Catalyst 2960X — Legacy & Still Deployed

Cisco Catalyst 2960X Configuration Template

The Catalyst 2960X is still widely deployed in enterprise networks. Generate a complete, hardened configuration — including correct in-band management via SVI.

Generate my 2960X config →

Cisco Catalyst 2960X — what you need to know

The Catalyst 2960X is a pure Layer 2 access switch. Unlike the 9300 series which runs IOS-XE and supports Layer 3 routing, the 2960X runs IOS and has no routing capability — ip routing should never appear in its configuration. This distinction matters when generating or reviewing configs: every management decision flows from this single architectural fact.

Key differences compared to the Catalyst 9300:

No dedicated OOB management port — the 2960X has no GigabitEthernet0/0. Management access is via a VLAN SVI (interface Vlan99 or similar).
Use ip default-gateway, not ip route — on a Layer 2 switch without ip routing, the default gateway is set with this single command.
Runs IOS, not IOS-XE — the 2960X uses Cisco IOS (not IOS-XE). Some commands differ slightly. The 3850 and 9000 series are where IOS-XE begins.
End of Sale but not End of Support — the 2960X is fully supported with security patches and will remain in production networks for years.
FlexStack-Plus stacking — the 2960X supports stacking up to 8 units, though the stacking bandwidth (80 Gbps) is much lower than the 9300's StackWise-480.

Catalyst 2960X Models

Model Ports PoE Uplink Interface Management
C2960X-48PS 48 × 1G PoE+ GigabitEthernet1/0/49 SVI
C2960X-48TS 48 × 1G No GigabitEthernet1/0/49 SVI
C2960X-24PS 24 × 1G PoE+ GigabitEthernet1/0/25 SVI
C2960X-24TS 24 × 1G No GigabitEthernet1/0/25 SVI

In-band management on the 2960X

On switches with a dedicated OOB management port (Catalyst 9300, 9200, 3850), management traffic travels on a completely separate physical interface isolated in a Mgmt-vrf. The 2960X has no such port — management traffic shares the data-plane uplink via a VLAN SVI. This means your management VLAN must be trunked to the uplink and the SVI must have an IP address. The default gateway is set with ip default-gateway, not with a VRF static route.

2960X — in-band management via SVI
! 2960X — in-band management via SVI
interface Vlan99
 description MANAGEMENT
 ip address 10.10.99.10 255.255.255.0
 no shutdown
!
ip default-gateway 10.10.99.1
!
! Note: no ip routing on a pure L2 switch

Common 2960X configuration mistakes

⚠
Using GigabitEthernet0/0 for management — the 2960X has no OOB management port. Configuring interface GigabitEthernet0/0 will fail or produce an error. Use a VLAN SVI instead.
⚠
Adding ip routing — the 2960X is a pure Layer 2 switch. Enabling ip routing is not supported and may cause unexpected behavior. This command belongs on the 3850, 9300, and other multilayer switches.
⚠
Using ip route instead of ip default-gateway — on a Layer 2 switch without ip routing, global ip route statements are ignored. Use ip default-gateway [gateway-ip] for management reachability.

Frequently Asked Questions

The 2960X is End of Sale but not yet End of Support. It remains widely deployed and receives security patches. Many enterprises will run these switches for years — they are reliable, well-understood hardware with a massive installed base. netconfgen fully supports all 2960X models for configuration generation.

The 2960X is the newer generation with better forwarding performance, FlexStack-Plus stacking support (vs. FlexStack on the 2960S), and improved PoE budget. Both use in-band management via a VLAN SVI and run IOS (not IOS-XE). The uplink port numbering differs between models — always verify the correct interface name before generating a config.

No — the Catalyst 2960X runs IOS, not IOS-XE. IOS-XE begins with the Catalyst 3650/3850 generation and the 9000 series. The 2960X hardware does not support IOS-XE. If you need IOS-XE features on access switches, migration to the 9200 or 9300 series is the path forward.

Generate your 2960X configuration now

Correct SVI management, security hardening, BLACKHOLE VLAN — all included.

Generate my 2960X config →