Thiết bị chuyển mạch Cisco Catalyst 9300 24-port PoE+ switch, with Network Essentials

Built for security, IoT, mobility, and cloud

The Cisco® Catalyst® 9300 Series switches are Cisco’s lead stackable enterprise switching platform built for security, IoT, mobility, and cloud. They are the next generation of the industry’s most widely deployed switching platform. Catalyst 9300 Series switches form the foundational building block for Software-Defined Access (SD-Access), Cisco’s lead enterprise architecture. At up to 480 Gbps, they are the industry’s highest-density stacking bandwidth solution with the most flexible uplink architecture. The Catalyst 9300 Series is the first optimized platform for high-density Wi-Fi 6 and 802.11ac Wave2. It sets new maximums for network scale. These switches are also ready for the future, with an x86 CPU architecture and more memory, enabling them to host containers and run third-party applications and scripts natively within the switch.

The Catalyst 9300 Series is designed for Cisco StackWise® technology, providing flexible deployment with support for nonstop forwarding with Stateful Switchover (NSF/SSO), for the most resilient architecture in a stackable (sub-50-ms) solution. The highly resilient and efficient power architecture features Cisco StackPower®, which delivers high-density Cisco Universal Power over Ethernet (Cisco UPOE®) and Power over Ethernet Plus (PoE+) ports. The switches are based on the Cisco Unified Access™ Data Plane 2.0 (UADP) 2.0 architecture which not only protects your investment but also allows a larger scale and higher throughput. A modern operating system, Cisco IOS® XE with programmability offers advanced security capabilities and Internet of Things (IoT) convergence.

The Foundation of Software-Defined access

Advanced persistent security threats. The exponential growth of Internet of Things (IoT) devices. Mobility everywhere. Cloud adoption. All of these require a network fabric that integrates advanced hardware and software innovations to automate, secure, and simplify customer networks. The goal of this network fabric is to enable customer revenue growth by accelerating the rollout of business services.

The Cisco Digital Network Architecture (Cisco DNA) with Software-Defined Access (SD-Access) is the network fabric that powers business. It is an open and extensible, software-driven architecture that accelerates and simplifies your enterprise network operations. The programmable architecture frees your IT staff from time-consuming, repetitive network configuration tasks so they can focus instead on innovation that positively transforms your business. SD-Access enables policy-based automation from edge to cloud with foundational capabilities. These include:

• Simplified device deployment
• Unified management of wired and wireless networks
• Network virtualization and segmentation
• Group-based policies
• Context-based analytics

Cisco DNA software

Cisco DNA Software offers a valuable and flexible way to buy software for the access, WAN, and data center domains. At each stage in the product lifecycle, Cisco DNA Software helps make buying, managing, and upgrading your network and infrastructure software easier. Cisco DNA Software provides:

• Flexible licensing models to smoothly distribute customers’ software spending over time
• Investment protection for software purchases through software services–enabled license portability
• Access to updates, upgrades, and new technology from Cisco through Cisco®Software Support Services (SWSS)
• Lower cost of entry with the new Cisco DNA Subscription for Switching model

Cisco DNA lets you manage your entire switching structure as a single, converged component. With one management system and one policy for wired and wireless networks, it offers an efficient way to provide more secure access.

Product overview: Features

Product highlights

• Highest wireless scale for Wi-Fi 6 and 802.11ac Wave 2 access points supported on a single switch with select models
• Cisco UADP 2.0 Application-Specific Integrated Circuit (ASIC) with programmable pipeline and microengine capabilities, along with template-based, configurable allocation of Layer 2 and Layer 3 forwarding, Access Control Lists (ACLs), and Quality of Service (QoS) entries
• x86 CPU complex with 8-GB memory, and 16 GB of flash and external USB 3.0 SSD pluggable storage slot (delivering 120GB of storage with an option SSD drive) to host containers
• USB 2.0 slot to load system images and set configurations
• Up to 480 Gbps of local stackable switching bandwidth
• Deeper buffer and higher scale model options for rich multi-media content delivery applications
• Flexible and dense uplink offerings with 1G, Multigigabit, 10G, 25G, and 40G in the form of fixed or modular uplinks
• Easy transition from 10G to 25G with dual-rate optics
• Flexible downlink options with 1G Copper and Fiber as well as Multigigabit links
• Leading PoE capabilities with up to 384 ports of PoE per stack, 60W Cisco UPOE, and PoE+
• Intelligent Power Management with Cisco StackPower technology, providing power stacking among members for power redundancy
• Line-rate, hardware-based Flexible NetFlow (FNF), delivering flow collection of up to 64,000 flows
• IPv6 support in hardware, providing wire-rate forwarding for IPv6 networks
• Dual-stack support for IPv4/IPv6 and dynamic hardware forwarding table allocations, for ease of IPv4-to-IPv6 migration
• IEEE 802.1ba AV Bridging (AVB) built in to provide a better audio and video experience through improved time synchronization and QoS
• Precision Time Protocol (PTP; IEEE 1588v2) provides accurate clock synchronization with sub-microsecond accuracy making it suitable for distribution and synchronization of time and frequency over network
• Cisco IOS XE, a modern operating system for the enterprise with support for model-driven programmability including NETCONF, RESTCONF, YANG, on-box Python scripting, streaming telemetry, container-based application hosting, and patching for critical bug fixes. The OS also has built-in defenses to protect against runtime attacks
• SD-Access: Cisco Catalyst 9300 Series switches form the foundational building block for SD-Access, Cisco’s lead enterprise architecture:
  • Policy-based automation from edge to cloud
  • Simplified segmentation and micro-segmentation, with predictable performance and scalability
  • Automation through Cisco DNA Center
  • Policy handled through the Cisco Identity Services Engine (ISE)
  • Network assurance provided through the Cisco DNA Center
  • Faster launch of new business services and significantly improved issue resolution time
• SD-Access Embedded Wireless: The Cisco Catalyst 9800 embedded Wireless Controller Software package can be installed on Cisco Catalyst 9300 Series switches to enable wireless controller functionality for distributed branches and small campuses. Once installed, the Catalyst 9800 embedded Wireless Controller running on a Catalyst 9300 Series switch can support up to 200 APs and 4000 Clients. A maximum two wireless controllers can be enabled per site on two different Catalyst 9300 Series switches which will increase to scale up to 200 APs and 4000 Wireless Clients. The Catalyst 9800 embedded Wireless Controller Software package will enable wireless functionality only for SD-Access deployments with two supported topologies:
  • The Catalyst 9800 embedded Wireless Controller Software package can be enabled on Catalyst 9300 Series switches functioning as Co-Located Border and Control Plane
  • C9800 Wireless Software Package can be enabled on Catalyst 9300 Series switches functioning as Fabric in a Box
• Plug and Play (PnP) enabled: A simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or updates to an existing network
• Advanced security
  • Encrypted Traffic Analytics (ETA): You benefit from the power of machine learning to identify and take actions toward threats or anomalies in your network, including malware detection in encrypted traffic (without decryption) and distributed anomaly detection
  • Support for AES-256 with the powerful MACsec 256-bit encryption algorithm available on all models
  • Trustworthy solutions: Hardware anchored Secure Boot and Secure Unique Device Identification (SUDI) support for Plug and Play, to verify the identity of the hardware and software

Platform details

Switch models and configurations

Models	FRU Power Supply	FRU Fans	Modular Uplinks	Stacking Bandwidth Support	Cisco StackPower	Catalyst 9800 Embedded WLC	SD-Access Support
Modular uplink models (C9300 SKUs)	✓	✓	✓	480 Gbps	✓	Yes (200 APs)	Yes (256 Virtual Networks)
Fixed uplink Models (C9300L SKUs)	✓	✓	✗	320 Gbps	✗	Yes (50 APs)	Yes (64 Virtual Networks)

The Cisco Catalyst 9300 Series is made up of eleven modular uplink switch models and ten fixed uplink switch models.

Model	Total 10/100/1000, Multigigabit copper or SFP Fiber	Uplink Configuration	Default AC power supply	Available PoE power
Modular uplink models
C9300-24T	24 Data	Modular Uplinks	350W AC	N/A
C9300-48T	48 Data	Modular Uplinks	350W AC	N/A
C9300-24P	24 POE+	Modular Uplinks	715W AC	445W
C9300-48P	48 POE+	Modular Uplinks	715W AC	437W
C9300-24U	24 Cisco UPOE	Modular Uplinks	1100W AC	830W
C9300-48U	48 Cisco UPOE	Modular Uplinks	1100W AC	822W
C9300-24UX	24 Multigigabit Cisco UPOE (100M, 1G, 2.5G, 5G, or 10 Gbps)	Modular Uplinks	1100W AC	560W
C9300-48UXM	36x 100 Mbps,1G, 2.5G + 12x Multigigabit (100M, 1G, 2.5G, 5G, or 10 Gbps)	Modular Uplinks	1100W AC	490W
C9300-48UN	48x 5 Gbps UPOE ports (100M, 1G, 2.5G, 5G)	Modular Uplinks	1100W AC	645W
C9300-24UB	24 Cisco UPOE	Modular Uplinks	1100W AC	830W
C9300-24UXB	24 Multigigabit Cisco UPOE (100M, 1G, 2.5G, 5G, or 10 Gbps)	Modular Uplinks	1100W AC	560W
C9300-48UB	48 Cisco UPOE	Modular Uplinks	1100W AC	822W
C9300-24S	24x 1G SFP	Modular Uplinks	715W AC	N/A
C9300-48S	48x 1G SFP	Modular Uplinks	715W AC	N/A
Fixed uplink models
C9300L-24T-4G	24 Data	4x 1G fixed uplinks	350W	N/A
C9300L-24T-4X	24 Data	4x 10G fixed uplinks	350W	N/A
C9300L-48T-4G	48 Data	4x 1G fixed uplinks	350W	N/A
C9300L-48T-4X	48 Data	4x 10G fixed uplinks	350W	N/A
C9300L-24P-4G	24 PoE+	4x 1G fixed uplinks	715W*	505W
C9300L-24P-4X	24 PoE+	4x 10G fixed uplinks	715W*	505W
C9300L-48P-4G	48 PoE+	4x 1G fixed uplinks	715W*	505W
C9300L-48P-4X	48 PoE+	4x 10G fixed uplinks	715W*	505W

* Upgrade option for 1100W PSU is available

Cisco Catalyst 9300 Series Network Modules

Network module	Description
C9300-NM-4G	Catalyst 9300 Series 4x 1G Network Module
C9300-NM-4M	Catalyst 9300 Series 4x Multigigabit Network Module
C9300-NM-8X	Catalyst 9300 Series 8x 10G Network Module
C9300-NM-2Q	Catalyst 9300 Series 2x 40G Network Module
C9300-NM-2Y	Catalyst 9300 Series 2x 25G Network Module

Power supplies

Cisco Catalyst 9300 Series switches support dual redundant power supplies. The switches ship with one power supply by default, and the second power supply can be purchased when the switch is ordered or at a later time. If only one power supply is installed, it should always be in power supply bay #1. The switches also ship with three field-replaceable fans.

Model	Default power supply	Available PoE power	With 350W Secondary PS	With 715W Secondary PS	With 1100W Secondary PS
C9300-24T	PWR-C1-350WAC***	n/a	n/a	n/a	n/a
C9300-48T	PWR-C1-350WAC***	n/a	n/a	n/a	n/a
C9300-24P	PWR-C1-715WAC***	445W	720W*	720W*	720W*
C9300-48P	PWR-C1-715WAC***	437W	787W	1152W	1440W*
C9300-24U	PWR-C1-1100WAC	830W	1180W	1440W*	1440W*
C9300-48U	PWR-C1-1100WAC	822W	1172W	1537W	1800W**
C9300-24UX	PWR-C1-1100WAC-P	560W	910W	1275W	1440W*
C9300-48UXM	PWR-C1-1100WAC-P	490W	840W	1205W	1590W
C9300-48UN	PWR-C1-1100WAC-P	645W	995W	1360W	1745W
C9300-24UB	PWR-C1-1100WAC	830W	1180W	1440W*	1440W*
C9300-24UXB	PWR-C1-1100WAC-P	560W	910W	1275W	1440W*
C9300-48UB	PWR-C1-1100WAC	822W	1172W	1537W	1800W**
C9300-24S	PWR-C1-715WAC-P	n/a	n/a	n/a	n/a
C9300-48S	PWR-C1-715WAC-P	n/a	n/a	n/a	n/a
C9300L-24T-4G	PWR-C1-350WAC-P	n/a	n/a	n/a	n/a
C9300L-24T-4X	PWR-C1-350WAC-P	n/a	n/a	n/a	n/a
C9300L-48T-4G	PWR-C1-350WAC-P	n/a	n/a	n/a	n/a
C9300L-48T-4X	PWR-C1-350WAC-P	n/a	n/a	n/a	n/a
C9300L-24P-4G	PWR-C1-715WAC-P	505W	720W*	720W*	720W*
C9300L-24P-4X	PWR-C1-715WAC-P	505W	720W*	720W*	720W*
C9300L-48P-4G	PWR-C1-715WAC-P***	505W	855W	1220W	1440W*
C9300L-48P-4X	PWR-C1-715WAC-P***	505W	855W	1220W	1440W*

* Limited by port number and port rating (e.g. 24 PoE+ 30W ports = 720W)

** Limited by design

*** Upgrade options for 715W and 1100W PSU are available

Stacking

Cisco Catalyst 9300 Series switch models are designed for stacking switches as a single virtual switch, enabling customers to have a single management plane and control plane for up to 448 access ports.

Model	Stacking support	Stacking bandwidth support	Optional Stacking hardware	Number of members	Supported stack members
Modular uplink models (C9300 SKUs)	StackWise®-480	480 Gbps	StackWise Cable	8	Other C9300 SKUs with same license level
Fixed uplink models (C9300L SKUs)	StackWise-320	320 Gbps	C9300L-STACK-KIT	8	Other C9300L SKUs with same license level

Mixed stacking between C9300 and C9300L SKUs are not supported. You cannot stack fixed uplink models (C9300L SKUs) with modular uplink models (C9300 SKUs) or other Catalyst switches, e.g. Cisco Catalyst 3850 and 3650 Series. Any combination of C9300 models can form a stack. Separately, any combination of C9300L models can form a stack.

The StackWise cables that are available to configure stacking with Catalyst 9300 Series modular uplink models (C9300 SKUs) come in lengths of 0.5m, 1m and 3m.

The optional StackWise-320 kit for Catalyst 9300 Series fixed uplink models (C9300L SKUs) consists of two stack adapters and a stacking cable. The default stacking cable is 0.5 m, but options of 1m and 3m are also available. Table 5 lists the stacking accessories.

Stacking accessories

Model	Description
STACK-T1-50CM	Data stack 50 cm (cable option with C9300 SKUs)
STACK-T1-1M	Data stack 1m (cable option with C9300 SKUs)
STACK-T1-3M	Data stack 3m (cable option with C9300 SKUs)
C9300L-STACK-KIT	Stack kit for C9300L SKUs only: Two data stack adapters and one data stack cable
STACK-T3-50CM	Data stack 50cm cable (default cable with C9300L Stack Kit)
STACK-T3-1M	Data stack 1m cable (cable option with C9300L Stack Kit)
STACK T3-3M	Data stack 3m cable (cable option with C9300L Stack Kit)

Fan

Cisco Catalyst 9300 Series switches also come with three field-replaceable fans and support (N+1) redundancy. Table 6 lists the fan module part number.

Model	Description
FAN-T2=	Fan module

Performance and scalability

Description	Performance – C9300 modular uplink SKUs	Performance – C9300 higher scale, modular uplink SKUs	Performance: C9300L fixed uplink SKUs
Total number of MAC addresses	32,000	64,000	32,000
Total number of IPv4 routes (ARP plus learned routes)	32,000 (24,000 direct routes and 8000 indirect routes)	64,000	32,000 (24,000 direct routes and 8000 indirect routes)
IPv6 routing entries	16,000	32,000	16,000
Multicast routing scale	8,000	16,000	8,000
QoS scale entries	5,120	18,000	5,120
ACL scale entries	5,120	18,000	5,120
Packet buffer per SKU	16 MB buffer for 24- or 48-port Gigabit Ethernet models 32 MB buffer for 24 and 48-port Multigigabit	32 MB buffer for 24- and 48-port Gigabit Ethernet models 64 MB buffer for 24-port Multigigabit model (24UXB)	16 MB buffer for 24 and 48 port Gigabit Ethernet models
FNF entries	64,000 flow on 24- and 48-port Gigabit Ethernet models 128,000 flows on 24-port Multigigabit	128,000 flow on 24- and 48-port Gigabit Ethernet models 256,000 flows on 24-port Multigigabit	64,000 flow on 24- and 48-port Gigabit Ethernet models
DRAM	8 GB	16 MB	8 GB
Flash	16 GB	16 GB	16 GB
VLAN IDs	4094	4094	4094
Total Switched Virtual Interfaces (SVIs)	1000	4094	1000
Jumbo frames	9198 bytes	9198 bytes	9198 bytes
Total routed ports per Catalyst 9300 Series stack	448	448	416

Bandwidth specifications

SKU	Switching capacity	Switching capacity with stacking	Forwarding rate	Forwarding rate with stacking
C9300-24T	208 Gbps	688 Gbps	154.76 Mpps	511.90 Mpps
C9300-48T	256 Gbps	736 Gbps	190.47 Mpps	547.62 Mpps
C9300-24P	208 Gbps	688 Gbps	154.76 Mpps	511.90 Mpps
C9300-48P	256 Gbps	736 Gbps	190.47 Mpps	547.62 Mpps
C9300-24U	208 Gbps	688 Gbps	154.76 Mpps	511.90 Mpps
C9300-48U	256 Gbps	736 Gbps	190.48 Mpps	547.62 Mpps
C9300-24UX	640 Gbps	1120 Gbps	476.19 Mpps	833.33 Mpps
C9300-48UXM	580 Gbps	1060 Gbps	431.54 Mpps	788.69 Mpps
C9300-48UN	640 Gbps	1120 Gbps	476.19 Mpps	833.33 Mpps
C9300-24UB	208 Gbps	688 Gbps	154.76 Mpps	511.90 Mpps
C9300-48UB	256 Gbps	736 Gbps	190.48 Mpps	547.62 Mpps
C9300-24UXB	640 Gbps	1120 Gbps	476.19 Mpps	833.33 Mpps
C9300-24S	208 Gbps	688 Gbps	154.76 Mpps	511.90 Mpps
C9300-48S	256 Gbps	736 Gbps	190.47 Mpps	547.62 Mpps
C9300L-24T-4G	56 Gbps	376 Gbps	41.66 Mpps	279.76 Mpps
C9300L-24T-4X	128 Gbps	448 Gbps	95.23 Mpps	333.33 Mpps
C9300L-48T-4G	104 Gbps	424 Gbps	77.38 Mpps	315.48 Mpps
C9300L-48T-4X	176 Gbps	496 Gbps	130.95 Mpps	369.05 Mpps
C9300L-24P-4G	56 Gbps	376 Gbps	41.66 Mpps	279.76 Mpps
C9300L-24P-4X	128 Gbps	448 Gbps	95.23 Mpps	333.33 Mpps
C9300L-48P-4G	104 Gbps	424 Gbps	77.38 Mpps	315.48 Mpps
C9300L-48P-4X	176 Gbps	496 Gbps	130.95 Mpps	369.05 Mpps

All models are at wire-speed nonblocking performance for both IPv4 and IPv6. The forwarding rates in the table above are measured with 64 byte IPv4 packet sizes.

SD-Access architecture

What if you could give time back to IT? Provide network access in minutes for any user or device to any application – without compromise? SD-Access is the industry’s first policy-based automation from network edge to cloud. Your foundation for your digital network, Cisco SD-Access. Built on the principles of the Cisco DNA, SD-Access provides end-to-end segmentation to keep user, device and application traffic separate without a redesign of the network. It automates user access policy so organizations can make sure the right policies are set for any user or device with any application across the network. This is accomplished with a single network fabric across LAN and WLAN which creates a consistent user experience anywhere without compromising on security.

There are many challenges today in managing the network to drive business outcomes. These limitations are due to manual configuration and fragmented tool offerings. SD-Access provides:

• A transformational management solution that reduces operational expenses and enhances business agility
• Consistent management of wired and wireless network provisioning and policy
• Automated network segmentation and group-based policy
• Contextual insights for fast issue resolution and capacity planning
• Open and programmable interfaces for integration with third-party solutions

Platform benefits

• Cisco IOS XE opens a completely new paradigm in network configuration, operation, and monitoring through network automation. Cisco’s automation solution is open, standards-based, and extensible across the entire lifecycle of a network device. The various automation mechanisms are outlined below.
• Automated device provisioning is the ability to automate the process of upgrading software images and installing configuration files on Cisco Catalyst switches when they are being deployed in the network for the first time. Cisco provides both turnkey solutions such as Plug and Play and off-the-shelf tools such as Zero-Touch Provisioning (ZTP) and Preboot Execution Environment (PXE) that enable an effortless and automated deployment.
• API-driven configuration is available with modern network switches such as the Cisco Catalyst 9300 Series. It supports a wide range of automation features and provides robust open APIs over NETCONF and RESTCONF and GNMI using YANG data models for external tools, both off-the-shelf and custom built, to automatically provision network resources.
• Granular visibility enables model-driven telemetry to stream data from a switch to a destination. The data to be streamed is identified through subscription to a data set in a YANG model. The subscribed data set is streamed to the destination at specified intervals. Additionally, Cisco IOS XE enables the push model. It provides near-real-time monitoring of the network, leading to quick detection and rectification of failures.
• Seamless software upgrades and patching supports OS resilience. Cisco IOS XE supports patching, which provides fixes for critical bugs and security vulnerabilities between regular maintenance releases. This support lets you add patches without having to wait for the next maintenance release.

Security

• Encrypted Traffic Analytics (ETA) is a unique capability for identifying malware in encrypted traffic coming from the access layer. Since more and more traffic is becoming encrypted, the visibility this feature affords for threat detection is critical for keeping your network secure at different layers.
• AES-256 MACsec encryption is the IEEE 802.1AE standard for authenticating and encrypting packets between switches. The Cisco Catalyst 9300 Series switches support 256-bit and 128-bit Advanced Encryption Standard (AES), providing the most secure link encryption.
• Trustworthy solutions built with Cisco Trust Anchor Technologies provide a highly secure foundation for Cisco products. With the Catalyst 9300 Series, these technologies enable hardware and software authenticity assurance for supply chain trust and strong mitigation against man-in-the-middle attacks that compromise software and firmware. Trust Anchor capabilities include:
  • Image signing: Cryptographically signed images provide assurance that the firmware, BIOS, and other software are authentic and unmodified. As the system boots, the system’s software signatures are checked for integrity.
  • Secure Boot: Cisco Secure Boot technology anchors the boot sequence chain of trust to immutable hardware, mitigating threats against a system’s foundational state and the software that is to be loaded, regardless of a user’s privilege level. It provides layered protection against the persistence of illicitly modified firmware.
  • Cisco Trust Anchor module: A tamper-resistant, strong cryptographic, single-chip solution provides hardware authenticity assurance to uniquely identify the product so that its origin can be confirmed to Cisco. This provides assurance that the product is genuine.

Resiliency and high availability

• StackWise-480: Cisco Catalyst 9300 Series modular uplink models (C9300 SKUs) support the industry’s highest back-panel stacking bandwidth solution (480 Gbps) with StackWise-480. Up to 8 Switches can be configured in a Stackwise-480 with the special connector at the back of the switch using dedicated stack cables.
• StackWise-320: The Cisco Catalyst 9300 Series fixed uplink models (C9300L SKUs) support stacking bandwidth solution (320 Gbps) with StackWise-320. Up to 8 Switches can be optionally configured in a Stackwise-320 with the special Stack Kit at the back of the switch using dedicated stack cables.
• Cisco StackPower: Cisco StackPower is an innovative power interconnect system that allows the power supplies in a stack to be shared as a common resource among all the switches. This allows you to simply add one extra power supply in any switch of the stack and either provide power redundancy for any of the stack members or simply add more power to the shared pool. Up to 4 switches can be configured in a StackPower stack with the special connector at the back of the switch. However, with the use of XPS-2200 appliance, up to 9 switches can be configured in the StackPower stack. Cisco StackPower is only supported on the models with modular uplink stack - C9300 SKUs.

• High availability: The Catalyst 9300 Series supports high-availability features, including the following:
  • Cross-stack EtherChannel provides the ability to configure Cisco EtherChannel technology across different members of the stack for high resiliency.
  • IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) provides rapid spanning tree convergence independent of spanning tree timers and also offers the benefit of Layer 2 load balancing and distributed processing.
  • Per-VLAN Rapid Spanning Tree (PVRST+) allows rapid spanning tree (IEEE 802.1w) reconvergence on a per-VLAN spanning tree basis, providing simpler configuration than MSTP. In both MSTP and PVRST+ modes, stacked units behave as a single spanning tree node.
  • Switch-port auto-recovery (“err-disable” recovery) automatically attempts to reactivate a link that is disabled because of a network error.
  • The Catalyst 9300 Series platform delivers the best NSF/SSO resiliency architecture in a stackable solution with sub-50-ms failover.
  • Always-On wireless network with stateful switchover when wireless functionality is enabled on stack of Catalyst 9300 Series switches.

Deep buffer Technology

Cisco Catalyst 9300 higher scale models have a deeper buffer to address the requirements of rich multi-media lossless content delivery and large routing tables in a fixed access solution with a wide range of uplink choices for deployment flexibility.

Flexible Netflow

Flexible NetFlow (FNF): Cisco IOS Software FNF is the next generation in flow visibility technology. It enables optimization of the network infrastructure, reduces operation costs, and improves capacity planning and security incident detection with increased flexibility and scalability. The Catalyst 9300 Series is capable of up to 64,000 flow entries on 48-port and 24 port models and up to 128,000 flow entries on Multigigabit models.

Application visibility and control

NBAR2: Next-Generation Network-Based Application Recognition (NBAR2) enables advanced application classification techniques, accuracy with up to 1400 predefined and well-known application signatures and up to 150 encrypted applications on the Cisco Catalyst 9000 switches. The most popular applications included are Skype, Office 365, Microsoft Lync, Cisco WebEx®, and Facebook, among many others that are predefined and easy to configure. NBAR2 provides the network administrator with an important tool to identify, control, and monitor end-user application usage while helping ensure a quality user experience and securing the network from malicious attacks. NBAR2 leverages FNF to report application performance and activities within the network to any supported NetFlow collector, such as Cisco Prime®, Cisco Stealthwatch®, or any compliant third-party tool.

QoS

Superior QoS: The Cisco Catalyst 9300 Series offers Gigabit Ethernet speeds with intelligent services that keep traffic flowing smoothly, even at 10 times the normal network speed. Industry-leading mechanisms for cross-stack marking, classification, and scheduling deliver superior performance for data, voice, and video traffic at wire speed. Superior QoS includes granular wireless bandwidth management and fair sharing, 802.1p Class of Service (CoS) and Differentiated Services Code Point (DSCP) field classification, Shaped Round Robin (SRR) scheduling, Committed Information Rate (CIR), and eight egress queues per port.

Service discovery

Multicast DNS (mDNS) gateway: This service discovery gateway capability facilitates sharing of services advertised using the Apple mDNS (Bonjour) protocol, such as printers, Apple TVs, and file services across the network. Additionally, the administrator can create policies defining which services can be seen and accessed by the users in the network. This capability facilitates a Bring-Your-Own-Device (BYOD) rollout.

Smart operation

• WebUI: WebUI is an embedded GUI-based device-management tool that provides the ability to provision the device, to simplify device deployment and manageability, and to enhance the user experience. It comes with the default image, so there is no need to enable anything or install any license on the device. You can use WebUI to build configurations, and to monitor and troubleshoot the device without having CLI expertise.
• Efficient switch operation*: Cisco Catalyst 9300 Series switches provide optimum power saving with Energy Efficient Ethernet (EEE) on the RJ-45 ports and low-power operations for industry best-in-class power management and power consumption capabilities. The ports support reduced power modes so that ports not in use can move into a lower power utilization state. Other efficient switch operation features are as follows:
  • Per-port power consumption command allows customers to specify a maximum power setting on an individual port.
  • Per-port PoE power sensing measures actual power being drawn, enabling more intelligent control of powered devices. The PoE MIB provides proactive visibility into power usage and allows you to set different power-level thresholds.
• RFID tags: Catalyst 9300 Series switches have an embedded RFID tag that facilitates easy asset and inventory management using commercial RFID readers.
• Blue beacon: Catalyst 9300 Series switches support a blue beacon LED for easy identification of the switch being accessed.

* Energy Efficient Ethernet (EEE) will be fully supported on Multigigabit switches in a future SW release

High-Performance IP routing

The Cisco Express Forwarding hardware routing architecture delivers extremely high-performance IP routing in Cisco Catalyst 9300 Series switches, based on:

• IP unicast routing protocols (including static, Routing Information Protocol Version 1 [RIPv1], RIPv2, RIPng, and Open Shortest Path First [OSPF], Routed Access) are supported for small network routing applications with the Network Essentials stack. Equal-cost routing facilitates Layer 3 load balancing and redundancy across the stack.
• Advanced IP unicast routing protocols (including Full [OSPF], Enhanced Interior Gateway Routing Protocol [EIGRP], Border Gateway Protocol Version 4 [BGPv4], and Intermediate System-to-Intermediate System Version 4 [IS-ISv4]) are supported for load balancing and for constructing scalable LANs. IPv6 routing (using OSPFv3 and EIGRPv6) is supported in hardware for maximum performance.
• Protocol-Independent Multicast (PIM) for IP multicast routing is supported, including PIM Sparse Mode (PIM SM), and Source-Specific Multicast (SSM).
• IPv6 addressing is supported on interfaces with appropriate show commands for monitoring and troubleshooting.

Audio Video Bridging (AVB)

Starting with Cisco IOS XE Software Release 16.8, the Cisco Catalyst 9300 Series supports the IEEE 802.1 AVB standard. This standard provided the means for highly reliable delivery of low-latency, time-synchronized audio and video streaming services through Layer 2 Ethernet networks. The standard also makes it easier to integrate new services and for AV equipment from different vendors to interoperate.

Benefits

• Improves quality of experience by lowering jitter and latency for time-synchronized delivery of high-quality AV.
• Provides scalability of applications across networked deployments, including expansive and complex AV infrastructure.
• Lowers Total Cost of Ownership (TCO) with reduced cabling (lowers CapEx) and no license fees (lowers OpEx).

Multigigabit Ethernet technology: Cisco Multigigabit Ethernet technology allows you to achieve bandwidth speeds from 1 Gbps to 10 Gbps over traditional Category 5e/6 cabling or above. This technology addresses the need for exponential increases in bandwidth with the enormous growth of 802.11ac Wave 2, to be eclipsed by the growth of Wi-Fi 6 and new wireless applications without having to replace current cabling infrastructure.

Power over ethernet leadership

Cisco Universal Power over Ethernet (Cisco UPOE): PoE removes the need for wall sockets to power each PoE-enabled device and eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments. Cisco UPOE extends the IEEE PoE+ standard to double the power per port to 60 watts. This facilitates delivery of network power to a broad range of devices requiring higher power, including virtual desktop terminals, IP turrets, compact switches, building management gateways, LED lights, wireless access points, and IP phones.

Catalyst 9300 Series modular uplink models (C9300 SKUs) supports Cisco UPoE or PoE+ and PoE, thereby addressing the largest range of network power needs. Catalyst 9300 fixed uplink models (C9300L SKUs) support PoE+ and PoE.

Power supply requirements for Catalyst 9300 Series modular uplink PoE/PoE+ models (C9300-xxP SKUs)

	24-port PoE switch	48-port PoE switch
PoE on all ports (15.4W per port)	1 PWR-C1-715WAC/PWR-C1-715WAC-P/PWR-C1-715WDC	1 PWR-C1-1100WAC/PWR-C1-1100WAC-P or 2 PWR-C1-715WAC/PWR-C1-715WAC-P/PWR-C1-715WDC
PoE+ on all ports (30W per port)	1 PWR-C1-1100WAC/PWR-C1-1100WAC-P or 2 PWR-C1-715WAC/PWR-C1-715WAC-P/PWR-C1-715WDC	2 PWR-C1-1100WAC/PWR-C1-1100WAC-P or 1 PWR-C1-1100WAC/PWR-C1-1100WAC-P and 1 PWR-C1-715WAC/PWR-C1-715WAC-P/PWR-C1-715WDC

Power supply requirements for Catalyst 9300 Series UPOE models (C9300-xxU/UXM/UN SKUs)

	24-port Cisco UPOE switch	48-port Cisco UPOE switch	48 and 24-port Multigigabit Cisco UPOE switch*
Cisco UPOE (60W per port) & IEEE 802.3bt type3 on all ports (24-port switch) or up to 30 ports (48-port switch)	1 PWR-C1-1100WAC/PWR-C1-1100WAC-P and 1 PWR-C1-715WAC/PWR-C1-715WAC-P/PWR-C1-715WDC	2 PWR-C1-1100WAC/PWR-C1-1100WAC-P	2 PWR-C1-1100WAC/PWR-C1-1100WAC-P

Power supply requirements for Catalyst 9300 Series fixed uplink PoE/PoE+ models (C9300L-xxP SKUs)

	24-port PoE switch	48-port PoE switch
PoE on all ports (15.4W per port)	1 PWR-C1-715WAC-P/PWR-C1-715WDC	1 PWR-C1-1100WAC-P or 2 PWR-C1-715WAC-P
PoE+ on all ports (30W per port)	1 PWR-C1-1100WAC-P or 2 PWR-C1-715WAC-P/PWR-C1-715WDC	2 PWR-C1-1100WAC-P or 1 PWR-C1-1100WAC-P and 1 PWR-C1-715WAC-P/PWR-C1-715WDC

• Perpetual PoE: With Perpetual PoE, the PoE power is maintained during a switch reload. This is important for IoT endpoints such as PoE-powered lights, so that there is no disruption during switch reboot.
• Fast PoE: When power is restored to a switch, PoE starts delivering power to endpoints without waiting for the operating system to fully load, thereby speeding up the time for the endpoint to start up.

* C9300-48UN, C9300-24UX, C9300-48UXM are available with PWR-C1-1100WAC-P Platinum-rated power supply. Platinum-rated power supplies are more efficient, lowering operating power costs* PWR-C1-1100WAC-UP and PWR-C1-715WAC-UP Platinum-rated power supply upgrade options are available to upgrade the default AC power supply to 1100W or 715W

Software requirements

Cisco DNA Software for Access Switching is available for the Cisco Catalyst 9300 Series.

Cisco DNA Software for Access Switching offers comprehensive solutions for the enterprise campus and branch offices. Cisco DNA for Access Switching introduces a simpler and more economical way to deploy access, aggregation, and core switches across enterprise campus and branch locations.

The Cisco DNA Subscription for Switching offer delivers an unbound network on an open and extensible architecture to help you navigate the digital journey. This subscription offer simplifies the buying process and includes lower initiation costs and flexible terms. It includes: Cisco DNA Premier with full Cisco DNA capabilities and SD-Access, bundled with ISE Base, ISE Plus, and StealthWatch.

Cisco Catalyst 9300 Series switches run on Cisco IOS XE 16.5.1a release or later with the following exceptions. Catalyst 9300 Series 1G fiber models (C9300-xxS SKUs) are supported on Cisco IOS XE 16.11.1a release or later. Catalyst 9300 Series fixed uplink models (C9300L SKUs) are supported on Cisco IOS XE 16.11.1b release or later. These software releases includes all the features listed earlier in the Platform Benefits section.

Licensing

Packaging

The Cisco Catalyst 9000 family of switches introduces a new and simplified licensing package in the form of base and add-on licenses.

• The perpetual licensing package includes the Network Essentials and Network Advantage licensing options that are tied to the hardware. Between them, the base licensing packages cover switching fundamentals, management automation, troubleshooting, and advanced switching features. These Network licenses are perpetual.
• The subscription licensing package includes the Cisco DNA Essentials and Cisco DNA Advantage options. In addition to on-box capabilities, the features available with this package provide Cisco innovations on the switch, as well as on Cisco DNA Center. The Cisco DNA subscription licenses are mandatory at the time of configuration.

License consumption is easily determined by the package itself. While perpetual licenses are always permanent and without an expiration date, subscription licenses have to be purchased for a 3-, 5-, or 7-year term (and hence are also known as term-based licenses). Table 12 shows the combinations of perpetual and subscription licenses that must be purchased.

Licensing combinations

	Cisco DNA Essentials	Cisco DNA Advantage	Cisco DNA Premier
Network Essentials	Yes	No	No
Network Advantage	No*	Yes	Yes

*At the time of Cisco DNA license renewal, the Cisco DNA Essentials license can be purchased to be used with Network Advantage

Managing licenses with Smart Accounts: Creating Smart Accounts by using the Cisco Smart Software Manager (SSM) enables you to manage your software licenses from a centralized website. You can set up Cisco SSM to receive daily email alerts and to be notified of expiring subscription licenses that you want to renew.

You must order a Cisco DNA subscription term license in order to purchase a switch. When the license term expires, you can either renew the add-on license to continue using it or deactivate the add-on license and then reload the switch to continue operating with the base license capabilities.

Both the base and add-on licenses are also available for a 90-day evaluation period. An evaluation license is activated temporarily, without purchase. An expired evaluation license cannot be reactivated after reload.

Note: It is not required to deploy Cisco DNA Center just to use one of the above packages

Network Essentials and Advantage package features

Features	Network Essentials	Network Advantage
Switch fundamentals Layer 2, Routed Access (RIP, EIGRP Stub, OSPF - 1000 routes), PBR, PIM Stub Multicast (1000 routes)), PVLAN, VRRP, PBR, CDP, QoS, FHS, 802.1X, MACsec-128, CoPP, SXP, IP SLA Responder, SSO	✓	✓
Advanced switch capabilities and scale BGP, EIGRP, HSRP, IS-IS, BSR, MSDP, PIM-BIDIR,* IP SLA, OSPF	✗	✓
Network segmentation VRF, VXLAN, LISP, SGT, MPLS, mVPN	✗	✓
Automation NETCONF, RESTCONF, gRPC, YANG, PnP Agent, ZTP/Open PnP, GuestShell (On-Box Python)	✓	✓
Telemetry and visibility Model-driven telemetry, sampled NetFlow, SPAN, RSPAN	✓	✓
High availability and resiliency Nonstop Forwarding (NSF), Graceful Insertion and Removal (GIR), Fast Software Upgrade (FSU), Software Patching (CLI Based)	✗	✓
IOT integration AVB, PTP, CoAP	✗	✓
Security MACsec-256	✗	✓

Cisco DNA Essentials and Advantage package features (add a section for other software support and add Prime, ISE and Stealthwatch support)

Features	Cisco DNA Essentials	Cisco DNA Advantage	Cisco DNA Premier
Switch features
Optimized network deployments Cisco DNA Service for Bonjour	✗	✓	✓
Advanced telemetry and visibility Full Flexible NetFlow, EEM	✓	✓	✓
Optimized telemetry and visibility ERSPAN, AVC (NBAR2), app hosting (in containers/VMs), Wireshark	✗	✓	✓
Advanced security Encrypted Traffic Analytics (ETA)	✗	✓	✓
Cisco DNA Center features
Day-0 network bring-up automation Cisco Network Plug-and-Play application, network settings, device credentials, LAN automation, host onboarding	✓	✓	✓
Element management Discovery, inventory, topology, software image, licensing, and configuration management	✓	✓	✓
Element management Patch management	✗	✓	✓
Basic Assurance Health dashboards – Network, Client, Application; switch and wired client health monitoring	✓	✓	✓
SD-Access Policy-based automation and assurance for wired and wireless	✗	✓	✓
SD-Access Embedded Wireless C9800 Wireless Software package to enable Wireless Controller Functionality*	✗	✓	✓
Network assurance and analytics Global insights, trends, compliance, custom reports; switch 360, wired client 360; fabric and non-fabric insights; app health, app 360, app performance (loss, latency, jitter)	✗	✓	✓
Other Software included (can be purchased separately)
ISE Base	✗	✗	✓
ISE Plus	✗	✗	✓
StealthWatch	✗	✗	✓

Note: A purchase of Cisco DNA Advantage or Cisco DNA Premier per Access Point is required in order to enable the Wireless Controller functionality on Catalyst Switches