9000@nettrain
9000@nettrain
9000@nettrain
Architecture
BRKARC-2035
T.me/nettrain
Cisco Webex App
Questions?
Use Cisco Webex App to chat
with the speaker after the session
How
1 Find this session in the Cisco Live Mobile App
2 Click “Join the Discussion”
3 Install the Webex App or go directly to the Webex space Enter your personal notes here
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 2
T.me/nettrain
• Digital trends
• Cisco ASICs
• Access Switching
• Catalyst 9300 (C9300X, C9300, C9300L/LM)
Catalyst 9200 (C9200CX, 9200, C9200L)
Agenda
•
• Catalyst 9400 (C9400X, C9400)
• Core and Distribution Switching
• Catalyst 9500 (C9500X, C9500)
• Catalyst 9600 (C9600X, C9600)
• Summary
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
T.me/nettrain
Enterprise Access Trends
T.me/nettrain
Cisco Catalyst 9000 Switching Portfolio
One Family from Access to Core – Common Hardware & Software
C9500X-60L4D
Q1
CY23
C9600X-LC-32CD
Catalyst Catalyst
Catalyst Catalyst 9600X
9300X
9400X
Catalyst 9500X
Catalyst
Catalyst
9400 Series
9000 Catalyst
Catalyst
9600 Series
Catalyst 9300 Series
9200 Series Series 9500 Series
Catalyst
9300LM
Catalyst Cisco Cisco
9200CX ASIC IOS® XE
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
T.me/nettrain
Cisco ASICs
Cisco UADPs and Silicon One
T.me/nettrain
Catalyst 9000 Series – Common Building Blocks
ASICs
Same binary image for both UADP and Silicon One C9K platforms*
* C9200 uses IOS XE Lite
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
T.me/nettrain
Custom ASICs – Programmable Silicon
Cisco Unified
Unified Access
Cisco Silicon One™ Flexible Pipelines
Data-Plane Investment Protection
(UADP®)
Adaptable Tables
Universal Deployment
Scalable Resources
Enhanced Scale and Buffering
T.me/nettrain
Cisco Unified Access Data-Plane (UADP®)
Common ASIC Architecture for Switching Access, Distribution & Core
UADP 2.0m UADP 2.0/XL UADP 2.0sec UADP 3.0 UADP 3.0sec
120 Gbps 240 Gbps 480 Gbps 1.6 Tbps 1.6 Tbps
16nm FinFET 28nm FinFET 16nm FinFET 16nm FinFET 16nm FinFET
1.3B Transistors 7.6B Transistors 7.6B Transistors 19.2B Transistors 19.2B Transistors
1 Core + ARM CPU 2 Core 1 Core2 + SEC 2 Core 2 Core + SEC
• Multiple generations and formats, same architecture • Multiple functions: system-on-chip or line-card
• Rich flexible forwarding & services memories • Multiple form factors: fixed or modular
• First fully programmable microcode network silicon • Multiple places: Access, Distribution and Core
community.cisco.com/t5/networking-blogs/uadp-the-powerhouse-of-catalyst-9000-family/ba-p/3764605
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
T.me/nettrain
Cisco UADP ASICs up to 1 BILLION
times per second!
ASIC Architecture & Block Diagram
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
T.me/nettrain
Cisco UADP – Flexible Lookups
Programmable Ingress and Egress Processing Stages
T.me/nettrain
Cisco UADP - Flexible Tables
Customizable ASIC tables for universal deployment flexibility
SRAM / TCAM
Flexible SDM templates
64K Access Core Distribution NAT
• MAC template template template template
• IPv4/v6
256K Layer 2 and Layer 3 and Mix of Layer 2 and Layer 3
• Unicast Client scale Policy scale Layer 3 capabilities and NAT scale
32K • Multicast
Customize table sizes for each function - based on the Place in Network
• NetFlow
48K • ACL SRAM TCAM SRAM TCAM
• SGACL FIB
MCAST
(16K) Others SGT
QoS
ACL Others
MCAST (32K) (3K)
16K • QoS (48K)
MAC
(80K)
SEC
ACL
QoS
ACL
FIB
(64K)
(48K) SEC
ACL
IGMP (18K) (18K) (18K)
• NAT SGT
(32K)
LISP
(1K) IGMP
MAC
(32K)
LISP
(1K)
8K • SPAN
(16K) (16K) NAT
(16K)
Host Internal Resources Tunnels NAT Internal Host Internal Resources Tunnels Internal
(32K) (1K) (2K) Resources (32K) (1K) Resources
4K
Access / Edge template Core / Border template
T.me/nettrain
Cisco Silicon One™ Q200
Industry leading Switching and Routing Silicon
Industry Leading
12.8T System on Chip
2M IPv4
Fully P4 programmable enabling
8G HBM for
deep buffers or 1M IPv6 feature velocity
route scale
T.me/nettrain
Cisco Silicon One™ Q200
ASIC Architecture & Block Diagram
RX & TX NPU (per slice):
• P4 programmable Run-to-Complete Traffic Manager (TM)
Packet Processing Slices (6):
• Large Central Database (CDB) Tables • Large fully-shared memory switch
• 1 packet per clock (@ 1.35GHz)
• Expandable LPM in external HBM • Congestion Management
• Slice = 2x IFGs + 1 RX & TX NPU
• Pool of queues & flexible scheduling
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
T.me/nettrain
Cisco Silicon One™ Q200 - Central Databases
Onboard LPM, CEM & ACL memory
6 keys (1/slice)
Central EM
LPM – SRAM database for IP/mask routing implemented RXPP-
EM+LPM
6 keys (1/slice) DB splitter
by Longest Prefix Match algorithm FWD EM+LPM
• Primarily used by IPv4 and IPv6 unicast routing RXPP- 6 keys (1/slice) DB splitter
• Up to* 2M IPv4 route entries, or 1M IPv6 route entries FWD LPM Central LPM
6 keys (1/slice)
• LPM can be extended (from CDB) to HBM
LPM Central LPM
CEM – SRAM database for MAC & Host (/48, /32 or /128), 12 keys (2/slice)
Multicast & Labels implemented by Exact Match algorithm RXPP-
12 keys (2/slice) ACL
• For features using an exact match (every bit, no mask) TRM 6 keys (1/slice)
• Up to 608K IPv4 entries, or 304K IPv6 entries RXPP-
TXPP- ACL
TRM
• CEM can be flexibly reallocated for different tables 6 keys (1/slice)
ENC
TXPP- 12 keys (2/slice)
ACL – TCAM classification database, contains Security, ENC
QoS and Services Access Control List entries 12 keys (2/slice)
2 keys (1/HBM i/f)
• For features that use (match criteria + action) policies
• Up to 8K IPv4 ACL entries, or 4K IPv6 ACL entries 2 keys (1/HBM i/f)
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
T.me/nettrain
Cisco Catalyst 9500X & 9600X with Q200
SDM templates and scale numbers
Features (CEM) Customizable DEFAULT (core + edge) Custom (min to max @ step)
MAC addresses ✓ 128,000 32,000 to 256,000 @ 1000 step
Layer 2 multicast entries (IGMP/MLD) FCS+ 16,000 / 8000 0 to 64,000 @ 1000 step
Layer 3 multicast routes (IPv4/IPv6) FCS+ 32,000 / 16,000 0 to 64,000 @ 1000 step
ACL compression (SGT, DGT, OGID/v6) ✓ 32,000 / 16,000 0 to 64,000 @ 1000 step
Features (TCAM) Customizable DEFAULT (core + edge) Custom (min to max @ step)
Lawful intercept (IPv4/IPv6) FCS+ 1000 (2x 512) reserved 1000 to 5000/2500 @ 1 tap (2 ACE)
LPTS, EPC, FSPAN, NFL (IPv4/IPv6) FCS+ 1000 (2x 512) reserved 1000 @ 1 step
T.me/nettrain
Access Switching
T.me/nettrain
Catalyst 9000 Family PID decoder
Product ID: C9300LM-48UX-4Y
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
T.me/nettrain
C9300X- UADP 2.0sec
C9300/L/LM - UADP 2.0
Catalyst 9300
C9300X – Expansion
C9300 - Modular Uplinks
C9300L – Fixed uplinks
C9300LM – Mini version with Fixed uplinks
T.me/nettrain
C9300/L - UADP 2.0
4x1G or 4x10G
4x fixed
Multigigabit Uplinks 48/24 ports data 1G
48/24 ports Data 1G 48/24 ports UPOE+ and UPOE 1G
2-4x 4x1G or 4x10G
2x
Scale fixed
Buffers 4x 1G SFP
Uplinks
48/24 ports UPOE 1G – 9300B 8x 1/10G SFP/ 48/24 ports PoE+ 1G
48/24 ports PoE+ 1G
SFP+
Multigigabit models with UPOE
T.me/nettrain
Catalyst 9300X – New High Performance Access
Switch
500GE 1/2.5/5/10/25/40/100G
Bandwidth 1T
Supports Different Speeds Stacking Capacity
Enhanced App
100G Encryption QAT Engine
Hosting (HW Acceleration)
2 x 10G App Gig ports
UADP 2.0sec
T.me/nettrain
Investment protection with Catalyst 9300X
External storage
Redundant fans Redundant power
(240-GB SSD)
T.me/nettrain
Introducing the Catalyst 9300X models UADP
2.0sec
Multi core
X86 CPU
Open IOS XE
Industry
first Terabit stacking Mixed 25/10G fiber stacking with copper 100G uplinks on stackable Extending Catalyst leadership …
Hot patching
Catalyst 9300X-48HX
Extended FSU
Catalyst 9300X-24Y Catalyst 9300X-48TX NBAR2
Modular uplinks StackWise® and StackPower cables Platinum-rated power supplies Modular fan
4x 40/100G 2x 40/100G 8x 10/25G 8x Multigigabit 50CM-1M-3M 30CM-150CM 315W AC 715W AC/DC 1100W AC 1900WAC
*Roadmap.
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
T.me/nettrain
Catalyst 9300 Stacking Support
8 switches
8 switches
8 switches
1T 480G 320G
Stacking supported among Catalyst 9300X models and mixed stacking between Stacking supported among
Catalyst 9300 and Catalyst 9300X models Catalyst 9300L/LM models only
Mixed stacking is not supported between Catalyst 9300, 9300X, and 9300L/LM models
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
T.me/nettrain
Highly available StackPower
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
T.me/nettrain
C9300LM - UADP 2.0
Cisco Catalyst 9300LM Series
Fixed Uplink replacement for Catalyst 3650-mini
4 x10/25G 4 x10/25G
Fixed 25G Uplinks FixedUplinks
25G
C9300LM-48UX-4Y 40 x 1 G +8 x 100/1/2.5/5/10G uplinks
UPOE Ports
C9300LM-24U-4Y 24 x 1G UPOE Ports uplinks
1G Data model
4 x10/25G
4 x10/25G Fixed 25G
Fixed 25G Uplinks
Uplinks uplinks
C9300LM-48T-4Y 48 x 1G Ports
uplinks C9300LM-48U-4Y 48 x 1G UPOE Ports
NEW Modular Stacking NEW Newer Higher-Efficiency C9300LM only Power supplies Modular Fans*
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
T.me/nettrain
Catalyst 9300LM- Shallow Depth
11.8-13.2 inches
19.2 inches 11.6 Inches
Dimension(W X H x D)
SKU AC PSU DC PSU
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
T.me/nettrain
C9300X- UADP 2.0sec
C9300/L/LM - UADP 2.0
Cisco Catalyst 9300 Series
Extended Catalyst 9300 Series with Catalyst 9300X and 9300LM models
Catalyst® 9300 models with modular uplinks Catalyst 9300 models with Fixed uplinks
1G copper ports with PoE/Cisco UPOE®/UPOE+ 9300 Uplinks 1G Copper Data & PoE
2x to 4x
scale/
T.me/nettrain
C9300X- UADP 2.0sec
Cisco Catalyst 9300X models
C9300X-48HX - 48 port 1/2.5/5/10G copper
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 20G
2x 100G
4x 100/40G
PHY PHY PHY PHY PHY PHY 2x 100/40G
0 1 2 3 4 5 8x 25/10G
8x Multigigabit
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
T.me/nettrain
Flexible design options with the Catalyst 9300
in 2- or 3-tier architecture
Campus Branch
Core
9600/9500H
(SVL)
40/100G
40/100G
Collapsed core 9300X
40/100G 40/100G Distribution
9500H(SVL)
Distribution Collapsed access
9300X
fiber stack
(StackWise®-1T) Mixed stack 40/100G
9300/9300X 40/100G
40/100G
Mixed
Mixed stack stack
Access
9300/9300X 9300/ Mixed stack
Access
9300X 9300/9300X
Small Medium/large
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
T.me/nettrain
UADP 2.0m
Catalyst 9200
C9200 – Modular Uplinks
C9200L – Fixed Uplinks
C9200CX - Compact
T.me/nettrain
Catalyst 9200 Series
Cisco Catalyst 9200 Series highlights
Limited-scale SD-Access
Trustworthy solutions
Perpetual/Fast PoE
Programmability
Cold patching
Cisco Enhanced Security Smart building ready
6MB Up to 100GE Full Flexible NetFlow
StackWise MACsec 128 Green builds, 802.3bt PoE
Packet Buffer Bandwidth streaming telemetry
160/80
T.me/nettrain
Cisco Catalyst 9200 Series
Next generation of entry-level access switches for intent-based networking
Fixed Uplinks Modular Uplinks
Cisco Catalyst 9200 Series highlights
Recommended for small scale SDA deployments
*C9200 1G skus support 1/10G uplinks while C9200 mGig will support 10/25/40G uplinks
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
**C9200 32 VN skus only support 1/10G uplinks and these skus cannot be stacked with other C9200 skus
T.me/nettrain
Cisco Catalyst 9200CX Series
Data and PoE+ Models
1G Downlink and 1G/10G Uplink Models (Fanless)
Data SKU PoE+ SKUs
C9200CX-12T-2X2G
12x1G Downlinks + (3x1G + 2x10G SPP+ Uplinks) C9200CX 12 Port PoE+
Power adapter 12x1G Downlinks + (2x1G + 2x10G SPP+ Uplinks)
80W AC External
• External power adapter (80W) Power Adapter
• UPOE+ powered (70W)
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
T.me/nettrain
C9400X- UADP 3.0sec
C9400 - UADP 2.0XL
Catalyst 9400X/9400
T.me/nettrain
Modular Access delivering ever-increasing value
✓ No oversubscription per slot on any chassis (w/ Sup 2XL) ✓ 100 Gbps ports on Supervisors
✓ Higher non-oversubscribed port density ✓ More Active Ports on Supervisors
✓ Higher Access Point (AP) Density ✓ Higher TCAM scale
✓ Perpetual and Fast PoE hardware capable ✓ Proven 25 Gbps value
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
T.me/nettrain
Same Chassis with New Supervisors and Line
cards
C9400X-SUP-2XL
C9400X-SUP-2
C9400-LC-48HX
C9400-LC-48XS
C9400-LC-48HN
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
T.me/nettrain
C9400X-SUP-2 / 2XL
Gen2 Supervisor Modules with UADP 3.0sec 4.8 Tbps
With 2XL
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
T.me/nettrain
Cisco Catalyst 9400 Series
Centralized Modular Architecture
Centralized architecture
Supervisor
Passive backplane
Up to 480G bandwidth per slot
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
T.me/nettrain
Catalyst 9400 SUP-2/2XL block diagram
Switch backplane
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
T.me/nettrain
Line cards - RJ-45 (TrustSec and MACsec-256)
DATA POE+/UPOE UPOE + MultiGigabit
Sup2/2XL only
C9400-LC-48HN
C9400-LC-48U
48x 100M/1G/2.5G/5G/10G
48x 10/100/1000M UPOE® C9400-LC-48HX PoE+/UPOE+
48x 10GBaseT, 2.5/5G mGig, up to 90W
100/1000M
UPOE+/802.3bt
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
T.me/nettrain
Line cards – SFP/SFP+ (TrustSec and MACsec-256 )
Sup2/2XL only
C9400-LC-48XS
C9400-LC-24S
48x 1/10Gb SFP/SFP+ 24x1Gb SFP
C9400-LC-24XS C9400-LC-48S
24x1/10Gb SFP/SFP+ 48x1Gb SFP
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
T.me/nettrain
Bandwidth Boost with Gen2 Supervisors
Cisco C9400X Cisco C9400X
Cisco C9400 SUP 1/1XL
SUP2 SUP2XL
Type C9404R C9407R C9410R C9404R/C9407R/C9410R C9404R/C9407R/C9410R
C9400-LC-48HX
New UPOE+ - - - 240 480
Not Supported
New C9400-LC-48XS Fiber - - - 240 480
C9400-LC-48UX UPOE 80 / 240 80 / 120 80 240 240
3x Bandwidth Uplift for Gen1 LCs (80G -> 240G) on 10 Slot Chassis w/ SUP2XL
2x Bandwidth Uplift for Gen1 LCs (120G -> 240G) on 7 Slot Chassis w/ SUP2XL
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
T.me/nettrain
Concurrent POE Port Density with C9400-LC-48HX
With 3200W Power Supply in Combined Mode(Fully loaded PSUs):
C9410R
C9407R
C9404R
UPOE +
90W 96 ports 226 ports 224 ports
(Fully loaded chassis) (Up to 4 fully loaded LCs + 34 Ports) (Up to 4 fully loaded LCs + 32 Ports)
UPOE
60W 96 ports 240 ports 336 ports
(Fully loaded chassis) (Fully loaded chassis) (Up to 7 fully loaded LCs)
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
T.me/nettrain
Catalyst 9400 Deployment Flexibility
C9400X enables dense 10G SFP+ aggregation and multigigabit access use cases
Core
Campus Branch
C9600/C9500H
(SVL)
Agg
Dense (Up to 384 ports) 10G SFP+ Agg (48XS)
Mixed SFP+, SFP, RJ45 LCs Mixed SFP+, SFP, RJ45 LCs
Agg Collapsed Agg 9500H(SVL) Collapsed Agg
Dense mGig
Mixed SFP, 1G/mGig RJ45 LCs
Access
Acces
s
Note: StackWise Virtual support on Sup2/XL Roadmap
Acces
s
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
T.me/nettrain
Core and Distribution
T.me/nettrain
C9500X – S1 Q200
C9500H – UADP 3.0
C9500 – UADP 2.0XL
Catalyst 9500
T.me/nettrain
Cisco Catalyst 9500 Series
Purpose-built fixed core/aggregation switches
Catalyst® 9500X - Extending
UADP 2.0XL UADP 3.0 Silicon One Q200 Cisco® Catalyst® 4500-X and
6800 Series leadership in fixed
core
8x 400GE Density
C9500-16X
C9500-24Y4C C9500X-28C8D
C9500-40X
C9500-24Q C9500-48Y4C Pluggable SSD storage
C9500-12Q C9500-32QC C9500X-60L4D
C9500-32C
USB 3.0
8 core CPU
Customizable templates
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
T.me/nettrain
Catalyst 9500X Family
Extending the Catalyst 9500 high-performance fixed core
C9500X-28C8D
C9500-32C / C9500-32QC
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
T.me/nettrain
Cisco Catalyst C9500X-28C8D: line rate 6T of capacity
High-level overview
Intel® 2.43-GHz 8 Core x86 CPU
Console Cisco Silicon One™ On-box application hosting
Cisco LAN and WAN MACsec 32-GB DDR4 DRAM Built-in RFID
management Q200 (2x resources, QAT)
Line-rate network encryption 16-GB flash (passive)
USB-C 12.8T ASIC 2x 10G KR
8-GB HBM deep buffering
Cisco® Trust Anchor Technologies 6 standalone fans – N+1 redundancy Power supply unit (PSU)
USB 3.0 port, 240-, 480-, or 960-GB
Strong mitigation against man-in-the- Reverse airflow – port side intake Single PSU for both airflow directions
RJ-45 management M2 SATA SSD storage
middle attacks on software and firmware Forward airflow – port side exhaust Redundant 1+1 1500W AC/DC
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
T.me/nettrain
C9500X-28C8D
SFP breakout and QSA* support
4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP
Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 53
T.me/nettrain
Cisco Catalyst C9500X-60L4D: line rate 4.6T of capacity
High-level overview
Intel® 2.43-GHz 8 Core x86 CPU
Console Cisco Silicon One™ On-box application hosting
Cisco LAN and WAN MACsec 32-GB DDR4 DRAM Built-in RFID
management Q200 (2x resources, QAT)
Line-rate network encryption 16-GB flash (passive)
USB-C 12.8T ASIC 2x 10G KR
8-GB HBM deep buffering
Cisco® Trust Anchor Technologies 6 standalone fans – N+1 redundancy Power supply unit (PSU)
USB 3.0 port, 240-, 480-, or 960-GB
Strong mitigation against man-in-the- Reverse airflow – port side intake Single PSU for both airflow directions
RJ-45 management M2 SATA SSD storage
middle attacks on software and firmware Forward airflow – port side exhaust Redundant 1+1 1500W AC/DC
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 54
T.me/nettrain
C9500X – Reversible Airflow
• Color of Fan Unit handle/latch
Back to Front Front to Back
Port-side Exhaust represents direction of airflow Port-side Intake
• Different Fan PIDs for different
airflow directions
• Royal Blue – Back to Front
• Burgundy – Front to Back
• All Fans must be the same color
(direction) to work correctly
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 55
T.me/nettrain
C9600X – S1 Q200
C9600 – UADP 3.0
Catalyst 9600
T.me/nettrain
Catalyst 9600 Series
Extending Modular Core with a Performance-Optimized Supervisor 2
SiliconOne
UADP
3.0 Q200
Gen1
1.2T /slot
Gen2
3.2T /slot
Supervisor 1 Supervisor 2
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 57
T.me/nettrain
Architecture
Centralized architecture
• Centralized architecture =>
UADP3.0/ Supervisor x86 Uninterrupted
Silicon One
supervisor switchover
Forwarding Open Control plane
Features Cisco® containers • Centralized architecture
embedded controllers IOS-XE HA communication
(Forwarding, queuing,
and security are done
on the supervisor) =>
Unlock new capability
Passive backplane Up to 6.4 T BW per slot with a supervisor upgrade
• Transparent line cards =>
Compatible with new sup
Line card Line card Line card • Passive backplane =>
High MTBF
PHY PHY PHY
• x86 CPU + storage =>
App hosting
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
T.me/nettrain
C9600X-SUP-2 Block Diagram
Switch backplane
M.2 SATA
SDRAM (optional)
Console
2x USB3 2x SFP+
& Mgmt0
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 59
T.me/nettrain
Cisco Catalyst 9600 Series
Line cards
Generation 1 Line Cards
C9600-LC-24C - 100G/40G (fiber)
• 24 ports
•
•
QSFP28/QSFP+
Supports 100G and 40G
Generation 2 Line Cards
IOS-XE 17.7.1
C9600-LC-40YL4CD –
C9600-LC-48YL – 50G/ 25G/10G/1G 400G/200G*/100G/50G/40G/
(fiber) 25G/10G (fiber)
• 48 ports • 40+2+2 ports
• SFP28/SFP+/SFP • SFP56/QSFP56+/QSFPDD
• Supports 25G, 10G, and 1G • Supports
400G,200G*,100G,50G,40G,2
5G and 10G
C9600-LC-48TX - mGig (copper)
• 48 ports
• Copper 10G (NBASE-T/10BASE-T) IOS-XE 17.9.1
• Supports 10G,5G,2.5G,1G,100M C9600X-LC-32CD –
and 10M
400G/200G*/100G/40G(fiber)
• 30+2 ports
C9600-LC-48S- 1G (fiber)
• SFP28/QSFPDD
• 48 ports • Supports 400G,200G*,100G,
• SFP and 40G
• Supports 1G
* Hardware Capable
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
T.me/nettrain
C9600-LC-40YL4CD IOS-XE 17.7.1
* Roadmap
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
T.me/nettrain
IOS-XE 17.9.1
C9600X-LC-32CD
Gen2 Module – 30 x QSFP28 + 2 x QSFP-DD 3.2
Tbps
• 3.2Tbps with Supervisor 2 Only
• 30 x QSFP28 ports, 40/100GE
• 2 x QSFP-DD ports, 40/100/200*/400GE
Supervisor 2
• NOT supported with Supervisor 1
• 8 x CDR5M + 2 x CDR5L PHYs
• MACSec, WAN-MACSec, ClearTag v3.4
Supervisor 1
• IEEE 1588 & PTPv2 (Precision Time Protocol)
• Hitless MUX (HMUX)
* Hardware capable
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
T.me/nettrain
Catalyst 9600 Line Card Support Matrix
C9606 Chassis
C9600-SUP- 1 C9600X-SUP- 2
30x 40/100G +
C9600-LC-32CD 2x 40/100/200G* and 400G
MACsec and WAN MACsec (no 1G)
* Hardware capable
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
T.me/nettrain
Catalyst 9500 & 9600 Series Core Positioning
Next Generation Core + Edge Switching with Silicon One™ Q200
Ideal for C6K non-XL deployment migration Ideal for C6K XL deployment migration
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
T.me/nettrain
Modular vs. Fixed Platforms
Catalyst
9400
Modular Fixed
PROs CONs PROs CONs
• More Flexible • More Complex • Less Complex • Less Flexible
• Longer Life-Cycle • BW limit by Chassis • Swap Chassis for BW • Shorter Life-Cycle
• Higher Port Density • Slow(er) Dev & Test • Faster Dev & Test • Lower Port Density
• More Power/Cooling • Lower MTBF • Higher MTBF • Less Power/Cooling
• Redundant Processors • Higher COGs • Lower COGs • Single Processor
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 67
T.me/nettrain
Features
T.me/nettrain
StackWise Virtual
SW-1 SW-2
• Simplify Operations by
C9500
SVL and DAD
C9500
Eliminating STP, FHRP and
Multiple Touch-Points
SW-1 SW-2
• Double Bandwidth & Reduce
SVL Latency with Active-Active
Multi-chassis EtherChannel
DAD (MEC)
• Minimizes Convergence with
Sub-second Stateful and
Graceful Recovery (SSO/NSF)
• Supported on C9400, C9500 and C9600 platforms.
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 69
T.me/nettrain
App Hosting on C9K Switches
“ “
Existing Hardware
Consolidate Physical Enhance Visibility & Reduce App Latency 3 rd Party App Hosting
Real Time Processing Infrastructure Security Enforcement & Optimize App Traffic
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
T.me/nettrain
C9300X- UADP 2.0sec
ASIC ASIC
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 71
T.me/nettrain
HW resources for App Hosting
Back panel Plug into removable SUP Back panel Plug into removable SUP
© 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 72
T.me/nettrain
WAN MACsec overview and use cases
Enabled in hardware on Catalyst 9000 Switches
• Hop-by-hop encryption
T.me/nettrain
Software
100G Layer 3
SIG Saas Colo Iaas
hardware
encryption
128 tunnels
DC/HQ
256 SAs
+ 128
rekey SA Native IPsec
Catalyst
9300X
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 74
T.me/nettrain
Catalyst 9400X – Modular Collapsed Edge/Distribution
100Gbps IPsec support powered by UADP 3.0sec ASIC
IOS-XE 17.10.1
100Gbps L3 Hardware
Encryption1
Encryption Authentication
Site to Cloud
AES-128-CBC HMAC/SHA1
AES-128/256-GCM GMAC
Secure Tunnels
Tunnel Mode
Encapsulation - ESP
IKEv2
Site to Site
Branch/DC/Campus
128 Tunnels and 384 SA
128 rekey SA
Flexible Collapsed Topology
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 75
T.me/nettrain
Catalyst 9300X/9400X – Purpose built for the New Edge
Secure connectivity to anywhere
Secure
tunnels Up to 100G low latency Secure Web Usage & Control
Secure
IPsec Encryption Faster time to Deployment
Unicast & Multicast Routing Lower TCO tunnels
L3 Segmentation & L2 Extension Investment protection
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 76
T.me/nettrain
Summary
T.me/nettrain
Cisco Catalyst 9000 Switching Portfolio 2022
One Family from Access to Core – Common Hardware & Software
C9500X-60L4D
Q1 Q3
CY23 CY22
C9600X-LC-32CD
Catalyst Catalyst
Catalyst Catalyst 9600X
9300X
9400X
Catalyst 9500X
Catalyst
Catalyst
9400 Series
9000 Catalyst
Catalyst
9600 Series
Catalyst 9300 Series
9200 Series Series 9500 Series
Q3 Catalyst Q3
CY22 9300LM CY22
Catalyst Cisco Cisco
9200CX ASIC IOS® XE
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 78
T.me/nettrain
Campus Architectures with Catalyst 9000
1 2 3 4
Traditional (L2/L3) MPLS (L2/L3VPN) EVPN (L2/L3VNI) SDA (L2/L3VNI + SGT)
• L2 (PVST, MST) Services at Access • L3 Underlay + L2/L3 VPN Overlay • L3 Underlay + L2/L3 VNI Overlay • L3 Underlay + L2/L3 VNI Overlay
• L2/L3 boundary at Distribution • Virtual Private Networks • Virtual Network Instances • Scalable Group Tagging
• L3 - Dist. & Core • L3 VRF-based Segmentation • L2/L3 VNI-based Segments • L2/L3 VNI + SGT Segments
• BGP between Core & WAN • WAN/Edge + VPN Services • Common WAN/LAN Services • LAN Services + Group-Based Policy
MP-BGP, PIC, LDP, MPLS/VPLS, SR MP-BGP + EVPN AF, VXLAN, VRF-Lite LISP, VXLAN, MP-BGP, VRF-Lite
Base L2 Switching, Base L3 Routing, MVPN, LSM, Extranet, MSR Anycast Gateway, TRM, L2 BUM Anycast GW, LISP HER/Native, L2 BUM
Simple ACL, Simple QoS SSO, NSF/NSR, ECMP, GIR SSO, NSF/NSR, ECMP, GIR SSO, NSF/NSR, ECMP, GIR
VPN-FNF, Uniform/Pipe QoS, PBR, IPACL Fabric-FNF, Uniform QoS, IPACL/OGACL Fabric-FNF, App QoS, SGACL
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 79
T.me/nettrain
Complete your Session Survey
• Please complete your session survey
after each session. Your feedback
is important.
• Complete a minimum of 4 session
surveys and the Overall Conference
survey (open from Thursday) to
receive your Cisco Live t-shirt.
• All surveys can be taken in the Cisco Events Mobile App or
by logging in to the Session Catalog and clicking the
"Attendee Dashboard” at
https://www.ciscolive.com/emea/learn/sessions/session-catalog.html
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 80
T.me/nettrain
Continue
Agenda Your Education
BRKARC-2035 © 2023 Cisco and/or its affiliates. All rights reserved. Cisco Public 81
T.me/nettrain
Thank you
T.me/nettrain
T.me/nettrain