SLA Company Limited is distributor of Cisco, distribute and support Cisco Switch Catalyst 3850, WS-C3850-24T-S, WS-C3850-48T-S, WS-C3850-24T-E, WS-C3850-48T-E to resellers, endusers in Vietnam. Cisco Catalyst 3850 provides capabilities that ideally suited to support the convergence.

Cisco Switch Catalyst 3850 Series provides capabilities that ideally suited to support the convergence of wired and wireless access. The new Cisco Unified Access Data Plane (UADP) application-specific integrated circuit (ASIC) powers the switch and enables uniform wired-wireless policy enforcement, application visibility, flexibility, and application optimization. This convergence is built on the resilience of the new and improved Cisco StackWise-480 technology.

The Cisco Switch Catalyst 3850 Series Switches support full IEEE 802.3at Power over Ethernet Plus (PoE+), Cisco Universal Power over Ethernet (Cisco UPOE), modular and field-replaceable network modules, RJ45 and fiber-based downlink interfaces, and redundant fans and power supplies.

Cisco Switch Catalyst 3850 Product Overview:

• Integrated wireless controller capability with: Up to 40G of wireless capacity per switch (48-port RJ45 models), Support for up to 100 access points and 2000 wireless clients on each switching entity (switch or stack).
• 24 and 48 10/100/1000Mbps data PoE+ and Cisco UPOE models with energy-efficient Ethernet (EEE)
• 24 and 48 100Mbps/1/2.5/5/10 Gbps Cisco UPOE models with energy-efficient Ethernet (EEE)
• 12- and 24-port 1 Gigabit Ethernet SFP-based models
• 12- and 24-port 1/10 Gigabit Ethernet SFP+-based models
• 48-port 1/10 Gigabit Ethernet SFP+ model with 4 fixed 40 Gigabit Ethernet QSFP+ uplinks
• Cisco StackWise-480 technology provides scalability and resiliency with 480 Gbps of stack throughput.
• Cisco StackPower technology provides power stacking among stack members for power redundancy1
• Five optional uplink modules with 4 x Gigabit Ethernet, 2 x 10 Gigabit Ethernet, 4 x 10 Gigabit Ethernet, 8 x 10 Gigabit Ethernet4, or 2 x 40 Gigabit Ethernet QSFP+[4] ports.
• Dual redundant, modular power supplies and three modular fans providing redundancy
• Full IEEE 802.3at (PoE+) with 30W power on all copper ports in 1 rack unit (RU) form factor
• Cisco UPOE with 60W power per port in 1 rack unit (RU) form factor
• IEEE 802.3bz (2.5/5 G/s BASE-T) to go beyond 1 Gb/s with existing Cat5e and Cat6
• IEEE 802.3ba AV Bridging (AVB) built-in to provide better AV experience for including improved time synchronization and QoS.
• Software support for IPv4 and IPv6 routing, multicast routing, modular quality of service (QoS), Flexible NetFlow (FNF), and enhanced security features.
• Single universal Cisco IOS® Software image across all license levels, providing an easy upgrade path for software features.
• DNA services delivered through Cisco ONE™ Software, providing simplified, high-value solutions with license portability and flexibility.
• Enhanced limited lifetime warranty (E-LLW) with next business day (NBD) advance hardware replacement and 90-day access to Cisco Technical Assistance Center (TAC) support.

Cisco Switch Catalyst 3850 – Easy-to-Use Deployment and Control Features:

User experience:

• IP service-level agreements (SLAs) enable customers to assure new business-critical IP applications, as well as IP services that utilize data, voice, and video, in an IP network. This feature requires the IP Services feature set.
  DHCP autoconfiguration of multiple switches through a boot server eases switch deployment.
• Automatic QoS (AutoQoS) simplifies QoS configuration in voice over IP (VoIP) networks by issuing interface and global switch commands to detect Cisco IP phones, classify traffic, and help enable egress queue configuration.
• Autonegotiation on all ports automatically selects half- or full-duplex transmission mode to optimize bandwidth.
• Automatic media-dependent interface crossover (MDIX) automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight through) is installed.
• AV Bridging provides reliable time synchronized transmission with no pops or clicks or video dropouts.

Simplified configuration and connectivity:

• Dynamic Trunking Protocol (DTP) facilitates dynamic trunk configuration across all switch ports.
• Port Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel groups or Gigabit EtherChannel groups to link to another switch, router, or server.
• Link Aggregation Control Protocol (LACP) allows the creation of Ethernet channeling with devices that conform to IEEE 802.3ad. This feature is similar to Cisco EtherChannel technology and PAgP.
• Unidirectional Link Detection Protocol (UDLD) and aggressive UDLD allow unidirectional links caused by incorrect fiber-optic wiring or port faults to be detected and disabled on fiber-optic interfaces.
• Cisco VLAN Trunking Protocol (VTP) Version 3 supports dynamic VLANs and dynamic trunk configuration across all switches.
• AV Bridging provides reliable A/V streaming without the need for the installer to perform extensive hand tuning of the network.

Efficient switch operation:

• Switching database manager (SDM) templates, VLAN template (specific to LAN Base license level), and advanced template allow the administrator to automatically optimize the ternary content-addressable memory (TCAM) allocation to the desired features based on deployment-specific requirements.
• Local proxy Address Resolution Protocol (ARP) works in conjunction with private VLAN edge to minimize broadcasts and maximize available bandwidth.
• Stacking master configuration management with Cisco StackWise-480 technology helps make sure that all switches are automatically upgraded when the master switch receives a new software version. Automatic software version checking and updating help ensure that all stack members have the same software version.
• Trivial File Transfer Protocol (TFTP) reduces the cost of administering software upgrades by downloading from a centralized location.
• Network Timing Protocol (NTP) provides an accurate and consistent timestamp to all intranet switches.

Multicast:

• Optimized multicast for wired plus wireless: Cisco Catalyst 3850 offers greater multicast efficiency by receiving only one multicast stream and replicating it for all connected wired plus wireless devices connected to that switch.
• Internet Group Management Protocol (IGMP) v1, v2, v3 snooping for IPv4: multicast listener discovery (MLD) v1 and v2 snooping provides fast client joins and leaves of multicast streams and limits bandwidth-intensive video traffic to only the requestors.

Monitoring:

• Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switch network from any other switch in the same network.
• For enhanced traffic management, monitoring, and analysis, the Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events).
• Layer 2 traceroute eases troubleshooting by identifying the physical path that a packet takes from source to destination.
• Wireless RF management provides both real-time and historical information about RF interference affecting network performance across controllers using systemwide Cisco CleanAir technology integration.

Advanced Security Features: Cisco Switch Catalyst 3850 Series Switches support advanced security features including but not limited to:

Protection against attackers:

• Port security secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC addresses to deny MAC address flooding.
• DHCP snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature is used by other primary security features to prevent a number of other attacks such as ARP poisoning.
• Dynamic ARP inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of ARP.
• IP source guard prevents a malicious user from spoofing (that is, taking over) another user’s IP address by creating a binding table between the client’s IP and MAC address, port, and VLAN, and by using it to selectively block bogus packets.
• The Unicast Reverse Path Forwarding (uRPF) feature helps mitigate problems caused by the introduction of malformed or forged (spoofed) IP source addresses into a network by discarding IP packets that lack a verifiable IP source address.
• Bidirectional data support on a SPAN port allows the Cisco intrusion detection system (IDS) to take action when an intruder is detected.

User authentication:

• Flexible authentication that supports multiple authentication mechanisms, including 802.1X, MAC authentication bypass, and web authentication using a single, consistent configuration.
• RADIUS change of authorization and downloadable calls for comprehensive policy management capabilities.
• Private VLAN edge restricts traffic between hosts in a switch by segregating traffic at Layer 2, turning a broadcast segment into a nonbroadcast multiaccess like segment. Private VLAN edge provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic.
• Multidomain authentication allows an IP phone and a PC to authenticate on the same switch port while placing them on appropriate voice and data VLAN.
• MAC address notification allows administrators to be notified of users added to or removed from the network.
  Mobility and security for secure, reliable wireless connectivity and consistent end-user experience. Increased network availability through proactive blocking of known threats.
• IGMP filtering provides multicast authentication by filtering out nonsubscribers and limits the number of concurrent multicast streams available per port.

ACLs:

• Cisco security VLAN ACLs on all VLANs prevent unauthorized data flows from being bridged within VLANs.
• Cisco standard and extended IP security router ACLs define security policies on routed interfaces for control-plane and data-plane traffic. IPv6 ACLs can be applied to filter IPv6 traffic.
• Port-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.

Device access:

• Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions.
• TACACS+ and RADIUS authentication facilitates centralized control of the switch and restricts unauthorized users from altering the configuration.
• Multilevel security on console access prevents unauthorized users from altering the switch configuration.
• Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when BPDUs are received to avoid accidental topology loops.
• Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes.
• Wireless end-to-end security offers CAPWAP-compliant DTLS encryption to make sure of encryption between access points and controllers across remote WAN/LAN links.

Cisco Switch Catalyst 3850 Series Ordering Information:

For more information about Cisco Switch Catalyst 3850, other Cisco products, please contact with SLA Company Limited here or Vietnamese site.