Cisco Catalyst 9000 Switching: Foundation For An Entirely New Era in Intent-Based Networking

Cisco Catalyst 9000 Switching
Foundation for an entirely new era in intent-based networking
EN Switching Product Management

Requirements for the modern
campus network
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Enterprise trends – Scale, complexity, and security
AWS
Windows 10
Mobility Advanced Cloud
3.64 Devices per person persistent threats 100K Devices per admin
Changing workforce and Agility consumption models
hyper-connected apps
Enterprise IoT
7.5B Things
Infrastructure convergence
Vulnerable endpoints
The security challenge
Motivated and targeted adversaries Increased attack surface Increased attack sophistication
• State sponsored • BYOD blurring perimeter • Advanced persistent threats
• Financial and espionage motives • Public cloud services • Encrypted malware
• $1T cybercrime market • Enterprise Internet of Things (IoT) • Zero-day exploits
Scale: Too many alerts Complexity: Securing everything Sophistication: Keeping up against attackers
100% 200 days 60 days $3.8M

Of customers lack network Industry average Industry average Average cost
segmentation at time of breach time to detect a breach time to contain a breach of a data breach
Diverse endpoints and applications served across a
multidomain network
Classes of endpoints Classes of applications
Xerox
Office 365
SAP
User devices IT services Non-IT services (On-premises or (Public cloud hosted)
(Laptops, phones, PCs) (Printers, audio, video, displays) (Lighting, alarms, surveillance) private cloud hosted)
• Consistent access across wired and • Service discovery for printing, • Application Visibility and
• Network and power High
wireless Apple TV Control (AVC)
Availability (HA) for emergencies
• Granular Quality of Service (QoS) • Network timing for audio • Seamless experience with
• Traffic monitoring for surveillance
and AVC and video on-premises and cloud
Network requirements
Increased scale and complexity, and growing security threats

Key challenges for traditional networks
Difficult to segment Complex to manage Slower issue resolution
Ever-increasing number of users Multiple steps, Separate user policies for

and endpoint types user credentials, complex wired and wireless networks
interactions
Ever-increasing number of Unable to find users
VLANs and IP Subnets Multiple touch points when troubleshooting
Traditional networks cannot keep up!
Need for intent-based networking
Digital business Digital network

Learning
Business
goals
Intent
Context
Insights
Mobile Security IoT MultiCloud Security
Powered by intent. Informed by context.
SD-Access:
Cisco’s next generation
enterprise architecture
Cisco Software-Defined Access (SD-Access)
Cisco DNA Center™
Identity-based policy
and segmentation
Segmentation Automation Assurance Security policy definition decoupled from VLAN
and IP address
Automated network fabric

Single fabric for wired and wireless with workflow-
based automation
Insights and telemetry

User mobility
Analytics and insights into user and
Policy stays with user application behavior
IoT network Employee network

Secure onboarding of any user, device, or thing
Segmentation and access control
Group 1 Group 2
Employee virtual network

Before SD-Access Users After SD-Access
• VLAN and IP address based • No VLAN or subnet dependency for
segmentation and access control
• Create IP-based Access Control Lists (ACLs) Devices Group 3 Group 4
for access policy • Define one consistent policy
Drag policy
to apply IoT virtual network
• Deal with policy violations and • Policy follows identity
errors manually Apps
Group 5 Group 6
Guest virtual network
Completely automated Group-based policy Policy follows identity
Consistent wired and wireless management
A single network fabric for mobility
Before SD-Access After SD-Access

• Repeated policy work for wired • Consistent management across wired and
and wireless wireless
• Roaming issues across Layer 3 domains • Optimal traffic flows with
seamless roaming
• Chase down IP addresses for troubleshooting
• Seamless roaming in fabric and nonfabric
domains
Seamless Roam Policy stays
roam is Layer 2 with user
Simplified provisioning Campuswide roaming Wired and wireless consistency
From network data to business insights
Network telemetry Complex event Correlated Guided
contextual data processing insights remediation
Traceroute 001110101100110
Complex
Clients Baseline
Syslog Netflow 1010110010 correlation
AAA Router DHCP 00101101

Metadata
Telnet Wireless CLI 0110100 extraction
NBAR2 InfoBlox 1101101
OI DNS
D IPSLA Bonjour Ping 00101101 Steam
SNMP IPAM MIB 10101100110 Processing Application Network
O365 AppD™ 101011000110011
CMX
More than 100 actionable insights

Everything as a sensor
Client | Applications | Wireless | Switching | Routing
Cisco Catalyst 9000 Switching
First in enterprise
Open Cisco IOS XE • x86 CPU with application hosting
Converged • Cisco UADP programmable
application-specific integrated circuit (ASIC)
ASIC • Software patching
UADP ASIC
Unmatched in industry
Single image • High availability
• Multigigabit density
• Cisco UPOE® scale
Common • 100G Ethernet
licensing • 25G Ethernet
Future ready
• Wi-Fi 6 (IEEE 802.11ax) ready
Security IoT Convergence Mobility Multicloud
Foundation of intent-based networking

Machine-centric intelligence
Programmable intent
Secure containers Programmable pipeline Model-driven APIs

Application hosting Flexible tables Streaming telemetry
x86
Open and
x86 multicore CPU UADP 2/3 extensible Cisco IOS XE
Patching | ISSU | Cisco StackWise Virtual
Speed and Power over Ethernet (PoE) leadership
Cisco Catalyst 9000 switches at a glance
Enabling a new era of intent-based networking
Secure IoT Convergence Mobility Cloud
• Encrypted Traffic Analytics • Constrained Application Protocol • Fabric-enabled wireless • DevOps toolkit
• MACsec link encryption (CoAP) • Embedded Cisco Catalyst 9800 • NETCONF/YANG models
• Trustworthy solutions • Cisco DNA Service for Bonjour Series wireless controller • Streaming telemetry
• Group-based policy • Perpetual PoE • Unified control and policy • Patching and Graceful Insertion
• IEEE 1588 Audio Video • Wired and wireless and Removal (GIR)
• Full Flexible NetFlow
Bridging (AVB) guest access • Application hosting
Software and hardware Innovations

• Cisco Catalyst 9600 Series switches
Built on a Lead modular core
modern modular • Cisco Catalyst 9500 Series switches
OS (Cisco Lead fixed core
IOS XE) and • Cisco Catalyst 9400 Series switches
programmable Lead modular access
ASIC • Cisco Catalyst 9300 Series switches
Lead fixed access
• Cisco Catalyst 9200 Series switches
Entry-level fixed access
Cisco Catalyst 9000 family secures your network against
breaches from within
Discover suspicious
Capture traffic Redirect traffic Quarantine threats
activity
ETA Visibility Incident response Quarantine

Automated provisioning of NetFlow Automated traffic copy using Security Automated service Automated quarantine based on alert
for Encrypted Traffic Analytics (ETA) Group Tag insertion severity without VLAN, IP,
with Stealthwatch® (SGT)-based ERSPAN or firewall rule change
Cisco DNA Services

Center
SD-Access Users Lighting system
Segmented endpoints Cisco ISE
Simplified, authenticated access
Full access context and visibility Cisco Catalyst 9000 family
Guests Bonjour service
Media Building control
Securing the device Securing network traffic Securing the applications

Cisco Catalyst 9000 augments Cisco’s leadership in IoT
IBN expands IoT endpoints with Security, Visibility, Scale and Cloud tethering
Cisco and
New partner cloud
802.3bt* services for
control
Type 4
90W Cisco UPOE+©
UPOE+©
(low voltage) New
Devices
30 - 60 Watt devices 90 Watt devices
Sensor Wall Network

Powered PTZ UHD Large Video
(light, motion, switch
Cameras Displays HVAC VAV’s
CO2/CO, etc.) Light arrays
Connect Classify Policy Integrate

• Extended connectivity with • Device classification and profiling • Secure Virtual networks and • “Thing” connectivity management
SDA Extended node solutions with ISE segmentation of IoT from IT with SD- with Cloud IOT services
• CoAP to access lights and other sensors • Emerging standards support for access Access • Container-hosted Cloud-tethered
for lighting control control (ex: Manufacturers Usage • Scalable group-based policies apps on open Cisco IOS
Description [MUD]) XE Software
End-to-end solution managed by central IT team that lowers TCO

*Type 4 UPOE+ shipping on Catalyst 9400 and Type 3 shipping on Catalyst 9300.
Type 4 UPOE+ on 9300 is on roadmap. Catalyst 9200 is PoE+.
90W UPOE+© standardization is enabling a growing
ecosystem of devices
UPOE+© Standardization Growing ecosystem
UPoE Powered Compact
switches
802.1AC Access Points New
VOIP Phones
90W
USB-C Dongle POE Displays Network HVAC VAV’s
60W UPOE+© Touchscreen IP Cameras Powered Light
PCs
30W UPOE
PoE+ E
IEE bt
15W 802
.3
PoE Badge Facial
Readers Recognition
Systems
2018 UPOE Powered Compact Nurse call
CBRS Biometric
2011 Switches systems
Private LTE
Environmental
Door Locks IP Call Tower
Sensor Hubs
2009
2003 IT OT
Cisco validated solutions with 90W device eco-system

• 802.3bt complements Cisco UPOE by adding 4 new classes of devices
C97-738949-03 © 2019 Cisco and/or its affiliates. All•rightsSafety measures
reserved. Cisco Public ensure up to 90W of power is safely delivered
Cisco Catalyst 9000 innovations
Next-generation mobility
Future-ready for performance and scale
Built for
• 802.11ac Wave 2 optimized: Support for the industry’s highest densities of
mobility Wave 2 access points in 1 rack unit
• Wi-Fi 6 / 802.11ax support: Dense 5Gbps downlinks model
• Consistent architecture with controller options on appliance,
embedded in Cisco Catalyst 9000 family switch or VM
• Distributed data plane and optimized for roaming
Policy-based segmentation for IoT,

wired, and wireless
• Next-Generation Network-Based Application Recognition (NBAR2):
Visibility into wired and wireless
• Secure fabric: Virtual networks and micro-segmentation
Optimized guest deployment for branches

and at lower TCO with embedded Cisco Catalyst 9800
Built for scale and security
Benefits Future ready for lower TCO Series wireless controller
• Simplified guest and mobility tunneling, no dedicated guest controller
Cisco Catalyst 9000 enables cloud-ready networks
Cloud hosting Cloud connectivity

• Automation assurance policy • Private and public cloud
Built for SaaS colocation
cloud
Analytics On-box app hosting

• Streaming telemetry • Monitoring security IoT
• Network monitoring
DevOps toolkit High availability

• Zero-touch provisioning • Patching, GIR, In-Service
Flexibility, operational simplicity,
Benefits and optimized cost • Model-driven programmability Software Upgrades (ISSU)
• Server management tools
Cisco Catalyst 9000 portfolio
Cisco Catalyst
Cisco Catalyst 9600 Series
9400 Series Cisco
Cisco Catalyst Catalyst Cisco Catalyst
9300 Series 9000 9500 Series
Cisco Catalyst
9200 Series
switch
platform
Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst
2960-X/XR Series 3650/3850 Series 4500E Series 3850F/4500-X 6840-X/6880-X 6807-XL/6500-E
Access switching Backbone switching

Cisco Catalyst 9600 Series switching
Powering the cloud-scale campus
Most programmable Purpose built for

Highest ACL Scale
ASIC in Industry Powered by
UADP 3.0 and
Open Cisco
Intent-based
IOS XE
Networking
Designed for campus SD-Access, VXLAN BGP Mission-critical

25G dual-rate optics EVPN, MPLS VPN resiliency
25.6 Tbps switching capacity

Flexible speeds:
10G, 25G, 40G, 100G Lowest TCO
Flexible Netflow MACsec-256 link encryption
Ready for Cisco Catalyst 6500 and 6800 Series migration

New generation of purpose-built modular core/aggregation switches
Extending Cisco Catalyst 6000 Series
Powered leadership in modular core
by
6-slot (8RU) chassis: • 7.5x throughput per slot
UADP 3.0 25.6 Tbps • 3x port density (40G)
• 4x CPU
Security
Supervisor-1: • No oversubscription
2.4 Tbps per slot
Cisco Catalyst 9000 leadership
Fiber line cards
UADP 3.0
• 48p x 25G/10G(/1G*)
Cisco IOS XE Software
• 24p x 40G/12p x 100G
Resiliency SD-Access
Copper line cards
• 48p x mGig*(Non-PoE) x86 CPU and containers
MACsec-256 on all ports/speed at line rate

Cisco StackWise Virtual*
Model-driven programmability and

Dual Serviceable 2000W AC and DC 240 GB, 480 GB, streaming telemetry
Lowest TCO Fan Tray Power Supplies 960 GB SSD storage
* Roadmap
New generation of purpose-built fixed core/aggregation switches
High Performance switches (UADP 3.0)
Standard switches 100G/40G SKUs 25G/10G SKUs Catalyst 9500 Series high performance
(UADP 2.0) switches (UADP 3.0)
40G/10G SKUs C9500-32C: 32x 100G C9500-48Y4C: 48x 10/25G +

Throughput (3.2 Tbps)
4x 40/100G Performance: 3x UADP 2.0
Scale: 3x UADP2.0
9500-16X
C9500-32QC: 32x 40G/16x 100G C9500-24Y4C: 24x 10/25G + 4x 1G, 10G, 25G, 40G, 100G
9500-40X
40/100G Pluggable SSD storage for app hosting – 1 TB
9500-24Q
Customizable templates
9500-12Q
Breakout support (4X 10G, 4X 25G) on
240GB, 480GB, 650W AC 930W DC 1600W AC/DC C9500-32C
Cisco Catalyst
960GB SSD storage Cisco StackWise Virtual
9500 Series
Cisco Catalyst
9500 Series high performance switches
Performance and
Security Resiliency
scale
Cisco Catalyst 9600 and 9500 Series
For multidomain campus core
Layer 3/collapsed core Layer 3 Core + MPLS PE Fabric border

Core Distribution Core Distribution
25G/40G/100G
Site 1
Distribution CE
MPLS Site 3
PE
Fabric
PE CE
Site 2
Access
1G/2.5G/5G
CE
VRFs
Customer-managed MPLS backbonee
• Reduced complexity, • Segmentation, scale, • Segmentation and automation/

greater resiliency and scale LAN/WAN consistency programmability
• IPv4/IPv6, unicast and multicast, • MPLS VPNs (Layer 2 and 3), • Turnkey solution: SD-Access
QoS and ACL scale MPLS over GRE • DIY: BGP EVPN VXLAN
One platform. Any place. Any speed (1G to 100G).

New generation of modular access for access, aggregation, and Fiber To The Desktop
(FTTD)
9 Tbps Cisco Catalyst
system
bandwidth
9400 Series leadership
UADP 2.0
Redundancy
is now Open Cisco IOS XE
table stakes
SD-Access
Industry’s
highest UPOE+©
scale x86 CPU and containers
Encrypted Traffic Analytics
MACsec-256 link encryption
Trustworthy solutions
Cisco StackWise Virtual
4-Slot 7-Slot 10-Slot ISSU
New! NBAR2
Model-driven programmability
Catalyst 9400 1G UPOE+ © 90W line card
Patching and GIR
Supervisor Access line cards Core line cards
• Sup-1XL-Y: Adds 25G Uplinks • 24x 10G SFP+
Power supply
• 24x Multigigabit +
• Sup-1XL: Up to 240G per slot • 48x 1G SFP
• 3200W AC Streaming telemetry
24x Cisco UPOE • 3200W DC
• Sup-1: 80G per slot • 48x Cisco UPOE+© • 24x 1G SFP
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public • 2100W AC Densest 90W 1G (260 Ports)
• 48x Cisco UPOE
• 48x PoE+, 48x data
Innovations and benefits
N+1/N+N Modular power supply
Extending Catalyst
4500E Series leadership
in modular access
Ergonomic handles for
efficient weight distribution
4x throughput
Mix AC and DC power supplies 3x client scale

2x wireless scale
Efficient Platinum-rated power supplies
4x power scale
Up to 480Gbps per slot 3x buffering
Rear accessible fan tray
for flexible cable Cisco UPOE simultaneously on 10x bandwidth
management all ports
4x memory and flash
Native 25G/10G and 40G uplinks Lower power
Better acoustics
Dual serviceable Up to 1TB SATA storage Higher MTBF
fan tray
MPLS VPN
Fits nonstandard racks (16 in.)

Side-to-side airflow
While preserving ….
HA architecture
Intel x86 CPU, 4 Investment protection story
Rearchitected power distribution for
core 2.4GHz
10% higher energy efficiency
Unparalleled investment protection
Industry’s leading modular access platform
Upgrade supervisor and unlock increased capabilities on existing line cards
180G with next-generation supervisor
80G per slot Cisco Catalyst 9400 Series
18 years
Cisco Catalyst 4500-E Series Guaranteed support until 2025
EOS EOL
Cisco Catalyst 4500 Series Maintain support
14 years
2000 2005 2010 2015 2020 2025 2030
Lower CapEx and OpEx vs. 70%+ of investment protected with Standardized for multiple places in
fixed switches each upgrade the network
Mission-critical resiliency with Cisco Catalyst 9000
Your business stops if the core is down
Cost of one hour of downtime Cisco Catalyst

to average enterprise > 9400 Series
$300,000**
Cisco Catalyst 9600 Series Cisco Catalyst 9500 Series
Architecture Operating system Platform

• ISSU: Upgrade software with minimal to no • Hot Patching: No downtime for bug fixes • Redundant Supervisor for Modular
traffic loss (no reboot) Switches with NSF/SSO
• StackWise® Virtual:* Redundant • GIR: No downtime when device removed • Redundant Fan and Power Supply in
system for high availability, simplified for maintenance case of any hardware failure
configuration
Eliminate downtime with high availability designed at every level

*Roadmap for Cisco Catalyst 9600 Series
** Based on industry reports from Gartner and ITIC
Platform transitions
Cisco Catalyst
9300 Series 1G with Cisco Catalyst
fixed uplink models 9300 Series 1G Fiber
models
Cisco Catalyst
9300 Series
switch platform
C9300-24S/48S SKUs
C9300L SKUs C9300-24/48
T/P/U/UX/UXM/UN SKUs
Cisco Catalyst Cisco Catalyst Cisco Catalyst

3650 Series 3850 Series 3850 1G Fiber Series
Fixed uplinks Modular uplinks

New generation of fixed access
Modular uplinks Fixed uplinks
(C9300 SKUs) (C9300L SKUs) Cisco Catalyst 9300 Series
leadership
UADP 2.0
Copper 4x 10G uplinks
Cisco IOS XE Software
SD-Access
x86 CPU and containers
48 ports 48 ports Cisco UPOE 24 ports Cisco 48/24 ports PoE+ 1G 48/24 ports data 1G Application hosting
Cisco UPOE 5G 12P Multigigabit + 36P 2.5G UPOE Multigigabit
Encrypted Traffic Analytics
4x 1G uplinks MACsec-256 link encryption

48/24 ports 48/24 ports 48/24 ports Cisco StackWise-480*/320

Cisco UPOE 1G PoE+ 1G data 1G Cisco StackPower*
48/24 ports PoE+ 1G 48/24 ports data 1G IEEE1588 and AVB
NBAR2
Fiber SFP Stack kit Perpetual/Fast PoE
IEEE 802.3bt Type3 & 4 compliant**
Model-driven programmability
48/24 ports SFP 1G
Hot patching/GIR
Full Flexible NetFlow
streaming telemetry
Modular uplinks Modular fans AC and DC power supplies
Platinum
rated
8x 10G 2x 40G 4x Multigigabit 4x 1G 2x 25G 315W AC 715W AC/DC 1100W AC
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public * Modular uplink SKUs only
** Roadmap
48 Multigigabit models - Optimized for 802.11ac Wave 2 and Wi-Fi 6/802.11ax
1.8-GHz quad- 2x 25G, 2x

Built-in RFID USB 2.0 flash core x86 CPU Flexible Every port 5G and Cisco 40G, 8x 10G,
(passive) drive/Bluetooth dongle** 16 GB of DDR4 DRAM dual UADP 2.0 ASIC UPOE capable 4x 10G, 4x1G network
32 MB of packet buffer module options
C9300-48UN (Cisco Catalyst 9300 48-port 5G Cisco UPOE)

MACsec-256
AVB supported on ports 1-16
416 ports of Multigigabit connectivity with 8-member stack
Enables support for next-generation wireless access points with minimal cable upgrades
1G Fiber models - Expanding to FTTD and 1G fiber aggregation applications
24-port – C9300-24S • 24 and 48 port SFP SKUs
• Transition Catalyst 3850 1G SFP
to Catalyst 9300 1G SFP
• Wire-speed, non-blocking
performance
• Seamlessly integrates
with Cisco Catalyst 9300 Series
48-port – C9300-48S copper
• Supports same optics
• Common stacking – StackWise-
480
• Common power stacking –
StackPower
• Common uplink modules
Modular Higher-efficiency AC and • Common power supplies,

Modular uplinks fans, cables
fans DC power supplies
Platinum
rated
Fiber to the desktop
1G fiber aggregation
8x 10G 2x 40G 4x Multigigabit 4x 1G 2x 25G 315W AC 715W AC/DC 1100W AC
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public Collapsed access
Innovations and benefits
Flexible ASIC Optional Bluetooth Powerful CPU complex Wireless scale Most dense and flexible Unmatched PoE
• UADP 2.0 management • Intel x86 CPU • 48x Wave 2 uplink offering • Resiliency – Perpetual/Fast Extends Catalyst 3850 leadership
• USB 2.0 • 4-core 1.8 GHz access points • 8x 10G, • High power – 60W
• 8 GB memory in 1RU Multigigabit, 25G Cisco UPOE 1.5x throughput
• 16 GB flash
4x VRF scale
2x wireless scale
4x Wave 2 access points supported
2x to 4x flash, memory
Pluggable storage
2x CPU performance
2x uplink scale
25G and Multigigabit uplinks
Densest 5G access
8x 10G, 2x 40G UL at price of 2x 10G
Local storage Most flexible stacking Redundant fans Intelligent power Optional power High-efficiency power supplies
• Removable storage • Front* and back stacking management supplies • Power supplies (AC+DC)
(120 GB) • Multiple cabling types – • Cisco StackPower • Power supplies
copper and fiber (AC+DC)
• Best HA – NSF/SSO
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public * Roadmap
Next generation of entry-level access switches for intent-based networking
Available
Fixed Uplinks Modular Uplinks Now Cisco Catalyst 9200 Series highlights
Recommended for small
scale SDA deployments
48 ports Full POE+/Data, 1G/10G Uplink
UADP 2.0 mini
Security 48 ports Full POE+, 12xmGig, 10G Uplink 48 ports Full POE+/Data Cisco IOS XE Software
48 ports Full POE+, 8xmGig, 25G Uplink
Limited-scale SD-Access
24 ports Full POE+/Data, 1G/10G Uplink 24 ports Full POE+/Data
MACsec-128 link encryption
24 ports Full POE+, 8xmGig, 10G Uplink

4x10G 4x1G
Resiliency FRU Fan
24 ports Full POE+, 8xmGig, 25G Uplink FRU Uplinks
Perpetual/Fast PoE
Higher-efficiency AC FRU power supplies Programmability
Cold patching
Silver Platinum Platinum
Rated Rated Rated
Application
experience 125W 600W 1000W Full Flexible NetFlow
streaming telemetry
Cisco Catalyst Access Switching
Secure, resilient campus Business-critical branch Simple branch
Fabric-in-a-box Border + Control plane
Catalyst 9300 Catalyst 9400 Catalyst 9300

Series Series Series Edge
Catalyst 9300L Series Catalyst 9200 Series
SD-Access SD-Access
Extended Nodes
SD-Access SD-Access
Choose Cisco Catalyst 9400 Series or Choose Cisco Catalyst 9300 Series Consider Cisco 9200 Series
Catalyst 9300 Series modular uplink models (C9300) fixed uplink models (C9300L) • Extend automation and policy
• Designed for security, mobility, IoT, and cloud • Full security with visibility • Simple to manage
• High availability, ETA, Application Hosting • High availability, ETA, Application Hosting • 2-box solution for SD-Access
• Catalyst 9800 Embedded WLC Support • Catalyst 9800 Embedded WLC Support • Limited VRFs
• Multi-tier SD-Access Fabric deployments • Single box solution with Fabric-in-a-box
• Highest density copper and fiber applications
Cisco Catalyst 9k feature differentiation
Intent based networks for everyone
Features 9200L 9200 9300L 9300 Features 9200L 9200 9300L 9300

Platform 24P/48P x 1G √ √ √ √ Software Full L3/L2 √ √ √ √
Full Netflow √ √ √ √
√
√
mGig (12xmGig + √* √*
(12xmGig + Patching √ (cold) √ (cold) √ √
36x2.5G,
36x1G)
48x5G) √ √ √ √
MACSec
(128-bit) (128-bit) (256-bit) (256-bit)
PoE+ √ (Full) √ (Full) √ (Full) √ (Full) NSF/SSO × × √ √
√* ETA × × √ √
UPoE × × √
(mGig only)
SD Bonjour × × √ √
FRU PS and Fans √ √ √ √
ERSPAN × × √ √
FRU Uplinks × √ × √
AVB, PTP 1588 × × √ √
1G/10G uplinks √ √ √ √
SD-Access User VNs √(1) √(4) √(64) √(256)
40G uplinks × × √* √
Fabric Wireless × √ √ √
25G uplinks √ √* × √
√
Stacking 80G 160G 320G 480G 9800 Embedded Wireless × × √ (200APs)
(50APs)
Stackpower × × × √
Fabric in a Box × × √ √
Programmability Netconf/Restconf APIs √ √ √ √
Extended Node × × √ √
ZTP, PnP Agent √ √ √ √
Assurance Fabric, Network, Client √ √ √ √
Streaming Telemetry √ √ √ √
Application × × √ √
Guestshell/Python Scripting × √ √ √
√(Full √ (Full
AVC × ×
NBAR) NBAR)
Application Hosting × × √ (limited) √
* On roadmap
Enterprise speed transitions
100G (2km) = $4495
40G (2km) = $5995
Core Natural evolution to 100G in

2km, 10km and 40km SMF the core. 100G priced lower than
100G options across both 100G and 40G 40G today
25G, 40G and 100G for
distribution/core Agg
25G Drive up to 300/400m over standard dual Cisco offers flexible 40G and 25G
or strand OM3/OM4 fiber options
40G
5 Gbps for access Access
5 5 1
Gbps Future-ready for maximum • 4K Video, CAD/CAM, Imaging,
Gbps Gbps
bandwidth over Cat5e/Cat6 cable CFD driving need for Wi-Fi 6 /
802.11ax
• USB 3.0 interfaces now
standard on PC’s driving up to 5
Gbps data rates
• Workstations standardize on 5
Gbps NICs
25G for unsurpassed investment protection
on Cisco Catalyst switches - access to core
Future-ready with dual rate
• 10G, 25G Cisco Short Reach (CSR) for multimode fiber
• 10G, 25G Long Reach (LR) for single-mode fiber
Backward compatibility with SFP+/SFP

• Continue using your 10G and 1G optics
• No adapters or breakout cables
Cisco
innovation
Lower TCO
• Single-laser low-cost optic
10/25G-CSR • Lower power and higher density
10/25G-LR
Reach Dual-strand OM3/OM4
Seamless migration from 10G 10G 300 m to 400 m
• Continue using existing fiber plant 25G 300 m to 400 m

40G 100 m to 150 m
Expanded Multigigabit offerings for access
Cisco Catalyst
Cisco Catalyst 9300 Series Cisco Catalyst 9300 Series
9400 Series
C9300-48UN
C9300-48UXM
C9400-LC-48UX C9300-24UX C9300-NM-4M
Game-changing Innovation that supports 2.5G, 5G and 10G on existing cabling infrastructure
Supported on Cisco Catalyst 9400 and 9300 Series switches
Ethernet portfolio is 802.3bz compliant, with support for 802.3af/at/bt PoE standards
Simplified operations and serviceability with
Cisco Catalyst 9000
Lower TCO with better ergonomics
Ease of serviceability with blue beacons on
Inventory management efficiency with built-in RFID
each component
Ergonomic design with industry-standard icons Wireless console access with Bluetooth
Icons
Mobile Laptop
Cisco Catalyst 9000 switches – proven platforms
Proven hardware
• Based on Catalyst 3850 launched Jan 2013 University of Vienna
• Next generation UADP ASIC architecture “The Catalyst 9000 switches with the power of open Cisco IOS XE simplifies operations dramatically and helps
• IT to create a secure and connected learning environment for our 10,000 employees and almost 100,000
Common PS, fans, uplinks, cables
students.“
— University of Vienna
Proven software
• Open Cisco IOS XE – Launched Nov 2015
CHC
• Common across Switching, Routing, WLS
• Added Resiliency – Patching, GIR, ISSU “The Catalyst 9000 provide us performance we need, and the security features that are critical for our
healthcare records. The new network, powered by Cisco® Digital Network Architecture, gives us granular
Largest and most successful EFT program insight into who’re the users, the devices they use, and the applications they access—all with the ability to learn
and adapt to changes and needs in the network.”
• 40+ Early Field Trial (EFT) Customers — Michel Fontaine, CHC Hospital
over the span of 4 mo. before the FCS
• Most exhaustive testing Cinnober
In production before FCS “The new solution with Catalyst 9000 switches has, among other things, x86 processors capacity to carry
multiple future applications that increase the reliability, security and flexibility of the network. Mainly, there is
Live since April 2017 in Cisco Building 23 in San Jose an increased division of the networks and control of communication in them for safety reasons. Then access
control is added by the users.”
Customer adoption — Peter Ekström, Ops Team Lead, Cinnober Financial
Tens of thousands of customers for Cisco Catalyst 9000
platform to date and counting NASA
The Catalyst 9000 has exceeded NASA’s mission critical requirements for security and segmentation... and at
“Catalyst 9000 continues to be the fastest Winner: 2018 twice the performance
— Eric Latta, Solutions Architect, NASA
ramping product in the company's history” pioneer award
Los Angeles World Airports
— Chuck Robbins, CEO Cisco Systems Winner:
“Los Angeles World Airports (LAWA) is expecting increased traffic in the next several years at LAX. The new
Overall product of the Catalyst 9500 with 100G interface will help LAWA to meet our capacity requirements while providing
https://miercom.com/cisco-catalyst-9000-pv/ year: 2017 and 2018 increased visibility and capabilities that were not previously possible.“
— Nathan Look, Deputy CIO, Los Angeles World Airports
Speed transition with Cisco Catalyst 9000
End-to-end leadership with Cisco Catalyst access portfolio
Core/aggregation switches
Access points Access switches Wireless controllers
Cisco Catalyst Cisco Catalyst Cisco Catalyst

9100 Cisco Catalyst 9500 and 9600 9800 Series
9200, 9300, and 9400 Series Series
Multi- 25G
1G 1G 10 G
gigabit /40G
40 G
40G/
100G
Scalability, reliability, and security across the network
Built from the ground up for intent-based networking Automation Security Analytics
Cisco Catalyst 9000 campus core/aggregation portfolio
driving all campus needs
Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst
9300 Series1G Fiber 9400 Series 9500 Series 9600 Series
UADP UADP
2.0 3.0
6x higher switching capacity | 3x better scale | No oversubscription
1G/10G 10G, 25G, 40G, 100G
High availability: Cisco StackWise/ StackWise Virtual, ISSU, NSF, and SSO
Common OS, consistent features

Security Programmability Routing and virtualization SD-Access
MACsec-256, ETA* Model driven, streaming telemetry BGP, OSPF, MPLS Layer 2 and 3 VPN Border, control, edge, Catalyst 9800
embedded wireless controller*
* Roadmap for Catalyst 9600 Series
Cisco Catalyst 9000 access portfolio
Intent-based networks for everyone
Encrypted Traffic Analytics, Catalyst 9800 embedded wireless controller,
Full Automaton/Assurance,
Cisco DNA Service for Bonjour, Application Hosting

Routing and Segmentation
Cisco DNA
Advantage
Advanced Assurance*
Software-Defined Access*
High Availability
NW
Full Layer 3, Network Segmentation*

Base Automation
Cisco
Essential
DNA
Base Automation and Base Assurance

with L2/L3
s
NW
Layer 2, Routed Access, Programmability
Open
Stacking, Dual FRU PS,
Built with Cisco UADP.
Cisco IOS
Platform
XE
FRU Fan/UL
Full PoE+, 10G UL High-density Multigigabit, Cisco UPOE, 25G/40G UL
Embedded CPU, MACSec-128 x86 CPU, Stackpower, MACsec-256
Cisco Catalyst 9200 Series Cisco Catalyst 9300 Series Cisco Catalyst 9400 Series
Increased scale, increased performance, lower TCO

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public *Increased functionality and scale on Catalyst 9400 and 9300 Series
Catalyst 9000 switches - Advantage vs. Essentials
Catalyst 9200, 9300, 9400, 9500, 9600 Series switches
Advantage Essentials
Cisco DNA Advantage (includes Cisco DNA Essentials) 3, 5, 7-Year terms Cisco DNA Essentials 3, 5, 7-Year terms
Advanced automation Assurance and analytics Element management Basic automation Basic assurance Element management
• SD-Access • Global insights, trends • Patch lifecycle management • Plug-and Play (PnP) • Health dashboards – • Software image management
• Application policy • Compliance, custom reports application network, client, application • Discovery, inventory, topology
• Encrypted Traffic Analytics* • Switch 360 and Wired Client 360 • LAN automation • Basic switch and wired
• Cisco DNA Service for Bonjour* • SD-Access and switch insights
Telemetry and visibility client health monitoring Telemetry
• Embedded Event Manager
• • • ERSPAN
Third-party app hosting Application health, Application 360, • Full Flexible NetFlow
performance • AVC (NBAR2)
(loss, latency, jitter) • Wireshark
Network Advantage (includes Network Essentials) Perpetual Network Essentials Perpetual
Enhanced security Full routing functionality High availability and Essential switch capabilities DevOps integration Telemetry
controls • BGP, HSRP, OSPF, ISIS,GLBP resiliency Layer 2, routed access (RIP, EIGRP Stub, • NETCONF, RESTCONF, and visibility
• MACsec-256* • NSF, GIR, StackWise/StackWise OSPF [1000 routes], gRPC • Model-driven Telemetry
Virtual+, ISSU/eFSU, Patching PBR, PIM Stub Multicast • YANG data model • Sampled NetFlow
(CLI) [1000 routes] • Guest Shell (on-box Python) • SPAN, RSPAN
IoT and mobility Flexible network Optimize bandwidth PVLAN, VRRP, PBR, Cisco Discovery • PnP Agent, zero-touch
• CoAP*, AVB*, PTP* segmentation utilization with multicast Protocol, QoS, FHS, 802.1X, MACsec- provisioning
128, CoPP, SXP, IP SLA Responder
• VRF, VXLAN, LISP, SGT, MPLS* • MSDP, mVPN, AutoRP,
SSO)
PIM-BIDIR
• Cisco Catalyst 9000 switching hardware includes the Perpetual Network Stack – • It is mandatory to attach a Cisco DNA license when ordering Cisco Catalyst 9000
Network Essentials or Network Advantage. switches. Cisco DNA license includes switch and Cisco DNA Center features.
• Cisco Catalyst 9600 Series offers only the Cisco DNA Advantage license.
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public * Not available on Cisco Catalyst 9200 Series switches
+Cisco Catalyst 9400, 9500, and 9600 Series switches
Seamless backbone speed migration with
Cisco Catalyst 9000
25G 40G 100G
• 10/25G dual-rate optics • SR/CSR/LR/ER/ZR/ • SR/LR/ER module
Drive for lower TCO BiDi modules • 40G/100G
• 10/25G-CSR • 1G/10G dual-rate dual-rate optics
speed (4x distance) with QSA Adaptor • 4x10G, 4x25G
• 10/25G-LR-S
migration (up to 10 km on SMF) • 4x10G breakouts* with breakouts*
10G/1G Baseline 10G/1G* support for legacy/traditional deployments
Flexible
deployment
100M to 100G Fiber infrastructure Diverse
investment protection deployment
*Roadmap for Catalyst 9600 Series
Cisco Catalyst 9000 switching
Built to see you through the next decade
UADP 3.0, 2.0, 2.0 mini Standard leadership Platform innovations
Ethernet Alliance
IEEE
• Programmable pipeline • 802.3bz density (Multigigabit) • High availability

• Flexible tables • Wi-Fi 6 / 802.11ax optimized • X86 with TB storage
• Cisco StackWise and StackWise • 802.3bt scale (60W) • Campus-optimized
Virtual • Campus-optimized 25/40G/100G thermals, mechanicals
• Bluetooth
New PoE architectures are emerging with UPOE+ 90W
1 Daisy-chaining
PoE+ (for cable cost savings)
PoE+
UPOE+ / UPOE
Passthrough Single Pair PoE
2 (for replacing RSxx for BMS)
single-pair
Cisco compact switch PoE
USB-C powering
IEEE 802.3bt compliant platforms 3 (laptop/phone charging data)
Catalyst 9400 and 9300 Series*
USB-C
Power +
Data
*IEEE 802.3bt Type 3 (60W) supported on C9300. Type 4 (90W) in roadmap.

Cisco Catalyst 9000 Switching: Foundation For An Entirely New Era in Intent-Based Networking

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Cisco Catalyst 9000 Switching: Foundation For An Entirely New Era in Intent-Based Networking

Încărcat de

Drepturi de autor:

Formate disponibile

Cisco Catalyst 9000 Switching

Foundation for an entirely new era in intent-based networking

EN Switching Product Management

Mobility Advanced Cloud

100% 200 days 60 days $3.8M

Increased scale and complexity, and growing security threats

Difficult to segment Complex to manage Slower issue resolution

Ever-increasing number of users Multiple steps, Separate user policies for

Traditional networks cannot keep up!

Digital business Digital network

Automated network fabric

Insights and telemetry

IoT network Employee network

Employee virtual network

Guest virtual network

Completely automated Group-based policy Policy follows identity

Before SD-Access After SD-Access

Simplified provisioning Campuswide roaming Wired and wireless consistency

AAA Router DHCP 00101101

More than 100 actionable insights

Security IoT Convergence Mobility Multicloud

Foundation of intent-based networking

Secure containers Programmable pipeline Model-driven APIs

Patching | ISSU | Cisco StackWise Virtual

Speed and Power over Ethernet (PoE) leadership

Secure IoT Convergence Mobility Cloud

Software and hardware Innovations

ETA Visibility Incident response Quarantine

Cisco DNA Services

Media Building control

Securing the device Securing network traffic Securing the applications

Sensor Wall Network

Connect Classify Policy Integrate

End-to-end solution managed by central IT team that lowers TCO

Cisco validated solutions with 90W device eco-system

Policy-based segmentation for IoT,

Optimized guest deployment for branches

Cloud hosting Cloud connectivity

Analytics On-box app hosting

DevOps toolkit High availability

• Server management tools

Access switching Backbone switching

Most programmable Purpose built for

Designed for campus SD-Access, VXLAN BGP Mission-critical

25.6 Tbps switching capacity

Ready for Cisco Catalyst 6500 and 6800 Series migration

MACsec-256 on all ports/speed at line rate

Model-driven programmability and

High Performance switches (UADP 3.0)

40G/10G SKUs C9500-32C: 32x 100G C9500-48Y4C: 48x 10/25G +

Layer 3/collapsed core Layer 3 Core + MPLS PE Fabric border

• Reduced complexity, • Segmentation, scale, • Segmentation and automation/

One platform. Any place. Any speed (1G to 100G).

Encrypted Traffic Analytics

MACsec-256 link encryption

Cisco StackWise Virtual

4-Slot 7-Slot 10-Slot ISSU

Mix AC and DC power supplies 3x client scale

Fits nonstandard racks (16 in.)

180G with next-generation supervisor

80G per slot Cisco Catalyst 9400 Series

Cisco Catalyst 4500-E Series Guaranteed support until 2025

Cisco Catalyst 4500 Series Maintain support