Product overview
Cisco® Catalyst® 1000 Series Switches are fixed managed Gigabit Ethernet enterprise-class Layer 2
switches designed for small businesses and branch offices. These are simple, flexible and secure switches
ideal for out-of-the-wiring-closet and critical Internet of Things (IoT) deployments. Cisco® Catalyst® 1000
operate on Cisco IOS® Software and support simple device management and network management via a
Command-Line Interface (CLI) as well as an on-box web UI. These switches deliver enhanced network
security, network reliability, and operational efficiency for Small and Medium Sized (SMB) organizations.
Product highlights
Cisco Catalyst 1000 Series Switches feature:
8, 16, 24, or 48 Gigabit Ethernet data or PoE+ ports with line-rate forwarding
2 or 4 fixed 1 Gigabit Ethernet Small Form-Factor Pluggable (SFP)/RJ 45 Combo uplinks or 4 fixed
10 Gigabit Ethernet Enhanced SFP (SFP+) uplinks
Perpetual PoE+ support with a power budget of up to 740W
CLI and/or intuitive web UI manageability options
Network monitoring through sampled Flow (sFlow)
Security with 802.1X support for connected devices, Switched Port Analyzer (SPAN), and
Bridge Protocol Data Unit (BPDU) Guard
Compact fanless models available with a depth of less than 13 inches (33 cm)
Device management support with over-the-air access via Bluetooth, Simple Network Management
Protocol (SNMP), RJ-45, or USB console access
Reliability with a higher Mean Time Between Failures (MTBF) and an Enhanced Limited Lifetime
Warranty support (E-LLW)
Network management
The Cisco Catalyst 1000 Series Switches offer a superior CLI for detailed configuration and administration.
Intelligent PoE+
Cisco Catalyst 1000 Series Switches support both IEEE 802.3af PoE and IEEE 802.3at PoE+ (up to 30W per
port) to deliver a lower total cost of ownership for deployments that incorporate Cisco IP phones, Cisco
Aironet® and Catalyst wireless access points, or other standards-compliant PoE and PoE+ end devices.
PoE removes the need to supply wall power to PoE-enabled devices and eliminates the cost of adding
electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments.
The PoE power allocation in the Cisco Catalyst 1000 Series Switches is dynamic, and power mapping
scales up to a maximum of 740W of PoE+ power. Intelligent power management allows flexible power
allocation across all ports. With Perpetual PoE, the PoE+ power is maintained during a switch reload. This is
important for critical endpoints such as medical devices and for IoT endpoints such as PoE-powered lights,
so that there is no disruption during a switch reboot.
Network security
Cisco Catalyst 1000 Series Switches provide a range of security features to limit access to the network and
mitigate threats, including:
Comprehensive 802.1X features to control access to the network, including flexible authentication,
802.1X monitor mode, and RADIUS change of authorization.
802.1X support with Network Edge Access Topology (NEAT), which extends identity
authentication to areas outside the wiring closet (such as conference rooms).
IEEE 802.1X user distribution, which enables you to load-balance users with the same group name
across multiple different VLANs.
Ability to disable per-VLAN MAC learning to allow you to manage the available MAC address table
space by controlling which interface or VLANs learn MAC addresses.
Multidomain authentication to allow an IP phone and a PC to authenticate on the same switch port
while being placed on the appropriate voice and data VLANs.
Authentication, Authorization, and Accounting (AAA) command authorization in PnP to enable
seamless PnP provisioning.
Access Control Lists (ACLS) for IPv6 and IPv4 security and Quality-of-Service (QoS) ACL elements
(ACEs).
Port-based ACLs for Layer 2 interfaces to allow security policies to be applied on individual switch
ports.
SSH, Kerberos, and SNMP v3 to provide network security by encrypting administrator traffic during
Telnet and SNMP sessions. SSH, Kerberos, and the cryptographic version of SNMP v3 require a
special cryptographic software image because of U.S. export restrictions.
SPAN, with bidirectional data support, to allow the Cisco Intrusion Detection System (IDS) to take
action when an intruder is detected.
TACACS+ and RADIUS authentication to facilitate centralized control of the switch and restrict
unauthorized users from altering the configuration.
