You will need "Sophos Switch CSxxx-xxxx" + "Support & Services", the switch by default is on VLAN1, and will accept DHCP, or if DHCP fails has a fallback default IP, if the switch is able to initially get an IP address from DHCP, and you put the Serial Number in Central within a 15-miinute window, then your switch is managed from Central.

You can pass down configurations, or group policies for groups of switches from Central, manage firmware, port naming, configuration and backups.

More features will be coming to Switch Central over time, until everything is done entirely from Central.  You also have the ability to send batch CLI commands to configure or request info from the switches via Central.

If you want to change the native or management VLAN, you would make the adjustment in Central by creating your VLANS, and then under Networks assigning the Management VLAN to a network.  For your use case above, just add VLANS from Central after the swithc is registered.  Adding VLANs from the switch first will not sync back up to Central (yet).

Matthew Ritchie said:

put the Serial Number in Central within a 15-miinute window, then your switch is managed from Central.

But that's only if the Support and Services subscription is purchased? What are the options for home users, is the Support & Services license still enforced and required with the home license?

Any idea how much this support licence would cost per year for one switch?

Ok, this site Avanet states here www.avanet.com/.../

Subscription price

Sophos sets the price for service and support here at 10% of the hardware price, and at 8% for a 3-year license.

Admittedly, at the current time, the features of the Sevice are very weak. It’s a bit like choosing Autopilot when you buy a Tesla. First and foremost, you buy the potential that will follow. In the case of the switch, these would be features such as Synchronized Security or XDR/MTR functions.

 myu_satech lol, ok, this is a bit of post hijacking sir, but this would be handled from Central as well.

Select the switch in question in Central, select "Run Commands"
#show power inline GigabitEthernet 0/1 (or port you identified as needing the cycle)
# conf t
# interface GigabitEthernet 0/1
# power reset 

Press Enter to send the command to the switch and you're done, just verify the LLDP/CDP info from the port once its back up. This would all be handled from Central, and also across large distribution of switches if you had to, not that you would often.

Also, be sure you dont let your license expire with Meraki ok, hate to have an entire organization go offline because you didn't pay...sounds like ransomware, but somehow people believe it isn't 

Glad to know it can be done remotely.

Another commonly used feature -- I assume can be done via cli, but will be for sure better if GUI can do that. Users often need to change where they connect VoIP phone. So, it will be very handy if I can set per port voice vlan via central.

Yep, its pending QA at the moment, but it will be there for you shortly for Voice VLAN and Auto Voice VLAN.

That's great!

How about existing configurations?

I have tested and know local config won't sync back to central. When that feature is available, shall I replicate my local settings on Central, then Central write back, and then I can manage remotely?

Matthew Ritchie said:

Do you have a Central Dashboard set up? Check in "Protect Devices" do you see the following section?

I have yet to receive the switch. It is still in transit, so I do not have the switch yet to test the features out. But If it can be managed in Sophos Central (with the support subscription costing 10% of the price of the switch) then I need to purchase the Support subscription, so I'd have to reach out to to a Sophos partner, which would be Corporate Armor.

Yes, you could work with Corporate Armor to get that. What model switch did you order i can grab you the right SKU for the Support.

SOPHOS CS110-24 SWITCH24 PORTUS POWER CORD C12ATCHUS

the non PoE model.

Firewalls.com has the 2-year subscription for $119.02 for that model. I also asked Corporate Armor for a quote through their website.

C12A3CEAA - 3 Years Support
or
C12A2CEAA - 2 Years Support

Firmware will be available either way in Central, support or not, for manual download and application on your switch.

Thanks. The two years support looks like the one to get. What is the difference between the Support, and the extended support?

Theres only the one type of Support & Services for the Switches which is available in 1, 2, 3 or 5 year terms.

Extended Support is for Endpoint and Server operating systems such as Windows 7, Server 2008, Server 2012, Server 2012 R2 that Microsoft has ended long-term support for, but Sophos will continue to provide support for with the Extended Supp. license.

Theres only the one type of Support & Services for the Switches which is available in 1, 2, 3 or 5 year terms.

Extended Support is for Endpoint and Server operating systems such as Windows 7, Server 2008, Server 2012, Server 2012 R2 that Microsoft has ended long-term support for, but Sophos will continue to provide support for with the Extended Supp. license.