The switch is the heart of the local network; every computer, server, phone and camera talks to the others through it. On the market, two switches with the same number of ports can differ greatly in price. Much of that difference comes down to one question: can the switch be managed or not?
Unmanaged Switches
You take an unmanaged switch out of the box, connect power and network, and it works. It has no settings and gives you no information.
- Suitable for: very small offices, or adding a few temporary ports in one room.
- Limitations: no VLANs, no way to see which port has errors or how much traffic it carries, and usually no protection against network loops.
Smart Switches (Smart / Web-Managed)
These sit between the other two groups. They are usually configured through a web page and offer basic features such as VLANs, simple traffic prioritization, link aggregation and disabling ports. They are a good economical choice for many small and midsize offices, provided they actually have the features you need; capabilities in this group vary widely between models and brands.
Managed Switches
A managed switch gives you full control. Common features:
- VLANs to segment the network for users, servers, phones and guests.
- STP and protection against network loops.
- Link aggregation (LACP) to combine multiple links between switches for more speed and redundancy.
- Monitoring with SNMP and visibility into each port’s status, errors and traffic.
- Port security: limiting allowed devices, 802.1X authentication, and blocking rogue DHCP with DHCP Snooping.
- Port Mirroring to copy port traffic for troubleshooting.
Managed switches fall into two categories: Layer 2 and Layer 3. A Layer 3 switch can route traffic between VLANs itself; in larger networks this takes load off the firewall, but in that case access control between segments must be carefully designed on the switch itself.
Selection Criteria
- Port count and growth: calculate your current needs and leave room to grow.
- Port speed: user ports should be gigabit, and for links between switches and servers, plan for faster ports such as SFP+.
- PoE: if you have phones, cameras or access points, compare the switch’s PoE power budget with what the devices need.
- Centralized management: if you have several switches, Stack support or a shared management console makes the job easier.
- Support and updates: choose a brand that releases security firmware updates and whose parts and support are available in your region.
- Installation location: if the switch is installed in a workspace, fan noise matters; fanless models are a good option.
A simple rule: core and server room switches should always be managed. Even in small offices, the extra cost of a managed switch usually pays for itself with the first serious troubleshooting session.
Common Mistakes
- Placing small unmanaged switches under desks and building a network nobody has a map of.
- Buying a managed switch and running it with factory settings and the default password.
- Ignoring the link speed between switches, which becomes the bottleneck for the entire network.
Checklist
- The core switch and server switches are managed.
- VLANs and loop protection are enabled.
- The default password has been changed and the firmware is up to date.
- The PoE power budget is sufficient for all devices.
- Switch configurations are backed up.
ITPlus724 engineers can recommend the right switch based on the size and needs of your network and configure it securely for your company.