● Highest wireless scale for Wi-Fi 6 and 802.11ac Wave 2 access points supported on a single switch with select models
● Cisc o UADP 2.0 Application-Specific Integrated Circuit (ASIC) with programmable pipeline and microengine capabilities, along
with template-based, configurable allocation of Layer 2 and Layer 3 forwarding, Access Control Lists (ACLs), and Quality of
Service (QoS) entries
● x86 CPU complex with 8-GB memory, and 16 GB of flash and external USB 3.0 SSD pluggable storage slot (delivering 120GB of
storage with an option SSD drive) to host containers
● USB 2.0 slot to load system images and set configurations
● Up to 480 Gbps of local stackable switching bandwidth
● Deeper buffer and higher scale model options for rich multi-media content delivery applications
● Flexible and dense uplink offerings with 1G, Multigigabit, 10G, 25G, and 40G in the form of fixed or modular uplinks
● Easy transition from 10G to 25G with dual-rate optics
● Flexible downlink options with 1G Copper and Fiber as well as Multigigabit links
● Leading PoE capabilities with up to 384 ports of PoE per stack, 60W Cisc o UPOE, and PoE+
● Intelligent Power Management with Cisc o StackPower technology, providing power stacking among members for power redundancy
● Line-rate, hardware-based Flexible NetFlow (FNF), delivering flow collection of up to 64,000 flows
● IPv6 support in hardware, providing wire-rate forwarding for IPv6 networks
● Dual-stack support for IPv4/IPv6 and dynamic hardware forwarding table allocations, for ease of IPv4-to-IPv6 migration
● IEEE 802.1ba AV Bridging (AVB) built in to provide a better audio and video experience through improved time synchronization and
QoS
● Precision Time Protocol (PTP; IEEE 1588v2) provides accurate clock synchronization with sub-microsecond accuracy making it
suitable for distribution and synchronization of time and frequency over network
● Cisc o IOS XE, a modern operating system for the enterprise with support for model-driven programmability including NETCONF,
RESTCONF, YANG, on-box Python scripting, streaming telemetry, container-based application hosting, and patching for critical bug
fixes. The OS also has built-in defenses to protect against runtime attacks
● SD-Access: Cisc o Catalys t 9300 Series switches form the foundational building block for SD-Access, Cisc o’s lead enterprise
architecture:
◦ Policy-based automation from edge to cloud
◦ Simplified segmentation and micro-segmentation, with predictable performance and scalability
◦ Automation through Cisc o DNA Center
◦ Policy handled through the Cisc o Identity Services Engine (ISE)
◦ Network assurance provided through the Cisc o DNA Center
◦ Faster launch of new business services and significantly improved issue resolution time
● SD-Access Embedded Wireless: The Cisc o Catalys t 9800 embedded Wireless Controller Software package can be installed on Cisc o
Catalys t 9300 Series switches to enable wireless controller functionality for distributed branches and small campuses. Once
installed, the Catalys t 9800 embedded Wireless Controller running on a Catalys t 9300 Series switch can support up to 200 APs and
4000 Clients. A maximum two wireless controllers can be enabled per site on two different Catalys t 9300 Series switches which will
increase to scale up to 200 APs and 4000 Wireless Clients. The Catalys t 9800 embedded Wireless Controller Software package will
enable wireless functionality only for SD-Access deployments with two supported topologies:
◦ The Catalys t 9800 embedded Wireless Controller Software package can be enabled on Catalys t 9300 Series switches functioning as
Co-Located Border and Control Plane
◦ C9800 Wireless Software Package can be enabled on Catalys t 9300 Series switches functioning as Fabric in a Box
● Plug and Play (PnP) enabled: A simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or
updates to an existing network
● Advanced security
◦ Encrypted Traffic Analytics (ETA): You benefit from the power of machine learning to identify and take actions toward threats or
anomalies in your network, including malware detection in encrypted traffic (without decryption) and distributed anomaly detection
◦ Support for AES-256 with the powerful MACsec 256-bit encryption algorithm available on all models
◦ Trustworthy solutions: Hardware anchored Secure Boot and Secure Unique Device Identification (SUDI) support for Plug and Play,
to verify the identity of the hardware and software
