Choosing the wrong network switch costs more than the purchase price. An underpowered PoE budget shuts down IP phones and cameras. A Layer 2 switch where Layer 3 routing was needed means an additional router purchase and added complexity. A 24-port switch bought without growth headroom forces a forklift upgrade within 18 months. This guide covers the five decisions that determine whether a network switch fits your environment or fights it, and how to source enterprise-grade switches from local stock at competitive pricing through TFI in Johannesburg.
Managed vs Unmanaged: Why Enterprise Means Managed
Unmanaged switches are plug-and-play. No configuration, no VLANs, no monitoring. They work for a home office or a conference room with five devices. For anything beyond that, managed switches are non-negotiable. VLANs segment traffic. QoS prioritises voice and video. 802.1X port authentication controls who connects to the network. SNMP monitoring tells you what is happening on every port. Without these, you are running blind.
Smart managed switches sit between the two. They offer basic VLANs and QoS through a web interface at a lower price point. For a 20-person office with straightforward needs, a smart managed switch like the Cisco CBS250 or HP Aruba Instant On can be the right fit. For anything with multiple VLANs, security policies or stacking requirements, full management is the baseline.
Layer 2 or Layer 3: Where Each Fits
A Layer 2 switch forwards traffic based on MAC addresses within a single VLAN. A Layer 3 switch does everything Layer 2 does plus routes IP traffic between VLANs, supporting OSPF, BGP and static routes. The practical question: does your network need inter-VLAN routing?
If you have multiple VLANs (voice, data, guest, IoT) and need traffic to move between them, you need Layer 3 somewhere. The standard approach: Layer 3 at the core or distribution layer, Layer 2 at the access edge. A campus network with 200 users might run Cisco Catalyst 9300 Layer 3 switches in the comms room and Catalyst 9200 Layer 2 switches on each floor. The 9300 handles routing. The 9200s handle port density and PoE.
Port Speed and PoE: Getting the Numbers Right
For standard desktops and VoIP phones, 1 Gigabit access ports are sufficient. For Wi-Fi 6 and 6E access points, multi-gig ports (2.5G or 5G) prevent the wireless AP from becoming a bottleneck. Uplinks between switches should be 10G minimum. Data centre connections need 25G or 100G.
PoE is where budgets go wrong. A switch spec might say “PoE+ on all 48 ports” but the total PoE power budget might only support 30 of those ports at full draw simultaneously. Calculate total watt requirements across all powered devices before purchasing. PoE (802.3af) delivers 15.4 watts per port for basic phones. PoE+ (802.3at) delivers 30 watts for cameras and wireless APs. PoE++ (802.3bt) delivers 60 to 90 watts for video conferencing units and next-gen access points. According to Cisco’s PoE documentation, checking the total power budget is the single most overlooked step in switch procurement.
Five Brands, One Supplier
TFI supplies new and refurbished switches from all five major enterprise vendors. Cisco (Catalyst for campus, Nexus for data centre) is the broadest portfolio with the deepest ecosystem. HP Aruba (CX series) offers enterprise features at a more competitive price point. Juniper (EX series) leads in automation and operational simplicity. Arista (7000 series) dominates data centre switching with the lowest latency. Fortinet FortiSwitch integrates security at the switch port for organisations already running FortiGate firewalls.
The right brand depends on the environment. A Cisco shop with existing Catalyst Center management stays with Cisco. A cost-conscious mid-market enterprise evaluates Aruba. An ISP with automation requirements looks at Juniper. A data centre buildout considers Arista. TFI advises based on the use case, not the margin.
New or Refurbished: How to Decide
Refurbished enterprise switches from TFI save 50 to 90 percent off list price. The hardware is identical to new. It runs the same firmware. It forwards packets at the same rate. A refurbished Catalyst 9300 that costs R15,000 to R40,000 from TFI lists at R55,000 to R120,000 new. For access layer deployments, branch offices, lab environments and DR spares, refurbished is the financially rational choice. For SD-WAN, Meraki cloud-managed deployments, or compliance mandates requiring authorised-channel procurement, new is the right call. TFI carries both.
Request a quote from TFI. New or refurbished switches from Cisco, HP Aruba, Juniper, Arista and Fortinet, from local stock in Johannesburg.