WS-C3650-24TD-S Overview
The Cisco Catalyst 3650 Series Switch, with Cisco StackWise-160
Technology, can stack 9 switches and support up to 160 Gpbs stack
bandwidth. The WS-C3650-24TD-S integrates with 24 Ethernet ports and 2 x 10G SFP+ or 4 x 1G SFP
uplink ports in IP base feature set.
Quick Specs
Table 1 shows the quick spec.
| Product Code | WS-C3650-24TD-S |
| Enclosure Type | Rack-mountable - 1U |
| Feature Set | IP base |
| Uplink Interfaces | 2 x 10G SFP+ or 4 x 1G SFP |
| Ports | 24 x 10/100/1000 Ethernet ports |
| Maximum stacking number | 9 |
| Stack bandwidth | 160 Gpbs |
| Forwarding Performance | 68.45Mpps |
| Switching Capacity | 88 Gbps |
| RAM | 4 GB |
| Flash Memory | 2 GB |
| Dimensions | 1.73 x 17.5 x 17.625 Inches |
| Package Weight | 15.15 Pounds |
StackWise-160
The Cisco Catalyst 3650 supports an optional stacking module that
is based on the Cisco StackWise-160 technology which allows
stacking up to 9 switches. StackWise-160 creates a highly resilient
single unified system of up to 9 switches, providing simplified
management with a single IP address. For stacking purpose, stack
module is required and IP base feature set can only stack with
other 3650 series in IP feature set. IP base switch can only stack
with other 3650 series in IP base, in order to stack with LAN base,
IP base has to configure in LAN base mode (Stack modules purchase
separately).
Flexible NetFlow (FNF)
Full visibility into the wired plus wireless traffic is achieved
because of the access point Control and Provisioning of Wireless
Access Points (CAPWAP) tunnel termination on the switch. This helps
identify users and user traffic flows in order to identify
potential attackers and take corrective action at the access layer
before the attack penetrates further into the network. This is
achieved using FNF, which monitors every single flow entering and
exiting the switch stack for wired and wireless users. It also
helps identify the top wired/wireless talkers and enforce
appropriate bandwidth provisioning policies.
QoS
The 3650 switch has advanced wired plus wireless QoS capabilities.
It uses the Cisco modular QoS command line interface (MQC). The
switch manages wireless bandwidth using unprecedented hierarchical
bandwidth management starting at the per-access-point level and
drilling further down to per-radio, per-service set identification
(SSID), and per-user levels. This helps manage and prioritize
available bandwidth between various radios and various SSIDs
(enterprise, guest, and so on) within each radio on a percentage
basis. The switch is also capable of automatically allocating equal
bandwidth among the connected users within a given SSID. This makes
sure that all users within a given SSID get a fair share of the
available bandwidth while being connected to the network. The UADP
ASIC enables the hierarchical bandwidth management and fair sharing
of bandwidth, thereby providing hardware-based QoS for optimized
performance at line-rate traffic.
In addition to these capabilities, the switch is able to do class
of service (CoS) or differentiated services code point (DSCP) based
queuing, policing, shaping, and marking of wired plus wireless
traffic. This enables users to create common policies that can be
used across wired plus wireless traffic. The 3650 also supports
downloadable policy names from the Cisco Identity Services Engine
(ISE) when a user successfully authenticates to the network using
the ISE.
Security
The Cisco Catalyst 3650 provides a rich set of security features
for wired plus wireless users. Features such as IEEE 802.1x,
Dynamic Host Configuration Protocol (DHCP) snooping, IP Source
Guard and control plane protection, wireless intrusion prevention
systems (WIPSs), and so on enable protection against unauthorized
users and attackers. With a variety of wired plus wireless users
connecting to the network, the switch supports session-aware
networking, in which each device connected to the network is
identified as one session, and unique access control lists (ACLs)
and/or QoS policies can be defined and applied using the ISE for
each of these sessions, providing better control on the devices
connecting to the network.
