Introduction to the Stratix 5800 Managed Switch

Introduction

The Stratix 5800 is the latest high-performance managed network switch in Rockwell Automation’s Stratix product line.

In this post, I’ll introduce the features of the Stratix 5800 and the applications that will benefit from using it.

Features

Modern OS

Stratix 5800 switches are based on Cisco’s IOS-XE platform, allowing both IT and OT personnel to configure them easily.

IT staff can use Cisco’s enterprise tools and OT staff can use Studio 5000 Logix Designer AOPs or the on-device Web UI interface, which is the replacement of the old Device Manager interface.

High-Performance

The Stratix 5800 is an all-gigabit switch platform that ensures high-speed, future-proof network infrastructure.

Modular Design

The Stratix 5800 is a modular switch. It can be extended using add-on expansion modules.

A fully expanded Stratix 5800 supports up to 26 ports with different combinations of copper, PoE (Power over Ethernet), and SFP (Small Form Pluggable) fiber connections.

This makes the Stratix 5800 very flexible for different applications and also ensures that network infrastructure is future-proof by supporting expansion as requirements change.

Switching and Routing

Stratix 5800 switches support both Layer 2 switching and Layer 3 routing. This makes it a good choice for the access and distribution layers in a network architecture.

Default Configurations

Stratix 5800 switches support default configurations through Express Set Up and Smart Ports for industrial automation.

This ensures that set up is easy and that performance is optimized for EtherNet/IP networks.

Premiere Integration

Like all Stratix switches, Stratix 5800 switches are part of the Integrated Architecture portfolio and support premiere integration with other products in the portfolio.

Add-On-Profiles (AOPs) and Module-Defined Data Types make it easy to integrate Stratix switches in Studio 5000 Logix Designer.

Faceplates make it easy to integrate Stratix switches with any of Rockwell Automation’s Visualization platforms like FactoryTalk View, View Design, and Optix.

Easy Replacement

Stratix 5800 switches can backup their configuration on an SD card allowing for easy replacement of failed switches.

Secure

Stratix 5800 switches feature enhanced security options including IEC 62445-4-2 certification to protect networks from cyber attacks.

Persistent DHCP

Stratix 5800 switches support persistent DHCP. This assigns IP addresses to devices on a per port basis and enables Automatic Device Replacement (ADR).

Integrated NAT

Stratix 5800 switches support Network Address Translation (NAT) for local IP address management and easy integration into larger networks.

Hardware

Base Modules

Now that we understand the key features of Stratix 5800 switches, let’s look at the hardware that makes up the platform.

There are 8 variations of the base module available. 2 are fixed switches. This means that they are not expandable with expansion modules. Modular variations support a single expansion module.

Each variation has 8 copper ports and 2 SFP slots which can be populated with copper or fiber SFPs. Some variations support PoE and PoE+.

Some variations are “advanced” switches. These switches have an FPGA added to support the high-performance advanced firmware features.

All of the Stratix 5800 switches have dual power inputs, two alarm inputs and one output, a ground connector, and an RJ45 and mini-USB console port.

They also have an SD card slot to backup the switch’s configuration. The 1784-SDHC8 is the only tested and authorized SD card for the Stratix 5800. This is a high-capacity card with higher performance and memory than the SD card used with Stratix 5400 and 5700 switches.

Stratix 5800 switches also have 2 USB ports that are located in the upper left corner under a cover. Using these ports, a USB device can be used as a bootable device in place of an SD card.

Base Options

The table below summarizes the different options available when ordering Stratix 5800 switches.

Expansion Modules

There are 10 different expansion modules available for the Stratix 5800. These expansion modules can be added to the right of a modular switch.

Just like the switches, expansion modules are classified as Standard or Advanced. Advanced expansion modules support advanced firmware features.

Expansion Module Options

The table below shows the range of expansion modules that are available.

Configuration Guidelines

Since there is a wide variety of switches and expansion modules available, I want to re-iterate the rules for pairing switches with expansion modules:

  • Non-modular switches do not support expansion modules
  • Modular switches support only one expansion module
  • Switches with standard features only support standard expansion modules
  • Switches with advanced features support standard and advanced expansion modules
  • Only PoE switches support PoE expansion modules

To make these rules more clear, you can refer to the table below which shows which modules are compatible with which switches.

Firmware

Now that we’ve talked about the Stratix 5800 hardware, let’s talk about the firmware that it runs.

There are two firmware options available. The standard firmware supports layer 2 switching and the advanced firmware supports layer 3 routing. You cannot change the firmware of a switch in the field.

Stratix 5800 switches utilize the new Cisco IOS-XE operating system. This operating system provides a new configuration GUI called WebUI which replaces the old device manager. As well as WebUI, configuration is still possible using the Command Line Interface (CLI) and Add-On Profile (AOP).

Although Stratix 5800 switches use a new operating system, they still support express set up, global macros, and smartports. These tools make it easy for OT professionals to get a switch set up and configured quickly.

The Stratix 5800 supports the IEC 62443-4-2 global security certification. This is the only consortium-based cybersecurity standard for industrial control systems and is the only standard backed by both end users and equipment vendors.

To receive this certification, the Stratix 5800 was evaluated by an externally accredited body.

Unlike other certifications that come with the product, the IEC 62443-4-2 certification requires the switch to be configured in a certain way to meet the standard. The requirements to meet the standard are covered in the switch’s user manual.

Layer 2 Firmware Highlights

Some of the main features supported by the Layer 2 firmware include;

Switching

  • REP
  • Spanning Tree Protocols
  • CIP Sync™ 1588 PTP v2
  • QoS (Quality of Service)
  • IGMP (v1, v2, v3) snooping, filtering and querier
  • VLANs with trunking
  • EtherChannel
  • Port thresholds – storm control
  • IPv6 support
  • Access control lists (ACLs)
  • Static and connected (Inter-VLAN) routing

Diagnostics

  • Duplicate IP detection
  • Syslog
  • Port mirroring (SPAN)

Security

  • MAC ID port security
  • IEEE 802.1x Security
  • AAA support (TACACS+, RADIUS authentication)
  • Encryption (SSH, SNMPv3, HTTPS)
  • Flexible NetFlow*
  • MACsec – 128
  • 62443-4-2 Certification

Management

  • EtherNet/IP™ (CIP™) interface
  • Express Setup and Smartports
  • DHCP per port
  • WEBUI, CLI
  • Integrated L2NAT*
  • SNMP
  • Support in FactoryTalk® Network Manager™

*Modular switch version only

Layer 3 Firmware Highlights

The layer 3 firmware supports all of the features of the layer 2 firmware and;

Static and Connected (Inter-VLAN) routing

  • Also available on layer 2 firmware

Dynamic routing

  • OSPF
  • EIGRP
  • BGPv4
  • IS-IS
  • RIPv2

Multicast routing

  • PIM

Redundant routing

  • HSRP

Policy-based routing

  • Policy-based routing (PBR)

IPV6 routing

  • RIPng
  • OSPFv3
  • EIGRPv6, IS-ISv6, PIMv6

Virtualization

  • VRF Lite

Security

  • MACsec-256
  • TrustSec (advanced hardware only)

Advanced Firmware Highlights

Finally, the additional features available on switches with advanced hardware include;

  • Parallel Redundancy Protocol (PRP)
  • Device Level Ring (DLR)*
  • TrustSec – layer 3 version only
  • High Availability Seamless Redundancy (HSR)*

*Available in future firmware update

Applications

Now that we have talked about the main features of Stratix 5800 switches, we can look at the applications that they are most suited for.

Migration

The Stratix 5800 is a good option for anyone looking to migrate from older Stratix 8000, 8300, 5700, and 5400 switches.

Migration guides are available to help determine which switch is the best for migration.

Future-Proof Applications

The Stratix 5800 is also ideal for applications that need to be “future-proof”. This is because it is an all-gigabit which will support higher network speeds in the future and because it is a modular platform that can be expanded as requirements change.

Special Requirements

Stratix 5800 switches may be a good solution for applications that have special requirements. Some example “special” applications are applications that require up to 24 PoE ports, applications that require a unique combination of copper, fiber, and PoE ports, or applications where gigabit interfaces are required for end devices.

Secure Applications

Finally, since Stratix switches comply with IEC 62443-4-2, they are an ideal choice for industries that have high cybersecurity requirements like utilities and critical infrastructure.

Wrap Up

In this post, I’ve introduced the Allen Bradley Stratix 5800 network switch from Rockwell Automation.

This switch is the latest product in the Stratix product family and introduces some new features including;

  • Support for Cisco IOS-XE and WebUI,
  • Modular build for flexibility,
  • IEC 62443-4-2 compliance for cybersecurity

These new features complement the feature set that come with every Stratix switch and make it OT friendly.

Mailing List

Get new posts delivered straight to your inbox every week. No spam, unsubscribe anytime.

© Copyright Ken Bourke 2025