You will need "Sophos Switch CSxxx-xxxx" + "Support & Services", the switch by default is on VLAN1, and will accept DHCP, or if DHCP fails has a fallback default IP, if the switch is able to initially get an IP address from DHCP, and you put the Serial Number in Central within a 15-miinute window, then your switch is managed from Central.

You can pass down configurations, or group policies for groups of switches from Central, manage firmware, port naming, configuration and backups.

More features will be coming to Switch Central over time, until everything is done entirely from Central.  You also have the ability to send batch CLI commands to configure or request info from the switches via Central.

If you want to change the native or management VLAN, you would make the adjustment in Central by creating your VLANS, and then under Networks assigning the Management VLAN to a network.  For your use case above, just add VLANS from Central after the swithc is registered.  Adding VLANs from the switch first will not sync back up to Central (yet).

Matthew Ritchie said:

put the Serial Number in Central within a 15-miinute window, then your switch is managed from Central.

But that's only if the Support and Services subscription is purchased? What are the options for home users, is the Support & Services license still enforced and required with the home license?

Any idea how much this support licence would cost per year for one switch?

Ok, this site Avanet states here www.avanet.com/.../

Subscription price

Sophos sets the price for service and support here at 10% of the hardware price, and at 8% for a 3-year license.

Admittedly, at the current time, the features of the Sevice are very weak. It’s a bit like choosing Autopilot when you buy a Tesla. First and foremost, you buy the potential that will follow. In the case of the switch, these would be features such as Synchronized Security or XDR/MTR functions.

Another user also asked where do we download the firmware updates from to install locally from the switch's web UI?

From the site:

If the subscription is no longer renewed, there is of course no more telephone support, the warranty service is standard again, the Central Management is in read-only mode and the firmware updates have to be installed locally again.

If it's true that support cost is 10% of the hardware cost, then $50 a year is not too much to complain about. And if firmware can be installed manually even without the support subscription, where do we get these firmware updates from? 

I bought the switch from Corporate Armor, but wasn't aware the support subscription was required. oops... home users have a harder time finding out this info and who these partners are.

Do you have a Central Dashboard set up? Check in "Protect Devices" do you see the following section?

Remote PoE port power cycle is a must-have feature for a cloud managed switch.

Right now, an AP reported offline. I cannot see its IP address in switch MAC table either. I have no idea what's going on. All I can do is to power cycle the port, and hope the AP will come back. Right now, I have to VPN into the network and use the local GUI to power cycle the port.

I agree with you. A cloud managed switch like Meraki switch is very helpful.

 myu_satech lol, ok, this is a bit of post hijacking sir, but this would be handled from Central as well.

Select the switch in question in Central, select "Run Commands"
#show power inline GigabitEthernet 0/1 (or port you identified as needing the cycle)
# conf t
# interface GigabitEthernet 0/1
# power reset 

Press Enter to send the command to the switch and you're done, just verify the LLDP/CDP info from the port once its back up. This would all be handled from Central, and also across large distribution of switches if you had to, not that you would often.

Also, be sure you dont let your license expire with Meraki ok, hate to have an entire organization go offline because you didn't pay...sounds like ransomware, but somehow people believe it isn't 

Glad to know it can be done remotely.

Another commonly used feature -- I assume can be done via cli, but will be for sure better if GUI can do that. Users often need to change where they connect VoIP phone. So, it will be very handy if I can set per port voice vlan via central.

Yep, its pending QA at the moment, but it will be there for you shortly for Voice VLAN and Auto Voice VLAN.

That's great!

How about existing configurations?

I have tested and know local config won't sync back to central. When that feature is available, shall I replicate my local settings on Central, then Central write back, and then I can manage remotely?

Matthew Ritchie said:

Do you have a Central Dashboard set up? Check in "Protect Devices" do you see the following section?

I have yet to receive the switch. It is still in transit, so I do not have the switch yet to test the features out. But If it can be managed in Sophos Central (with the support subscription costing 10% of the price of the switch) then I need to purchase the Support subscription, so I'd have to reach out to to a Sophos partner, which would be Corporate Armor.

Yes, you could work with Corporate Armor to get that. What model switch did you order i can grab you the right SKU for the Support.

SOPHOS CS110-24 SWITCH24 PORTUS POWER CORD C12ATCHUS

the non PoE model.

Firewalls.com has the 2-year subscription for $119.02 for that model. I also asked Corporate Armor for a quote through their website.

SOPHOS CS110-24 SWITCH24 PORTUS POWER CORD C12ATCHUS

the non PoE model.

Firewalls.com has the 2-year subscription for $119.02 for that model. I also asked Corporate Armor for a quote through their website.

C12A3CEAA - 3 Years Support
or
C12A2CEAA - 2 Years Support

Firmware will be available either way in Central, support or not, for manual download and application on your switch.

Thanks. The two years support looks like the one to get. What is the difference between the Support, and the extended support?

Theres only the one type of Support & Services for the Switches which is available in 1, 2, 3 or 5 year terms.

Extended Support is for Endpoint and Server operating systems such as Windows 7, Server 2008, Server 2012, Server 2012 R2 that Microsoft has ended long-term support for, but Sophos will continue to provide support for with the Extended Supp. license.