Cisco Catalyst 9300 Series Switch

Product highlights

● Highest wireless scale for Wi-Fi 6 and 802.11ac Wave 2 access points supported on a single switch with select models

● Catalyst 9300 and Catalyst 9300L/LM models are based on the Cisco UADP 2.0 Application-Specific Integrated Circuit (ASIC) with programmable pipeline and micro-engine capabilities, along with template-based, configurable allocation of Layer 2 and Layer 3 forwarding, Access Control Lists (ACLs), and Quality of Service (QoS) entries

● Catalyst 9300X models are based on UADP 2.0sec ASIC which adds line rate support for Crypto, including 100G hardware-based IPsec

● x86 CPU complex with 8-GB memory, and 16 GB of flash and external USB 3.0 SSD pluggable storage slot (delivering up to 240GB of storage with an option SSD drive) to host containers. C9300X models support 16GB of memory

● USB 2.0 slot to load system images and set configurations

● Up to 1 TBps of local stackable switching bandwidth with Catalyst 9300X models

● Deeper buffer and higher scale model options for rich multi-media content delivery applications

● Flexible and dense uplink offerings with 100G, 40G, 25G, Multigigabit, 10G, and 1G as fixed or modular uplinks

● Easy transition from 40G to 100G and 10G to 25G with dual-rate optics

● Flexible downlink options with 25G, 10G and 1G Copper and Fiber as well as the densest Multigigabit links

● With a mix of Copper (1G up to 10G) and Fiber (1G up to 25G) supported in a single stack, multiple flexible deployment scenarios are enabled, including 2-Tier, 3-Tier and Hybrid architectures

● Leading PoE capabilities with up to 384 ports of PoE per stack, PoE+, and 288 ports high density IEEE 802.3bt - 90W UPOE+, and 60W Cisco UPOE

● Intelligent Power Management with Cisco StackPower technology, providing power stacking among members for power redundancy. StackPower pools the power supplies across the stack to be used redundancy and supplemental power purposes

● Line-rate, hardware-based Flexible NetFlow (FNF), delivering flow collection of up to 128,000 flows with select models

● IPv6 support in hardware, providing wire-rate forwarding for IPv6 networks

● Dual-stack support for IPv4/IPv6 and dynamic hardware forwarding table allocations, for ease of IPv4-to-IPv6 migration

● Support for both static and dynamic NAT and Port Address Translation (PAT)

● IEEE 802.1ba AV Bridging (AVB) built in to provide a better audio and video experience through improved time synchronization and QoS

● Precision Time Protocol (PTP; IEEE 1588v2) provides accurate clock synchronization with sub-microsecond accuracy making it suitable for distribution and synchronization of time and frequency over network

● Cisco IOS XE, a modern operating system for the enterprise with support for model-driven programmability including NETCONF, RESTCONF, YANG, on-box Python scripting, streaming telemetry, container-based application hosting, and patching for critical bug fixes. The OS also has built-in defenses to protect against runtime attacks

● End-to-end visualization of the path from campus/branch to clouds/DC with Cisco ThousandEyes Network and Application Synthetics (included with Cisco DNA Advantage license)

● SD-Access: Cisco Catalyst 9300 Series switches form the foundational building block for SD-Access, Cisco’s lead enterprise architecture:

◦ Policy-based automation from edge to cloud

◦ Simplified segmentation and micro-segmentation, with predictable performance and scalability

◦ Automation through Cisco DNA Center

◦ Policy handled through the Cisco Identity Services Engine (ISE)

◦ Network assurance provided through the Cisco DNA Center

◦ Faster launch of new business services and significantly improved issue resolution time

● Plug and Play (PnP) enabled: A simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or updates to an existing network

● Advanced security

◦ Encrypted Traffic Analytics (ETA): You benefit from the power of machine learning to identify and take actions toward threats or anomalies in your network, including malware detection in encrypted traffic (without decryption) and distributed anomaly detection

◦ Support for AES-256 with the powerful MACsec 256-bit encryption algorithm available on all models

◦ Trustworthy solutions: Hardware anchored Secure Boot and Secure Unique Device Identification (SUDI) support for Plug and Play, to verify the identity of the hardware and software