Cisco SG350-28SFP | SFP Switch | 24x SFP, 2x Combo(RJ45/SFP) + 2x SFP, Managed

CODE: SG350-28SFP-K9-EU / EAN: 0882658997488

Cisco SG350-28SFP | SFP Switch | 24x SFP, 2x Combo(RJ45/SFP) + 2x SFP, Managed

CODE: SG350-28SFP-K9-EU / EAN: 0882658997488
396,19 EUR without VAT (net)
Out of stock
Number of LAN ports: 24x [1G (SFP)] 2x [1G Combo (RJ45/SFP)]
10G support: No
AC input frequency: 50 - 60
Show more parameters
Recommended products
Subscribe to the NEWSLETTER and receive 5EUR* for shopping
* Offer valid for orders from 45EUR |Regulation|


New products



Cisco SG350-28SFP - 28-port switch with SFP ports - 350 series

SG350-28SFP switch is equipped with 24 SFP ports with 1 Gb/s throughput, 2 RJ45/SFP Combo RJ45/SFP ports with a capacity of 1 Gb/s and 2 additional SFP 1 Gb/s ports. To manage and configure the device are used, among others, Graphical Web interface and CLI. text console.

Cisco's performance and reliability

The switch has a throughput of 41.66 million packets per second (64-byte packets) and a switching capacity of 56.0 Gb/s. The Cisco switch comes with a limited, lifetime manufacturer's warranty.

Cisco Switches - 350 series

The Cisco 350 series is part of the network solutions included in Cisco Small Business. It is a line of attractively priced managed switches, which are the base for business networks. They provide information in a more efficient way, provide features that improve the availability of business applications, protect confidential data and optimize network capacity. Easy to set up and use, the affordable Cisco 350 series enhances capabilities and helps you create more efficient computer networks, especially for small businesses for which it is dedicated.

Cisco 350 Series is a wide range of manageable Ethernet switches. The models in this series are equipped with from 8 to 48 Fast Ethernet ports and from 10 to 52 Gigabit Ethernet ports, which provides companies with the optimum flexibility needed to build a solid network foundation. The Cisco 350 series of Cisco Switches support advanced security management and network functions for sensitive business data. They are easy to deploy and configure, so there are no difficulties in using the network services needed in any business.

Business applications for Cisco devices

Whether you are building a basic high-performance network to connect employees' computers, or you need a solution to deliver data, voice and video services, the Cisco 350 series of switches will meet all of these needs, and the features of possible deployment scenarios are:

  • Secure wireless connectivity - With advanced security features, Power over Ethernet, Auto Smartports, QoS, VLAN, and access control, the Cisco 350 Series switches are the perfect foundation for building a business-class wireless network.
  • Unified communication - As a managed network solution, the Cisco 350 series provides performance and advanced traffic management technology when delivering communication and data over a single network. Cisco offers a full range of IP telephony and other unified communications products for the enterprise. The Cisco 350 series switches have been rigorously tested to ensure easy integration and full compatibility with multiple products to provide comprehensive business solutions.
  • Highly secure guest connectivity - The Cisco 350 Series allows you to extend secure guest connectivity in a variety of configurations, such as a hotel, office waiting room or other open area for unattended users. With powerful but easy-to-configure security features and traffic segmentation, you can isolate business traffic from guest services and keep your network sessions private.
  • Securely connect computers - Cisco 350 Series switches can easily and securely connect small office staff, all servers, printers and other devices used by employees. High performance and reliable connectivity help speed up file transfers and data processing, increasing uptime on the network and ensuring that employees stay connected.


Features / filters
LAN standard Gigabit Ethernet 10/100/1000 Mb/s
Number of LAN ports 24x [1G (SFP)] , 2x [1G Combo (RJ45/SFP)] ,
10G support No
AC input frequency 50 - 60
AC input voltage 100 - 260
Access Control List (ACL) Yes
Access Control List (ACL) rules 512
Active link detection Yes
ARP inspection Yes
Authentication Guest VLAN, Port-based authentication, Web-based authentication
Authentication type IEEE 802.1x,RADIUS
Basic switching RJ-45 Ethernet ports quantity 24
Basic switching RJ-45 Ethernet ports type Gigabit Ethernet (10/100/1000)
BPDU filtering/protection Yes
Broadcast storm control Yes
Built-in processor Yes
Cable length detection Yes
Cable types supported Cat5,Cat6,Cat7
Cables included AC
Certification UL, CSA, CE, FCC
Combo SFP ports quantity 2
Depth 203
DHCP features DHCP server,DHCP snooping,DHCP relay,DHCP client
DoS attack prevention Yes
Fiber optic connector SFP
Firmware upgradeable Yes
Flash memory 256
Flow control support Yes
Form factor 1U
Forwarding rate 41.66
GARP VLAN Registration Protocol (GVRP) Yes
Harmonized System (HS) code 85176990
Head-of-line (HOL) blocking Yes
Heat dissipation 117
Height 44
IGMP snooping Yes
Included power plug types EU
Internal memory 512
Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) Yes
IP-MAC-Port binding Yes
IPv4 & IPv6 features IPv6 ping,IPv6 tracert,IPv6 Telnet,Dual stack IPv4/IPv6
Jumbo frames 9216
Jumbo frames support Yes
LED indicators Yes
Link aggregation Yes
Loop protection Yes
MAC address filtering Yes
MAC address table 16384
Management CLI - Command Line Interface, By cloud – cloud management, By web browser,
Management protocols SNMP v1/2c/3, HTTP/HTTPS, MIB, RMON, IPv4/IPv6
Mean time between failures (MTBF) 101523
Multicast support Yes
Networking standards IEEE 802.1D,IEEE 802.1Q,IEEE 802.1p,IEEE 802.1s,IEEE 802.1w,IEEE 802.1x,IEEE 802.3,IEEE 802.3ab,IEEE 802.3ad,IEEE 802.3af,IEEE 802.3at,IEEE 802.3x,IEEE 802.3z
Noise level 43.6
Number of fans 1
Number of IP interfaces 128
Number of power supply units 1
Number of queues 8
Number of static routes 1024
Number of VLANs 4094
Operating relative humidity (H-H) 10 - 90
Operating temperature (T-T) 0 - 50
Packet buffer memory 1.5
Port mirroring Yes
Power consumption (max) 34.3
Power over Ethernet (PoE) No
Product colour Black
Quality of Service (QoS) support Yes
Queue scheduling algorithms WRR+SP
Quick start guide Yes
Rack mount kit Yes
Rack mounting Yes
Rate limiting Yes
Reset button Yes
Root protection Yes
Security algorithms 802.1x RADIUS,HTTPS,MD5,SSH,SSL/TLS
SFP module slots quantity 26
Spanning tree protocol Yes
SSH/SSL support Yes
Static port security Yes
Static route Yes
Storage relative humidity (H-H) 10 - 90
Storage temperature (T-T) -20 - 70
Switch layer L2/L3
Switch type Managed
Switching capacity 56
Switching layer 2, 3,
System event log Yes
Telnet Yes
Type of case Rack (1U)
USB 2.0 ports quantity 1
Virtual LAN features Multicast VLAN,Private VLAN,Voice VLAN,Tagged VLAN,MAC address-based VLAN,Port-based VLAN
VLAN support Yes
Web-based management Yes
Weight 2.7
Width 440

Technical specification - model SG350-28SFP

Power over Ethernet (PoE)
PoE The switches support 802.3at PoE+, 802.3af, 60 W PoE and Cisco prestandard PoE
Maximum power 60 W to any 10/100 or Gigabit Ethernet port for PoE+ supported devices and 15.4 W for PoE supported devices until the PoE budget for the switch is reached. The total power available for PoE for the switch is as follows:
Power dedicated to PoE None
Number of ports supporting PoE None
Electricity consumption
Green Power EEE, Energy Detect, Short Reach
Energy consumption of the system 34.3 W
Energy consumption (with PoE) N/A
Heat distribution (BTU/hr) 117.0
Total number of ports 28 x Gigabit Ethernet
Ports SFP 24 x Gigabit SFP
Combo ports (RJ-45 + SFP) 2 x Gigabit Ethernet Combo + 2 x SFP
Buttons Reset button
Package buffer 12 Mb
LEDs System, Link/Act, PoE, Speed, LED power saving option
Flash Memory 256 MB
CPU memory 512 MB
Supported SFP modules MGBSX1, MGBLH1, MGBT1
Environmental features
Dimensions (W x H x D) 440 mm x 44 mm x 257 mm
Weight 2.7 kg
Power supply 100-240 V, 50-60 Hz, internal
Certification UL (UL 60950), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A
Ambient temperature during operation 0°C to 50°C
Ambient temperature during storage -20°C to 70°C
Humidity during operation 10% to 90%, relative, non-condensing
Humidity during storage 10% to 90%, relative, non-condensing
Acoustic noise and MTBF
Fan (quantity) 1
Acoustic noise 43.6 dB at 50°C
MTBF @ 40C (hours) 101523
Guarantee period Limited Lifetime Warranty, with exchange in advance the next business day (if available)
Package contents Cisco switch 350 series
Power cord or power supply
Mounting kit
Console cable
Operating instructions
Capacity in millions of packets per second (mpps), 64-byte packets 41.66
Switching capacity in gigabits per second (Gbps) 56.0
USB connector The USB port is used to manage files
Switching - layer 2
Spanning Tree Protocol 802.1d Spanning Tree support
Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default
8 instances are supported
Multiple instances of Spanning Tree using 802.1s (MSTP)
Grouping of ports Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP)
● up to 8 groups
up to 8 ports per group with 16 candidate ports for each aggregated dynamic link 802.3ad LAG
VLAN Supports up to 4096 VLANs simultaneously
VLANs based on ports and tags 802.1Q
VLANs based on MAC
VLAN management
Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks
VLAN guest
Uncertified VLAN
Dynamic VLAN assignment via RADIUS server with client authentication 802.1x
Voice VLAN Voice traffic is automatically assigned to a voice specific VLAN and processed using the appropriate levels of voice QoS Auto
Multicast TV VLAN Multicast TV VLANs allow a single VLAN to be shared in a network, while subscribers remain in separate VLANs (also known as MVRs).
Q-in-Q VLAN VLANs transparently intersect the network of service providers while isolating traffic among customers
Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Protocols for automatic expansion and configuration of VLANs in a bridged domain
Unidirectional Link Detection (UDLD) The UDLD monitors the physical connection to detect one-way connections caused by incorrect wiring or cable/port errors to prevent redirection loops and blocked traffic in networks
DHCP Relay in Layer 2 Forwarding DHCP traffic to a DHCP server in different VLANs; works with DHCP option 82
Internet Group Management Protocol (IGMP) versions 1, 2, 3 and snooping IGMP limits bandwidth-intensive multicast traffic to requesters only; supports up to 1K multicast groups (source-specific multicasting is also supported)
IGMP Querier Querier IGMP is used to operate the Layer 2 snooping switches multicast domain in the absence of a multicast router
HOL lock (Head-Of-Line) Prevention of HOL blockades
Feedback loop detection Feedback loop detection provides loop protection by transmitting loop protocol packets from ports where loop protection has been enabled
Works independently of STP
Jumbo frames Up to 9216 bytes
MAC board Up to 16K (16384) MAC addresses
Layer 3 functions
Routing IPv4 IPv4 packet forwarding at link speed
Up to 1K static routes and up to 128 IP interfaces
Routing IPv6 IPv6 packet forwarding at Internet connection speed
Classless Inter-Domain Routing (CIDR) CIDR support
Layer 3 interface Layer 3 interface configuration on physical port, LGD, VLAN or loopback interface
DHCP relay on layer 3 Transmission of DHCP traffic in different IP domains
User Datagram Protocol (UDP) relay Transferring transmission information between layer 3 domains to detect applications or transfer bootP/DHCP packets
DHCP server Switch to act as an IPv4 DHCP server supporting IP addresses for multiple DHCP pools
Support for DHCP options
Secure Shell Protocol (SSH) SSH is a safe replacement for Telnet traffic
SCP also uses SSH
SSH v1 and v2 are supported
Secure Sockets Layer (SSL) SSL support: encrypts all HTTPS traffic, allowing highly secure access to the browser-based graphical management interface on the switch
IEEE 802.1X (Authenticator roles) 802.1X: RADIUS authentication and reporting
Checksum MD5
VLAN for guests
Uncertified VLAN
Single/multiple host mode and single/multiple sessions
Supports temporary handling 802.1X
Dynamic VLAN assignment
Authorisation via Internet Network-based authentication provides control of network access via a web browser to any device or operating system
STP Bridge Protocol Data Unit (BPDU) Guard Safety mechanism to protect the network against incorrect configurations
The port with the BPDU Guard enabled is disabled if a BPDU message is received on this port
STP Root Guard This prevents edge devices not under the control of the network administrator from becoming Spanning Tree Protocol root nodes
DHCP snooping Filters DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces
This prevents malicious devices from acting as DHCP servers
IP Source Guard (IPSG) When the IP Source Guard feature is enabled on a port, the switch filters the IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping.
This prevents IP address spoofing
Dynamic ARP Control (DAI) The switch rejects ARP packets from the port if there are no static or dynamic IP/MAC bindings, or if there is a discrepancy between the source or destination addresses in the ARP packet
This prevents man-in-the-middle attacks
IP/MAC/Port Binding (IPMB) Previous features (DHCP Snooping, IP Source Guard and Dynamic ARP Inspection) work together to prevent DOS attacks on the network, thereby increasing network availability
Secure Core Technology (SCT) Ensure that the switch will receive and manage processes and protocol traffic regardless of the amount of traffic received
Secure Sensitive Data (SSD) Mechanism for secure management of sensitive data (such as passwords, keys, etc.) on the switch, filling in this data on other devices and protecting against self-configuration
Access to view confidential data in plain or encrypted text is provided according to the user configured access level and user access method
Layer 2 isolation Private VLAN Edge (PVE) with community VLAN PVE (also known as protected ports) provides layer 2 isolation between devices in the same VLAN, supports multiple uplink links
Port security Possibility to block source MAC addresses to ports and limit the number of known MAC addresses
RADIUS/TACACS+ Supports RADIUS and TACACS authentication
The switch acts as a customer
Storm protection Broadcasting, multicast and unknown unicast
RADIUS accounting RADIUS reporting functions allow sending data at the beginning and end of the service, indicating the amount of resources (such as time, packets, bytes, etc.) used during the session
Prevention of DoS Prevention of Denial-Of-Service (DOS) attacks
Quality of Service
ACL Access Control Lists Support for up to 512 rules
Packet rejection or bandwidth restriction based on source and destination MAC, VLAN ID or IP address, protocol, port, DSCP/IP priority, source and destination ports TCP/UDP, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag, time-supported ACL
Priority levels 8 queues
Schedules Strict priority and Weighted Round-Robin (WRR)
Queue assignment based on DSCP and service class (802.1p/CoS)
Class of service - Class of service Port based; 802.1p VLAN based on VLAN priority; based on IPv4/v6 IP precedence/Type of Service (ToS)/DSCP; Differentiated Services (DiffServ); ACLs classification and remarking, trusted QoS
Capacity limitations - Rate limiting Ingress policer; outbound traffic control and speed control; on VLAN, on port and based on data flow
Avoiding congestion TCP congestion avoidance algorithm is required to minimize and avoid global synchronization of TCP losses
IPv6 IPv6 host mode
IPv6 over Ethernet
Dual IPv6/IPv4 stack
Detection of neighbor and IPv6 (ND) router
Auto-configuration of the IPv6 address
Path Maximum Transmission Unit (MTU) discovery
Double address detection (DAD)
ICMP version 6
IPv6 over IPv4 with support for Intrasite Automatic Tunnel Addressing Protocol (ISATAP)
Gold certificate USGv6 and IPv6 logo
IPv6 QoS Prioritization of IPv6 packets
IPv6 ACL Speed limit or IPv6 rejection
IPv6 First Hop Security RA guard
ND inspection
DHCPv6 guard
Table of adjacent bonds (snooping and static entries)
Control of the integrity of adjacent bonds
Multicast Listener Discovery (MLD v1/2) snooping Delivering IPv6 multicast packets only to the right recipients
IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, DNS client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, TACACS
Graphical user interface Built-in switch configuration tool for easy browser-based device configuration (HTTP/HTTPS)
Supports configuration, system desktop, system maintenance and monitoring
Smart Network Application (SNA) Smart Network Application (SNA) is an innovative network level monitoring and management tool built into the Cisco 100 to 500 series switches.
Can detect network topology, display link status, monitor events, apply configurations and update software images using multiple switches on the network
(Note: Network management with Smart Network Application requires the use of the 350, 350X or 550X series switch as part of the network)
SNMP SNMP versions 1, 2c and 3 with SNMP trap support and SNMP version 3
User based security model (USM)
Remote monitoring (RMON) RMON embedded software supports 4 RMON groups (history, statistics, alarms and events) for better traffic management, monitoring and analysis
Dual IPv4 and IPv6 stack Coexistence of both piles of protocols to facilitate migration
Firmware update Upgrade via web browser (HTTP/HTTPS) and TFTP and upgrade via SCP launched by SSH
The update can also be initiated by the console port
Dual images for flexible firmware updates
Port mirroring Traffic at a port can be reflected in another port for analysis using a network analyser or RMON probe
Up to 8 source ports can be mirrored to one destination port
A single session is supported
VLAN mirroring Traffic from the VLAN can be reflected in the port for analysis using a network analyser or RMON probe
Up to 8 source VLANs can be mirrored to one destination port
A single session is supported
DHCP (options 12, 66, 67, 82, 129 and 150) DHCP options allow tighter control from a central point (DHCP server) to obtain the IP address, auto-configuration (with download of configuration file), DHCP relay and host name
Secure copy (SCP) Securely transfer files to and from the switch
Auto-configuration with secure copying (SCP) Enables secure, mass deployment with protection of sensitive data
Text-based, editable configuration files Configuration files can be edited with a text editor and downloaded to another switch to facilitate mass deployment
Smartports Simplified configuration of QoS and safety functions
Auto Smartports Uses intelligent solutions delivered through Smartport roles and applies them automatically to the port based on devices detected by Cisco Discovery Protocol or LLDP-MED
CLI Command line scripting interface
The full CLI interface is supported, as well as the menu-based CLI interface
User rights levels 1, 7 and 15 are supported for CLI
Cloud services Support for Cisco Small Business FindIT Network
Other forms of management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP update; DHCP client; BOOTP; SNTP; Xmodem update; cable diagnostics; ping; syslog; Telnet client (secure SSH support)
Temporary use of the port Lifting or deactivating the port based on a user-defined schedule (when the port is administratively lifted)
PoE based on a timetable Power on/off capability based on a user-defined schedule
Energy saving
Compliance with EEE (802.3az) Support for 802.3az on all copper ports (SG350 models)
Energy detection The switch automatically turns off the power to the Gigabit Ethernet port and 10/100 RJ-45 port when no connection is detected.
Power supply resumes without packet loss when the switch detects a connection
Cable length detection Adjusts signal strength depending on cable length for Gigabit Ethernet models, reduces power consumption for cables shorter than 10 m
Switching off port LEDs LEDs can be manually switched off to save energy
Bonjour The switch is broadcast via Bonjour protocol
Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to broadcast its identification, configuration and capabilities to adjacent devices that store data in MIB
LLDP-MED is an LLDP extension that adds extensions needed for IP phones
Cisco Discovery Protocol The switch is broadcast via the Cisco Discovery Protocol
You also learn about the connected device and its properties using the Cisco Discovery Protocol


Datasheet Cisco 350 series - ENG Download
350 series manual - ENG Download
396,19 EUR without VAT (net)
Out of stock
Print version
Session will expire in:
You will be logged out after the session expires
Choose a different country or region to shop in the language that suits you
Our site uses cookies (so-called "cookies"). You can find more about these files, as well as about how we process your personal data, in our privacy policy.
You are on page for country / region:
English (EN)
Please select a different country or region to shop in a language that suits you.