Cisco Catalyst 2960-X Replacement: What the 9200 Migration Actually Costs

Written and maintained by Haink's network infrastructure team · Verified against Cisco bulletins and data sheets, 22 August 2026 · authorized-channel, serial-verified

The Catalyst 2960-X is the most widely deployed access switch Cisco ever shipped, and replacing it looks simple: a 48-port PoE switch for a 48-port PoE switch. It is not simple, and the reason has almost nothing to do with the switch. Three things change underneath the swap — the licensing model, the stack fabric, and the configuration — and each of them costs real money or real hours that a like-for-like quote will not show.

What replaces what

The 2960-X and the 2960-XR are covered by two separate Cisco bulletins with identical dates but different migration products. That distinction matters, because it is not a marketing split — it tracks a real capability difference.

The practical difference between the two targets:

One constraint that catches people mid-project: 9200 and 9200L cannot stack together. Cisco's StackWise documentation is explicit — the stacking bandwidths differ, so mixing the models in one stack is not possible. If a site has a mix of 2960-X and 2960-XR in the same wiring closet feeding one stack, the replacement has to standardise on one family for that stack.

The licensing change is the migration

This is the item that moves the number on the quote, and it is structural rather than incremental.

On the 2960-X the software was in the switch. LAN Lite, LAN Base or IP Lite came baked into the part number, perpetually, with no ongoing cost. You could not upgrade between them — Cisco's data sheet says plainly that LAN Base cannot be upgraded to IP Lite — but you also never paid again.

On the Catalyst 9200 the licence splits in two, and only one half is perpetual:

Cisco's Catalyst 9200 ordering guide leaves no ambiguity: "The subscription license, which comes with a perpetual license, is required with a hardware purchase." And the tiers have to line up — "A software term license aligning with hardware SKU suffix (-E or -A) is mandatory" — so an Advantage-suffix switch cannot be paired with an Essentials subscription to save money.

What happens when the subscription expires

The switch does not stop working, and any vendor telling you otherwise is selling fear. What it does is lose the add-on features and anything that depends on Catalyst Center. Cisco's configuration guide describes the mechanism: add-on licences "can be deactivated, followed by a switch reload, to discontinue use. The switch then continues operating with base license capabilities."

Note the reload. Falling back to the perpetual licence is a documented, supported path, but it is not seamless — it requires a maintenance window on every switch in the estate. Worth knowing before you plan a three-year subscription across two hundred access switches on the assumption that you can simply let it lapse.

The stack fabric does not carry over

Every part of the 2960-X stacking arrangement is dead on arrival. Cisco's StackWise white paper states it directly: stacking cables "are not backward compatible with the predecessor Cisco Catalyst 2960-X Series Switches."

So the stack modules and every stack cable are new line items. On a 200-switch estate in stacks of four, that is fifty stack kits and the cables to go with them — routinely forgotten in a first-pass budget because the old ones are sitting right there in the rack.

Two details worth carrying into the design. First, LAN Lite 2960-X models never stacked at all, so any site standardised on the -LL SKUs is not losing a stack in the migration. Second, on the old platform a single FlexStack-Extended module anywhere in a stack dropped the whole stack to 40 Gbps — if that is the current state, the real-world uplift from StackWise-80 is larger than the spec sheet comparison suggests.

Power: better, and simpler than it was

This is the part of the migration that improves. The 2960-X had a single fixed power supply; redundancy meant buying an external Cisco RPS 2300 shelf. Only the 2960-XR supported field-replaceable dual supplies.

Every Catalyst 9200 and 9200L SKU supports dual internal field-replaceable supplies, and the second one can be added later rather than at order time. It also doubles the PoE budget:

The trap: the 9200 is still PoE+ only

The budget grows; the per-port standard does not. Catalyst 9200 and 9200L deliver IEEE 802.3at PoE+ at up to 30 W per port. There is no UPOE, and no 802.3bt.

That matters if wireless is anywhere in the same plan, because Cisco's Wi-Fi 7 access points need 802.3bt to run at full specification — a CW9176I on a PoE+ port drops to a 2.5G uplink and 2×2 on 2.4 GHz. Replacing 2960-X with 9200 today and refreshing the wireless in eighteen months means buying the access layer twice. Where both refreshes are in the same three-year window, the correct target is usually the Catalyst 9300 with UPOE, not the 9200 — the full arithmetic is in the Wi-Fi 6 end-of-sale guide.

The configuration will not copy across

The 2960-X runs IOS 15.x; the 9200 runs IOS-XE. The command sets overlap enough to be dangerous — most of a config will paste in and appear to work. The parts that do not are these:

• Uplink port numbering changes. Downlinks look the same (GigabitEthernet1/0/1), but an uplink that was Te1/0/1 on the 2960-X is Te1/1/1 on the 9200. This is the single most common mechanical break.
• The management interface moves into a VRF. FastEthernet0 with no VRF becomes GigabitEthernet0/0 in Mgmt-vrf by default — so every SNMP, syslog, TACACS and NTP source-interface statement needs revisiting.
• MTU syntax changes from system mtu jumbo to system mtu, and per-interface ip mtu appears.
• CoPP is on by default on the 9200 with default policing rates, where the 2960-X had it off. Control-plane traffic that flowed freely before can be policed afterwards.
• QoS defaults invert. The 2960-X trusts nothing by default; the 9200 trusts everything. Classification and marking move from ingress-only to ingress and egress, queueing goes to 2P6Q3T, and WRED becomes available.
• IP Device Tracking is gone, replaced by SISF. Legacy ip device tracking commands do not exist on a fresh 9200 config, which breaks copy-pasted dot1x and IPv6 first-hop-security blocks.
• Boot mode defaults to install rather than bundle, changing the software upgrade procedure.

Budget engineering time for a config rewrite per switch template, not per switch — but do budget it. On a multi-site estate this is usually a larger line than the stack cables.

What to actually order

1. Split the inventory by feature set, not by model name. LAN Lite, LAN Base and IP Lite land on different targets, and the -LL models were never stackable.
2. Decide the wireless question first. If Wi-Fi 7 is in the same budget cycle, price the Catalyst 9300 instead of the 9200 and stop the conversation there.
3. Pick the licence tier before the hardware SKU, because the suffix has to match: an -A switch requires an Advantage subscription.
4. Choose the subscription term deliberately. Three, five and seven years are all available, and the per-year cost differs. Seven years on an access switch with a seven-year life is usually the cheaper arithmetic.
5. Add the stack kits and cables — one kit per switch pair, none of the old ones carry over.
6. Add second power supplies where the PoE load justifies 1,440 W, or where the 2960-XR being replaced had redundancy that should not be lost.

Frequently asked questions

Can I still buy Catalyst 2960-X?

Not from Cisco — end-of-sale was 31 October 2022 and last ship 30 January 2023. Channel and secondary-market inventory still exists, and extending an estate on it is a legitimate strategy given support runs to October 2027. The constraint is that new service attachment closed in October 2023, so uncovered units bought today cannot be brought under a Cisco contract.

Do I have to buy a subscription with the Catalyst 9200?

Yes. Cisco's ordering guide states that the subscription licence is required with a hardware purchase, and that the term licence must align with the -E or -A hardware suffix. Terms are three, five or seven years.

What happens to a Catalyst 9200 when the DNA subscription runs out?

It keeps switching. You lose the add-on features and Catalyst Center integration; the documented path is to deactivate the add-on licence and reload, after which the switch runs on its perpetual Network Essentials or Advantage licence. Plan the reload — it is not seamless.

Can I reuse my FlexStack modules and cables?

No. Cisco states that the 9200 stacking cables are not backward compatible with the 2960-X. Stack kits and cables are new line items on every stack.

Can I stack a 9200 with a 9200L?

No — the stacking bandwidths differ (160 Gbps versus 80 Gbps) and Cisco documents that the models cannot be mixed in a stack. Standardise per stack, not per site.

Should I go to the 9200 or straight to the 9300?

The 9300 if wireless is being refreshed in the same cycle, because only the 9300 offers UPOE and 802.3bt for Wi-Fi 7 access points. The 9300 also brings StackPower and larger tables. The 9200 is the right answer for a pure wired access refresh where PoE+ is sufficient and will remain so.

Is Aruba or another vendor worth pricing here?

It is worth pricing precisely because the Cisco licensing step-up is what makes this refresh expensive. When the subscription is what breaks the budget rather than the hardware, a competitive quote changes the conversation — see the Aruba buying guide. We supply both.

Related

• Cisco end-of-life guide — every family currently in migration and the binding dates
• Wi-Fi 6 AP end-of-sale — why the wireless refresh decides your switch choice
• How to choose Cisco switches, routers and firewalls
• Enterprise switches · Networking overview · Cisco stock and lead times
• Cisco vs Juniper switching · HPE Aruba buying guide
• Research institution network — 52 Cisco switches, 2,400 ports, eight buildings
• Gray-market and channel risk — relevant when sourcing discontinued 2960-X

Sources

• Cisco — Catalyst 2960-X end-of-life bulletin · 2960-XR bulletin
• Cisco — Catalyst 2960-X data sheet (feature sets, PoE budgets, RPS 2300)
• Cisco — Catalyst 9200 ordering guide (mandatory subscription, terms, uplink modules)
• Cisco — StackWise architecture (cable incompatibility, 9200/9200L cannot mix)
• Cisco — Available licences on Catalyst 9000 (perpetual vs add-on, deactivate and reload)
• Cisco — "Migration Guide from Cisco Catalyst 2960-X Series to 9200 Series", document C07-741480-01, for the configuration differences. Cisco has withdrawn this document from publication; the equivalent live document for the adjacent models is the 2960-CX/3560-CX to 9200CX migration guide.