Cisco Catalyst 9300 Series Switches Data Sheet

 

Built to reimage connection, reinforce security and redefine experience

Cisco Catalyst 9300 Series switches are Cisco’s lead stackable enterprise access switching platform and as part of the Catalyst 9000 family, are built to transform your network to handle a hybrid world where the workplace is anywhere, endpoints could be anything, and applications are hosted all over the place.

The Catalyst 9300 Series, including the new Catalyst 9300X models, continues to shape the future with continued innovation that helps you reimagine connections, reinforce security and redefine the experience for your hybrid workforce big and small. With Catalyst 9300 switches, you choose how you want to manage your network – on-premises, virtual or from the cloud.

The many industry’s first include:

●      Up to 1TB of stacking bandwidth: With Stackwise-1T, Catalyst 9300 switches are the industry’s highest-density stacking bandwidth solution with the most flexible uplink architecture.

●      Flexible and dense uplink offerings with 100G, 40G, 25G, Multigigabit, 10G, and 1G modular uplinks.

●      Mixed Stacking with Backward Compatibility – Stack your Catalyst 9300X fiber switches with Catalyst 9300 and Catalyst 9300X Multigigabit switches, bringing stackable high-speed fiber to the access.

●      Highest Multigigabit Ports: With standalone and Stackwise-1T, Catalyst 9300X models enable 48 mGig ports in standalone and 448 mGig ports with an 8-member stack.

●      Highest 90W UPOE+ Density: Enable your OT/IT needs with up to 48 ports of 90W UPOE+ for standalone or 384 ports of 90W UPOE+ with an 8-member stack.

●      Stack Power with Backward Compatibility: Enable power resiliency with higher power budgets in mixed Catalyst 9300 and Catalyst 9300X stack.

●      100G IPsec in hardware: With the UADP 2.0Sec ASIC, the Catalyst 9300X models come with 100G line rate IPsec to enable various options for new edge connectivity.

●      Secure Tunnel connectivity: With the new edge, the C9300X enables secure connections to Secure Internet Gateway, Cloud Service Providers and Site to Site connectivity using IPsec tunnel with AES-256 Encryption and speeds up to 100G.

●      Enhanced Application Hosting: With 2x capacity and additional RAM, QAT, and 2 x 10G AppGig Ports, multiple Cisco Signed performance savvy applications can be hosted on Catalyst 9300X models.

●      ThousandEyes Enabled: End-to-end visualization of the path from campus/branch to clouds/DC with Cisco ThousandEyes Network and Application Synthetics (included with Cisco DNA Advantage licenses).

●      Cisco ASAc Firewall enabled: Using application hosting on Cisco Catalyst 9300 Switches, Cisco Adaptive Security Virtual Appliance (ASAc) and stateful inspection of traffic in a network can be seamlessly added to existing networks without any additional hardware.

●      Cloud management and monitoring: Cloud management and monitoring provides the ability to manage or view Catalyst 9300 switch statistics, configuration, and troubleshooting capabilities in Meraki dashboard.

●      Investment Protection: Catalyst 9300X redundant fans and power supplies, data stack and StackPower cables are backward compatible with the Catalyst 9300.

The Foundation of Software-Defined access

Advanced persistent security threats. The exponential growth of Internet of Things (IoT) devices. Mobility everywhere. Cloud adoption. All of these require a network fabric that integrates advanced hardware and software innovations to automate, secure, and simplify customer networks. The goal of this network fabric is to enable customer revenue growth by accelerating the rollout of business services.

The Cisco Networking Cloud with Software-Defined Access (SD-Access) is the network fabric that powers business. It is an open and extensible, software-driven architecture that accelerates and simplifies your enterprise network operations. The programmable architecture frees your IT staff from time- consuming, repetitive network configuration tasks so they can focus instead on innovation that positively transforms your business. SD-Access enables policy-based automation from edge to cloud with foundational capabilities. These include:

●      Simplified device deployment

●      Unified management of wired and wireless networks

●      Network virtualization and segmentation

●      Group-based policies

●      Context-based analytics

Cisco Catalyst, Cisco DNA and Meraki Software

Cisco Catalyst, Cisco DNA and Meraki Software subscriptions offer a valuable and flexible way to buy software for the access, WAN, and data center domains. At each stage in the product lifecycle, Cisco Catalyst, Cisco DNA and Meraki Software helps make buying, managing, and upgrading your network and infrastructure software easier. Cisco software provides:

●      Flexible licensing models to smoothly distribute customers’ software spending over time.

●      Investment protection for software purchases through software services–enabled license portability.

●      Access to updates, upgrades, and new technology from Cisco through CiscoSoftware Support Services (SWSS).

●      Lower cost of entry with the new Cisco Catalyst Software Subscription for Switching support model.

●      Choose what management model works best for you – on-premises, virtual or in the cloud.

●      Access to end-to-end network visibility with Cisco Spaces, service assurance through Cisco ThousandEyes Network and Application Synthetics and Cisco ASAc firewall (with Cisco Catalyst and Cisco DNA Advantage licenses).

Cisco Catalyst 9300 Series switches lets you manage your entire switching structure as a single, converged component. With one management system, whether on-premises or in the cloud, and one policy for wired and wireless networks, it offers an efficient way to provide more secure access.

Product overview

Product highlights

●      Highest wireless scale for Wi-Fi 6 and 802.11ac Wave 2 access points supported on a single switch with select models.

●      Catalyst 9300 and Catalyst 9300L/LM models are based on the Cisco UADP 2.0 Application-Specific Integrated Circuit (ASIC) with programmable pipeline and micro-engine capabilities, along with template-based, configurable allocation of Layer 2 and Layer 3 forwarding, Access Control Lists (ACLs), and Quality of Service (QoS) entries.

●      Catalyst 9300X models are based on UADP 2.0sec ASIC which adds line rate support for Crypto, including 100G hardware-based IPsec.

●      x86 CPU complex with 8-GB memory, and 16 GB of flash and external USB 3.0 SSD pluggable storage slot (delivering up to 240GB of storage with an option SSD drive) to host containers. C9300X models support 16GB of memory.

●      USB 2.0 slot to load system images and set configurations.

●      Up to 1 TBps of local stackable switching bandwidth with Catalyst 9300X models.

●      Deeper buffer and higher scale model options for rich multi-media content delivery applications.

●      Flexible and dense uplink offerings with 100G, 40G, 25G, Multigigabit, 10G, and 1G as fixed or modular uplinks.

●      Easy transition from 40G to 100G and 10G to 25G with dual-rate optics.

●      Flexible downlink options with 25G, 10G and 1G Copper and Fiber as well as the densest Multigigabit links.

●      With a mix of copper (1G up to 10G) and fiber (1G up to 25G) supported in a single stack, multiple flexible deployment scenarios are enabled, including 2-Tier, 3-Tier and Hybrid architectures.

●      Leading PoE capabilities with up to 384 ports of PoE per stack, PoE+, and 288 ports high density IEEE 802.3bt-90W UPOE+, and 60W Cisco UPOE.

●      Intelligent Power Management with Cisco StackPower technology, providing power stacking among members for power redundancy. StackPower pools the power supplies across the stack to be used redundancy and supplemental power purposes.

●      Line-rate, hardware-based Flexible NetFlow (FNF), delivering flow collection of up to 128,000 flows with select models.

●      IPv6 support in hardware, providing wire-rate forwarding for IPv6 networks.

●      Dual-stack support for IPv4/IPv6 and dynamic hardware forwarding table allocations, for ease of IPv4-to-IPv6 migration.

●      Support for both static and dynamic NAT and Port Address Translation (PAT).

●      IEEE 802.1ba AV Bridging (AVB) built in to provide a better audio and video experience through improved time synchronization and QoS.

●      Precision Time Protocol (PTP; IEEE 1588v2) provides accurate clock synchronization with sub-microsecond accuracy making it suitable for distribution and synchronization of time and frequency over network.

●      Cisco IOS XE, a modern operating system for the enterprise with support for model-driven programmability including NETCONF, RESTCONF, YANG, on-box Python scripting, streaming telemetry, container-based application hosting, and patching for critical bug fixes. The OS also has built-in defenses to protect against runtime attacks.

●      End-to-end visualization of the path from campus/branch to clouds/DC with Cisco ThousandEyes Network and Application Synthetics (included with Cisco Catalyst and DNA Advantage license).

●      Fully managed Meraki cloud customers are able to take advantage of power of Catalyst 9300 switching in their Meraki cloud through the cloud-management service.

●      SD-Access: Cisco Catalyst 9300 Series switches form the foundational building block for SD-Access, Cisco’s lead enterprise architecture:

◦    Policy-based automation from edge to cloud.

◦    Simplified segmentation and micro-segmentation, with predictable performance and scalability.

◦    Automation through Cisco Catalyst Center and Meraki Dashboard.

◦    Policy handled through the Cisco Identity Services Engine (ISE).

◦    Network assurance provided through the Cisco Catalyst Center and Meraki Dashboard.

◦    Faster launch of new business services and significantly improved issue resolution time.

●      Plug and Play (PnP) enabled: A simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or updates to an existing network.

●      Advanced security

◦    Encrypted Traffic Analytics (ETA): You benefit from the power of machine learning to identify and take actions toward threats or anomalies in your network, including malware detection in encrypted traffic (without decryption) and distributed anomaly detection.

◦    Support for AES-256 with the powerful MACsec 256-bit encryption algorithm available on all models.

◦    Trustworthy solutions: Hardware anchored Secure Boot and Secure Unique Device Identification (SUDI) support for Plug and Play, to verify the identity of the hardware and software.

Platform details

Switch models and configurations

Table 1.        Product Family Configurations

The Cisco Catalyst 9300 Series is made up of nineteen modular uplink switch models and fourteen fixed uplink switch models.

Cisco Catalyst 9300 Series switches

Table 2 lists port scale and power details for the Cisco Catalyst 9300 Series models.

Table 2.        Cisco Catalyst 9300 Series switch configurations

Network Modules

Cisco Catalyst 9300 Series switches (C9300X and C9300 SKUs) support optional network modules for uplink ports (Figure 2). These field-replaceable network modules with 25G and 40G speeds in the Cisco Catalyst 9300 Series enable greater architectural flexibility and infrastructure investment protection by allowing a nondisruptive migration from 10G to 25G and beyond. The default switch configuration does not include the network module. When you purchase the switch, you can choose from the network modules described in Table 2.

Cisco Catalyst 9300X Network Modules

Cisco Catalyst 9300 Series Network Modules

Table 3.        Network module numbers and descriptions

^*C9300X-NM-4C is compatible only with C9300X-48HX, C9300X-48TX and C9300X-24Y models.

Please note: Catalyst 3850 and Catalyst 9300 network modules are supported on the Catalyst 9300 models. Catalyst 9300X network modules are only supported on the Catalyst 9300X models.

For additional details, please read our FAQs:
https://www.cisco.com/c/dam/en/us/products/collateral/switches/catalyst-9300-series-switches/nb-09-cat-9k-faq-cte-en.pdf.

Power supplies

Cisco Catalyst 9300 Series switches support dual redundant power supplies. The switches ship with one power supply by default, and the second power supply can be purchased when the switch is ordered or at a later time. If only one power supply is installed, it should always be in power supply bay #1. The switches also ship with three field-replaceable fans. Power Supplies are common across the Catalyst 9300 Series.

Cisco Catalyst 9300 Series Dual Redundant power supplies

Table 4 lists the different power supplies available in these switches and available PoE power.

Table 4.        Power supply models

 

Stacking

Cisco Catalyst 9300 Series switch models are designed for stacking switches as a single virtual switch, enabling customers to have a single management plane and control plane for up to 448 access ports.

Cisco Catalyst 9300 Series modular uplink models stack (C9300/C9300X SKUs) and fixed uplink models stack
(C9300L SKUs)

Table 5 lists the supported stacking options.

Table 5.        Supported stacking options

Mixed stacking between Catalyst 9300X and Catalyst 9300 models are supported at StackWise-480 speeds.

Mixed stacking between Catalyst 9300 and Catalyst 9300X and Catalyst 9300 higher scale models (C9300-24UB, C9300-24UXB, C9300-48UB) is not supported. You cannot stack fixed uplink models (C9300L SKUs) with modular uplink models (C9300 SKUs) or other Catalyst switches, e.g. Cisco Catalyst 3850 and 3650 Series. Any combination of Catalyst 9300 models can form a stack. Separately, any combination of Catalyst 9300L models can form a stack.

Catalyst 9300 higher scale SKUs (C9300-24UB, C9300-24UXB, C9300-48UB) need to be stacked with other higher scale models.

StackWise cables that are available to configure stacking with Catalyst 9300 Series modular uplink models (C9300X and C9300 SKUs) come in lengths of 0.5m, 1m and 3m.

The optional StackWise-320 kit for Catalyst 9300 Series fixed uplink models (C9300L and 9300LM SKUs) consists of two stack adapters and a stacking cable. The default stacking cable is 0.5 m, but options of 1m and 3m are also available. Table 6 lists the stacking accessories.

Table 6.        Stacking accessories

 

Cisco Catalyst 9300 Series fixed uplink models with optional stack kit

Fan

Cisco Catalyst 9300 Series switches also come with three field-replaceable fans and support (N+1) redundancy. Table 7 lists the fan module part number.

Table 7.        Fan modules

Performance and scalability

Performance and scalability metrics for the Cisco Catalyst 9300 Series are provided in Table 8.

Performance specifications

Table 8.        Performance specifications

Bandwidth specifications

Table 9.        Bandwidth specifications

All models are at wire-speed nonblocking performance for both IPv4 and IPv6. The forwarding rates in the table above are measured with 64 byte IPv4 packet sizes.

SD-Access architecture

What if you could give time back to IT? Provide network access in minutes for any user or device to any application – without compromise? SD-Access is the industry’s first policy-based automation from network edge to cloud. Your foundation for your digital network, Cisco SD-Access. Built on the principles of the Cisco DNA, SD-Access provides end-to-end segmentation to keep user, device and application traffic separate without a redesign of the network. It automates user access policy so organizations can make sure the right policies are set for any user or device with any application across the network. This is accomplished with a single network fabric across LAN and WLAN which creates a consistent user experience anywhere without compromising on security.

There are many challenges today in managing the network to drive business outcomes. These limitations are due to manual configuration and fragmented tool offerings. SD-Access provides:

●      A transformational management solution that reduces operational expenses and enhances business agility.

●      Consistent management of wired and wireless network provisioning and policy.

●      Automated network segmentation and group-based policy.

●      Contextual insights for fast issue resolution and capacity planning.

●      Open and programmable interfaces for integration with third-party solutions.

For an overview of key use-cases SD-Access addresses, refer to SD-Access Solution Overview.

Platform benefits

Cisco IOS XE opens a completely new paradigm in network configuration, operation, and monitoring through network automation. Cisco’s automation solution is open, standards-based, and extensible across the entire lifecycle of a network device. The various automation mechanisms are outlined below.

●      Automated device provisioning is the ability to automate the process of upgrading software images and installing configuration files on Cisco Catalyst switches when they are being deployed in the network for the first time. Cisco provides both turnkey solutions such as Plug and Play and off-the-shelf tools such as Zero-Touch Provisioning (ZTP) and Preboot Execution Environment (PXE) that enable an effortless and automated deployment.

●      API-driven configuration is available with modern network switches such as the Cisco Catalyst 9300 Series. It supports a wide range of automation features and provides robust open APIs over NETCONF and RESTCONF and GNMI using YANG data models for external tools, both off-the-shelf and custom built, to automatically provision network resources.

●      Granular visibility enables model-driven telemetry to stream data from a switch to a destination. The data to be streamed is identified through subscription to a data set in a YANG model. The subscribed data set is streamed to the destination at specified intervals. Additionally, Cisco IOS XE enables the push model. It provides near-real-time monitoring of the network, leading to quick detection and rectification of failures.

●      Seamless software upgrades and patching supports OS resilience. Cisco IOS XE supports patching, which provides fixes for critical bugs and security vulnerabilities between regular maintenance releases. This support lets you add patches without having to wait for the next maintenance release.

Security

●      Encrypted Traffic Analytics (ETA) is a unique capability for identifying malware in encrypted traffic coming from the access layer. Since more and more traffic is becoming encrypted, the visibility this feature affords for threat detection is critical for keeping your network secure at different layers.

●      AES-256 MACsec encryption is the IEEE 802.1AE standard for authenticating and encrypting packets between switches. The Cisco Catalyst 9300 Series switches support 256-bit and 128-bit Advanced Encryption Standard (AES), providing the most secure link encryption.

●      IPsec encryption delivers secure end-to-end encrypted traffic between sites and connectivity to the Cloud. C9300X models support line rate IPsec up to 100 Gbps delivering uncompromised secure connectivity.

●      Trustworthy solutions built with Cisco Trust Anchor Technologies provide a highly secure foundation for Cisco products. With the Catalyst 9300 Series, these technologies enable hardware and software authenticity assurance for supply chain trust and strong mitigation against man-in-the-middle attacks that compromise software and firmware. Trust Anchor capabilities include:

◦    Image signing: Cryptographically signed images provide assurance that the firmware, BIOS, and other software are authentic and unmodified. As the system boots, the system’s software signatures are checked for integrity.

◦    Secure Boot: Cisco Secure Boot technology anchors the boot sequence chain of trust to immutable hardware, mitigating threats against a system’s foundational state and the software that is to be loaded, regardless of a user’s privilege level. It provides layered protection against the persistence of illicitly modified firmware.

◦    Cisco Trust Anchor module: A tamper-resistant, strong cryptographic, single-chip solution provides hardware authenticity assurance to uniquely identify the product so that its origin can be confirmed to Cisco. This provides assurance that the product is genuine.

Cloud Security

●      Umbrella DNS Integration:

Small to midsize networks reliant on managed service providers can now host Cisco Umbrella agent directly on their Catalyst 9300 Series switches. This allows the business to easily customize their DNS filtering policies granularly at user or group level to prevent BYOD or IoT guest or corporate users from accessing malicious or inappropriate websites, without having to rely on the MSP to push the policies out. It also lets them optimize use of bandwidth by allowing direct cloud access for trusted apps. Requires Cisco Catalyst and Cisco DNA Advantage License and Umbrella License per device.

●      Cisco ASAc App hosting Integration:

The integration of ASAc on Cisco Catalyst 9000 switches simplifies the network design by providing the flexibility to plug in small-form factor firewalls in the network closer to the source. It also avoids complex tunnels to centralized firewalls. This design lowers the total cost of ownership by reducing the number of physical firewall appliances in the network.

The ASAc Firewall App hosting solution hosts a virtual firewall or ASAc on Cisco Catalyst 9300 switches. All the physical firewalls next to a switch can be virtualized and deployed on the switch itself. As in a traditional network, the SecOps manage the ASAc firewalls deployed on the Catalyst switches, and the NetOps teams instantiate the application and perform lifecycle management using Cisco Catalyst Center. The SecOps team controls policy management using the Cisco Defense Orchestrator. Both the SecOps and NetOps teams can seamlessly manage the network without any disruptions.

The container-version of the Cisco ASAc provides full firewall functionality to secure IT, OT, and IoT converged networks. ASAc uses Layer 3 firewall policies and does a stateful inspection of the traffic.

The ASAc firewall runs on a 240G external Solid-State Drive (SSD) that is mounted on a Cisco Catalyst 9300 Series switch. Cisco Catalyst Center deploys the ASAc on these Catalyst switches, and ASAc is then onboarded to the Cisco Defense Orchestrator.

Service Assurance

●      Cisco ThousandEyes Integration:

Deliver superior network and service experience for your users, employees and partners with groundbreaking observability from network to app. Cisco ThousandEyes network tests are now integrated into Cisco Catalyst 9300 Series switches with Cisco Catalyst and Cisco DNA Advantage licenses, giving you visibility beyond your campus perimeter so you solve issues faster. The Cisco ThousandEyes Network and Application Synthetics license is included by default upon the selection of a Cisco Catalyst and Cisco DNA Advantage option with a 3 year, 5 year or a 7 year subscription. Please see this guide for more information about the free Cisco ThousandEyes entitlements that come with your Cisco Catalyst 9300 or 9400 Series Cisco DNA Advantage subscription.

Resiliency and high availability

●      StackWise-1T: Cisco Catalyst 9300 Series modular uplink models (C9300X SKUs) support the industry’s highest back-panel stacking bandwidth solution (1Tbps) with StackWise-1T. Up to 8 Switches can be configured in a StackWise-1T with the special connector at the back of the switch using dedicated stack cables.

●      StackWise-480: Cisco Catalyst 9300 Series modular uplink models (C9300 SKUs) support high-speed back-panel stacking bandwidth solution (480 Gbps) with StackWise-480. Up to 8 Switches can be configured in a StackWise-480 with the special connector at the back of the switch using dedicated stack cables.

●      StackWise-320: Cisco Catalyst 9300 Series fixed uplink models (C9300L and C9300LM SKUs) support stacking bandwidth solution (320 Gbps) with StackWise-320. Up to 8 Switches can be optionally configured in a StackWise-320 with the special Stack Kit at the back of the switch using dedicated stack cables.

●      Cisco StackPower: Cisco StackPower is an innovative power interconnect system that allows the power supplies in a stack to be shared as a common resource among all the switches. This allows you to simply add one extra power supply in any switch of the stack and either provide power redundancy for any of the stack members or simply add more power to the shared pool. Up to 4 switches can be configured in a StackPower stack with the special connector at the back of the switch. However, with the use of XPS-2200 appliance, up to 8 switches can be configured in the StackPower stack. Cisco StackPower is only supported on the models with modular uplink stack - C9300 and C9300X SKUs. C9300X models support StackPower+ delivering more power over StackPower cables compared to C9300 models.

Cisco Catalyst 9300 Series StackPower

●      High availability: The Catalyst 9300 Series supports high-availability features, including the following:

◦    Cross-stack EtherChannel provides the ability to configure Cisco EtherChannel technology across different members of the stack for high resiliency.

◦    Flexlink+: Flexlink+ allows the setting up of active and backup interfaces or port channels, which can provide Layer 2 failover redundancy without the use of Spanning Tree Protocol (STP).

◦    Extended Fast Software Upgrade provides the ability to upgrade the platform software or to reload the system in under 30 seconds of traffic impact; both stand-alone and stack configurations.

◦    IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) provides rapid spanning tree convergence independent of spanning tree timers and also offers the benefit of Layer 2 load balancing and distributed processing.

◦    Per-VLAN Rapid Spanning Tree (PVRST+) allows rapid spanning tree (IEEE 802.1w) reconvergence on a per-VLAN spanning tree basis, providing simpler configuration than MSTP. In both MSTP and PVRST+ modes, stacked units behave as a single spanning tree node.

◦    Switch-port auto-recovery (“err-disable” recovery) automatically attempts to reactivate a link that is disabled because of a network error.

◦    The Catalyst 9300 Series platform delivers the best NSF/SSO resiliency architecture in a stackable solution with sub-50-ms failover.

◦    Always-On wireless network with stateful switchover when wireless functionality is enabled on stack of Catalyst 9300 Series switches.

Deep buffer Technology

Cisco Catalyst 9300 higher scale models have a deeper buffer to address the requirements of rich multi-media lossless content delivery and large routing tables in a fixed access solution with a wide range of uplink choices for deployment flexibility.

Flexible NetFlow

●      Flexible NetFlow (FNF): Cisco IOS Software FNF is the next generation in flow visibility technology. It enables optimization of the network infrastructure, reduces operation costs, and improves capacity planning and security incident detection with increased flexibility and scalability. The Catalyst 9300 Series is capable of up to 64,000 flow entries on 48-port, 24-port and 12-port models and up to 128,000 flow entries on Multigigabit models.

Application visibility and control

●      NBAR2: Next-Generation Network-Based Application Recognition (NBAR2) enables advanced application classification techniques, accuracy with up to 1400 predefined and well-known application signatures and up to 150 encrypted applications on the Cisco Catalyst 9000 switches. The most popular applications included are Skype, Office 365, Microsoft Lync, Cisco WebEx, and Facebook, among many others that are predefined and easy to configure. NBAR2 provides the network administrator with an important tool to identify, control, and monitor end-user application usage while helping ensure a quality user experience and securing the network from malicious attacks. NBAR2 leverages FNF to report application performance and activities within the network to any supported NetFlow collector, such as Cisco Prime, Cisco Stealthwatch, or any compliant third-party tool.

QoS

●      Superior QoS: The Cisco Catalyst 9300 Series offers Gigabit Ethernet speeds with intelligent services that keep traffic flowing smoothly, even at 10 times the normal network speed. Industry-leading mechanisms for cross-stack marking, classification, and scheduling deliver superior performance for data, voice, and video traffic at wire speed. Superior QoS includes granular wireless bandwidth management and fair sharing, 802.1p Class of Service (CoS) and Differentiated Services Code Point (DSCP) field classification, Shaped Round Robin (SRR) scheduling, Committed Information Rate (CIR), and eight egress queues per port.

Service discovery

●      Multicast DNS (mDNS) gateway: This service discovery gateway capability facilitates sharing of services advertised using the Apple mDNS (Bonjour) protocol, such as printers, Apple TVs, and file services across the network. Additionally, the administrator can create policies defining which services can be seen and accessed by the users in the network. This capability facilitates a Bring-Your-Own-Device (BYOD) rollout.

Smart operation

●      Simplified Campus Automation is designed to optimize the discovery and configuration of devices in your network with a more streamlined simple and easy-to-use automation tool. With features such as simplified discovery, IT can discover devices within the network within just a few steps. Also available is a more streamlined GUI that provides a better simplified view of switch configurations and software details on a port-by-port basis.

●      Meraki dashboard monitoring and management: Catalyst 9300 Series switches can be ordered or migrated to be Meraki Dashboard managed, combining the simplicity of the Meraki dashboard with the power of Catalyst 9000 switching. All configuration and monitoring performed natively in the dashboard.

●      WebUI: WebUI is an embedded GUI-based device-management tool that provides the ability to provision the device, to simplify device deployment and manageability, and to enhance the user experience. It comes with the default image, so there is no need to enable anything or install any license on the device. You can use WebUI to build configurations, and to monitor and troubleshoot the device without having CLI expertise.

●      Efficient switch operation^*: Cisco Catalyst 9300 Series switches provide optimum power saving with Energy Efficient Ethernet (EEE) on the RJ-45 ports and low-power operations for industry best-in-class power management and power consumption capabilities. The ports support reduced power modes so that ports not in use can move into a lower power utilization state. Other efficient switch operation features are as follows:

◦    Per-port power consumption command allows customers to specify a maximum power setting on an individual port.

◦    Per-port PoE power sensing measures actual power being drawn, enabling more intelligent control of powered devices. The PoE MIB provides proactive visibility into power usage and allows you to set different power-level thresholds.

●      RFID tags: Catalyst 9300 Series switches have an embedded RFID tag that facilitates easy asset and inventory management using commercial RFID readers.

●      Blue beacon: Catalyst 9300 Series switches support a blue beacon LED for easy identification of the switch being accessed.

Open standards based fabric

The Cisco Catalyst 9300 Series Switches support modern fabric technologies such as VXLAN with BGP-EVPN control plane, with open APIs. This technology provides the flexibility to build open standards-based fabrics to secure infrastructure, users and data. This fabric architecture provides rich unicast and multicast protocol support to optimally route or bridge traffic as well as support for integrated campus services all of which can be automated via open APIs to effectively configure and monitor the network.

Programmability

Cisco IOS XE provides open standards-based APIs such as NETCONF, RESTCONF, gNMI to simplify provisioning and configuration, that allows network administrators to save time when provisioning new network devices and to prevent the human errors that often are a byproduct of manual configuration. Integrating Zero Touch Provisioning with various DevOps toolkits allows network admins to drastically reduce the time and resources needed to onboard a device onto their network. The ability to collect real-time statistics through model driven telemetry through gRPC and gNMI allows administrator to integrate to many health monitoring tools to optimize their environments and to troubleshoot and provide alerts about any potential problems.

High-Performance IP routing

The Cisco Express Forwarding hardware routing architecture delivers extremely high-performance IP routing in Cisco Catalyst 9300 Series switches, based on:

●      IP unicast routing protocols (including static, Routing Information Protocol Version 1 [RIPv1], RIPv2, RIPng, and Open Shortest Path First [OSPF], Routed Access) are supported for small network routing applications with the Network Essentials stack. Equal-cost routing facilitates Layer 3 load balancing and redundancy across the stack.

●      Advanced IP unicast routing protocols (including Full [OSPF], Enhanced Interior Gateway Routing Protocol [EIGRP], Border Gateway Protocol Version 4 [BGPv4], and Intermediate System-to-Intermediate System Version 4 [IS-ISv4]) are supported for load balancing and for constructing scalable LANs. IPv6 routing (using OSPFv3 and BGPv6) is supported in hardware for maximum performance.

●      Protocol-Independent Multicast (PIM) for IP multicast routing is supported, including PIM Sparse Mode (PIM SM), and Source-Specific Multicast (SSM).

●      IPv6 addressing is supported on interfaces with appropriate show commands for monitoring and troubleshooting.

Audio Video Bridging (AVB)

Starting with Cisco IOS XE Software Release 16.8, the Cisco Catalyst 9300 Series supports the IEEE 802.1 AVB standard. This standard provided the means for highly reliable delivery of low-latency, time-synchronized audio and video streaming services through Layer 2 Ethernet networks. The standard also makes it easier to integrate new services and for AV equipment from different vendors to interoperate.

Benefits

●      Improves quality of experience by lowering jitter and latency for time-synchronized delivery of high-quality AV.

●      Provides scalability of applications across networked deployments, including expansive and complex AV infrastructure.

●      Lowers Total Cost of Ownership (TCO) with reduced cabling (lowers CapEx) and no license fees
(lowers OpEx).

For more details about AVB and specific models supported, check https://www.cisco.com/go/avb.

Multigigabit Ethernet technology

Cisco Multigigabit Ethernet technology allows you to achieve bandwidth speeds from 1 Gbps to 10 Gbps over traditional Category 5e/6 cabling or above. This technology addresses the need for exponential increases in bandwidth with the enormous growth of 802.11ac Wave 2, to be eclipsed by the growth of Wi-Fi 6 and new wireless applications without having to replace current cabling infrastructure.

Multiprotocol label switching (MPLS)

The Cisco Catalyst 9300 Series Switches support Multiprotocol label switching (MPLS) which combines the performance and capabilities of Layer 2 (data link layer) switching with the proven scalability of Layer 3 (network layer) routing. MPLS enables the explosive growth in network utilization while providing the opportunity to differentiate services without sacrificing the existing network infrastructure. MPLS support includes

●      MPLS L3 VPN: An MPLS Virtual Private Network (VPN) consists of a set of sites that are interconnected by means of a Multiprotocol Label Switching (MPLS) provider core network. At each customer site, one or more customer edge (CE) devices attach to one or more provider edge (PE) devices.

●      VPLS: VPLS (Virtual Private LAN Service) enables enterprises to link together their Ethernet-based LANs from multiple sites via the infrastructure provided by their service provider.

●      EoMPLS: EoMPLS is a category of Any Transport over MPLS (AToM) to transport Layer 2 packets over an MPLS backbone.

●      MPLS over GRE: L3VPN over GRE and VPLS over GRE, are supported to tunnel MPLS/VPLS packets over non-MPLS networks utilizing GRE tunneling.

Power over Ethernet leadership

Cisco Universal Power over Ethernet (Cisco UPOE and Cisco UPOE+): PoE removes the need for wall sockets to power each PoE-enabled device and eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments. Cisco UPOE extends the IEEE PoE+ standard to double the power per port to 60 watts. This facilitates delivery of network power to a broad range of devices requiring higher power, including virtual desktop terminals, IP turrets, compact switches, building management gateways, LED lights, wireless access points, and IP phones. Designed for smart building and IoT applications, Cisco Catalyst 9300 UPOE+ switches (delivering PoE power up to 90W) provide data and power over a single cable to power devices like wireless access points, digital signage, security cameras, thermal cameras with PTZ features, LED lighting fixtures and large display screens. UPOE+ offers reduced cabling and installation costs without need for permits, device daisy-chaining application that require higher power draw, real-time device information, centralized management and remote control, faster and flexible device installation where devices can be positioned in a practical location instead of proximity to the electrical outlets.

Catalyst 9300 Series modular uplink (C9300 and C9300X SKUs) models support Cisco, Cisco UPOE, PoE+ and PoE, thereby addressing the largest range of network power needs.

Catalyst 9300 Series fixed uplink (C9300LM SKUs) models support Cisco UPOE or PoE+ and PoE.

Catalyst 9300 Series fixed uplink (C9300L SKUs) models support Cisco UPOE or PoE+ and PoE.

Tables 10 and 11 show the power supply combinations required for different PoE needs.

Table 10.     Power supply requirements for Catalyst 9300 Series modular uplink PoE/PoE+ models (C9300-xxP SKUs)

Table 11.     Power supply requirements for Catalyst 9300 Series UPOE models
(C9300-xxU/UB/UXM/UN, C9300L-xxUXG-xx SKUs)

Table 12.     Power supply requirements for Catalyst 9300 Series UPOE+ models (C9300-xxH SKUs)

Table 13.     Power supply requirements for Catalyst 9300 Series fixed uplink PoE/PoE+ models (C9300L-xxP SKUs)

●      Perpetual PoE: With Perpetual PoE, the PoE power is maintained during a switch reload. This is important for IoT endpoints such as PoE-powered lights, so that there is no disruption during switch reboot.

●      Fast PoE: When power is restored to a switch, PoE starts delivering power to endpoints without waiting for the operating system to fully load, thereby speeding up the time for the endpoint to start up.

Software requirements

Cisco Catalyst and Cisco DNA Software for Access Switching is available for the Cisco Catalyst 9300 Series. Meraki Software for cloud management is also available for certain models.

Cisco Catalyst and Cisco DNA Software for Access Switching offers comprehensive solutions for the enterprise campus and branch offices. Cisco Catalyst and Cisco DNA for Access Switching introduces a simpler and more economical way to deploy access, aggregation, and core switches across enterprise campus and branch locations.

The Cisco Catalyst and Cisco DNA Subscription for Switching offer delivers an unbound network on an open and extensible architecture to help you navigate the digital journey. This subscription offer simplifies the buying process and includes lower initiation costs and flexible terms. It includes: Cisco Catalyst and Cisco DNA Advantage Software with full Cisco DNA capabilities and SD-Access, bundled with ISE Base, ISE Plus, and StealthWatch.

For ordering information for Cisco Catalyst and Cisco DNA Software for the Cisco Catalyst 9300 Series, go to https://www.cisco.com/c/en/us/products/software/one-access/switching-part-numbers.html.

Cisco Catalyst 9300 Series switches run on Cisco IOS XE 16.5.1a release or later with the following exceptions. Catalyst 9300 Series 1G fiber models (C9300-xxS SKUs) are supported on Cisco IOS XE 16.11.1a release or later. Catalyst 9300 Series fixed uplink models (C9300L SKUs) are supported on Cisco IOS XE 16.11.1b release or later. These software releases include all the features listed earlier in the Platform Benefits section.

The Meraki Software option combines the simplicity of the Meraki dashboard with power of Catalyst 9000 switching hardware. To satisfy high-bandwidth applications and the deployment of high-speed 802.11ax/Wi-Fi 6/6E access points, the Meraki Software option provides multigigabit ports, 480G stacking, and modular 10/40G uplinks. Catalyst 9300 models with the Meraki Software option deliver resiliency with fast stack convergence and StackPower. They provide Adaptive Policy using an over-the-wire tag which segments traffic into security groups to deliver scalable security. The Catalyst 9300 models integrated under the Meraki dashboard provide a simple, powerful solution to the most demanding wired access applications.

Catalyst 9300 model switches come with Adaptive Policy to provide simple and scalable security policies to segment traffic using Security Groups in Meraki Dashboard. Security Groups are created in the dashboard using natural language such as “IoT device” and “Guest.” The security policy intent (e.g. Permit or Deny) is then simply provisioned between Security Groups which results in the segmentation of each group’s traffic. By making security policy management intuitive and scalable relative to legacy IP-address based Access Control Lists, Adaptive Policy empowers operators to confidently secure their network traffic independent of future network changes.

Catalyst 9300 Series switches can be order directly or migrated to the Meraki software option. For model compatibility and more information, please see Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard.

You can also refer to Meraki datasheets providing details of models orderable with the Meraki software option (Catalyst C9300-M Datasheet, Catalyst C9300X-M Datasheet, Catalyst C9300L-M Datasheet) as well as supported optics and accessories.

Licensing Packaging

The Cisco Catalyst 9000 family of switches introduces a new and simplified licensing package in the form of base and add-on licenses.

●      The perpetual licensing package includes the Network Essentials and Network Advantage licensing options that are tied to the hardware. Between them, the base licensing packages cover switching fundamentals, management automation, troubleshooting, and advanced switching features. These Network licenses are perpetual.

The subscription licensing package includes the Cisco Catalyst and Cisco DNA Essentials, Cisco Catalyst and Cisco DNA Advantage and Meraki Advanced and Enterprise options. In addition to on-box capabilities, the features available with this package provide Cisco innovations on the switch, as well as on Cisco Catalyst Center. and Meraki Dashboard. For Catalyst 9300 models ordered with a Network Essentials and Network Advantage license, a Cisco Catalyst or Cisco DNA subscription license is mandatory at the time of configuration. For Catalyst 9300 models ordered with a Meraki SKU, the term license is ordered separately but is required to be recognized in Meraki Dashboard. With Cisco Catalyst and Cisco DNA software licenses, customers receive embedded SWSS – which covers 24x7x365 Cisco Technical Assistance Center (TAC) support, software release updates, advanced support analytics, and designated service management. This is valid only for the Cisco Catalyst and Cisco DNA Software subscription stacks (Cisco Catalyst and Cisco DNA Essentials or Advantage).

Note: For full hardware support, including the perpetual network stack, customers will require Smart Net Total Care for 24x7x365 Cisco Technical Assistance Center (TAC) support, proactive security and product alerts, and product lifecycle management. An additional option for hardware support is Solution Support for your multivendor Cisco solution environment.

License consumption is easily determined by the package itself. While Network Essentials and Network Advantage perpetual licenses are always permanent and without an expiration date, subscription licenses have to be purchased for a 3-, 5-, or 7-year term (and hence are also known as term-based licenses). Table 14 shows the combinations of Network perpetual and Cisco Catalyst and Cisco DNA Software subscription licenses that must be purchased.

Table 14.     Cisco Catalyst, Cisco DNA and Network Licensing combinations

Managing licenses with Smart Accounts

Creating Smart Accounts by using the Cisco Smart Software Manager (SSM) enables you to manage your software licenses from a centralized website. You can set up Cisco SSM to receive daily email alerts and to be notified of expiring subscription licenses that you want to renew.

You must order a Cisco Catalyst or Cisco DNA subscription term license in order to purchase a switch with Network Essentials or Network Advantage perpetual licenses. When the license term expires, you can either renew the add-on license to continue using it or deactivate the add-on license and then reload the switch to continue operating with the base license capabilities.

Both the base and add-on licenses are also available for a 90-day evaluation period. An evaluation license is activated temporarily, without purchase. An expired evaluation license cannot be reactivated after reload.

Note:      It is not required to deploy Cisco Catalyst Center just to use Cisco Catalyst, Cisco DNA or Network packages. Meraki Dashboard is required to deploy a Catalyst 9300 switch with a Meraki software license.

Introduction to Smart Licensing

Cisco Smart Licensing is a flexible licensing model that provides you with an easier, faster, and more consistent way to purchase and manage software across the Cisco portfolio and across your organization. And it’s secure – you control what users can access. With Smart Licensing you get:

●      Easy Activation: Smart Licensing establishes a pool of software licenses that can be used across the entire organization—no more PAKs (Product Activation Keys).

●      Unified Management: My Cisco Entitlements (MCE) provides a complete view into all of your Cisco products and services in an easy-to-use portal, so you always know what you have and what you are using.

●      License Flexibility: Your software is not node-locked to your hardware, so you can easily use and transfer licenses as needed.

To use Smart Licensing, you must first set up a Smart Account on Cisco Software Central (software.cisco.com).

For a more detailed overview on Cisco Licensing, go to cisco.com/go/licensingguide.

Software licenses

There are three choices for software subscription: Cisco DNA, Cisco Catalyst or Cisco Meraki. They provide:

●      Flexible licensing models to smoothly distribute customers’ software spending over time.

●      Investment protection for software purchases through software services–enabled license portability.

●      Access to updates, upgrades, and new technology from Cisco through Cisco Software Support Services (SWSS).

●      Base product-level support for hardware, software, and Cisco IOS (Catalyst Software only).

●      ISE licenses included in the Advantage tier to facilitate zero-trust network security^* (Catalyst Software only).

●      Access to end-to-end network visibility with Cisco Spaces, service assurance through Cisco ThousandEyes Network and Application Synthetics and app hosted ASAc Firewall (with the Advantage license).

Manage your entire switching structure as a single, converged component. With one management system, on-premises, virtual or in the cloud, and one policy for wired and wireless networks, it offers an efficient way to provide more secure access.

Table 15 shows the features included in the Cisco Catalyst and Cisco DNA Essentials and Advantage packages.

Table 15.     Network Essentials and Advantage package features

Table 16.     Cisco Catalyst and Cisco DNA Essentials and Advantage package features (add a section for other software support and add Prime, ISE and Stealthwatch support)

Catalyst 9300 Series switches can be migrated into Meraki-mode (Fully Cloud managed), for model compatibility and more information, go to https://documentation.meraki.com/MS/Deployment_Guides/Getting_started%3A_Cisco_Catalyst_9300_Management_with_Meraki_Dashboard.

Catalyst Switches can also be ordered in Meraki mode by using the “-M” part numbers. For ordering information for Cisco C9300\L\X-M switches, please refer to the Meraki datasheets listing -M part numbers.

Meraki Datasheets:

●      Catalyst C9300-M Datasheet

●      Catalyst C9300X-M Datasheet

●      Catalyst C9300L-M Datasheet

●      Catalyst C9300\L\X-M Installation Guide

●      Support SFP and Accessories for Meraki C9300\L\X-M Switches

Specifications

Dimensions, Weight, Acoustic, Mean time between failures

The table below shows the dimensions, weights, acoustic and mean time between failures of all models of Cisco Catalyst 9300 Series switches.

Table 17.     Model Dimensions, Weight, and Mean Time between failures metrics

Connectors

Table 18 shows the supported connectors for the Cisco Catalyst 9300 Series.

Table 18.     Connectors

For the latest Cisco transceiver module compatibility information, refer to https://www.cisco.com/c/en/us/support/interfaces-modules/transceiver-modules/products-device-support-tables-list.html.

Management and standards support

Table 19 shows management and standards support for the Cisco Catalyst 9300 Series.

Table 19.     Management and standards support^*

Power supply specifications

Table 20 lists the power specifications for the Cisco Catalyst 9300 Series based on the kind of power supply used.

Table 20.     Power specifications

Table 21.     Power specifications – platinum rated power supplies

Power consumption of standalone Catalyst 9300 Series Switches

Table 22 shows the power consumption of standalone Cisco Catalyst 9300 Series Switches based on Alliance for Telecommunications Industry Solutions (ATIS) testing using Internet Mix (IMIX) distribution stream traffic, with input voltage of 115VAC at 60 Hz and no PoE loading. The values given are the maximum possible power consumption numbers under the respective test scenarios.

Table 22.     Power Consumption of Standalone Catalyst 9300 Series Switches (tested on IOS XE 16.5.1)

 

Table 23.     Power consumption of standalone 9300 Series Switches with platinum rated power supply (tested on Cisco IOS XE 16.8.1)

 

Safety and compliance

Table 24 lists the safety and compliance information for the Cisco Catalyst 9300 Series.

Table 24.     Safety and compliance information

Ordering information

Table 25 lists ordering information for the Cisco Catalyst 9300 Series. To place an order, visit the Cisco Ordering home page at https://www.cisco.com/en/US/ordering/or13/or8/order_customer_help_how_to_order_listing.html.

Table 25.     Ordering information

 

 

 

 

 

 

 

Optics online reference

The Cisco Catalyst 9300 Series supports a wide range of optics. Because the list of supported optics is updated on a regular basis, consult the tables available here for the latest QSFP28, QSFP+, SFP+, and SFP compatibility information:
https://www.cisco.com/en/US/products/hw/modules/ps5455/products_device_support_tables_list.html.

Warranty

Cisco enhanced limited lifetime hardware warranty

The Cisco Catalyst 9300 Series Switches come with a Cisco Enhanced Limited Lifetime hardware Warranty (E-LLW) that includes Next-Business-Day (NBD) delivery of replacement hardware where available and 90 days of 8x5 Cisco Technical Assistance Center (TAC) support.

Your formal warranty statement, including the warranty applicable to Cisco software, appears in the information packet that accompanies your Cisco product. We encourage you to review the warranty statement shipped with your specific product carefully before use.

Cisco reserves the right to refund the purchase price as its exclusive warranty remedy.

For further information about warranty terms, visit https://www.cisco.com/go/warranty. Table 26 provides information about the E-LLW.

Table 26.     E-LLW details

Product sustainability

Information about Cisco’s Environmental, Social and Governance (ESG) initiatives and performance is provided in Cisco’s CSR and sustainability reporting.

ENERGY STAR Certification

Cisco is driving long term value and market advantage by continuing to embed energy efficiency through hardware, software and by providing customers visibility into their energy consumption to help them baseline, identify trends and anomalies and take corrective actions.

With the ENERGY STAR certification of Catalyst 9300 Series models, Cisco is one of the first networking company to have third party-approved Campus Switches. Ecolabel certifications like ENERGY STAR help customers identify “environmentally preferable” products to help maximize energy efficiency, reduce GHG emissions and lower energy costs.

ENERGY STAR certification reinforces Cisco’s ongoing commitment to deliver energy efficient products including top-rated power supplies, active power management and monitoring capabilities, alignment to ISO 14000 Environmental Management systems standards, and all designed with circularity principles in mind.

Learn more:

ENERGY STAR Certified Product Finder.

Cisco Services

Cisco Services for next-generation Cisco Catalyst 9000 Switches

Achieve infrastructure excellence faster and with less risk. Cisco Catalyst 9000 Services provide expert guidance to help you successfully deploy, manage and support the new Cisco Catalyst 9000 switching family. With unmatched networking expertise, best practices, and innovative tools, we can help you reduce overall upgrade, refresh, and migration costs as you introduce new hardware, software, and protocols into the network. Offering a comprehensive lifecycle of services – from implementation, optimization, technical, and managed services – Cisco experts help you reduce disruption and achieve operational excellence to extract maximum value from your Cisco DNA ready infrastructure.

Learn more about Cisco Services for Enterprise Networks

Software policy for Cisco Catalyst 9300 Series Switches

Software policy for network stack components

Customers with the Network Essentials Stack and Network Advantage Stack software feature sets are provided with maintenance updates and bug fixes designed to maintain compliance of the software. This includes compliance with published specifications, release notes, and industry standards as long as the original end user continues to own or use the product or up to one year from the end-of-sale date for the product, whichever occurs earlier.

Cisco embedded support for Cisco Catalyst and Cisco DNA term components

Cisco Embedded Support delivers the right support for Cisco software products and suites. It will keep your business applications performing as expected and protect your investment. Cisco Embedded Support for the Cisco Catalyst and Cisco DNA Essentials and Cisco Catalyst and Cisco DNA Advantage term components is included. Cisco Embedded Support provides access to TAC support, major software updates, maintenance and minor software releases, and the Cisco Embedded Support site, for increased productivity with anytime access.

Cisco Capital

Flexible payment solutions to help you achieve your objectives

Cisco Capital makes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more.

Document history