Cisco Catalyst C9300L-48P-4X-E Switch

Product highlights

• Highest wireless scale for Wi-Fi 6 and 802.11ac Wave 2 access points supported on a single switch with select models
• C9300 and C9300L models are based on the Cisco UADP 2.0 Application-Specific Integrated Circuit (ASIC) with programmable pipeline and microengine capabilities, along with template-based, configurable allocation of Layer 2 and Layer 3 forwarding, Access Control Lists (ACLs), and Quality of Service (QoS) entries
• C9300X models are based on UADP 2.5sec ASIC which adds line rate support for Crypto, including 100G IPSec
• x86 CPU complex with 8-GB memory, and 16 GB of flash and external USB 3.0 SSD pluggable storage slot (delivering up to 240GB of storage with an option SSD drive) to host containers. C9300X models support 16GB of memory
• USB 2.0 slot to load system images and set configurations
• Up to 1 TBps of local stackable switching bandwidth
• Deeper buffer and higher scale model options for rich multi-media content delivery applications
• Flexible and dense uplink offerings with 1G, Multigigabit, 10G, 25G, 40G and 100G in the form of fixed or modular uplinks
• Easy transition from 10G to 25G with dual-rate optics
• Flexible downlink options with 1G Copper and Fiber as well as the densest Multigigabit links
• With a mix of Copper (1G up to 10G) and Fiber (1G up to 25G) supported in a single stack, multiple flexible deployment scenarios are enabled, including 2-Tier, 3-Tier and Hybrid architectures
• Leading PoE capabilities with up to 384 ports of PoE per stack, PoE+, and high density IEEE 802.3bt - 60W UPOE, and 90W Cisco UPOE®+
• Intelligent Power Management with Cisco StackPower technology, providing power stacking among members for power redundancy. Stackpower pools the power supplies across the stack to be used redundancy and supplemental power purposes
• Line-rate, hardware-based Flexible NetFlow (FNF), delivering flow collection of up to 128,000 flows with select models
• IPv6 support in hardware, providing wire-rate forwarding for IPv6 networks
• Dual-stack support for IPv4/IPv6 and dynamic hardware forwarding table allocations, for ease of IPv4-to-IPv6 migration
• Support for both static and dynamic NAT and Port Address Translation (PAT)
• IEEE 802.1ba AV Bridging (AVB) built in to provide a better audio and video experience through improved time synchronization and QoS
• Precision Time Protocol (PTP; IEEE 1588v2) provides accurate clock synchronization with sub-microsecond accuracy making it suitable for distribution and synchronization of time and frequency over network
• Cisco IOS XE, a modern operating system for the enterprise with support for model-driven programmability including NETCONF, RESTCONF, YANG, on-box Python scripting, streaming telemetry, container-based application hosting, and patching for critical bug fixes. The OS also has built-in defenses to protect against runtime attacks
• End-to-end visualization of the path from campus/branch to clouds/DC with Cisco ThousandEyes Network and Application Synthetics (included with Cisco DNA Advantage and Premier licenses)
• SD-Access: Cisco Catalyst 9300 Series switches form the foundational building block for SD-Access, Cisco’s lead enterprise architecture:
  • Policy-based automation from edge to cloud
  • Simplified segmentation and micro-segmentation, with predictable performance and scalability
  • Automation through Cisco DNA Center
  • Policy handled through the Cisco Identity Services Engine (ISE)
  • Network assurance provided through the Cisco DNA Center
  • Faster launch of new business services and significantly improved issue resolution time
• Plug and Play (PnP) enabled: A simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or updates to an existing network
• Advanced security
  • Encrypted Traffic Analytics (ETA): You benefit from the power of machine learning to identify and take actions toward threats or anomalies in your network, including malware detection in encrypted traffic (without decryption) and distributed anomaly detection
  • Support for AES-256 with the powerful MACsec 256-bit encryption algorithm available on all models
  • Trustworthy solutions: Hardware anchored Secure Boot and Secure Unique Device Identification (SUDI) support for Plug and Play, to verify the identity of the hardware and software

Platform benefits

Cisco IOS XE opens a completely new paradigm in network configuration, operation, and monitoring through network automation. Cisco’s automation solution is open, standards-based, and extensible across the entire lifecycle of a network device. The various automation mechanisms are outlined below.

• Automated device provisioning is the ability to automate the process of upgrading software images and installing configuration files on Cisco Catalyst switches when they are being deployed in the network for the first time. Cisco provides both turnkey solutions such as Plug and Play and off-the-shelf tools such as Zero-Touch Provisioning (ZTP) and Preboot Execution Environment (PXE) that enable an effortless and automated deployment.
• API-driven configuration is available with modern network switches such as the Cisco Catalyst 9300 Series. It supports a wide range of automation features and provides robust open APIs over NETCONF and RESTCONF and GNMI using YANG data models for external tools, both off-the-shelf and custom built, to automatically provision network resources.
• Granular visibility enables model-driven telemetry to stream data from a switch to a destination. The data to be streamed is identified through subscription to a data set in a YANG model. The subscribed data set is streamed to the destination at specified intervals. Additionally, Cisco IOS XE enables the push model. It provides near-real-time monitoring of the network, leading to quick detection and rectification of failures.
• Seamless software upgrades and patching supports OS resilience. Cisco IOS XE supports patching, which provides fixes for critical bugs and security vulnerabilities between regular maintenance releases. This support lets you add patches without having to wait for the next maintenance release.

Security

• Encrypted Traffic Analytics (ETA) is a unique capability for identifying malware in encrypted traffic coming from the access layer. Since more and more traffic is becoming encrypted, the visibility this feature affords for threat detection is critical for keeping your network secure at different layers.
• AES-256 MACsec encryption is the IEEE 802.1AE standard for authenticating and encrypting packets between switches. The Cisco Catalyst 9300 Series switches support 256-bit and 128-bit Advanced Encryption Standard (AES), providing the most secure link encryption.
• IPSec encryption delivers secure end-to-end encrypted traffic between sites and connectivity to the Cloud. C9300X models support line rate IPSEC up to 100 Gbps delivering uncompromised secure connectivity.
• Trustworthy solutions built with Cisco Trust Anchor Technologies provide a highly secure foundation for Cisco products. With the Catalyst 9300 Series, these technologies enable hardware and software authenticity assurance for supply chain trust and strong mitigation against man-in-the-middle attacks that compromise software and firmware. Trust Anchor capabilities include:
  • Image signing: Cryptographically signed images provide assurance that the firmware, BIOS, and other software are authentic and unmodified. As the system boots, the system’s software signatures are checked for integrity.
  • Secure Boot: Cisco Secure Boot technology anchors the boot sequence chain of trust to immutable hardware, mitigating threats against a system’s foundational state and the software that is to be loaded, regardless of a user’s privilege level. It provides layered protection against the persistence of illicitly modified firmware.
  • Cisco Trust Anchor module: A tamper-resistant, strong cryptographic, single-chip solution provides hardware authenticity assurance to uniquely identify the product so that its origin can be confirmed to Cisco. This provides assurance that the product is genuine.

Specifications

• Total 10/100/1000, Multigigabit copper or SFP Fiber : 48 PoE+
  
• Uplink Configuration : 4x 10G fixed uplinks
• Default AC power supply : 715WAC
• Default power supply : PWR-C1-715WAC-P***
• Available PoE power : 505W
• With 350W Secondary PS : 855W
• With 715W Secondary PS : 1220W
• With 1100W Secondary PS : 1440W*
• Switching capacity : 176 Gbps
• Switching capacity with stacking : 496 Gbps
• Forwarding rate : 130.95 Mpps
• Forwarding rate with stacking : 369.05 Mpps
• Dimensions (H x W x D) inches
  • Chassis only : 1.73 X 17.5 X 16.1
  • W/ Default Power Supply : 1.73 X 17.5 X 17.7
  • W/ 1100W Power Supply : 1.73 X 17.5 X 19.2
• Dimensions (H x W x D) Cms
  • Chassis only : 4.4 x 44.5 x 40.9
  • W/ Default Power Supply : 4.4 x 44.5 x 44.9
  • W/ 1100W Power Supply : 4.4 x 44.5 x 48.8
• Weight (with default power supply)
  • Pounds : 15.46
  • Kilograms : 7.03
• Mean Time Between Failures – MTBF (hours) : 309,020