IE-3400-8T2S-A – 8x1G Data Ports – 2x1G SFP Uplinks – Network Advantage
Shop Expert-Recommended Accessories for the IE-3400-8T2S-A
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00. -
GLC-EX-SMD
1000BASE-EX SFP - 40km SMF - DOMOriginal price was: $2,527.49.$205.00Current price is: $205.00. -
GLC-ZX-SMD
1000BASE-ZX SFP - 70km SMF - EXT DOMOriginal price was: $5,061.30.$215.70Current price is: $215.70. -
IEM-3300-8T
8x1G Copper Ports - IE3300 Expansion Module - Non-PoEOriginal price was: $2,533.64.$1,216.00Current price is: $1,216.00. -
IEM-3300-8S
8x1G SFP Ports - IE3300 Expansion ModuleOriginal price was: $3,024.71.$1,200.80Current price is: $1,200.80. -
IEM-3400-8T
8xGE Copper Ports - IE3400 Expansion Module - Non-PoEOriginal price was: $4,697.19.$3,144.50Current price is: $3,144.50. -
PWR-IE50W-AC
50W AC/DC PSU - 24VDC Output - DIN-RailOriginal price was: $481.88.$247.38Current price is: $247.38. -
PWR-IE50W-AC-L
50W AC PSU - 24VDC Output - DIN-RailOriginal price was: $481.88.$229.71Current price is: $229.71. -
PWR-IE50W-AC-IEC
50W AC PSU - IEC C14 Input - 24VDC OutputOriginal price was: $1,055.24.$520.80Current price is: $520.80.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
IE-3400-8T2S-A Description
The IE-3400-8T2S-A is a Cisco Catalyst IE3400 Rugged Series advanced modular industrial switch for DIN-rail cabinets that connect controllers and HMIs over copper. The switch has eight 10/100/1000 copper ports, two 100/1000 SFP uplinks and no PoE, runs on dual DC inputs of 9.6 to 60VDC, draws 36W and carries Network Advantage licensing. The base accepts only non-PoE expansion modules, and any IEM-3300 module removes SGT/SGACL support.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
IE-3400-8T2S-A |
|
Downlink ports |
8x 10/100/1000 RJ45 copper |
|
Uplink ports |
2x 100/1000 SFP |
|
PoE budget |
Not applicable (data-only) |
|
Network license |
Network Advantage (perpetual) |
|
Dynamic routing |
OSPF, BGP, IS-IS, RIP, EIGRP (IPv4 and IPv6) |
|
SGT/SGACL and Cisco TrustSec |
Base switch and IEM-3400 expansion modules |
|
Redundancy protocols |
PRP, HSR-SAN, DLR, REP, PROFINET MRP |
|
Expansion |
1 expansion module, up to 26 GE system ports |
|
Input voltage |
Dual DC inputs, 9.6 to 60VDC |
|
Power consumption |
36W (measured at 12V) |
|
Operating temperature |
-40°C to +70°C (40 LFM vented enclosure) |
|
Mounting and cooling |
DIN rail; fanless, convection cooled |
Product Performance
Key Features
SGT/SGACL and Cisco TrustSec classify controllers, HMIs and service laptops by role, so access rules follow the device rather than its VLAN or IP address. VRF-Aware SGT carries the same tags into separate routing tables on one switch.
The switch can peer with the plant core or WAN edge over OSPF, BGP, IS-IS or EIGRP for IPv4 and IPv6, with VRRP or HSRP for gateway redundancy and BFD echo mode for OSPFv3. The 3000 IPv4 and 512 IPv6 indirect route entries apply on this tier.
PIM sparse and dense mode, MSDP, BSR, Auto RP and Embedded RP let multicast streams cross routed boundaries instead of staying inside one VLAN. Up to 1K IGMP groups are tracked.
Links that leave the cabinet can be encrypted with MACsec-256. Network Essentials stops at MACsec-128, so the stronger cipher is one of the features Network Advantage adds.
PRP runs on ports Gig1/1 to Gig1/4 as a single instance, alongside PTP over PRP, HSR-SAN, HSR-PRP Dual Redbox and DLR. While DLR, PRP, HSR or SGT is active, jumbo frames are capped at 2000 bytes instead of 8996.
The non-PoE base accepts seven modules. IEM-3400-8T= or IEM-3400-8S= brings the system to 18 ports and keeps SGT/SGACL, while IEM-3300-16T= or IEM-3300-14T2S= reaches 26 ports but removes SGT/SGACL support.
Application Scenarios
In a manufacturing plant divided into cells and zones, the switch assigns each machine cell’s PLCs, HMIs and engineering stations to security groups so cross-cell traffic follows a central policy.
At an electric substation, the switch connects bay controllers and protection relays and runs OSPF toward the utility WAN router, inside a chassis rated to IEC 61850-3 and IEEE 1613.
Road tunnels, ports and similar shared sites often host SCADA, traffic control and operator networks in one cabinet, where the switch keeps each system in its own VRF-lite instance.
Product Comparison
|
Parameter |
IE-3400-8T2S-A | |||
|---|---|---|---|---|
|
10/100/1000 RJ45 copper ports |
8 |
8 |
8 (PoE/PoE+) |
8 |
|
100/1000 SFP ports |
2 |
2 |
2 |
2 |
|
Software license (default) |
Network Advantage |
Network Essentials |
Network Advantage |
Network Advantage |
|
PoE power budget |
None (data-only) |
None (data-only) |
240W base, 480W with expansion module |
None (data-only) |
|
IP routing protocols |
OSPF, BGP, IS-IS, EIGRP, RIP, PBR, VRRP, HSRP, PIM multicast routing, VRF-lite |
Inter-VLAN and static routing |
OSPF, BGP, IS-IS, EIGRP, RIP, PBR, VRRP, HSRP, PIM multicast routing, VRF-lite |
OSPF, BGP, IS-IS, EIGRP, RIP, PBR, VRRP, HSRP, PIM multicast routing, VRF-lite |
|
Security |
MACsec-256, SGT/SGACL, Cisco TrustSec |
MACsec-128 |
MACsec-256, SGT/SGACL, Cisco TrustSec |
MACsec-256 |
|
Input voltage range |
Redundant DC, 9.6 to 60VDC |
Redundant DC, 9.6 to 60VDC |
Redundant DC, 9.6 to 60VDC |
Redundant DC, 9.6 to 60VDC |
|
Redundancy |
REP, Fast REP, PROFINET MRP, PRP, HSR-SAN, HSR-PRP Dual Redbox, DLR |
REP, Fast REP, PROFINET MRP, PRP, HSR-SAN, HSR-PRP Dual Redbox, DLR |
REP, Fast REP, PROFINET MRP, PRP, HSR-SAN, HSR-PRP Dual Redbox, DLR |
REP, Fast REP, REP ZTP, PROFINET MRP |
|
Power consumption |
36W |
36W |
47W |
36W |
IE-3400-8T2S-A is the data-only model, with eight copper ports, no PoE and a 36W draw, while IE-3400-8P2S-A adds PoE/PoE+ from a 240W base budget, or 480W with a PoE expansion module, at 47W, so cabinets that power cameras or access points belong on the 8P2S model. PoE modules plug only into PoE base switches, so this chassis cannot gain powered ports later. Where a Layer 2 cabinet needs neither dynamic routing nor SGT/SGACL, IE-3400-8T2S-E keeps PRP, HSR-SAN, DLR and REP on Network Essentials, and IE3400-NW-A= can add Advantage later. If the design uses only REP and MRP rings, IE-3300-8T2S-A offers the same port layout with Advantage routing and MACsec-256 at 23W, without PRP, HSR, DLR or SGT/SGACL.
Ordering Checklist
- DC power supply: Deliver 9.6 to 60VDC to the DC inputs, or add an IE DIN rail supply. With IEM-3400-8S= the load is 63W, within the 65W PWR-IE65W-PC-AC= but above the 50W PWR-IE50W-AC=. Class I Div 2 or Zone 2 cabinets use a supply without the -L suffix.
- Expansion module: Choose a non-PoE module: IEM-3400-8T=, IEM-3400-8S=, IEM-3300-8T=, IEM-3300-8S=, IEM-3300-16T=, IEM-3300-6T2S= or IEM-3300-14T2S=. PoE modules plug only into PoE base switches.
- SFP temperature grade: Use industrial optics such as GLC-SX-MM-RGD= or GLC-LX-SM-RGD= in cabinets that reach the temperature limits. Commercial or extended-temperature SFPs require the switch operating temperature to be derated.
- SD card: Add SD-IE-16GB= when SwapDrive configuration backup and replacement is planned. The card is optional and not shipped with the switch.
- Catalyst Center license: Add IE3400-DNA-A or IE3400-DNA-E, or a 3, 5 or 7-year term version, when Catalyst Center manages the switch. The licenses are optional, sold separately and carry no network-tier features.
- 19-inch rack kit: Add STK-RACK-DINRAIL= when the switch goes into a 19-inch rack. The switch itself mounts only on DIN rail.
Optional Add-ons
|
Model |
Description |
|---|---|
|
Expansion module, 8x GE copper ports (18 system ports, keeps SGT/SGACL) | |
|
Expansion module, 8x GE SFP ports (18 system ports, keeps SGT/SGACL) | |
|
Expansion module, 8x GE copper ports (18 system ports) | |
|
Expansion module, 8x GE SFP ports (18 system ports) | |
|
Expansion module, 16x GE copper ports (26 system ports) | |
|
Expansion module, 6x GE copper + 2x GE SFP (18 system ports) | |
|
Expansion module, 14x GE copper + 2x GE SFP (26 system ports) | |
|
50W DIN rail power supply, 100-240VAC or 125-250VDC input | |
|
50W DIN rail power supply, 90-264VAC input | |
|
65W DIN rail power supply, 100-240VAC or 125-250VDC input | |
|
65W DIN rail power supply, 24-48VDC input | |
|
GLC-FE-100FX-RGD= |
Industrial 100BASE-FX SFP, 2 km over multimode fiber |
|
Industrial 1000BASE-SX SFP, 220-550 m over multimode fiber | |
|
Industrial 1000BASE-LX/LH SFP, 550 m MMF or 10 km SMF | |
|
GLC-ZX-SM-RGD= |
Industrial 1000BASE-ZX SFP, 70 km over single-mode fiber |
|
GLC-T-RGD= |
Industrial 1000BASE-T copper SFP, 100 m |
|
SD-IE-16GB= |
16GB SD card for configuration storage and SwapDrive |
|
STK-RACK-DINRAIL= |
19-inch DIN rail mount kit |
|
IE3400-DNA-A |
Cisco Catalyst Center Advantage license for IE3400 Series |
IE3400 Front Panel Overview
The illustrations in this section provide an overview of the variety of components available on the various switch models in this product family. Not all models are illustrated.|
1 |
10/100/1000 Copper Ethernet ports (downlink ports) |
7 |
Flash memory card slot |
|---|---|---|---|
|
2 |
Power connector DC-B |
8 |
SFP module slots (uplink ports) |
|
3 |
Power connector DC-A |
9 |
USB mini-Type B (console) port |
|
4 |
Protective ground connection |
10 |
RJ-45 console port |
|
5 |
Alarm connector |
11 |
USB mini-Type A port |
|
6 |
10/100/1000 Copper Ethernet ports (downlink ports) |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | IE-3400-8T2S-A | Network license | Network Advantage (perpetual; includes all Network Essentials features) |
| Total base ports | 10 | Downlink ports | 8x 10/100/1000 RJ45 copper |
| Uplink ports | 2x 100/1000 SFP | PoE power budget | Not applicable (data-only copper ports) |
| Expansion | 1 expansion module; up to 26 GE system ports | Supported expansion modules | IEM-3400-8T=, IEM-3400-8S=, IEM-3300-8T=, IEM-3300-8S=, IEM-3300-16T=, IEM-3300-6T2S=, IEM-3300-14T2S= (non-PoE modules only) |
| Expansion module width | Single-wide module adds 2 in; double-wide module adds 3 in | Console port | 1 RS-232 (via RJ-45), 1 USB Mini Type B |
| Alarms | 2 alarm inputs, 1 alarm output | Removable storage | USB 2.0 and SD card (optional, not shipped by default) |
| Forwarding rate | Line rate for all ports and all packet sizes | Number of queues | 8 |
| MAC addresses | 16K | IGMP multicast groups | 1K |
| No. of VLANs | 256 | STP instances | 128 |
| Access control entries (PACL/VACL/RACL) | 3K | IPv4 indirect routes | 3000 |
| IPv6 indirect routes | 512 | DRAM | 4 GB |
| Flash (user accessible) | 1.5 GB | SD card capacity | 4 GB, 16 GB (optional) |
| Jumbo frames | 8996 bytes; 2000 bytes when using ERSPAN, DLR, PRP, HSR or SGT | Layer 2 switching | IEEE 802.1Q, 802.1w, 802.1s, 802.1ab, 802.3ad, PVST+, MSTP, RSTP, LACP, PAgP, VTPv2/v3, Q-in-Q, selective Q-in-Q, voice VLAN, UDLD |
| IP routing protocols | OSPF, BGP, IS-IS, EIGRP (IPv4 and IPv6), RIP v1/v2, PBR, VRRP, HSRP, BFD echo mode for OSPFv3; inter-VLAN and static routing | Virtualization | VRF-lite, VRF-Aware SGT |
| IP multicast | PIM-SM, PIM-DM, MSDP, BSR (IPv4/IPv6), Auto RP (IPv4), Embedded RP (IPv6); IGMP v1/v2/v3 snooping, filtering and querier | Security | MACsec-256, SGT/SGACL, Cisco TrustSec, 802.1X, DHCP snooping, dynamic ARP inspection, IP source guard, FIPS 140-2, SUDI 2099, Full Flexible NetFlow |
| SGT/SGACL support | Base switch and IEM-3400 expansion modules; an IEM-3300 module prevents SGT/SGACL | Redundancy | REP ring, Fast REP, REP Negotiated, REP Autodiscovery, REP ZTP, PROFINET MRP, PRP (Gig1/1 to Gig1/4, single instance), PTP over PRP, HSR-SAN, HSR-PRP Dual Redbox, DLR |
| Industrial protocols | CIP EtherNet/IP, PROFINET, IEEE 1588 PTPv2 (default and power profiles); GOOSE and MODBUS TCP/IP classification | Industrial management | Layer 2 switching with 1:1 L2NAT (supported on uplink ports) |
| IOx edge compute | Native Docker containers, Cisco Cyber Vision, Secure Equipment Access | Automation | YANG, NETCONF, RESTCONF |
| Management | WebUI, Cisco Catalyst Center, SNMP, syslog, SPAN/RSPAN, Express setup, SwapDrive zero-configuration replacement | Operating system | Cisco IOS XE with secure boot, image signing and Trust Anchor module |
| Input voltage range | Redundant DC input, 9.6 to 60VDC (dual DC power inputs) | Input current | 6.3A |
| Power consumption | 36W (measured at 12V) | Supported DIN rail power supplies | PWR-IE50W-AC=, PWR-IE50W-AC-IEC=, PWR-IE50W-AC-L=, PWR-IE65W-PC-AC=, PWR-IE65W-PC-DC=, PWR-IE170W-PC-AC=, PWR-IE170W-PC-DC=, PWR-IE240W-PCAC-L=, PWR-IE480W-PCAC-L= |
| Cooling | Fanless, convection cooled | Operating temperature | -40°C to +70°C (40 LFM vented enclosure); -40°C to +60°C (sealed enclosure); -40°C to +75°C (min. 200 LFM fan or blower-equipped enclosure); +85°C type tested for 16 hours |
| Operating altitude | Up to 15,000 ft | Storage temperature | -40°C to +85°C |
| Operating humidity | 5% to 95% relative humidity, non-condensing | Dimensions (H x W x D) | 6 x 3.6 x 5.3 in (15.2 x 9.1 x 13.5 cm) |
| Weight | 1.7 kg (3.8 lb) | Mounting | DIN rail |
| Ingress protection | IP30 | MTBF | 549,808 hours (Telcordia Issue 3) |
| Industrial automation control system | IEC 62443-4-1, IEC 62443-4-2 | Industry standards | EN 61000-6-1, EN 61000-6-2, EN 61000-6-4, EN 61326-1, EN 61131-2, IEEE 1613, EN/IEC 61850-3, ODVA EtherNet/IP, NEMA TS 2-2016, AREMA C&S sections 11 and 19 |
| Electromagnetic emissions | FCC 47 CFR Part 15 Class A, EN 55032/CISPR 32 Class A, VCCI Class A, AS/NZS CISPR 32 Class A, CISPR 11 Class A, ICES-003 Class A, CNS 13438 Class A, KN 32 Class A, EN 300 386 | Electromagnetic immunity | CISPR 24/CISPR 35, EN 55024/EN 55035, KN 35, EN 61000-4-2, -3, -4, -5, -6, -8, -10, -16, -17, -18, -29 |
| Safety certifications | UL/CSA 60950-1, IEC 60950-1 CB, UL/CSA 62368-1, IEC 62368-1 CB, UL/CSA 61010-2-201, IEC/EN 61010-2-201 | Hazardous locations | UL121201 and CSA 213 Class I Div 2 Groups A-D; UL/CSA, IECEx and ATEX 60079-0/-15 Class I Zone 2 Gc/IIC (ATEX requires a cabinet enclosure) |
| Railway | EN50125-1:2014, EN50125-3:2003, EN50121-4, EN50121-3-2/EN50155 | Marine | DNV-CG-0339, IEC 60945, IACS UR E10 |
| Shock | IEC 60068-2-27 (operational 50G, 3 ms half sine; non-operational 65-80G, 9 ms trapezoidal) | Vibration | IEC 60068-2-6 (sinusoidal, 5-150 Hz) |
| Corrosion | IEC 60068-2-52 (salt fog), IEC 60068-2-60 (flowing mixed gas) | Supported SFPs | 100M: GLC-FE-100FX-RGD=, GLC-FE-100LX-RGD=; 1G: GLC-SX-MM-RGD=, GLC-LX-SM-RGD=, GLC-ZX-SM-RGD=, GLC-T-RGD=, GLC-BX40-U-I=, GLC-BX40-D-I=, GLC-BX80-U-I=, GLC-BX80-D-I=; non-industrial SFPs require temperature derating |
Get More Information
Need pricing, stock, or shipping details for the IE-3400-8T2S-A ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
How many watts does an IEM-3400-8T= add to IE-3400-8T2S-A?
-
Which DIN rail supply accepts a 12-54VDC input on IE-3400-8T2S-A?
-
What system width does a double-wide module give IE-3400-8T2S-A?
-
What does each IEM-3300 module add to the supply load of IE-3400-8T2S-A?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Operating reliably since installation. No follow-up tickets needed.
Premium quality at every level of inspection.
Sales process was smooth — no unnecessary back-and-forth or confusion. Invoice formatting was a bit different from what our AP system expects, but workable.
Solid shipping. No damage. Reliable.
Honest folks. Package was wrapped up tight.