DEV Community: IT And Office

Used Cisco Catalyst switches: 2960X vs 3750X vs 3850

IT And Office — Fri, 03 Jul 2026 14:23:36 +0000

If you're building a lab or scaling a small office network, Cisco Catalyst switches dominate the second-hand enterprise market. They're robust, well-documented, and cheap compared to their original price — but the three most common series you'll encounter (2960X, 3750X, 3850) are very different beasts. Picking the wrong one wastes money; picking the right one can anchor your network for a decade.

Here's a practical breakdown.

The quick answer

Feature	2960X	3750X	3850
Layer	L2 (limited L3)	Full L3	Full L3
Stacking	FlexStack	StackWise-480	StackWise-480
PoE	Yes (PoE+ models)	Yes (PoE+ models)	Yes (PoE+ models)
Uplink	SFP / SFP+	SFP+	SFP+
IOS-XE	No	No	Yes
End of SW maintenance	2025	2023	2028

Cisco Catalyst 2960X — the access-layer workhorse

The WS-C2960X-48FPS-L (48 PoE+ ports, 740 W) and WS-C2960X-24PS-L are the most common units you'll find on the market for €100–250. These are pure access-layer switches: great for connecting workstations, APs, and IP cameras to an uplink.

What you get

Solid Layer 2 feature set: VLANs, STP, LACP, IGMP snooping, 802.1X
LAN Base or LAN Lite IOS (LAN Base is what you want — it supports more ACLs and SPAN)
FlexStack for up to 8-unit stacking via a dedicated cable (costs extra, check if included)
No full routing — the 2960X does static routes in hardware but no dynamic routing protocols (OSPF, EIGRP, BGP) without an IP Services license upgrade, which is expensive used

When to choose it

Pure access layer (users, APs, cameras connect here, routing handled upstream)
Budget is tight
You don't need inter-VLAN routing on the switch itself

What to check before buying

IOS version — verify the image: show version. LAN Base vs LAN Lite is burned into the license, not the hardware. Ask the seller for a screenshot or check the PID (product ID sticker on the back; LPS = LAN Lite, L = LAN Base).
Fan noise — 2960X fans can be loud under load. Check the fan model; some community-sourced Noctua swaps exist for lab use.
FlexStack modules — if you want to stack, the C2960X-STACK module must be present (one per switch). Often missing from pulled units.
PoE budget — the -FPS suffix means 740 W PoE budget; -PS is 370 W. Calculate your AP + camera load first.

Cisco Catalyst 3750X — the full L3 workhorse (aging but solid)

The WS-C3750X-48P-S or WS-C3750X-24P-S run €150–350 used. End of Software Maintenance was 2023, meaning no new IOS releases — but existing IOS 15.2(4) images are stable and widely deployed.

What you get

Full Layer 3: OSPF, EIGRP, BGP, PBR, MPLS (with IP Base or IP Services license)
StackWise-480: up to 9 units with 480 Gbps stacking bandwidth, shared control plane
Modular uplink: the rear slot accepts C3KX-NM-1G (4× SFP) or C3KX-NM-10G (2× SFP+) modules — check whether the module is included, it's often missing and costs €30–80 extra
Hardware-assisted ACLs, QoS, and NetFlow

When to choose it

You need routing at the distribution/core layer
You want to stack switches with a true backplane (not cascaded uplinks)
Budget allows a bit more than a 2960X

What to check before buying

Network module — the rear uplink slot is empty by default. Decide early: C3KX-NM-10G for 10G uplinks (most labs want this), C3KX-NM-1G for 1G SFP.
License tier — show license in IOS. IP Base supports EIGRP/OSPF. IP Services adds BGP, MPLS, advanced QoS. Licenses are node-locked (tied to the unit's serial), so verify the license matches the advertised feature set.
Software support — no new IOS since 2023. For a lab or stable office this is fine; for a PCI or HIPAA environment, check with your auditor.
Power supply — the 3750X has a removable PSU at the back. 1100WAC or 715WAC. Confirm it's present; some stripped units are sold PSU-less.

Cisco Catalyst 3850 — the modern distribution switch

The WS-C3850-48P-S or WS-C3850-24P-S are the premium used option at €300–600. They run IOS-XE (not classic IOS), software maintenance extends to 2028, and they support full Wireless LAN Controller functionality natively — meaning you can terminate Cisco CAPWAP APs directly on the switch without a separate WLC.

What you get

Full L3 on IOS-XE: cleaner CLI, modular architecture, more consistent with modern Catalyst 9K behavior
StackWise-480 (same as 3750X, up to 9 units)
Integrated Wireless LAN Controller (with IP Services license): manage Cisco APs without a dedicated WLC — huge for SMBs
40 Gbps uplink module slot (QSFP+ with the right module)
Software support through 2028 (unlike the 3750X)

When to choose it

You need wireless controller functionality baked in
You want IOS-XE experience (closer to current Catalyst 9K)
Longer software support matters (audit requirements, regulated environments)
You run a mixed-mode network with Cisco APs already on-site

What to check before buying

IOS-XE version — target 16.x. Versions before 16.3 have known memory leak bugs in stacking. show version output should confirm.
License — IP Base vs IP Services (same logic as 3750X). WLC functionality requires IP Services. Check via show license right-to-use.
Network module — same situation as 3750X: the rear uplink slot may be empty. C3850-NM-2-10G gives 2× SFP+, C3850-NM-4-1G gives 4× GE SFP.
USB Bluetooth module — some units have a USB Bluetooth dongle for Mobility Services. If you're not using Cisco CMX, remove it to reduce attack surface.

Feature comparison in plain terms

For pure access layer + tight budget → 2960X-48FPS-L.
For routing + stacking + a few hundred euros more → 3750X-48P-S with a 10G module.
For IOS-XE, wireless controller, and longer support runway → 3850-48P-S.

All three support VLANs, 802.1X, PoE+, LACP, and SPAN — the feature you're giving up as you go down the stack is full Layer 3 routing and software longevity.

Where to find tested units

Auction sites (eBay, LeBonCoin) carry these in volume, but you're often buying blind: no IOS verification, PSU missing, or fans at end-of-life. For a production or semi-production setup, tested and reset units from a specialist reseller reduce the risk considerably. If you prefer not to gamble on auction lots, specialty resellers like IT and Office typically provide functional testing, reset to factory defaults, and accurate model/license information before shipping.

Common mistakes to avoid

Buying a 2960S instead of a 2960X — the older S series has only 10/100/1000 SFP uplinks and slower ASICs. The X is the right generation.
Ignoring the license — LAN Lite on a 2960X, or IP Base when you need IP Services on a 3750X/3850, will wall you off from features you assumed were included.
Missing the stack cable — StackWise uses a proprietary ring cable (STACK-T1-50CM or STACK-T1-1M). Not cheap, not universal, often absent from pulled units.
Underestimating PoE load — a 48-port switch powering 30 APs at 15 W each = 450 W. The -PS (370 W) won't cover it; you need -FPS (740 W).

What's your current stack? Running any of these three in a home lab or office? I'm curious whether anyone has found good sources for the NM-10G modules specifically — they seem harder to find than the switches themselves.

SAN vs NAS for your home lab: which used storage to buy

IT And Office — Fri, 19 Jun 2026 19:28:03 +0000

If you're building out a home lab and need shared storage, you'll eventually hit the SAN vs NAS question. Both solve "storage that multiple machines can reach," but they do it differently — and the wrong choice will haunt your weekend troubleshooting sessions for years.

This guide focuses on used/refurbished enterprise gear, which is where the real value is. New prosumer NAS appliances are fine, but for $300–600 you can run production-grade hardware that Fortune 500 companies retired last year.

The core difference (no hand-waving)

NAS (Network Attached Storage) presents storage as a file system over the network. Your clients talk SMB (Windows), NFS (Linux/VMware), or AFP (old Macs). The NAS owns the filesystem; clients just see folders. Think of it as a file server with a good OS baked in.

SAN (Storage Area Network) presents raw block devices over the network (Fibre Channel, iSCSI, or NVMe-oF). Clients see a disk — or something that looks exactly like one — and they manage their own filesystem on top of it. The SAN has no idea what's inside the blocks.

This distinction drives almost every practical difference between them.

When NAS makes sense for a home lab

Use NAS when your primary use case is file sharing or backup targets:

Media server (Plex, Jellyfin) pulling files from a central library
Time Machine / rsync backup destination
Docker volumes that are mostly config + small data
Shared project folders across dev machines

Used NAS hardware worth looking at

Synology DS1821+ — if you want appliance simplicity, the DS1821+ is the gold standard. But it's not cheap even used. An alternative is to build a DIY NAS on a used Dell PowerEdge R230 or similar — TrueNAS Scale runs great on it, you get ECC RAM, and the IPMI is a life-saver for remote management.

QNAP TS-h886 — uses ZFS natively, 10GbE ports included, can handle iSCSI if you later need it. Used units show up regularly.

For NFS performance in a VMware or Proxmox environment, you want at minimum 1GbE between NAS and hypervisor. 10GbE is worth it if you plan to store VM disks there — you'll feel the difference during live migrations.

What to check before buying a used NAS

Drive bays count and whether it supports the form factor you need (3.5" vs 2.5" vs M.2)
RAM expandability — ZFS loves RAM; some units are soldered
NIC speed — many budget NAS boxes ship 1GbE only, 10GbE adapters for them are sometimes proprietary
Firmware support — Synology especially locks down OS versions by model
Fan noise — some units designed for quiet office use are genuinely acceptable; rackmount NAS gear is loud

When SAN makes sense for a home lab

Use SAN when your use cases involve:

Hypervisor shared storage for live VM migration (vMotion, Proxmox live migration)
High IOPS workloads — databases, write-intensive apps
Multi-host clustering — shared disk presented to a cluster for failover

iSCSI SAN is the practical choice for home labs because it runs on standard Ethernet and you don't need a dedicated FC switch. FC is worth learning if you can acquire the gear cheaply, but the SFP+ fiber infrastructure adds complexity and cost.

Used SAN hardware worth looking at

Dell EMC PowerVault MD3420 / MD3820f — direct-attach SAS storage, can be repurposed with a used RAID controller. Not technically a SAN but bridges the gap.

HP MSA 2040 / 2050 — dual-controller iSCSI/FC SAN. These show up at good prices once hardware refresh cycles hit. They support 10GbE iSCSI natively with the right SFPs.

NetApp FAS2554 / FAS2650 — ONTAP is a serious enterprise OS; the learning curve pays off if you ever touch NetApp at work. These units can do both NFS and iSCSI simultaneously, which gives you flexibility.

IBM DS3500 / DS4700 — solid workhorse for iSCSI. Less common now, but spares are still around.

What to check before buying used SAN gear

Controller firmware version — on dual-controller units, both controllers must be on the same firmware version or you'll get mysterious I/O errors
Cache battery / supercapacitor status — write-back cache is disabled if the backup power unit is dead; performance tanks
Port type — 8Gb FC vs 16Gb FC vs 10GbE iSCSI matters. Make sure your HBAs or NICs match
Expansion shelf compatibility — if you buy a head unit expecting to add shelves, verify the shelf-to-controller compatibility matrix before buying
Noise and power draw — dual-controller SANs are datacenter hardware. Budget 200–400W idle and significant fan noise

The hybrid option: software-defined storage

Before spending money on dedicated hardware, consider running TrueNAS Scale or Ceph on existing servers. TrueNAS Scale can serve NFS, SMB, and iSCSI from the same pool. Ceph is complex but extremely powerful for multi-node setups.

A used Dell R720 or HP DL380 Gen9 with a bunch of drives inside, running TrueNAS, covers 80% of home lab storage needs without a dedicated storage appliance.

The trade-off is management overhead and the fact that your storage host is also burning CPU.

Speed expectations on real gear

Setup	Realistic throughput
1GbE NFS/SMB	110–115 MB/s sequential
10GbE NFS	800–950 MB/s sequential (SSD backend)
iSCSI on 10GbE	700–900 MB/s, lower latency than NFS for IOPS
FC 8Gb	~800 MB/s, very low latency
FC 16Gb	~1.5 GB/s

iSCSI latency is typically 200–500 µs over 10GbE on decent hardware. NFS adds overhead from the protocol stack. Neither approaches local NVMe, but for home lab workloads both are more than adequate.

My recommendation

Start with NAS (TrueNAS on an old server, or a used Synology/QNAP) unless you specifically need live VM migration or block storage clustering.
Add iSCSI SAN when you run Proxmox or ESXi clusters and need shared block storage.
Don't buy FC infrastructure unless you're using it to learn for a job that requires it — the additional cost and complexity of HBAs and fiber switches is hard to justify.

If you want tested and reset gear without the lottery of eBay auctions, resellers like IT and Office stock used enterprise NAS and storage hardware with basic checks done — worth browsing before you commit to a blind buy from a surplus pallet.

What's your current storage setup? Are you running a software-defined solution like TrueNAS or Ceph, or did you go the dedicated appliance route? Curious what workloads pushed you toward SAN vs NAS in the end.

How to Build a Pro-Grade Home Lab on a Budget with Refurbished Enterprise Gear

IT And Office — Tue, 16 Jun 2026 21:26:47 +0000

Enterprise hardware depreciates faster than almost anything in tech. A switch or firewall that cost €2,000 new is often €150 three years later — not because it stopped working, but because the company that bought it moved to a support contract on a newer model. For a home lab, that depreciation curve is a cheat code: you get real production-grade features for a fraction of the price.

Here's a practical guide to building a serious home lab with used enterprise gear — what to buy, what each piece gives you, and the traps to avoid.

Why refurbished enterprise gear beats consumer kit

Consumer "prosumer" gear fakes the features you actually want to learn. Real enterprise hardware gives you:

Managed switching — VLANs, 802.1Q trunking, LACP, STP, QoS, SNMP. The exact CLI you'll use at work.
Out-of-band management — iDRAC (Dell) / iLO (HPE) let you power-cycle and install an OS over the network, headless.
ECC RAM and redundant PSUs — stability for 24/7 virtualization.
PoE — power your APs, IP cameras and phones over the same cable.

You learn on the same equipment that runs datacenters, and you can break things safely.

The shopping list

1. A managed switch (the backbone)

Start here. A used Cisco Catalyst 2960X (Layer 2) or 3750X / 3850 (Layer 3) gives you VLANs, inter-VLAN routing and PoE for very little.

Check before buying: the PoE budget (e.g. 370W vs 740W), the IOS feature set (IP Base vs IP Services for L3), and fan noise — some 1U switches are loud for a bedroom.

2. A firewall / router

A used Fortinet FortiGate (or similar) lets you segment your network, run VPNs and inspect traffic — invaluable for learning real security.

The catch: without an active subscription you lose live threat feeds and some auto-updates. For a lab that's fine; just buy on hardware merit and know the model isn't end-of-support. Generate fresh config on a factory-reset unit.

3. A server (the workhorse)

A Dell PowerEdge (R620/R630/R720) or HPE ProLiant (DL360/DL380) Gen8–Gen10 runs Proxmox, ESXi or a Kubernetes cluster comfortably.

Check: RAM type/amount (ECC RDIMM), the RAID controller (PERC / Smart Array) mode, the iDRAC/iLO license level, and — again — noise and power draw. A 2U server idles around 80–120W.

4. Storage

SAS/SSD disks pulled from servers are cheap and fast. A small NAS (or a server with a RAID controller) gives you shared storage for VM images and backups. For SAS drives, check the SMART health and remaining life.

5. Don't forget power

Rack gear needs clean, sufficient power. A rack PDU distributes it; a UPS rides out brownouts and lets VMs shut down gracefully. Size the PDU to your total load with ~20% headroom — a 16A PDU gives ~3.7 kVA, a 32A ~7.4 kVA.

The five traps when buying used

Firmware / license locks — some vendors disable features without an active contract. Verify what works without a subscription.
End-of-support models — fine for a lab, risky if you need security patches. Check the EoL date.
Missing components — caddies, rails, PSUs, SFP modules and licenses are often not included. Confirm what's in the box.
Noise and heat — 1U gear screams. If it lives where you sleep, prefer 2U or tower form factors.
No reset / dirty config — insist the unit is factory-reset (zeroized) so you start clean and inherit no one else's keys or rules.

Buy tested, not blind

Auctions are a gamble — untested units, missing parts, dead PSUs. If you'd rather skip the lottery, specialist refurbishers test and reset gear before shipping. I've sourced switches, firewalls and PDUs from IT and Office, which sells tested, reset enterprise hardware (Cisco, Fortinet, Dell, HPE and more) with EU shipping — handy when you want kit that boots and works on day one.

Wrap-up

A capable home lab — managed switch, firewall, a virtualization host, shared storage and proper power — can be built for the price of a single new mid-range switch if you buy used. You'll learn the real tools, break things without fear, and run services that would cost a fortune to host elsewhere.

What's in your rack? Drop your build in the comments — always curious what people are running. 👇`