Sie sind auf Seite 1von 50

Cisco Catalyst 9000 Switching

Foundation for an entirely new era in intent-based networking

EN Switching Product Management


Requirements for the modern
campus network

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Enterprise trends – Scale, complexity, and security

AWS

Windows 10

Mobility Advanced Cloud

3.64 Devices per person persistent threats 100K Devices per admin
Changing workforce and Agility consumption models
hyper-connected apps

Enterprise IoT

7.5B Things
Infrastructure convergence
Vulnerable endpoints

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
The security challenge

Motivated and targeted adversaries Increased attack surface Increased attack sophistication
• State sponsored • BYOD blurring perimeter • Advanced persistent threats
• Financial and espionage motives • Public cloud services • Encrypted malware
• $1T cybercrime market • Enterprise Internet of Things (IoT) • Zero-day exploits

Scale: Too many alerts Complexity: Securing everything Sophistication: Keeping up against attackers

100% 200 days 60 days $3.8M


Of customers lack network Industry average Industry average Average cost
segmentation at time of breach time to detect a breach time to contain a breach of a data breach

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Diverse endpoints and applications served across a
multidomain network
Classes of endpoints Classes of applications

Xerox

Office 365

SAP
User devices IT services Non-IT services (On-premises or (Public cloud hosted)
(Laptops, phones, PCs) (Printers, audio, video, displays) (Lighting, alarms, surveillance) private cloud hosted)

• Consistent access across wired and • Service discovery for printing, • Application Visibility and
• Network and power High
wireless Apple TV Control (AVC)
Availability (HA) for emergencies
• Granular Quality of Service (QoS) • Network timing for audio • Seamless experience with
• Traffic monitoring for surveillance
and AVC and video on-premises and cloud

Network requirements

Increased scale and complexity, and growing security threats


C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Key challenges for traditional networks

Difficult to segment Complex to manage Slower issue resolution

Ever-increasing number of users Multiple steps, Separate user policies for


and endpoint types user credentials, complex wired and wireless networks
interactions
Ever-increasing number of Unable to find users
VLANs and IP Subnets Multiple touch points when troubleshooting

Traditional networks cannot keep up!

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Need for intent-based networking

Digital business Digital network


Learning
Business
goals

Intent
Context

Insights
Mobile Security IoT MultiCloud Security
Powered by intent. Informed by context.
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
SD-Access:
Cisco’s next generation
enterprise architecture

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Software-Defined Access (SD-Access)
Cisco DNA Center™
Identity-based policy
and segmentation
Segmentation Automation Assurance Security policy definition decoupled from VLAN
and IP address

Automated network fabric


Single fabric for wired and wireless with workflow-
based automation

Insights and telemetry


User mobility
Analytics and insights into user and
Policy stays with user application behavior

IoT network Employee network


C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Secure onboarding of any user, device, or thing
Segmentation and access control

Group 1 Group 2

Employee virtual network


Before SD-Access Users After SD-Access
• VLAN and IP address based • No VLAN or subnet dependency for
segmentation and access control
• Create IP-based Access Control Lists (ACLs) Devices Group 3 Group 4
for access policy • Define one consistent policy
Drag policy
to apply IoT virtual network
• Deal with policy violations and • Policy follows identity
errors manually Apps

Group 5 Group 6

Guest virtual network

Completely automated Group-based policy Policy follows identity

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Consistent wired and wireless management
A single network fabric for mobility

Before SD-Access After SD-Access


• Repeated policy work for wired • Consistent management across wired and
and wireless wireless
• Roaming issues across Layer 3 domains • Optimal traffic flows with
seamless roaming
• Chase down IP addresses for troubleshooting
• Seamless roaming in fabric and nonfabric
domains
Seamless Roam Policy stays
roam is Layer 2 with user

Simplified provisioning Campuswide roaming Wired and wireless consistency

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
From network data to business insights
Network telemetry Complex event Correlated Guided
contextual data processing insights remediation

Traceroute 001110101100110
Complex
Clients Baseline
Syslog Netflow 1010110010 correlation

AAA Router DHCP 00101101


Metadata
Telnet Wireless CLI 0110100 extraction
NBAR2 InfoBlox 1101101
OI DNS
D IPSLA Bonjour Ping 00101101 Steam
SNMP IPAM MIB 10101100110 Processing Application Network
O365 AppD™ 101011000110011
CMX

More than 100 actionable insights


Everything as a sensor
Client | Applications | Wireless | Switching | Routing
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9000 Switching
First in enterprise
Open Cisco IOS XE • x86 CPU with application hosting
Converged • Cisco UADP programmable
application-specific integrated circuit (ASIC)
ASIC • Software patching
UADP ASIC
Unmatched in industry
Single image • High availability
• Multigigabit density
• Cisco UPOE® scale
Common • 100G Ethernet
licensing • 25G Ethernet

Future ready
• Wi-Fi 6 (IEEE 802.11ax) ready

Security IoT Convergence Mobility Multicloud

Foundation of intent-based networking


C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Machine-centric intelligence
Programmable intent

Secure containers Programmable pipeline Model-driven APIs


Application hosting Flexible tables Streaming telemetry

x86
Open and
x86 multicore CPU UADP 2/3 extensible Cisco IOS XE

Patching | ISSU | Cisco StackWise Virtual

Speed and Power over Ethernet (PoE) leadership

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9000 switches at a glance
Enabling a new era of intent-based networking

Secure IoT Convergence Mobility Cloud

• Encrypted Traffic Analytics • Constrained Application Protocol • Fabric-enabled wireless • DevOps toolkit
• MACsec link encryption (CoAP) • Embedded Cisco Catalyst 9800 • NETCONF/YANG models
• Trustworthy solutions • Cisco DNA Service for Bonjour Series wireless controller • Streaming telemetry
• Group-based policy • Perpetual PoE • Unified control and policy • Patching and Graceful Insertion
• IEEE 1588 Audio Video • Wired and wireless and Removal (GIR)
• Full Flexible NetFlow
Bridging (AVB) guest access • Application hosting

Software and hardware Innovations


• Cisco Catalyst 9600 Series switches
Built on a Lead modular core
modern modular • Cisco Catalyst 9500 Series switches
OS (Cisco Lead fixed core
IOS XE) and • Cisco Catalyst 9400 Series switches
programmable Lead modular access
ASIC • Cisco Catalyst 9300 Series switches
Lead fixed access
• Cisco Catalyst 9200 Series switches
Entry-level fixed access
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9000 family secures your network against
breaches from within
Discover suspicious
Capture traffic Redirect traffic Quarantine threats
activity

ETA Visibility Incident response Quarantine


Automated provisioning of NetFlow Automated traffic copy using Security Automated service Automated quarantine based on alert
for Encrypted Traffic Analytics (ETA) Group Tag insertion severity without VLAN, IP,
with Stealthwatch® (SGT)-based ERSPAN or firewall rule change

Cisco DNA Services


Center
SD-Access Users Lighting system
Segmented endpoints Cisco ISE
Simplified, authenticated access
Full access context and visibility Cisco Catalyst 9000 family
Guests Bonjour service

Media Building control

Securing the device Securing network traffic Securing the applications


C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9000 augments Cisco’s leadership in IoT
IBN expands IoT endpoints with Security, Visibility, Scale and Cloud tethering
Cisco and
New partner cloud
802.3bt* services for
control
Type 4
90W Cisco UPOE+©
UPOE+©
(low voltage) New
Devices
30 - 60 Watt devices 90 Watt devices

Sensor Wall Network


Powered PTZ UHD Large Video
(light, motion, switch
Cameras Displays HVAC VAV’s
CO2/CO, etc.) Light arrays

Connect Classify Policy Integrate


• Extended connectivity with • Device classification and profiling • Secure Virtual networks and • “Thing” connectivity management
SDA Extended node solutions with ISE segmentation of IoT from IT with SD- with Cloud IOT services
• CoAP to access lights and other sensors • Emerging standards support for access Access • Container-hosted Cloud-tethered
for lighting control control (ex: Manufacturers Usage • Scalable group-based policies apps on open Cisco IOS
Description [MUD]) XE Software

End-to-end solution managed by central IT team that lowers TCO


C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
*Type 4 UPOE+ shipping on Catalyst 9400 and Type 3 shipping on Catalyst 9300.
Type 4 UPOE+ on 9300 is on roadmap. Catalyst 9200 is PoE+.
90W UPOE+© standardization is enabling a growing
ecosystem of devices
UPOE+© Standardization Growing ecosystem
UPoE Powered Compact
switches
802.1AC Access Points New
VOIP Phones

90W
USB-C Dongle POE Displays Network HVAC VAV’s
60W UPOE+© Touchscreen IP Cameras Powered Light
PCs
30W UPOE
PoE+ E
IEE bt
15W 802
.3
PoE Badge Facial
Readers Recognition
Systems
2018 UPOE Powered Compact Nurse call
CBRS Biometric
2011 Switches systems
Private LTE
Environmental
Door Locks IP Call Tower
Sensor Hubs
2009
2003 IT OT

Cisco validated solutions with 90W device eco-system


• 802.3bt complements Cisco UPOE by adding 4 new classes of devices
C97-738949-03 © 2019 Cisco and/or its affiliates. All•rightsSafety measures
reserved. Cisco Public ensure up to 90W of power is safely delivered
Cisco Catalyst 9000 innovations
Next-generation mobility
Future-ready for performance and scale
Built for
• 802.11ac Wave 2 optimized: Support for the industry’s highest densities of
mobility Wave 2 access points in 1 rack unit
• Wi-Fi 6 / 802.11ax support: Dense 5Gbps downlinks model
• Consistent architecture with controller options on appliance,
embedded in Cisco Catalyst 9000 family switch or VM
• Distributed data plane and optimized for roaming

Policy-based segmentation for IoT,


wired, and wireless
• Next-Generation Network-Based Application Recognition (NBAR2):
Visibility into wired and wireless
• Secure fabric: Virtual networks and micro-segmentation

Optimized guest deployment for branches


and at lower TCO with embedded Cisco Catalyst 9800
Built for scale and security
Benefits Future ready for lower TCO Series wireless controller
• Simplified guest and mobility tunneling, no dedicated guest controller
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9000 enables cloud-ready networks

Cloud hosting Cloud connectivity


• Automation assurance policy • Private and public cloud
Built for SaaS colocation
cloud

Analytics On-box app hosting


• Streaming telemetry • Monitoring security IoT
• Network monitoring

DevOps toolkit High availability


• Zero-touch provisioning • Patching, GIR, In-Service
Flexibility, operational simplicity,
Benefits and optimized cost • Model-driven programmability Software Upgrades (ISSU)

• Server management tools

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9000 portfolio

Cisco Catalyst
Cisco Catalyst 9600 Series
9400 Series Cisco
Cisco Catalyst Catalyst Cisco Catalyst
9300 Series 9000 9500 Series
Cisco Catalyst
9200 Series
switch
platform

Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst
2960-X/XR Series 3650/3850 Series 4500E Series 3850F/4500-X 6840-X/6880-X 6807-XL/6500-E

Access switching Backbone switching


C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9600 Series switching
Powering the cloud-scale campus

Most programmable Purpose built for


Highest ACL Scale
ASIC in Industry Powered by
UADP 3.0 and
Open Cisco
Intent-based
IOS XE
Networking

Designed for campus SD-Access, VXLAN BGP Mission-critical


25G dual-rate optics EVPN, MPLS VPN resiliency

25.6 Tbps switching capacity


Flexible speeds:
10G, 25G, 40G, 100G Lowest TCO
Flexible Netflow MACsec-256 link encryption

Ready for Cisco Catalyst 6500 and 6800 Series migration


C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9600 Series
New generation of purpose-built modular core/aggregation switches
Extending Cisco Catalyst 6000 Series
Powered leadership in modular core
by
6-slot (8RU) chassis: • 7.5x throughput per slot
UADP 3.0 25.6 Tbps • 3x port density (40G)
• 4x CPU
Security
Supervisor-1: • No oversubscription
2.4 Tbps per slot
Cisco Catalyst 9000 leadership
Fiber line cards
UADP 3.0
• 48p x 25G/10G(/1G*)
Cisco IOS XE Software
• 24p x 40G/12p x 100G
Resiliency SD-Access
Copper line cards
• 48p x mGig*(Non-PoE) x86 CPU and containers

MACsec-256 on all ports/speed at line rate


Cisco StackWise Virtual*

Model-driven programmability and


Dual Serviceable 2000W AC and DC 240 GB, 480 GB, streaming telemetry
Lowest TCO Fan Tray Power Supplies 960 GB SSD storage
* Roadmap
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9500 Series
New generation of purpose-built fixed core/aggregation switches

High Performance switches (UADP 3.0)

Standard switches 100G/40G SKUs 25G/10G SKUs Catalyst 9500 Series high performance
(UADP 2.0) switches (UADP 3.0)

40G/10G SKUs C9500-32C: 32x 100G C9500-48Y4C: 48x 10/25G +


Throughput (3.2 Tbps)
4x 40/100G Performance: 3x UADP 2.0
Scale: 3x UADP2.0
9500-16X
C9500-32QC: 32x 40G/16x 100G C9500-24Y4C: 24x 10/25G + 4x 1G, 10G, 25G, 40G, 100G
9500-40X
40/100G Pluggable SSD storage for app hosting – 1 TB
9500-24Q
Customizable templates
9500-12Q
Breakout support (4X 10G, 4X 25G) on
240GB, 480GB, 650W AC 930W DC 1600W AC/DC C9500-32C
Cisco Catalyst
960GB SSD storage Cisco StackWise Virtual
9500 Series

Cisco Catalyst
9500 Series high performance switches

Performance and
Security Resiliency
scale
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9600 and 9500 Series
For multidomain campus core

Layer 3/collapsed core Layer 3 Core + MPLS PE Fabric border


Core Distribution Core Distribution
25G/40G/100G

Site 1

Distribution CE
MPLS Site 3

PE
Fabric
PE CE
Site 2
Access
1G/2.5G/5G

CE
VRFs
Customer-managed MPLS backbonee

• Reduced complexity, • Segmentation, scale, • Segmentation and automation/


greater resiliency and scale LAN/WAN consistency programmability
• IPv4/IPv6, unicast and multicast, • MPLS VPNs (Layer 2 and 3), • Turnkey solution: SD-Access
QoS and ACL scale MPLS over GRE • DIY: BGP EVPN VXLAN

One platform. Any place. Any speed (1G to 100G).


C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9400 Series
New generation of modular access for access, aggregation, and Fiber To The Desktop
(FTTD)
9 Tbps Cisco Catalyst
system
bandwidth
9400 Series leadership

UADP 2.0
Redundancy
is now Open Cisco IOS XE
table stakes
SD-Access
Industry’s
highest UPOE+©
scale x86 CPU and containers

Encrypted Traffic Analytics

MACsec-256 link encryption

Trustworthy solutions

Cisco StackWise Virtual

4-Slot 7-Slot 10-Slot ISSU

New! NBAR2

Model-driven programmability
Catalyst 9400 1G UPOE+ © 90W line card
Patching and GIR
Supervisor Access line cards Core line cards
• Sup-1XL-Y: Adds 25G Uplinks • 24x 10G SFP+
Power supply
• 24x Multigigabit +
• Sup-1XL: Up to 240G per slot • 48x 1G SFP
• 3200W AC Streaming telemetry
24x Cisco UPOE • 3200W DC
• Sup-1: 80G per slot • 48x Cisco UPOE+© • 24x 1G SFP
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public • 2100W AC Densest 90W 1G (260 Ports)
• 48x Cisco UPOE
• 48x PoE+, 48x data
Cisco Catalyst 9400 Series
Innovations and benefits
N+1/N+N Modular power supply
Extending Catalyst
4500E Series leadership
in modular access
Ergonomic handles for
efficient weight distribution
4x throughput

Mix AC and DC power supplies 3x client scale


2x wireless scale
Efficient Platinum-rated power supplies
4x power scale
Up to 480Gbps per slot 3x buffering
Rear accessible fan tray
for flexible cable Cisco UPOE simultaneously on 10x bandwidth
management all ports
4x memory and flash
Native 25G/10G and 40G uplinks Lower power
Better acoustics
Dual serviceable Up to 1TB SATA storage Higher MTBF
fan tray
MPLS VPN

Fits nonstandard racks (16 in.)


Side-to-side airflow
While preserving ….
HA architecture
Intel x86 CPU, 4 Investment protection story
Rearchitected power distribution for
core 2.4GHz
10% higher energy efficiency

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9400 Series
Unparalleled investment protection
Industry’s leading modular access platform
Upgrade supervisor and unlock increased capabilities on existing line cards

180G with next-generation supervisor

80G per slot Cisco Catalyst 9400 Series

18 years

Cisco Catalyst 4500-E Series Guaranteed support until 2025

EOS EOL

Cisco Catalyst 4500 Series Maintain support

14 years

2000 2005 2010 2015 2020 2025 2030

Lower CapEx and OpEx vs. 70%+ of investment protected with Standardized for multiple places in
fixed switches each upgrade the network
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Mission-critical resiliency with Cisco Catalyst 9000
Your business stops if the core is down

Cost of one hour of downtime Cisco Catalyst


to average enterprise > 9400 Series
$300,000**

Cisco Catalyst 9600 Series Cisco Catalyst 9500 Series

Architecture Operating system Platform


• ISSU: Upgrade software with minimal to no • Hot Patching: No downtime for bug fixes • Redundant Supervisor for Modular
traffic loss (no reboot) Switches with NSF/SSO
• StackWise® Virtual:* Redundant • GIR: No downtime when device removed • Redundant Fan and Power Supply in
system for high availability, simplified for maintenance case of any hardware failure
configuration

Eliminate downtime with high availability designed at every level


*Roadmap for Cisco Catalyst 9600 Series
** Based on industry reports from Gartner and ITIC
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9300 Series
Platform transitions

Cisco Catalyst
9300 Series 1G with Cisco Catalyst
fixed uplink models 9300 Series 1G Fiber
models
Cisco Catalyst
9300 Series
switch platform
C9300-24S/48S SKUs
C9300L SKUs C9300-24/48
T/P/U/UX/UXM/UN SKUs

Cisco Catalyst Cisco Catalyst Cisco Catalyst


3650 Series 3850 Series 3850 1G Fiber Series

Fixed uplinks Modular uplinks


C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9300 Series
New generation of fixed access
Modular uplinks Fixed uplinks
(C9300 SKUs) (C9300L SKUs) Cisco Catalyst 9300 Series
leadership
UADP 2.0
Copper 4x 10G uplinks
Cisco IOS XE Software
SD-Access
x86 CPU and containers
48 ports 48 ports Cisco UPOE 24 ports Cisco 48/24 ports PoE+ 1G 48/24 ports data 1G Application hosting
Cisco UPOE 5G 12P Multigigabit + 36P 2.5G UPOE Multigigabit
Encrypted Traffic Analytics

4x 1G uplinks MACsec-256 link encryption


Trustworthy solutions

48/24 ports 48/24 ports 48/24 ports Cisco StackWise-480*/320


Cisco UPOE 1G PoE+ 1G data 1G Cisco StackPower*
48/24 ports PoE+ 1G 48/24 ports data 1G IEEE1588 and AVB
NBAR2
Fiber SFP Stack kit Perpetual/Fast PoE
IEEE 802.3bt Type3 & 4 compliant**
Model-driven programmability
48/24 ports SFP 1G
Hot patching/GIR
Full Flexible NetFlow
streaming telemetry
Modular uplinks Modular fans AC and DC power supplies
Platinum
rated
8x 10G 2x 40G 4x Multigigabit 4x 1G 2x 25G 315W AC 715W AC/DC 1100W AC
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public * Modular uplink SKUs only
** Roadmap
Cisco Catalyst 9300 Series
48 Multigigabit models - Optimized for 802.11ac Wave 2 and Wi-Fi 6/802.11ax

1.8-GHz quad- 2x 25G, 2x


Built-in RFID USB 2.0 flash core x86 CPU Flexible Every port 5G and Cisco 40G, 8x 10G,
(passive) drive/Bluetooth dongle** 16 GB of DDR4 DRAM dual UADP 2.0 ASIC UPOE capable 4x 10G, 4x1G network
32 MB of packet buffer module options

C9300-48UN (Cisco Catalyst 9300 48-port 5G Cisco UPOE)


MACsec-256
AVB supported on ports 1-16

416 ports of Multigigabit connectivity with 8-member stack

Enables support for next-generation wireless access points with minimal cable upgrades
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9300 Series
1G Fiber models - Expanding to FTTD and 1G fiber aggregation applications
24-port – C9300-24S • 24 and 48 port SFP SKUs
• Transition Catalyst 3850 1G SFP
to Catalyst 9300 1G SFP
• Wire-speed, non-blocking
performance
• Seamlessly integrates
with Cisco Catalyst 9300 Series
48-port – C9300-48S copper
• Supports same optics
• Common stacking – StackWise-
480
• Common power stacking –
StackPower
• Common uplink modules

Modular Higher-efficiency AC and • Common power supplies,


Modular uplinks fans, cables
fans DC power supplies
Platinum
rated
Fiber to the desktop

1G fiber aggregation
8x 10G 2x 40G 4x Multigigabit 4x 1G 2x 25G 315W AC 715W AC/DC 1100W AC
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public Collapsed access
Cisco Catalyst 9300 Series
Innovations and benefits
Flexible ASIC Optional Bluetooth Powerful CPU complex Wireless scale Most dense and flexible Unmatched PoE
• UADP 2.0 management • Intel x86 CPU • 48x Wave 2 uplink offering • Resiliency – Perpetual/Fast Extends Catalyst 3850 leadership
• USB 2.0 • 4-core 1.8 GHz access points • 8x 10G, • High power – 60W
• 8 GB memory in 1RU Multigigabit, 25G Cisco UPOE 1.5x throughput
• 16 GB flash
4x VRF scale

2x wireless scale

4x Wave 2 access points supported

2x to 4x flash, memory

Pluggable storage

2x CPU performance

2x uplink scale

25G and Multigigabit uplinks

Densest 5G access

8x 10G, 2x 40G UL at price of 2x 10G

Local storage Most flexible stacking Redundant fans Intelligent power Optional power High-efficiency power supplies
• Removable storage • Front* and back stacking management supplies • Power supplies (AC+DC)
(120 GB) • Multiple cabling types – • Cisco StackPower • Power supplies
copper and fiber (AC+DC)
• Best HA – NSF/SSO

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public * Roadmap
Cisco Catalyst 9200 Series
Next generation of entry-level access switches for intent-based networking
Available
Fixed Uplinks Modular Uplinks Now Cisco Catalyst 9200 Series highlights
Recommended for small
scale SDA deployments
48 ports Full POE+/Data, 1G/10G Uplink
UADP 2.0 mini

Security 48 ports Full POE+, 12xmGig, 10G Uplink 48 ports Full POE+/Data Cisco IOS XE Software
48 ports Full POE+, 8xmGig, 25G Uplink
Limited-scale SD-Access
24 ports Full POE+/Data, 1G/10G Uplink 24 ports Full POE+/Data
MACsec-128 link encryption

24 ports Full POE+, 8xmGig, 10G Uplink


4x10G 4x1G
Trustworthy solutions
Resiliency FRU Fan
24 ports Full POE+, 8xmGig, 25G Uplink FRU Uplinks
Perpetual/Fast PoE

Higher-efficiency AC FRU power supplies Programmability

Cold patching
Silver Platinum Platinum
Rated Rated Rated
Application
experience 125W 600W 1000W Full Flexible NetFlow
streaming telemetry
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst Access Switching
Secure, resilient campus Business-critical branch Simple branch

Fabric-in-a-box Border + Control plane

Catalyst 9300 Catalyst 9400 Catalyst 9300


Series Series Series Edge

Catalyst 9300L Series Catalyst 9200 Series

SD-Access SD-Access
Extended Nodes
SD-Access SD-Access

Choose Cisco Catalyst 9400 Series or Choose Cisco Catalyst 9300 Series Consider Cisco 9200 Series
Catalyst 9300 Series modular uplink models (C9300) fixed uplink models (C9300L) • Extend automation and policy
• Designed for security, mobility, IoT, and cloud • Full security with visibility • Simple to manage
• High availability, ETA, Application Hosting • High availability, ETA, Application Hosting • 2-box solution for SD-Access
• Catalyst 9800 Embedded WLC Support • Catalyst 9800 Embedded WLC Support • Limited VRFs
• Multi-tier SD-Access Fabric deployments • Single box solution with Fabric-in-a-box
• Highest density copper and fiber applications
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9k feature differentiation
Intent based networks for everyone
Features 9200L 9200 9300L 9300   Features 9200L 9200 9300L 9300
 
Platform 24P/48P x 1G √ √ √ √ Software Full L3/L2 √ √ √ √
Full Netflow √ √ √ √


mGig (12xmGig + √* √*
(12xmGig + Patching √ (cold) √ (cold) √ √
36x2.5G,
36x1G)
48x5G) √ √ √ √
MACSec
(128-bit) (128-bit) (256-bit) (256-bit)
PoE+ √ (Full) √ (Full) √ (Full) √ (Full) NSF/SSO × × √ √
√* ETA × × √ √
UPoE × × √
(mGig only)
SD Bonjour × × √ √
FRU PS and Fans √ √ √ √
ERSPAN × × √ √
FRU Uplinks × √ × √
AVB, PTP 1588 × × √ √
1G/10G uplinks √ √ √ √
SD-Access User VNs √(1) √(4) √(64) √(256)
40G uplinks × × √* √
Fabric Wireless × √ √ √
25G uplinks √ √* × √

Stacking 80G 160G 320G 480G 9800 Embedded Wireless × × √ (200APs)
(50APs)
Stackpower × × × √
Fabric in a Box × × √ √
Programmability Netconf/Restconf APIs √ √ √ √
Extended Node × × √ √
ZTP, PnP Agent √ √ √ √
Assurance Fabric, Network, Client √ √ √ √
Streaming Telemetry √ √ √ √
Application × × √ √
Guestshell/Python Scripting × √ √ √
√(Full √ (Full
AVC × ×
NBAR) NBAR)
Application Hosting × × √ (limited) √

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
* On roadmap
Enterprise speed transitions
100G (2km) = $4495
40G (2km) = $5995

Core Natural evolution to 100G in


2km, 10km and 40km SMF the core. 100G priced lower than
100G options across both 100G and 40G 40G today
25G, 40G and 100G for
distribution/core Agg

25G Drive up to 300/400m over standard dual Cisco offers flexible 40G and 25G
or strand OM3/OM4 fiber options
40G

5 Gbps for access Access

5 5 1
Gbps Future-ready for maximum • 4K Video, CAD/CAM, Imaging,
Gbps Gbps
bandwidth over Cat5e/Cat6 cable CFD driving need for Wi-Fi 6 /
802.11ax
• USB 3.0 interfaces now
standard on PC’s driving up to 5
Gbps data rates
• Workstations standardize on 5
Gbps NICs

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
25G for unsurpassed investment protection
on Cisco Catalyst switches - access to core
Future-ready with dual rate
• 10G, 25G Cisco Short Reach (CSR) for multimode fiber
• 10G, 25G Long Reach (LR) for single-mode fiber

Backward compatibility with SFP+/SFP


• Continue using your 10G and 1G optics
• No adapters or breakout cables
Cisco
innovation
Lower TCO
• Single-laser low-cost optic
10/25G-CSR • Lower power and higher density
10/25G-LR
Reach Dual-strand OM3/OM4
Seamless migration from 10G 10G 300 m to 400 m

• Continue using existing fiber plant 25G 300 m to 400 m


40G 100 m to 150 m

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Expanded Multigigabit offerings for access

Cisco Catalyst
Cisco Catalyst 9300 Series Cisco Catalyst 9300 Series
9400 Series

C9300-48UN
C9300-48UXM
C9400-LC-48UX C9300-24UX C9300-NM-4M

Game-changing Innovation that supports 2.5G, 5G and 10G on existing cabling infrastructure

Supported on Cisco Catalyst 9400 and 9300 Series switches

Ethernet portfolio is 802.3bz compliant, with support for 802.3af/at/bt PoE standards

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Simplified operations and serviceability with
Cisco Catalyst 9000
Lower TCO with better ergonomics
Ease of serviceability with blue beacons on
Inventory management efficiency with built-in RFID
each component

Ergonomic design with industry-standard icons Wireless console access with Bluetooth

Icons

Mobile Laptop

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9000 switches – proven platforms
Proven hardware
• Based on Catalyst 3850 launched Jan 2013 University of Vienna
• Next generation UADP ASIC architecture “The Catalyst 9000 switches with the power of open Cisco IOS XE simplifies operations dramatically and helps
• IT to create a secure and connected learning environment for our 10,000 employees and almost 100,000
Common PS, fans, uplinks, cables
students.“
— University of Vienna
Proven software
• Open Cisco IOS XE – Launched Nov 2015
CHC
• Common across Switching, Routing, WLS
• Added Resiliency – Patching, GIR, ISSU “The Catalyst 9000 provide us performance we need, and the security features that are critical for our
healthcare records. The new network, powered by Cisco® Digital Network Architecture, gives us granular
Largest and most successful EFT program insight into who’re the users, the devices they use, and the applications they access—all with the ability to learn
and adapt to changes and needs in the network.”
• 40+ Early Field Trial (EFT) Customers — Michel Fontaine, CHC Hospital
over the span of 4 mo. before the FCS
• Most exhaustive testing Cinnober

In production before FCS “The new solution with Catalyst 9000 switches has, among other things, x86 processors capacity to carry
multiple future applications that increase the reliability, security and flexibility of the network. Mainly, there is
Live since April 2017 in Cisco Building 23 in San Jose an increased division of the networks and control of communication in them for safety reasons. Then access
control is added by the users.”
Customer adoption — Peter Ekström, Ops Team Lead, Cinnober Financial
Tens of thousands of customers for Cisco Catalyst 9000
platform to date and counting NASA
The Catalyst 9000 has exceeded NASA’s mission critical requirements for security and segmentation... and at
“Catalyst 9000 continues to be the fastest Winner: 2018 twice the performance 
— Eric Latta, Solutions Architect, NASA
ramping product in the company's history” pioneer award
Los Angeles World Airports
— Chuck Robbins, CEO Cisco Systems Winner:
“Los Angeles World Airports (LAWA) is expecting increased traffic in the next several years at LAX. The new
Overall product of the Catalyst 9500 with 100G interface will help LAWA to meet our capacity requirements while providing
https://miercom.com/cisco-catalyst-9000-pv/ year: 2017 and 2018 increased visibility and capabilities that were not previously possible.“
— Nathan Look, Deputy CIO, Los Angeles World Airports

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Speed transition with Cisco Catalyst 9000
End-to-end leadership with Cisco Catalyst access portfolio
Core/aggregation switches
Access points Access switches Wireless controllers

Cisco Catalyst Cisco Catalyst Cisco Catalyst


9100 Cisco Catalyst 9500 and 9600 9800 Series
9200, 9300, and 9400 Series Series

Multi- 25G
1G 1G 10 G
gigabit /40G
40 G
40G/
100G

Scalability, reliability, and security across the network

Built from the ground up for intent-based networking Automation Security Analytics

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Catalyst 9000 campus core/aggregation portfolio
driving all campus needs
Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst
9300 Series1G Fiber 9400 Series 9500 Series 9600 Series

UADP UADP
2.0 3.0

6x higher switching capacity | 3x better scale | No oversubscription

1G/10G 10G, 25G, 40G, 100G

High availability: Cisco StackWise/ StackWise Virtual, ISSU, NSF, and SSO

Common OS, consistent features


Security Programmability Routing and virtualization SD-Access
MACsec-256, ETA* Model driven, streaming telemetry BGP, OSPF, MPLS Layer 2 and 3 VPN Border, control, edge, Catalyst 9800
embedded wireless controller*

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
* Roadmap for Catalyst 9600 Series
Cisco Catalyst 9000 access portfolio
Intent-based networks for everyone
Encrypted Traffic Analytics, Catalyst 9800 embedded wireless controller,
Full Automaton/Assurance,

Cisco DNA Service for Bonjour, Application Hosting


Routing and Segmentation

Cisco DNA
Advantage

Advanced Assurance*
Software-Defined Access*
High Availability
NW

Full Layer 3, Network Segmentation*


Base Automation

Cisco
Essential

DNA

Base Automation and Base Assurance


with L2/L3
s

NW

Layer 2, Routed Access, Programmability

Open
Stacking, Dual FRU PS,
Built with Cisco UADP.

Cisco IOS
Platform

XE
FRU Fan/UL

Full PoE+, 10G UL High-density Multigigabit, Cisco UPOE, 25G/40G UL

Embedded CPU, MACSec-128 x86 CPU, Stackpower, MACsec-256

Cisco Catalyst 9200 Series Cisco Catalyst 9300 Series Cisco Catalyst 9400 Series

Increased scale, increased performance, lower TCO


C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public *Increased functionality and scale on Catalyst 9400 and 9300 Series
Catalyst 9000 switches - Advantage vs. Essentials
Catalyst 9200, 9300, 9400, 9500, 9600 Series switches
Advantage Essentials
Cisco DNA Advantage (includes Cisco DNA Essentials) 3, 5, 7-Year terms Cisco DNA Essentials 3, 5, 7-Year terms

Advanced automation Assurance and analytics Element management Basic automation Basic assurance Element management
• SD-Access • Global insights, trends • Patch lifecycle management • Plug-and Play (PnP) • Health dashboards – • Software image management
• Application policy • Compliance, custom reports application network, client, application • Discovery, inventory, topology
• Encrypted Traffic Analytics* • Switch 360 and Wired Client 360 • LAN automation • Basic switch and wired
• Cisco DNA Service for Bonjour* • SD-Access and switch insights
Telemetry and visibility client health monitoring Telemetry
• Embedded Event Manager
• • • ERSPAN
Third-party app hosting Application health, Application 360, • Full Flexible NetFlow
performance • AVC (NBAR2)
(loss, latency, jitter) • Wireshark

Network Advantage (includes Network Essentials) Perpetual Network Essentials Perpetual

Enhanced security Full routing functionality High availability and Essential switch capabilities DevOps integration Telemetry
controls • BGP, HSRP, OSPF, ISIS,GLBP resiliency Layer 2, routed access (RIP, EIGRP Stub, • NETCONF, RESTCONF, and visibility
• MACsec-256* • NSF, GIR, StackWise/StackWise OSPF [1000 routes], gRPC • Model-driven Telemetry
Virtual+, ISSU/eFSU, Patching PBR, PIM Stub Multicast • YANG data model • Sampled NetFlow
(CLI) [1000 routes] • Guest Shell (on-box Python) • SPAN, RSPAN
IoT and mobility Flexible network Optimize bandwidth PVLAN, VRRP, PBR, Cisco Discovery • PnP Agent, zero-touch
• CoAP*, AVB*, PTP* segmentation utilization with multicast Protocol, QoS, FHS, 802.1X, MACsec- provisioning
128, CoPP, SXP, IP SLA Responder
• VRF, VXLAN, LISP, SGT, MPLS* • MSDP, mVPN, AutoRP,
SSO)
PIM-BIDIR

• Cisco Catalyst 9000 switching hardware includes the Perpetual Network Stack – • It is mandatory to attach a Cisco DNA license when ordering Cisco Catalyst 9000
Network Essentials or Network Advantage. switches. Cisco DNA license includes switch and Cisco DNA Center features.
• Cisco Catalyst 9600 Series offers only the Cisco DNA Advantage license.
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public * Not available on Cisco Catalyst 9200 Series switches
+Cisco Catalyst 9400, 9500, and 9600 Series switches
Seamless backbone speed migration with
Cisco Catalyst 9000
25G 40G 100G
• 10/25G dual-rate optics • SR/CSR/LR/ER/ZR/ • SR/LR/ER module
Drive for lower TCO BiDi modules • 40G/100G
• 10/25G-CSR • 1G/10G dual-rate dual-rate optics
speed (4x distance) with QSA Adaptor • 4x10G, 4x25G
• 10/25G-LR-S
migration (up to 10 km on SMF) • 4x10G breakouts* with breakouts*

10G/1G Baseline 10G/1G* support for legacy/traditional deployments

Flexible
deployment
100M to 100G Fiber infrastructure Diverse
investment protection deployment
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
*Roadmap for Catalyst 9600 Series
Cisco Catalyst 9000 switching
Built to see you through the next decade

UADP 3.0, 2.0, 2.0 mini Standard leadership Platform innovations

Ethernet Alliance

IEEE

• Programmable pipeline • 802.3bz density (Multigigabit) • High availability


• Flexible tables • Wi-Fi 6 / 802.11ax optimized • X86 with TB storage
• Cisco StackWise and StackWise • 802.3bt scale (60W) • Campus-optimized
Virtual • Campus-optimized 25/40G/100G thermals, mechanicals
• Bluetooth
C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
New PoE architectures are emerging with UPOE+ 90W
1 Daisy-chaining
PoE+ (for cable cost savings)

PoE+
UPOE+ / UPOE
Passthrough Single Pair PoE
2 (for replacing RSxx for BMS)
single-pair
Cisco compact switch PoE

USB-C powering
IEEE 802.3bt compliant platforms 3 (laptop/phone charging data)
Catalyst 9400 and 9300 Series*
USB-C
Power +
Data

C97-738949-03 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public

*IEEE 802.3bt Type 3 (60W) supported on C9300. Type 4 (90W) in roadmap.