适合谁
Banks and head offices whose IT staff already hold CCNA, and who want a core network that any replacement engineer can pick up.
概述
Cisco today
Cisco is a US company headquartered in San Jose, California. Most people know it for switches and routers, but today it also sells firewalls, Wi-Fi, Webex meetings, Duo for MFA and ThousandEyes for measuring internet and cloud performance. In 2024 Cisco completed its purchase of Splunk, which puts large-scale log collection and security analytics under the same roof.
How the product families fit together
- Catalyst 9000 is the campus switch range: 9200 for the access layer, 9300 for access that needs stacking and fast uplinks, 9500 for the core. In 2025 Cisco launched the C9350 and C9610 Smart Switches as the next generation. All of them run IOS XE.
- Nexus covers data center switching.
- Wi-Fi 7 access points such as the 9176 series use one hardware model that can be run either from an on-site wireless controller or from the Meraki cloud dashboard.
- Catalyst 8000 Edge routers and Catalyst SD-WAN connect branches.
- Cisco Secure Firewall (200, 1200, 3100 and 4200 series) is managed from Firewall Management Center, from the on-box web manager, or from Security Cloud Control in the cloud.
- Catalyst Center (formerly DNA Center) manages and monitors the whole campus network from one place.
Licensing
Current switches and access points are sold with a term subscription, usually 3, 5 or 7 years, at Essentials or Advantage level. For the newest hardware Cisco has merged this into the Cisco Networking Subscription, which works with cloud, on-premises or mixed management. Budget for the renewal on the day you buy, not the day it expires.
Cisco fits banks, head offices, large hospitals and mining companies that have their own IT team and want a network that any newly hired engineer can pick up on day one. For a shop or a 20-person office it is usually more than you need to pay for.
优势
- Most network engineers in Laos and Thailand learned on CCNA material, so if your administrator leaves, finding someone who can read an IOS XE config is not hard.
- Switching, Wi-Fi, routing, SD-WAN and firewalls all come from one vendor, with Catalyst Center or the Meraki dashboard giving a single view of the network.
- The new Wi-Fi 7 access points can be managed on-premises or from the cloud without changing hardware, so changing your mind later doesn't strand the equipment.
- Cisco publishes end-of-sale and end-of-support dates years ahead. The Catalyst 2960-X, for example, stopped selling in 2022 but stays supported until 2027, which gives you time to budget a replacement.
选型前须知
- Current switches and access points come with a term subscription. Budget for the renewal, and ask the distributor exactly which features stop working if you don't renew.
- Cost per port is clearly higher than mid-market brands. For a small branch with a couple of switches and access points it is often hard to justify.
- Spares and RMA normally go through distributors in Thailand. Without a valid support contract and a spare unit kept in Laos, a replacement can take weeks.
- Product and licence names change often (DNA Center became Catalyst Center, licences were merged into the Cisco Networking Subscription). Make sure every quotation lists the SKUs and the licence term in full.
在老挝的使用
Most Cisco equipment used in Laos comes in through distributors in Thailand. Models in stock reach Vientiane quickly, but anything built to order or with special modules can take several weeks including customs. For core switches and firewalls we recommend keeping a spare unit, or at least a spare power supply, in Laos.
What we see on sites:
- Power: voltage sags between 17:00 and 19:00 and rainy-season lightning kill more power supplies than software bugs do. A core switch should have two power supplies on two separate UPS feeds.
- Heat and dust: at mines and factories, use Catalyst IE industrial switches for points outside air-conditioned rooms, in cabinets with filters.
- People: engineers who know Cisco are easier to find in Vientiane than for most brands, but people with real SD-WAN and Catalyst Center experience are still few.
Sectors that usually choose Cisco: banks, foreign-owned mining companies, large hotels, and organizations whose overseas head office already sets the standard.
与其他方案对比
If you want everything managed from the cloud and have no one comfortable on the command line, look at Cisco Meraki, Cisco's own cloud-managed line. HPE Aruba makes sense when Wi-Fi and network access control matter more than switching. Huawei often comes in lower per port on large projects and has teams in the region, but check first whether your parent company or lender has a policy on the brand. Pick Cisco when your IT team already knows CCNA and you want a standard that is easy to staff.
产品线
- Catalyst
- Nexus
- Catalyst 8000 Edge
- Cisco Secure Firewall
- Duo
- Webex
- ThousandEyes
- Splunk
使用此品牌的解决方案
企业局域网与交换核心–接入架构的局域网，划分 VLAN，上联冗余，PoE 供电充足。一根插错形成环路的网线，再也不会让整栋楼断网。
企业 Wi-FiWi-Fi 6/6E/7，AP 点位依据实测部署。会议室满员也能用，走动通话不断线，采用 WPA3 加密。
分支机构 SD-WAN外省分支同时使用两条互联网线路，一条故障另一条数秒内接管，全程加密。
光纤骨干与园区互联楼层、楼宇和站点之间 10–100 Gbps 光纤互联。光纤不导电，雷击不会沿线路从一栋楼传到另一栋。
工业网络 (OT)耐粉尘、高温和振动的工业交换机，环网冗余、IT/OT 隔离，适用于工厂和矿山。
下一代防火墙 (NGFW)可识别应用和用户的防火墙，具备 IPS、网页过滤、HTTPS 检测和 VPN，按全功能开启的实际性能选型。
安全远程访问 (VPN/ZTNA)员工和外包人员通过 VPN 或 ZTNA 加 MFA 随时随地访问内部系统，只能看到所需内容。
零信任与网络准入控制 (NAC)借助 802.1X 和 NAC，在接入前验证每个用户和设备。插上网口不再等于能访问服务器。
IP-PBX 与 VoIP 电话系统企业 IP-PBX：分机、三语 IVR、呼叫转接、录音，以及老挝和泰国分支之间经 VPN 内部通话。
视频会议室一键开会的 Teams、Zoom 和 Google Meet 会议室，摄像头、麦克风、音箱和显示屏按会议室大小和声学条件选配。
网络监控 (NMS)所有设备、链路和互联网线路集中在一个屏幕，用户报障之前 IT 就已收到告警。
邮件安全通过过滤、SPF/DKIM/DMARC 和沙箱，拦截钓鱼邮件、冒充老板或供应商的诈骗邮件 (BEC) 及恶意附件。
呼叫中心具备 ACD 排队、IVR、录音、实时看板和在线聊天的呼叫中心，适用于银行、医院、物流和客服团队。常见问题
If the licence on our Cisco switches expires, will the network stop?
For on-premises Catalyst switches, traffic normally keeps flowing, but subscription features such as Catalyst Center analytics stop. Devices managed from the Meraki dashboard have stricter rules. The exact behaviour depends on the model and licence type, so get the answer in writing before you buy.
We still run Catalyst 2960-X switches. Do we need to replace them urgently?
That model stopped selling in 2022 and Cisco support ends in October 2027, after which there are no security patches and no RMA. It doesn't have to go today, but it belongs in next year's budget. The usual replacement is the Catalyst 9200 or 9200L.
Can we use Cisco switches with another brand of firewall, such as Fortinet?
Yes. VLANs, LACP, OSPF and 802.1X are open standards that both brands support. What you give up is shared management and reporting in one screen. Plenty of organizations in Laos run Cisco switching with a different firewall brand.
Should we choose cloud or on-premises management?
With many provincial branches and a small IT team, cloud helps a lot because you can see and fix things from Vientiane. If policy requires management data to stay in-house, or the internet link is unreliable, use Catalyst Center or an on-site controller. With the new Wi-Fi 7 access points you can switch later without buying new hardware.
所有品牌名称和商标归其各自所有者所有。除非另有明确说明，提及某品牌并不代表与其存在合作关系。产品均通过正规分销渠道采购。
发给我们建筑平面图或几张现场照片
我们会先询问一些细节，再给出初步设计方案。首次咨询免费，可用老挝语、泰语或英语，通过 WhatsApp 或 Facebook 主页联系。