Network switches for business

Which switch range suits which site

A quick way to narrow the choice before you open the model tables:

Access, aggregation and core in plain terms

Most business networks are built in up to three layers, and each layer wants a different kind of switch:

• Access switches are the ones people and devices plug into: desks, access points, phones, cameras, printers. They need the right number of copper ports, enough Power over Ethernet and uplinks fast enough for everything behind them.
• Aggregation (distribution) switches collect the uplinks from access switches on each floor or building, usually over fibre at 10G or 25G.
• Core switches join everything together and connect the servers, firewall and internet. Speed and resilience matter most here: redundant power supplies, dual links and 40G or 100G ports.

A single office often runs a collapsed design: one or two stacked switches act as access and core at once, and the firewall routes to the internet. As the site grows, we add a separate core so a fault on one floor does not take down the rest.

Managed, smart or unmanaged?

Every switch in this shop is a managed switch. That means you can split the network into VLANs (staff, guests, phones, cameras), see which device is on which port, secure ports with 802.1X, prioritise voice traffic and change settings remotely.

• Unmanaged switches have no settings at all. They are fine for a few extra desk ports, but you cannot separate guest and staff traffic or see what is connected, so we rarely fit them in a business network.
• Smart (or lightly managed) switches cover the essentials through a web page or app. Cisco describes the Catalyst 1200 in this way, with features "far beyond those of an unmanaged or consumer-grade switch, at a lower cost than for fully managed switches".
• Fully managed switches add routing, stacking, automation and centralised management for larger networks.

If you need routing between VLANs on the switch itself, see Layer 3 switches.

Power over Ethernet

Access points, desk phones, door-entry units and IP cameras usually take their power from the switch port. Two numbers matter: the power per port (PoE+ gives up to 30 W, 802.3bt up to 60 W or 90 W) and the switch's total PoE budget, which is shared across all ports. Wi-Fi 7 access points often need more than PoE+ can deliver at full capability.

Compare models by budget on managed PoE switches and work out what you need with the PoE budget guide.

Uplinks, multigigabit and stacking

• Uplinks: 1G uplinks suit a small office with one switch. Once several switches or busy access points sit behind an uplink, 10G SFP+ (or 25G SFP28) is the usual choice. Fibre modules are ordered separately; Cisco ones are on Cisco SFP transceivers.
• Multigigabit ports (2.5G, 5G or 10G over existing copper) let Wi-Fi 6E and Wi-Fi 7 access points use their full uplink speed without recabling, provided the cabling is up to it.
• Stacking joins several switches so they are managed as one, with one IP address and cross-stack link aggregation. Each range stacks differently; Layer 3 switches compares them.

Licences and subscriptions some switches need

• Cisco Catalyst 9200, 9300 and 9500: Cisco says "Both Network Stack licenses and Cisco DNA or Catalyst software subscription licenses are mandatory at the time of purchase". The Network Essentials or Advantage licence is built into the hardware part number; the 3, 5 or 7-year subscription is added with it. Our basket asks for it when you add the switch.
• Cisco Smart Switches (C9350, C9550, C9610): sold with a Cisco Networking Subscription switching licence.
• Cisco Catalyst 1200 and 1300: no software subscription.
• FortiSwitch: Fortinet says "FortiSwitch offers many features, including NAC, without additional licensing" when the switch is managed from a FortiGate; FortiCare support is offered per switch.
• HPE Aruba Networking CX: HPE Aruba Networking Central subscriptions (Foundation or Advanced) for cloud management, chosen at quote.
• HPE Juniper Networking EX: the Standard feature tier is included; Advanced or Premium licences and HPE Mist Wired Assurance are optional.
• HPE Networking Instant On: managed with the Instant On app, with HPE stating security features are "included at no extra cost".

How each range is managed

• Cisco Catalyst 1200 and 1300: built-in web interface, the Cisco Business mobile (opens in a new tab) app or Cisco Business Dashboard.
• Cisco Catalyst 9000: command line, or Cisco Catalyst Center on premises. The cloud-managed -M versions run in the Meraki dashboard and are sold on our sister site (cloud managed Catalyst (opens in a new tab)).
• FortiSwitch: from a FortiGate firewall over FortiLink, from FortiManager, or standalone.
• HPE Aruba Networking CX: AOS-CX locally, or HPE Aruba Networking Central; some CX models also work with HPE Mist.
• HPE Juniper Networking EX: Junos locally, or the HPE Mist cloud with Wired Assurance.
• HPE Networking Instant On: the Instant On mobile app or web portal.

If you want every switch run from a cloud dashboard as standard, compare cloud managed switches (opens in a new tab) on cloudnetworking.uk.

Switches by range

How to order switches

How ordering works. Press Add next to a part number and it goes into your basket; where the hardware needs a subscription, you pick the tier and term in the same step. Add accessories, then View basket and Request a quote. We check every line, quantity and term against your plans and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the switches as a project, with the scope confirmed at quote (see network installation).

Not sure which model fits? Contact us with your user count, devices to power and existing cabling, and we will suggest a bill of materials.