IE3400H-DNA-A-5Y IE 3400 Cisco DNA Advantage, 5 Year Term license

Features and benefits

Table 1.        IE3400H Features and benefits

Feature	Benefit
Heavy-duty design and industry compliance	Mount the switch close to where the work is done, in the most demanding environments.●  IP66/IP67 rated, providing protection against dust and submersion in water.●  Hardened for vibration, shock and surge, electrical noise, and extreme temperatures (–40°C to 75°C [–40°F to 167°F]).●  Compliant with industrial automation standards; supports Ethernet/IP Common Industrial Protocol (CIP).●  Supports Supervisory Control And Data Acquisition (SCADA) protocol classification—Generic Object-Oriented Substation Events (GOOSE) messaging, Modbus TCP/IP.
Advanced network-based security	Enjoy peace of mind with Cisco’s no-compromise security feature set, including:●  Flexible NetFlow for enhanced flow and threat visibility.●  Cisco TrustSec ® software-defined segmentation allows you to segment industrial devices and define security policies to each segment. It makes sure that devices can access only the resources and applications they should and isolates segments when threats are detected to avoid the spread of attacks.●  Advanced security through support for Advanced Encryption Standard (AES)-256 with the powerful MACsec 256-bit encryption algorithm available on all models.●  Hardware-anchored Secure Boot and Secure Unique Device Identification (SUDI) support for plug and play, to verify the identity of the hardware and software.
Next-generation switching features and innovations	●  Same software image as the Cisco Catalyst IE3x00 Rugged Series, for access to Cisco’s latest innovations in switching.●  Available with 8, 16, or 24 Fast Ethernet (M12 D-coded) ports or Gigabit Ethernet (M12 X-coded) ports.
Flexible management options	●  Extend the power of intent-based networking with Cisco DNA Center.●  Manage your network with the powerful Industrial Network Director.●  Easily set up the switch with a completely redesigned, user-friendly, highly intuitive, and modern GUI called WebUI.●  Gain real-time visibility into traffic patterns and threat analysis with Cisco Stealthwatch
Advanced Data plane features	●  Parallel Redundancy Protocol (PRP) 1●  Advanced security with SGT/SGACL
IPv6 Ready Logo – IPv6 Ready Logo Certified	●  IPv6 Ready Logo Certified

¹ Parallel Redundancy Protocol (PRP) is available on select ports only (1/1 – 1/4). Single instance of PRP is supported.

Other product highlights

●      Swap Drive zero-configuration replacement helps ensure fast recovery.

●      Precision Time Protocol (PTP, IEEE 1588v2) provides accurate clock synchronization with sub-microsecond accuracy.

●      Support for model-driven programmability, including NETCONF, RESTCONF, and YANG.

●      Alarm I/O for monitoring and signaling to external equipment.

●      Single power source(mini-change connector) for switch operation.

Platform support

Table 2.        Product feature set

Product family	Platforms supported	Default IOS-XE feature set	Upgradeable to
IE3000	IE-3400H-8FT-EIE-3400H-16FT-EIE-3400H-24FT -EIE-3400H-8T-EIE-3400H-16T-EIE-3400H-24T-E	Network Essentials	Network Advantage
IE3000	IE-3400H-8FT-AIE-3400H-16FT-AIE-3400H-24FT -AIE-3400H-8T-AIE-3400H-16T-AIE-3400H-24T-A	Network Advantage	N/A

Table 3.        Hardware configurations

Product ID	Total M12 ports	10/100 Fast Ethernet (D-code) ports	10/100/1000 Gigabit Ethernet (X-code) ports
IE-3400H-8FT-E	8	8
IE-3400H-8FT-A	8	8
IE-3400H-8T-E	8		8
IE-3400H-8T-A	8		8
IE-3400H-16FT-E	16	16
IE-3400H-16FT-A	16	16
IE-3400H-16T-E	16		16
IE-3400H-16T-A	16		16
IE-3400H-24FT-E	24	24
IE-3400H-24FT-A	24	24
IE-3400H-24T-E	24		24
IE-3400H-24T-A	24		24

Table 4.        Hardware specifications

Hardware specifications	IE-3400H-8FT	IE-3400H-8T	IE-3400H-16FT	IE-3400H-16T	IE-3400H-24FT	IE-3400H-24T
Removable storage	SD card1	SD card1	SD card1	SD card1	SD card1	SD card1
Alarm2, 3	1 alarm output relay, 1 alarm input	1 alarm output relay, 1 alarm input	1 alarm output relay, 1 alarm input	1 alarm output relay, 1 alarm input	1 alarm output relay, 1 alarm input	1 alarm output relay, 1 alarm input
Console ports2	1	1	1	1	1	1
Power input	Mini-change, (single power source)	Mini-change, (single power source)	Mini-change, (single power source)	Mini-change, (single power source)	Mini-change, (single power source)	Mini-change,(single power source)

¹ The SD card is optional and is not shipped by default with the switch.

² Using an M12 A-coded 5-pin connector.

³ Relay max. rating: 24VDC at 1A, 48VDC at 0.5A.

Table 5.        Physical configurations

Physical specifications	IE-3400H-8FT	IE-3400H-8T	IE-3400H-16FT	IE-3400H-16T	IE-3400H-24FT	IE-3400H-24T
Dimensions (H x W x D)	9.58 x 7.90 x 3.15 in.24.33 x 20.07 x 8.00 cm	9.58 x 7.90 x 3.15 in.24.33 x 20.07 x 8.00 cm	9.58 x 10.90 x 3.15 in.24.33 x 27.69 x 8.00 cm	9.58 x 10.90 x 3.15 in.24.33 x 27.69 x 8.00 cm	9.58 x 13.90 x 3.15 in.24.33 x 35.31 x 8.00 cm	9.58 x 13.90 x 3.15 in.24.33 x 35.31 x 8.00 cm
Weight (including mounting bracket)	8.45 lb3.83 kg	8.45 lb3.83 kg	11.25 lb5.10 kg	11.25 lb5.10 kg	13.90 lb6.30 kg	13.90 lb6.30 kg
Mounting	Wall mount	Wall mount	Wall mount	Wall mount	Wall mount	Wall mount

Table 6.        Performance and scalability features

Resource	IE-3400H-8FT, IE-3400H-8T, IE-3400H-16FT, IE-3400H-16T, IE-3400H-24FT, IE-3400H-24T
Forwarding rate	Line rate for all ports for all packet sizes
Number of queues	8
Unicast MAC addresses	8000
IGMP multicast groups	1000
No. of Vlans	256
IPv4 Indirect routes1	2000
IPv6 Indirect routes1	512
Spanning Tree Protocol instances	128
Access Control Entries (PACLs)	3024
DRAM	4 GB
Flash (user accessible)	1.5 GB
SD card capacity2	4 GB
Jumbo Frames	2000 bytes

¹ Supported with Network Advantage license

² The SD card is optional and is not shipped by default with the switch.

Table 7.        Power specifications

Power specifications	IE-3400H-8FT	IE-3400H-16FT	IE-3400H-24FT	IE-3400H-8T	IE-3400H-16T	IE-3400H-24T
Input voltage range (Absolute)	9.6 to 60VDC	9.6 to 60VDC	9.6 to 60VDC	9.6 to 60VDC	9.6 to 60VDC	9.6 to 60VDC
Input current @ (9.6V / 60V)	3.0A/0.51A	4.0A/0.65A	4.6A/0.75A	3.2A/0.54A	4.4A/0.71A	5.1A/0.83A
Power consumption @ (9.6V / 60V)	28.8W/30.6W	38.4W/39.0W	44.2W/45.0W	30.4W/32.2W	41.6W/42.3W	49.0W/49.8W

Table 8.        Power supply options

Product ID	Description
PWR-IE160W-67-DC=	IP67-rated PoE DC-DC power supply, Input:18V-60V Output: 54V, 3.1A max 160W

Table 9.        Network Essentials and Advantage package features

Features		Network Essentials (default)	Network Advantage
Layer 2 switching	IEEE 802.1, 802.3 standard, Network Time Protocol (NTP), Unidirectional Link Detection Protocol (UDLD), Cisco Discovery Protocol, Link Layer Discovery Protocol (LLDP), unicast MAC filter, VLAN Trunk Protocol (VTP) v2 and v3, EtherChannel, voice VLAN, Q-in-Q tunneling, Per-VLAN Spanning Tree (PVST+), Multiple Spanning Tree Protocol (MSTP), Rapid Spanning Tree Protocol (RSTP)	Yes	Yes
Layer 2 Multicast	Internet Group Management Protocol (IGMP) v1, v2, v3 snooping, IGMP filtering, IGMP querier	Yes	Yes
Management	WebUI, MIB, SmartPort, Simple Network Management Protocol (SNMP), syslog, Locate switch, Dynamic Host Configuration Protocol (DHCP) server, Switched Port Analyzer (SPAN) session, Remote SPAN (RSPAN), Flow-based SPAN(FSPAN), Express setup, NETCONF, RESTCONF	Yes	Yes
Security	Port security, 802.1x, Dynamic Host Configuration Protocol (DHCP) snooping, dynamic ARP inspection, IP source guard, guest VLAN, MAC authentication bypass, 802.1x multidomain authentication, storm control – unicast, multicast, broadcast, SCP, SSH, SNMPv3, TACACS+, RADIUS server/client, MAC address notification, BPDU guard, Access Lists(PACL/RACL/VACL), SUDI 2099 (Secure Unique Device identifier), Full Flexible NetFlow (FNF), MACsec-128, FIPS 140-2	Yes	Yes
Quality of Service (QoS)	Ingress policing, rate limit, egress queuing and shaping, auto QoS	Yes	Yes
IPv6	IPv6 host support, SNMP over IPv6, HTTP/HTTP(s) over IPv6, SNMP over IPv6, Syslog over IPv6, DHCPv6 relay source, DHCPv6 bulk lease query (RFC 5460), IPv6 stateless Auto Config, SCP/SSH, Radius, TACACS+, NTP over IPv6, IPv6 VRF aware BGPv6, IPV6 ND cache expire, IPv6 support for TFTP, IPv6 DNS transport, IPv6 QoS, IPv6 FHS RA Guard, IPv6 FHS DHCPv6 Guard	Yes	Yes
Layer 3 routing	Inter-VLAN routing, static routing	Yes	Yes
Industrial Ethernet	CIP Ethernet/IP, IEEE 1588 PTP v2 (default and power), PROFINET	Yes	Yes
Redundancy	Resilient Ethernet Protocol (REP) ring, Fast REP, PROFINET-Media Redundancy Protocol (MRP) ring, Parallel Redundancy Protocol (PRP)1, PTP over PRP	Yes	Yes
Utility	Dying gasp, SCADA protocol classification–GOOSE messaging, Modbus TCP/IP	Yes	Yes
Automation	YANG, NETCONF, RESTCONF	Yes	Yes
Industrial Management	Layer 2 switching with 1:1 switch Network Address Translation (L2NAT)2	Yes	Yes
IOx	Container (Native docker)	Yes	Yes
IP routing protocols	OSPF (v4 and v6), BGP (v4 and v6), ISIS (v4 and v6), RIP (v1 and v2), EIGRP (v4 and v6), Policy based routing(PBR), VRRP (v4 and v6), HSRP(v4 and v6)	No	Yes
Advanced security	Cisco TrustSec, Security Group Tag (SGT) inline tagging and Security Group ACLs (SGACL), MACsec-256	No	Yes
Virtualization	Virtual Routing and Forwarding (VRF)-lite	No	Yes
IP Multicast	PIM Sparse Mode (PIM-SM), PIM dense mode (PIM-DM), and PIM sparse-dense mode, MSDP, Multicast routing BSR (IPv4/IPv6), Auto RP(IPv4), Embedded RP(IPv6)	No	Yes

¹Parallel Redundancy Protocol (PRP) is available on select ports only (1/1 – 1/4). Single instance of PRP is supported.

²Supported on select ports (1/1-1/2)

Table 10.     Cisco DNA essentials and advantage package features

Features	Cisco DNA Essentials		Cisco DNA Advantage
Element ManagementDiscovery, Topology, Inventory, software image management	Yes	Yes
Basic AssuranceHealth dashboard – Network, Client monitoring; switch and wired client health monitoring	Yes	Yes
Assurance and AnalyticsCompliance, Custom Reports, Device 360 and Client 360 -Display device and client connectivity for granular troubleshooting	No	Yes
Basic AutomationCisco Network Plug-and-Play application	Yes	Yes
Element ManagementPatch/SMU	No	Yes
Software-defined AccessPolicy based automation and assurance for wired clients, the IE3400 Heavy Duty Series can function as an SD-Access Policy extended node in a REP ring Workflow	No	Yes

Cisco DNA licenses for Industrial Ethernet switches are add-on/optional and not mandatory, and need to be purchased separately. These do not include Network Tier features. Network Advantage License is a mandatory requirement on the Switch for Cisco DNA Advantage License.

产品型号图集