modules described in Table 2.
Figure 2 shows various network modules:
- 4 x Gigabit Ethernet with Small Form-Factor Pluggable (SFP)
- 2 x 10 Gigabit Ethernet with SFP+ or 4 x Gigabit Ethernet with SFP
- 4 x 10 Gigabit Ethernet with SFP+ (supported on the 48-port models only)
The SFP+ interface supports both 10 Gigabit Ethernet and Gigabit Ethernet ports, allowing customers to use their investment in Gigabit Ethernet SFP and upgrade to 10 Gigabit Ethernet when business demands change without having to do a comprehensive upgrade of the access switch.Dual Redundant Modular Power Supplies
The Cisco Catalyst 3850 Series Switches support dual redundant power supplies. The switch ships with one power supply by default, and the second power supply can be purchased at the time of ordering the switch or at a later time. If only one power supply is installed, it should always be in power supply bay 1. The switch also ships with three field-replaceable fans
A 440WDC power supply is available as a spare (should be ordered separately) on all switch models. The DC power supply also delivers PoE capabilities for maximum flexibility (refer to Table 5 for available PoE budget with DC power supplies). Customers can mix and match the AC and DC power supplies in the two available power supply slots. Any of these power supplies can be installed in any of the switches.Power over Ethernet Plus (PoE+)
In addition to PoE (IEEE 802.3af), the Cisco Catalyst 3850 Series Switches support PoE+ (IEEE 802.3at standard), which provides up to 30W of power per port. The Cisco Catalyst 3850 Series Switches can provide a lower total cost of ownership (TCO) for deployments that incorporate Cisco IP phones, Cisco Aironet® wireless LAN (WLAN) access points, or any IEEE 802.3at-compliant end device. PoE removes the need for wall power to each PoE-enabled device and eliminates the cost for additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deploymentsCisco Universal Power over Ethernet (UPOE)
Cisco Universal Power over Ethernet is a breakthrough technology, offering the following services and benefits
- 60W per port to enable a variety of end devices such as Samsung VDI client, BT IP turret systems in trading floors, Cisco Catalyst compact switches in retail/hospitality environments, personal Cisco Telepresence® systems, and physical access control devices
- High availability for power and guaranteed uninterrupted services, a requirement for critical applications (e911)
- Lowering OpEx by providing network resiliency at lower cost by consolidating backup power into the wiring closet
- Faster deployment of new campus access networking infrastructures by eliminating the need for a power outlet for every endpoint
The Cisco Catalyst 3850 is the first stackable access switching platform that enables wired plus wireless services on a single Cisco IOS XE Software-based platform. With this, Cisco has pioneered a host of rich capabilities such as high availability based on stateful switchover (SSO) on stacking, granular QoS, security, and Flexible Netflow (FNF) across wired and wireless in a seamless fashion. Also, the wired plus wireless features are bundled into a single Cisco IOS Software image, which reduces the number of software images that users have to qualify/certify before enabling them in their network. The single console port for command-line interface (CLI) management reduces the number of touch points to manage for wired plus wireless services, thereby reducing network complexity, simplifying network operations, and lowering the TCO to manage the infrastructure.
Converged wired plus wireless not only improves wireless bandwidth across the network but also the scale of wireless deployment. Each 48-port Cisco Catalyst 3850 provides 40 Gbps of wireless throughput (20 Gbps on the 24-port model). This wireless capacity increases with the number of members in the stack. This makes sure that the network can scale with current wireless bandwidth requirements, as dictated by IEEE 802.11n-based access points and with future wireless standards such as IEEE 802.11ac. Additionally, the Cisco Catalyst 3850 distributes the wireless controller functions to achieve better scalability. Each Cisco Catalyst 3850 switch/stack can operate as the wireless controller in two modes:
- Mobility agent (MA): This is the default mode in which the Cisco Catalyst 3850 switch ships. In this mode the switch is capable of terminating the CAPWAP tunnels from the access points and providing wireless connectivity to wireless clients. Maintaining wireless client databases and configuring and enforcing security and QoS policies for wireless clients and access points can be enforced in this mode. No additional license on top of IP Base is required to operate in the mobility agent mode.
- Mobility controller (MC): In this mode, the Cisco Catalyst 3850 switch can perform all the mobility agent tasks in addition to mobility coordination, radio resource management (RRM), and Cisco CleanAir® coordination within a mobility subdomain. The mobility controller mode can be enabled on the switch CLI. IP Base license level is required when the Cisco Catalyst 3850 switch is acting as the mobility controller. A centrally located Cisco 5508 Wireless LAN Controller (WLC 5508), Cisco Wireless Services Module 2 (WiSM2) (when running AireOS Version 7.3), and Wireless LAN Controller 5760 can also perform this role for larger deployments.
With mobility agents located in the wiring closets providing 40 Gbps of wireless per switch (n x 40 Gbps for a stack of nswitches) and mobility controllers managing some of the central wireless functions, the converged access-based wireless deployment provides best-in-class scalability for wireless and significantly improved wireless throughput.Flexible NetFlow (FNF)
Full visibility into the wired plus wireless traffic is achieved because of the access point Control and Provisioning of Wireless Access Points (CAPWAP) tunnel termination on the switch. This helps identify users and user traffic flows in order to identify potential attackers and take corrective action at the access layer before the attack penetrates further into the network. This is achieved using FNF, which monitors every single flow entering and exiting the switch stack for wired and wireless users. It also helps identify the top wired/wireless talkers and enforce appropriate bandwidth provisioning policies.QoS
The 3850 switch has advanced wired plus wireless QoS capabilities. It uses the Cisco modular QoS command line interface (MQC). The switch manages wireless bandwidth using unprecedented hierarchical bandwidth management starting at the per-access-point level and drilling further down to per-radio, per-service set identification (SSID), and per-user levels. This helps manage and prioritize available bandwidth between various radios and various SSIDs (enterprise, guest, and so on) within each radio on a percentage basis. The switch is also capable of automatically allocating equal bandwidth among the connected users within a given SSID. This makes sure that all users within a given SSID get a fair share of the available bandwidth while being connected to the network. The UADP ASIC enables the hierarchical bandwidth management and fair sharing of bandwidth, thereby providing hardware-based QoS for optimized performance at line-rate traffic.
In addition to these capabilities, the switch is able to do class of service (CoS) or differentiated services code point (DSCP) based queuing, policing, shaping, and marking of wired plus wireless traffic. This enables users to create common policies that can be used across wired plus wireless traffic. The 3850 also supports downloadable policy names from the Cisco Identity Services Engine (ISE) when a user successfully authenticates to the network using the ISE.Security
The Cisco Catalyst 3850 provides a rich set of security features for wired plus wireless users. Features such as IEEE 802.1x, Dynamic Host Configuration Protocol (DHCP) snooping, IP Source Guard and control plane protection, wireless intrusion prevention systems (WIPSs), and so on enable protection against unauthorized users and attackers. With a variety of wired plus wireless users connecting to the network, the switch supports session-aware networking, in which each device connected to the network is identified as one session, and unique access control lists (ACLs) and/or QoS policies can be defined and applied using the ISE for each of these sessions, providing better control on the devices connecting to the network.Resiliency Cisco StackWise-480 Technology
Cisco StackWise-480 technology is built on the highly successful industry-leading StackWise® technology, which is a premium stacking architecture. StackWise-480 has a stack bandwidth of 480 Gbps. StackWise-480 uses Cisco IOS Software SSO for providing resiliency within the stack. The stack behaves as a single switching unit that is managed by an "active" switch elected by the member switches. The active switch automatically elects a standby switch within the stack. The active switch creates and updates all the switching/routing/wireless information and constantly synchronizes that information with the standby switch. If the active switch fails, the standby switch assumes the role of the active switch and continues to the keep the stack operational. Access points continue to remain connected during an active-to-standby switchover.
A working stack can accept new members or delete old ones without service interruption. StackWise-480 creates a highly resilient single unified system of up to nine switches, providing simplified management using a single IP address, single Telnet session, single CLI, auto-version checking, auto-upgrading, auto-configuration, and more. StackWise-480 also enables local switching in Cisco Catalyst 3850 Series Switches.Cisco StackPower Technology
The Cisco Catalyst 3850 Series uses the Cisco StackPower technology present on the Cisco Catalyst 3850 Series. StackPower is an innovative power interconnect system that allows the power supplies in a stack to be shared as a common resource among all the switches. Cisco StackPower unifies the individual power supplies installed in the switches and creates a pool of power, directing that power where it is needed. Up to four switches can be configured in a StackPower stack with the special connector at the back of the switch using the StackPower cable, which is different than the StackWise-480 cables.
StackPower can be deployed in either power-sharing mode or redundancy mode. In power-sharing mode, the power of all the power supplies in the stack is aggregated and distributed among the switches in the stack. In redundant mode, when the total power budget of the stack is calculated, the wattage of the largest power supply is not included. That power is held in reserve and used to maintain power to switches and attached devices when one power supply fails, enabling the network to operate without interruption. Following the failure of one power supply, the StackPower mode becomes power sharing.
StackPower allows customers to simply add one extra power supply in any switch of the stack and either provide power redundancy for any of the stack members or simply add more power to the shared pool. StackPower eliminates the need for an external redundant power system or installation of dual power supplies in all the stack members. StackPower is available in LAN Base license level (or higher). For LAN Base, cables need to be purchased separately.Foundation for Open Network Environment
The heart of the Cisco Catalyst 3850 is the UADP ASIC with programmability for future features and intelligence with investment protection. The new ASIC provides the foundation for converged APIs across wired and wireless, Cisco Open Network Environment, software-defined networking (SDN) readiness and OnePK SDK through software updates over the product lifetime.
Software Features and Services on Cisco Catalyst 3850 Series Switches
Software services supported on the Cisco Catalyst 3850 Series Switches can be classified into five broad categories:
- Ease of operations
- Advanced security features
- Application visibility and control
The Cisco Catalyst 3850 help reduce the operating costs through:
- Cisco Catalyst Smart Operations
- Easy-to-use deployment and control features
- Efficient switch operations
- Network management tools
Cisco Catalyst Smart Operations
Cisco Catalyst Smart Operations are a comprehensive set of capabilities that simplify LAN deployment, configuration, and troubleshooting. In addition to adaptive, always-on technologies such as StackWise-480 and StackPower, Cisco Catalyst Smart Operations enable zero-touch installation and replacement of switches, fast upgrade, and ease of troubleshooting with reduced operational cost. Cisco Catalyst Smart Operations are a set of features that includes Smart Install, Auto Smartports, Smart Configuration and Smart Troubleshooting to enhance operational excellence:
- Cisco Smart Install is a transparent plug-and-play technology to configure the Cisco IOS Software image and switch configuration without user intervention. Smart Install utilizes dynamic IP address allocation and the assistance of other switches to facilitate installation, providing transparent network plug and play.
- Cisco Auto Smartports provide automatic configuration as devices connect to the switch port, allowing auto-detection and plug and play of the device onto the network.
- Cisco Smart Troubleshooting is an extensive array of debug diagnostic commands and system health checks within the switch, including Generic Online Diagnostics (GOLD) and Onboard Failure Logging (OBFL).
- Embedded Event Manager (EEM) is a powerful and flexible feature that provides real-time network event detection and onboard automation. Using EEM, customers can adapt the behavior of their network devices to align with their business needs. This feature requires the IP Base feature set.
- User experience:
- IP service-level agreements (SLAs) enable customers to assure new business-critical IP applications, as well as IP services that utilize data, voice, and video, in an IP network. This feature requires the IP Services feature set.
- DHCP autoconfiguration of multiple switches through a boot server eases switch deployment.
- Automatic QoS (AutoQoS) simplifies QoS configuration in voice over IP (VoIP) networks by issuing interface and global switch commands to detect Cisco IP phones, classify traffic, and help enable egress queue configuration.
- Autonegotiation on all ports automatically selects half- or full-duplex transmission mode to optimize bandwidth.
- Automatic media-dependent interface crossover (MDIX) automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight through) is installed.
- Simplified configuration and connectivity:
- Dynamic Trunking Protocol (DTP) facilitates dynamic trunk configuration across all switch ports.
- Port Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel groups or Gigabit EtherChannel groups to link to another switch, router, or server.
- Link Aggregation Control Protocol (LACP) allows the creation of Ethernet channeling with devices that conform to IEEE 802.3ad. This feature is similar to Cisco EtherChannel technology and PAgP.
- Unidirectional Link Detection Protocol (UDLD) and aggressive UDLD allow unidirectional links caused by incorrect fiber-optic wiring or port faults to be detected and disabled on fiber-optic interfaces.
- Cisco VLAN Trunking Protocol (VTP) Version 3 supports dynamic VLANs and dynamic trunk configuration across all switches.
- Efficient switch operation:
- Switching database manager (SDM) templates, VLAN template (specific to LAN Base license level), and advanced template allow the administrator to automatically optimize the ternary content-addressable memory (TCAM) allocation to the desired features based on deployment-specific requirements.
- Local proxy Address Resolution Protocol (ARP) works in conjunction with private VLAN edge to minimize broadcasts and maximize available bandwidth.
- Stacking master configuration management with Cisco StackWise-480 technology helps make sure that all switches are automatically upgraded when the master switch receives a new software version. Automatic software version checking and updating help ensure that all stack members have the same software version.
- Trivial File Transfer Protocol (TFTP) reduces the cost of administering software upgrades by downloading from a centralized location.
- Network Timing Protocol (NTP) provides an accurate and consistent timestamp to all intranet switches.
- Optimized multicast for wired plus wireless: Cisco Catalyst 3850 offers greater multicast efficiency by receiving only one multicast stream and replicating it for all connected wired plus wireless devices connected to that switch.
- Internet Group Management Protocol (IGMP) v1, v2, v3 snooping for IPv4: multicast listener discovery (MLD) v1 and v2 snooping provides fast client joins and leaves of multicast streams and limits bandwidth-intensive video traffic to only the requestors.
- Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switch network from any other switch in the same network.
- For enhanced traffic management, monitoring, and analysis, the Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events).
- Layer 2 traceroute eases troubleshooting by identifying the physical path that a packet takes from source to destination.
- Wireless RF management provides both real-time and historical information about RF interference affecting network performance across controllers using systemwide Cisco CleanAir technology integration.
Cisco Catalyst 3850 Series Switches, designed and engineered by Cisco, provide optimum power-saving, EEE, low-power operations for industry best-in-class power management and power consumption capabilities. The Cisco Catalyst 3850 ports are capable of reduced power modes so that ports not in use can move into a lower power utilization state. Other efficient switch operation features are:
- Cisco Discovery Protocol Version 2 allows the Cisco Catalyst 3850 Series Switches to negotiate a more granular power setting when connecting to a Cisco powered device such as IP phones or access points than what is provided by IEEE classification.
- Per-port power consumption command allows customers to specify maximum power setting on an individual port. Per-port PoE power sensing measures actual power being drawn, enabling more intelligent control of powered devices.
- The PoE MIB provides proactive visibility into power usage and allows customers to set different power-level thresholds.
Organizations may choose to turn off access point radios to reduce power consumption during off-peak hours. The integrated wireless LAN controller avoids the deployment of additional devices in the network.Network Management Tools
The Cisco Catalyst 3850 Series Switches offer both a superior CLI for detailed configuration and Cisco Prime™ infrastructure for unified wired plus wireless management. Prime infrastructure provides day 0 and ongoing provisioning, ongoing monitoring and maintenance, configuration templates, and device and user 360-degree views and serves as the FNF collector for user traffic views using the Prime Assurance Manager module.
For detailed information about Cisco Prime infrastructure, go to http://www.cisco.com/en/US/products/ps12239/index.html.Advanced Security Features
Cisco Catalyst 3850 Series Switches support advanced security features including but not limited to:
- Protection against attackers:
- Port security secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC addresses to deny MAC address flooding.
- DHCP snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature is used by other primary security features to prevent a number of other attacks such as ARP poisoning.
- Dynamic ARP inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of ARP.
- IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between the client's IP and MAC address, port, and VLAN.
- The Unicast Reverse Path Forwarding (RPF) feature helps mitigate problems caused by the introduction of malformed or forged (spoofed) IP source addresses into a network by discarding IP packets that lack a verifiable IP source address.
- Bidirectional data support on the SPAN port allows the Cisco intrusion detection system (IDS) to take action when an intruder is detected.
- User authentication:
- Flexible authentication that supports multiple authentication mechanisms, including 802.1X, MAC authentication bypass, and web authentication using a single, consistent configuration.
- RADIUS change of authorization and downloadable calls for comprehensive policy management capabilities.
- Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer 2, turning a broadcast segment into a nonbroadcast multiaccess like segment. Private VLAN edge provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users' traffic.
- Multidomain authentication allows an IP phone and a PC to authenticate on the same switch port while placing them on appropriate voice and data VLAN.
- MAC address notification allows administrators to be notified of users added to or removed from the network.
- Mobility and security for secure, reliable wireless connectivity and consistent end-user experience. Increased network availability through proactive blocking of known threats.
- IGMP filtering provides multicast authentication by filtering out nonsubscribers and limits the number of concurrent multicast streams available per port.
- Cisco security VLAN ACLs on all VLANs prevent unauthorized data flows from being bridged within VLANs.
- Cisco standard and extended IP security router ACLs define security policies on routed interfaces for control-plane and data-plane traffic. IPv6 ACLs can be applied to filter IPv6 traffic.
- Port-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.
- Device access:
- Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions.
- TACACS+ and RADIUS authentication facilitates centralized control of the switch and restricts unauthorized users from altering the configuration.
- Multilevel security on console access prevents unauthorized users from altering the switch configuration.
- Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when BPDUs are received to avoid accidental topology loops.
- Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator's control from becoming Spanning Tree Protocol root nodes.
- Wireless end-to-end security offers CAPWAP-compliant DTLS encryption to make sure of encryption between access points and controllers across remote WAN/LAN links.
Borderless networks enable enterprise mobility and business-grade video services. Industry's first unified network (wired plus wireless) location services enable tracking of mobile assets and the users of those assets for both wired plus wireless devices. The true borderless experience is enabled by the following feature sets in the Cisco Catalyst 3850 Series Switches:
- High availability
- High-performance IP routing
- Superior QoS
In addition to StackWise-480 and StackPower, the Cisco Catalyst 3850 Series supports high-availability features including but not limited to the following:
- Cross-Stack EtherChannel provides the ability to configure Cisco EtherChannel technology across different members of the stack for high resiliency.
- Flexlink provides link redundancy with convergence time less than 100ms.
- IEEE 802.1s/w Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) provide rapid spanning-tree convergence independent of spanning-tree timers and also offer the benefit of Layer 2 load balancing and distributed processing. Stacked units behave as a single spanning-tree node.
- Per-VLAN Rapid Spanning Tree (PVRST+) allows rapid spanning-tree reconvergence on a per-VLAN spanning-tree basis, without requiring the implementation of spanning-tree instances.
- Switch-port autorecovery (Err-disable) automatically attempts to reactivate a link that is disabled because of a network error.
This Category has no models.