Cisco Catalyst 3650 Series Switches

Product
The Cisco Catalyst 3650 Series is the next generation of enterprise-class standalone and stackable
access-layer switches that provide the foundation for full convergence between wired and wireless on a
single platfor! The Cisco Catalyst 3650 is built on the advanced Cisco Stack"ise#-$60% and takes
advantage of the new Cisco# &nified 'ccess (ata )lane *&'()+ application-specific integrated circuit
*'S,C+! This switch can enable unifor wired-wireless policy enforceent% application visibility% flexibility%
application optii-ation% and superior resiliency! The Cisco Catalyst 3650 Series Switches support full
,... /00!3at )ower over .thernet )lus *)o.1+% and offer odular and field-replaceable redundant fans
and power supplies! They can help you increase wireless productivity and reduce your TC2!
Cisco Catalyst 3650 Series Configurations
Benefits
Converged Wired plus Wireless Access
1
The Cisco Catalyst 3650 is a standalone and stackable access switching platfor that enables wired
plus wireless services on a single Cisco ,2S 3. Software-based platfor! "ith this% Cisco has
pioneered a host of rich capabilities such as high availability based on stateful switchover *SS2+ on
stacking% granular 4oS% security% and 5lexible 6et5low *565+ across wired and wireless in a sealess
fashion! 'lso% the wired plus wireless features are bundled into a single Cisco ,2S Software iage%
which reduces the nuber of software iages that users have to 7ualify8certify before enabling the in
their network! The single console port for coand-line interface *C9,+ anageent reduces the
nuber of touch points to anage for wired plus wireless services% thereby reducing network
coplexity% siplifying network operations% and lowering the TC2 to anage the infrastructure!
Converged wired plus wireless not only iproves wireless bandwidth across the network but also the
scale of wireless deployent! .ach :/-port Cisco Catalyst 3650 provides :0 ;bps of wireless
throughput *00 ;bps on the 0:-port odel+! This wireless capacity increases with the nuber of
ebers in the stack! This akes sure that the network can scale with current wireless bandwidth
re7uireents% as dictated by ,... /00!$$n-based access points and with future wireless standards such
as ,... /00!$$ac! 'dditionally% the Cisco Catalyst 3650 distributes the wireless controller functions to
achieve better scalability! .ach Cisco Catalyst 3650 switch8stack can operate as the wireless controller
in two odes<
Mobility agent (MA): This is the default ode in which the Cisco Catalyst 3650 switch ships! ,n this
ode the switch is capable of terinating the C')"') tunnels fro the access points and providing
wireless connectivity to wireless clients! =aintaining wireless client databases and configuring and
enforcing security and 4oS policies for wireless clients and access points can be enforced in this ode!
6o additional license on top of ,) >ase is re7uired to operate in the obility agent ode!
Mobility controller (MC)< ,n this ode% the Cisco Catalyst 3650 switch can perfor all the obility
agent tasks in addition to obility coordination% radio resource anageent *??=+% and Cisco
Clean'ir# coordination within a obility subdoain! The obility controller ode can be enabled on the
switch C9,! ,)>ase license level is re7uired when the Cisco Catalyst 3650 switch is acting as the
obility controller! 'centrally located Cisco 550/ "ireless 9'6 Controller *"9C 550/+% Cisco "ireless
Services =odule 0 *"iS=0+ *when running 'ire2S @ersion A!3+% and "ireless 9'6 Controller 5A60 can
also perfor this role for larger deployents!
"ith obility agents located in the wiring closets providing :0 ;bps of wireless per switch *n x :0 ;bps
for a stack of n switches+ and obility controllers anaging soe of the central wireless functions% the
converged access-based wireless deployent provides best-in-class scalability for wireless and
significantly iproved wireless throughput!
Figure: =obility Controller *=C+ and =obility 'gent *='+
2
Flexible NetFlow (FNF
5ull visibility into the wired plus wireless traffic is achieved because of the access point Control and
)rovisioning of "ireless 'ccess )oints *C')"')+ tunnel terination on the switch! This helps identify
users and user traffic flows in order to identify potential attackers and take corrective action at the
access layer before the attack penetrates further into the network! This is achieved using 565% which
onitors every single flow entering and exiting the switch stack for wired and wireless users! ,t also
helps identify the top wired8wireless talkers and enforce appropriate bandwidth provisioning policies!
!oS
3
The 3650 switch has advanced wired plus wireless 4oS capabilities! ,t uses the Cisco odular 4oS
coand line interface *=4C+! Theswitch anages wireless bandwidth using unprecedented
hierarchical bandwidth anageent starting at the per-access-point level and drilling further down to
per-radio% per-service set identification *SS,(+% and per-user levels! This helps anage and prioriti-e
available bandwidth between various radios and various SS,(s *enterprise% guest% and so on+ within
each radio on a percentage basis! The switch is also capable of autoatically allocating e7ual
bandwidth aong the connected users within a given SS,(! This akes sure that all users within a
given SS,( get a fair share of the available bandwidth while being connected to the network! The &'()
'S,C enables the hierarchical bandwidth anageent and fair sharing of bandwidth% thereby providing
hardware-based 4oS for optii-ed perforance at line-rate traffic!
,n addition to these capabilities% the switch is able to do class of service *CoS+ or differentiated services
code point *(SC)+ based 7ueuing% policing% shaping% and arking of wired plus wireless traffic! This
enables users to create coon policies that can be used across wired plus wireless traffic! The 3650
also supports downloadable policy naes fro the Cisco ,dentity Services .ngine *,S.+ when a user
successfully authenticates to the network using the ,S.!
Security
The Cisco Catalyst 3650 provides a rich set of security features for wired plus wireless users! 5eatures
such as ,... /00!$x% (ynaic Bost Configuration )rotocol *(BC)+ snooping% ,) Source ;uard and
control plane protection% wireless intrusion prevention systes *",)Ss+% and so on enable protection
against unauthori-ed users and attackers! "ith a variety of wired plus wireless users connecting to the
network% the switch supports session-aware networking% in which each device connected to the network
is identified as one session% and uni7ue access control lists *'C9s+ and8or 4oS policies can be defined
and applied using the ,S. for each of these sessions% providing better control on the devices connecting
to the network!
"e#loy$ent %#tions
Campus
,n a capus-type deployent% operating the Cisco Catalyst 3650 in the obility agent ode and
centrali-ing the obility controller functionality in a "9C 5A60% "9C 550/% or "iS=0 helps achieve
better scalability and perforance! The Cisco Catalyst 3650 provides C')"') terination for access
points% unifor policy enforceent for wireless clients% better wireless bandwidth% and unifor Cisco
,2S Software-based configuration and onitoring for wired plus wireless features! The obility
controller provides central obility% ??=% and Clean'ir coordination!
>ackward copatibility with traditional centrali-ed wireless deployent ode on the "9C 550/%
"iS=0% and "9C 5A60 helps ensure that custoers can igrate to the Cisco Catalyst 3650-based
converged access approach in phases% providing a continued controller for existing access points! This
igration also provides investent protection on the existing wireless controller infrastructure! ' phased
4
adoption of the new Cisco Catalyst 3650 helps ensure that igration to the converged access ode of
wireless is sealess!
Figure: (eploying Cisco Catalyst 3650 in a >ranch .nvironent
Branch
3650 is optii-ed for branch deployents when it operates in obility controller ode! ,n this ode% not
only can the switch terinate C')"') tunnels fro the access points and provide client connectivity% it
can also anage obility within the branch! This eliinates the need for a local controller in every
branch in addition to the access-layer switches! 'lso% coplete visibility into the wired plus wireless
traffic eans that the "'6 router can prioriti-e the right wired plus wireless traffic in and out of the
branch!
Figure: (eploying Cisco Catalyst 3650 in a >ranch 9ocation
5
,t is referred from:
http<88www!cisco!co8c8en8us8products8collateral8switches8catalyst-3650-series-
switches8dataCsheetCcA/-A0D::D!htl
More related:
Cisco 3560 switch password recovery
Switch Settings on the IP-MAC Binding
Licences for Cisco Catayst 3!50 Series Switches
&nd'of'Sale and &nd'of'(ife )nnounce$ent for the Cisco Catalyst 3560*+ and 3,50*+
Switches
More Cisco products and Reviews you can visit: http://www.3anetwork.com/blog
6

3'network!co is a world leading Cisco networking products wholesaler% we wholesale
original new Cisco networking e7uipents% including Cisco Catalyst switches% Cisco
routers% Cisco firewalls% Cisco wireless products% Cisco odules and interface cards
products at copetitive price and ship to worldwide!
2ur website< http<88www!3anetwork!co
Telephone< 1/50-306D-AA33
.ail< infoE3'network!co
'ddress< 0385 9ucky )la-a% 3$5-30$ 9ockhart ?oad% "anchai% Bongkong
7