#CiscoLive

Core and Distribution

Catalyst 9000 Series Switching Family

Kenny Lei
Technical Marketing Engineer
BRKARC-2099

#CiscoLive
Cisco Webex App

Questions?
Use Cisco Webex App to chat
with the speaker after the session

How
1 Find this session in the Cisco Live Mobile App
2 Click “Join the Discussion”
3 Install the Webex App or go directly to the Webex space Enter your personal notes here

4 Enter messages/questions in the Webex space

Webex spaces will be moderated https://ciscolive.ciscoevents.com/ciscolivebot/#BRKARC-2099

by the speaker until June 17, 2022.

#CiscoLive BRKARC-2099 © 2022

© 2022Cisco and/or
Cisco and/oritsitsaffiliates.
affiliates.All
Allrights
rightsreserved.
reserved. Cisco
Cisco Public
Public 3
 • Digital trends
• Cisco ASICs
• Catalyst 9500X / 9500
Agenda • Catalyst 9600X / 9600
• Features and Scales
• Summary

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
Digital trends shaping the future of business

Hybrid work
Work from home | Work from anywhere | Work from office

Industry 4.0
Wireless | Automation | Internet of Things | AI/ML

Hybrid cloud
Private cloud | Hybrid cloud | Public cloud

and the network is the core engine of hybrid work

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
 New Access requirements for Future Campus
Distribution/Core/Edge Higher Speeds, Scale, Buffer, etc.

Higher mGig Port Density Higher and Flexible Uplink Bandwidth

Higher UPOE+ Port Density Higher 10G Port Density

Wifi6E Deployments with mGig

Smart Buildings with 90W Server Connectivity – 10G BaseT

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Catalyst 9000X – Expanding industry leadership
Adding the “X factor” to the industry’s leading switching family
Cisco Silicon One™ Q200
400G, deep buffers
480G/slot, IPsec,
100G uplinks
Distributed access IPsec, 1T stacking,
with SD-Access edge 100G uplinks,
node, ZTP, FNF, enhanced app hosting
256-bit MACsec
Q3CY22
Catalyst
9600X models
Catalyst
9400X models Catalyst
Catalyst 9500X model
Catalyst Catalyst
Catalyst® 9300X models 9000 Catalyst 9600 Series
9200CX Series 9500 Series
Catalyst switching
9400 Series
Catalyst
platform
Catalyst 9300 Series
9200 Series

Cisco Open
ASIC Cisco
IOS® XE

Catalyst Catalyst Catalyst Catalyst Catalyst Catalyst

2960-X/XR 3650/3850 4500-E Series 4500-X 6840-X/6880-X 6500-E/6807-XL

Access switching Core switching

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Cisco ASICs
Cisco UADPs and Silicon One
Catalyst 9000 Series – Common Building Blocks

ASICs

Programmable x86 Open IOS XE® Cisco ASICs

Multi-Core CPU Polaris UADPs and Q200
Application Hosting Model-Driven APIs Programmable Pipeline
Secure Containers Modular Patching Flexible Tables

Same binary image for both UADP and Silicon One C9K platforms*
* C9200 uses IOS XE Lite
#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
 Customizable ASIC 36-MB
UADP 3.0 templates unified buffer

Double-width tables 3x more FIB scale

1G, 10G,
Up to 1.6 TB
25G, 40G, and 100G
bandwidth
speeds

~20B transistors
16-nm technology
Up to 1000Mpps Up to 1.6Tbps ASIC
throughput Interconnect

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
UADP 2.0XL and 3.0 ASIC comparison
Capabilities (per ASIC) UADP 2.0XL UADP 3.0

Switching and forwarding capacity 240 Gbps/360 Mpps 1.6 Tbps/1 Bpps

Stack bandwidth 2x 360 Gbps 2x 400 Gbps

Buffer capability 2x 16 MB 36 MB shared buffer

Switch Database Management (SDM) template Fixed templates Customizable templates

NetFlow capabilities Dedicated NetFlow table Shared NetFlow table

v4 FIB scale Total 228,000* Total 412,000*

v4 and v6 scale v6 reduced by half v4 and v6 same scale

* Maximum ASIC capability.

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
Cisco Silicon One™

Switching Silicon Routing Silicon

• High Throughput • Flexible Features
extremely fast hardware-based L2-L4 forwarding complex, stateful L3-L7 forwarding and services
and services (measured in Terabits per second) (measured in Gigabits per second)

• Optimized Scale • Massive Scale

optimized for Campus LAN environments with optimized for WAN/SP environments with very
moderate IP & MAC scale (10s-100s of thousands) high IP scale (100s of thousands - millions)

• Low Latency • Mixed Interfaces

extremely low hardware-based system latency support for Ethernet, Serial, Cellular and other
(measured in Nanoseconds & Microseconds) types and speeds in a single system

• Streamlined Buffering • Deeper Buffering

shallow buffering systems to reduce latency, with deep buffers to accommodate different speeds,
very high throughput bursts and different flow patterns

Cisco Silicon One Bringing Switching and Routing convergence

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
 Cisco Silicon One™ Q200
Industry leading Switching and Routing Silicon

First 7nm ASIC providing

lowest watts/GE power
Cisco Silicon ONE Q200 consumption
12.8T BW 8.1 Bpps

Industry Leading
12.8T System on Chip
2M IPv4
Fully P4 programmable enabling
8G HBM for
deep buffers or 1M IPv6 feature velocity
route scale

Fully P4 50G PAM4

Multi slice architecture for
Programmable
Pipeline
Serdes flexibility and scale

Routing Capabilities with Switching

#CiscoLive
Power and Performance
BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
Extending Cisco Catalyst 9500 & 9600 Series
Powered by Cisco Silicon One™ Q200 ASIC
Double Existing
C9500 & C9600-SUP1 Throughput C9500X & C9600X-SUP2
WAN MACsec,
(w/ UADP 3.0) 1588v2 PTP (w/ S1 Q200)

Optimized for Features C9600X-SUP-2 Optimized for Scale

Route
C9600-LC-40YL4CD Scale
C9600X-LC-32CD
✓ Speed ✓ Speed
- 1/10 & 25G SFP - 10/25G & 50G* SFP
- 40 & 100G QSFP - 40/100G & 200*/400G QSFP

✓ Scale
10x Routing & ✓ Scale
- Upto 128K MACs MPLS Scale - Upto 256K MACs
- Upto 256K Routes - Upto 2M Routes
- 108MB Buffers (3x 36MB) - 80MB + 8GB Buffers

✓ Services C9500X-28C8D ✓ Services

- L2/L3 Routing, MPLS - L2/L3 Routing, MPLS/TE
- LAN MACsec, Netflow, NAT - LAN & WAN-MACSec, Netflow, NAT*
- Custom ASIC Templates 50GE, 400GE, - Custom ASIC Templates
- Campus Fabric (SDA & EVPN) 80MB Low-Latency + Coherent DWDM - Campus Fabric (SDA & EVPN*)
8GB High-BW Buffers

Maximum Investment Protection 400G Leadership in Campus Unmatched Flexibility

* Hardware capable

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
Catalyst 9500X/9500
 Cisco Catalyst 9500 Series
Purpose-built fixed core/aggregation switches
Catalyst® 9500X - Extending
UADP 2.0XL UADP 3.0 Silicon One Q200 Cisco® Catalyst® 4500-X and
6800 Series leadership in fixed
core

• 40G at the price of 10G Up to 6 Tbps

• Up-to 48x 25 GE Ports
• Reversible Bi-directional Airflow
• Industry’s first 40G enterprise switch
• Industry’s first 100G enterprise switch
• Ultra Deep 8GB Buffers
• Optimized 10G switch for midsize Up to 8 Bpps
• Flexible templates
backbone • High route scale (2M) and Mac scale (256K)
No oversubscription

8x 400GE Density
C9500-16X
C9500-24Y4C
C9500-40X
C9500-24Q C9500-48Y4C
C9500X-28C8D
Pluggable SSD storage
C9500-12Q C9500-32QC
C9500-32C
USB 3.0

8x memory and 4x flash

8 core CPU

Customizable templates

Cisco StackWise® Virtual*

Modular Storage for
Modular fans Modular uplinks
power supplies application hosting

*Supported on 9500 and 9500H. Roadmap for 9500X

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Catalyst 9500 Series
Extending the Catalyst 9500 High-Performance Fixed Core

Non-XL Scale XL Scale

Catalyst 9500 High Perf. Catalyst 9500X
(UADP 3.0) (S1 Q200)

C9500-32C / C9500-32QC

Core C9500X-28C8D
C9500-48Y4C / C9500-24Y4C +
Total Capacity Edge Total Capacity
3.2 Tbps 2X 6.0 Tbps
32 x 100G or 36 x 100G or
48 x 25G + 4 x 100G 28 x 100G + 8 x 400G

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
 IOS-XE 17.7.1

6.0 Tbps
C9500X-28C8D
Gen2 Fixed 1RU QSFP Switch - 36x 100G / 28x 100G + 8x 400G
• 1x Cisco SiliconOne Q200 ASIC
• 6.0 Tbps System Throughput
• 28x QSFP28 ports - 40/100GE
• 8x QSFPDD ports - 100/200*/400GE
• 1x 8C 2.4GHz x86 CPU with 2x 16GB (32GB) DDR4 DRAM
• 16GB Flash; Optional SSD (Up to 960G)
• 12x CDR5M PHYs
• MACSec, WAN-MACSec, ClearTag v3.4
• IEEE 1588 & PTPv2*
• Various SFP Breakout & QSA support*

*Hardware capable

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
 C9500X-28C8D Block Diagram
Interfaces Console
& Mgmt0
SDRAM
Flash

OBFL M.2 SATA

CDR5M CDR5M CDR5M CDR5M CDR5M CDR5M CDR5M CDR5M CDR5M CDR5M CDR5M CDR5M (1 Gb) USB3 SSD
PHY PHY PHY PHY PHY PHY PHY PHY PHY PHY PHY PHY (optional)
2x8 56G
(800G/PHY)
FPGA

PCIe
S1 Q200 ASIC Gen3 8-core x86 CPU
(12.8T)
2x 10G
KR

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
C9500X-28C8D
SFP breakout and QSA* support

100G ports 400G ports 100G ports

4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP 4x SFP
Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout Breakout

4x SFP 4x SFP 4x SFP 4x SFP

N/A N/A N/A N/A N/A N/A N/A Breakout Breakout Breakout Breakout
N/A N/A N/A N/A N/A N/A N/A

• Breakout is supported on • Breakout supported on all • Breakout not supported on

top row (odd-numbered) 100G 400G (QSFP-DD) ports bottom row (even-numbered) 100G
(QSFP28) ports • Breakout mode: 4x 10/25G, (QSFP28) ports
• Breakout mode: 4x 10/25G 8x 10/25G,* 4x 100G* • The bottom port is disabled when
• Maximum ports: 14 x 4 = 56 • Maximum ports: 8 x 4 = 32 the corresponding top port is
configured as breakout

Maximum ports with breakout at FCS: 88 (56 +32)

* Hardware capable. System can support up to 120x 10/25G.

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 20
C9500X – Reversible Airflow
• Color of Fan Unit handle/latch
Back to Front Front to Back
Port-side Exhaust represents direction of airflow Port-side Intake
• Different Fan PIDs for different
airflow directions
• Royal Blue – Back to Front
• Burgundy – Front to Back
• All Fans must be the same color
(direction) to work correctly

Single 1500W AC/DC PSU

with Cisco Grey latch
for both airflow directions

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
Catalyst 9600X/9600
Cisco Catalyst 9600 Series
Chassis

Dual-serviceable 4 line card slots

fan tray

2 supervisor slots
Built-in RFID (dedicated)

3.2 Tbps per slot

Blue Beacons from each
(system/fan tray, supervisor slot
sup, line cards)

Dimensions
Modular power (HxWxD inches)
supplies 13.95 x 17.4 x 16.1
(8RU)

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
 Catalyst 9600 Series
Extending Modular Core with a Performance-Optimized Supervisor 2

SiliconOne
UADP
3.0 Q200

Gen1
1.2T /slot
Gen2
3.2T /slot
Supervisor 1 Supervisor 2
Total Capacity Total Capacity
4.8 Tbps 12.8 Tbps
Slot B/W Gen2
3.2T /slot
Slot B/W
1.2 Tbps Gen1 3X 3.2 Tbps
1.2T /slot

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
Cisco Catalyst 9600 Series
Supervisor 1

4.8 Tbps (full duplex) 1.2 Tbps per slot

8 core X86 CPU

3x UADP 3.0 ASIC
@2.0 Ghz
UADP UADP
UADP

CPU
M.2 SATA SSD
16G DDR4 memory
(optional: up to 960G)

Mgmt ports: copper

Built-in RFID
and fiber

2x USB3
Blue Beacon
1x mini-B USB console

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
Cisco Catalyst 9600 Series
Supervisor 2

12.8 Tbps (full duplex) 3.2 Tbps per slot

1x Silicon OneTM Q200 8 core X86 CPU

ASIC @2.7 Ghz
Q200

CPU M.2 SATA SSD

32G DDR4 memory
(optional: up to 960G)

Mgmt ports: copper

Built-in RFID
and 2x10G fiber

2x USB3
Blue Beacon
1x mini-B USB console

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
Architecture
Centralized architecture
• Centralized architecture =>
UADP3.0/ Supervisor x86 Uninterrupted
Silicon One
supervisor switchover
Forwarding Open Control plane
Features Cisco® containers • Centralized architecture
embedded controllers IOS-XE HA communication (Forwarding, queuing,
and security are done
on the supervisor) =>
Unlock new capability
Passive backplane Up to 6.4 T BW per slot with a supervisor upgrade
• Transparent line cards =>
Compatible with new sup
Line card Line card Line card • Passive backplane =>
High MTBF
PHY PHY PHY
• x86 CPU + storage =>
App hosting

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
 Supervisor engine 1 – Block diagram
Switch backplane

1.6T 64x 64x 64x

SupIO
NIF NIF NIF (I2C)
PCIe Ethernet FPGA

UADP 3.0 UADP 3.0 UADP 3.0

#1 OBFL
#2 #3 8-core CPU (1 Gb)

1.6 Tbps

ASIC interconnect M.2 SATA SDRAM

(optional)

USB console/
2x USB3 Console/Mgmt SFP+

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
 C9600X-SUP-2 Block Diagram
Switch backplane

2x8x4 56G … … … … SupIO

PCIe Ethernet FPGA
OBFL
(3.2T/Slot) (I2C) (1 Gb)

S1 Q200 ASIC PCIE Gen3

8-core CPU
(12.8T) 2x (16G)

M.2 SATA
SDRAM (optional)

Console
2x USB3 2x SFP+
& Mgmt0

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
 Catalyst 9600/X:
Introducing the first 400G line cards in campus
Catalyst® 9606R Combo line cards
Shipping
C9600-LC-40YL4CD Dual-personality
line card

3.2 Tbps with SUP-2

1.2 Tbps with SUP-1
Flexible speed
C9600X-LC-32CD support
C9600-LC-24C C9600-LC-48YL
Q3CY22

With SUP-2 only (3.2Tbps)

Lower total BoM
C9600-LC-48S C9600-LC-48TX cost, save on
(Multigigabit) Provides for uplink
additional line
requirement without using cards
additional slot

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
 New

C9600-LC-40YL4CD 3.2 Tbps

Gen2 Combo Line-Card – 40xSFP56 + 2xQSFP56 + 2xQSFPDD
• 3.2 Tbps With Gen2 Sup
• 40x SFP56 ports - 10/25/50*GE
• 2x QSFP56 ports - 40/100/200*GE
• 2x QSFPDD ports - 40/100/200*/400GE

• 1.2 Tbps With Gen1 Sup

• 40x SFP28 ports - 1/10/25GE
• 2x QSFP28 ports - 40/100GE
• 8x CDR5M PHYs
• MACSec, WAN-MACSec, ClearTag v3.4
• IEEE 1588 & PTPv2*
• Hitless MUX (HMUX)

• Various Breakout & QSA support (QSFP ports)*

* Hardware capable
#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
C9600-LC-40YL4CD Ports and Speeds Support
with Sup2: 3.2Tbps 40x 10/25/50*GE + 2x 40/100/200*GE + 2x 40/100/200*/400GE IOS-XE 17.7.1

QSFP56 QSFPDD

QSFP56 QSFPDD

with Sup1: 1.2Tbps 40x 1/10/25GE + 2x 40/100GE IOS-XE 17.8.1

QSFPD
QSFP28 D

QSFPD
QSFP28 D

* Hardware capable

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 32
 Target: CYQ3 2022
C9600X-LC-32CD
Gen2 Module – 30 x QSFP28 + 2 x QSFP-DD 3.2
Tbps
• 3.2Tbps with Supervisor 2 Only
• 30 x QSFP28 ports, 40/100GE
• 2 x QSFP-DD ports, 40/100/200*/400GE
Supervisor 2
• NOT supported with Supervisor 1
• 8 x CDR5M + 2 x CDR5L PHYs
• MACSec, WAN-MACSec, ClearTag v3.4
Supervisor 1
• IEEE 1588 & PTPv2 (Precision Time Protocol)
• Hitless MUX (HMUX)

* Hardware capable

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
 C9600X-LC-32CD
100G / 400G Port Modes

All 100G (QSFP28) Mode (Default):

QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28

QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28

32x 100G

Two 400G ( QSFP-DD) Mode:

QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 N/A QSFPDD N/A QSFPDD

QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 QSFP28 N/A N/A N/A N/A

28x100G + 1x400G (or)

24x100G + 2x400G

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
Gen1 Line-Cards Support with SUP2
Centralized Architecture
• Gen1 Line-Cards supported*
• Only PHYs on the Line-Cards
• All forwarding on the Supervisor (ASIC)

Additional Bandwidth ☺
• C9606 backplane traces support up to 56G PAM4
• Gen1 Line Cards now support up to 2.4T per Slot
• 24 x 100G QSFP on LC-24C
• 48 x 50G** SFP on LC-48YL

No MACsec support 
• Q200 does not have onboard Crypto engine
• Gen2 LCs use newer CDR5M PHY for MACsec
• UADP has onboard MACsec engine
• Gen1 LCs use older CDR4 PHY (not MACsec capable)

* C9600-LC-48S is not supported with Sup2

** Hardware capable
#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
Catalyst 9600 Line Card Support Matrix
C9606 Chassis
C9600-SUP- 1 C9600X-SUP- 2

C9600-LC-24C 24x 40G or 12x 100G

24x 40G/100G
(No MACsec)

C9600-LC-48YL 48x 1/10G and 25G

48x 10/25G and 50G*
(No MACsec, no 1G)
SUP2 hardware does not
C9600-LC-48TX 48x 1/2.5/5G and 10G (Multigigabit)
48x 10G support 1GE or below
(No MACsec, no 1/2.5/5G) speeds natively

If 1GE downlinks are

C9600-LC-48S 48x 1G SFP required, use SUP1

40x 10/25G and 50G* +

C9600-LC-40YL4CD 40x 1/10G and 25G + 2x 40/100G and 200G* +
2x 40G and 100G 2x 40/100/200G* and 400G
MACsec and WAN MACsec (no 1G)

30x 40/100G +
C9600-LC-32CD 2x 40/100/200G* and 400G
Q3CY22
MACsec and WAN MACsec (no 1G)

* Hardware capable
#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Features and
Scales
Features and Scales
Silicon One Q200 UADP 3.0
Default Maximum (Custom) Default Maximum (Custom)
MAC Addresses 128K 256K 80K 128K

IP Host Routes 128K 256K 80K 128K

Multicast L2 groups 16K 64K* 16K 48K

Multicast L3 routes 32K 64K* 32K 48K

IP LPM Routes 2M 2M 212K 256K

MPLS Labels 256K 512K 32K 64K

SGT/OG Labels 32K 64K 32K 64K

NAT* Sessions 16K* 128K* 3K 16K

Sec ACL Entries 8K 10K* 12K 27K

QoS ACL Entries 8K 10K* 8K 21K

PBR* ACL Entries 8K* 10K* 3K 16K

* Hardware capable on Q200

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
Catalyst 9500X & 9600X – Things to know
Next Generation Core + Edge Switching with Silicon One™ Q200
C9600X-SUP-2 + LC-40YL4CD C9500X-28C8D

Technology Brief Description Diffs from UADP 3.0

• Up to 2M IPv4 or 1M IPv6 (hash efficiency is about 80%) • Up to 256K IPv4/IPv6 with Custom SDM template
Large LPM Table • Dedicated Memory for LPM • LPM and other features share 416K ASIC memory

• Up to 256K MAC entries Custom SDM template. • Up to 128K MAC entries with Custom SDM template
Large MAC Table • Shared with other features • MAC shared with LPM, etc. in same 416K ASIC memory
• Q200 has 80MB local (low-latency) + 8GB HBM (High Bandwidth Memory) buffer memory.
• Max 36MB unified buffer memory per ASIC
VoQ QoS + HBM • Q200 uses a Virtual Output Queue (VoQ) architecture. All queuing and policing policies
• Supports both Ingress/Egress queuing & policing
applied on Ingress.
• 8K IPv4, 4K IPv6 ACL TCAM entries.
• 64K ACL TCAM entries per ASIC
OGACL & SGACL • Object-Group & Security-Group ACLs use CEM to map IP-to-Group label, TCAM only uses
• Object-group expand into the TCAM space
L4 ACEs. (OG/SG ACL design is optimal for layer 3 environment).
• Q200 does not have built-in crypto engine.
• UADP3 has built-in MACsec crypto (speed of ASIC)
LAN & WAN-MACsec • C9500X & C9600X-LC uses new CDR5M PHY (400Gbps Full-Duplex). CDR5M provides line-
• UADP3 only supports LAN MACsec (no WAN-MACsec)
rate (8x 400G = 3.2T) 802.1ae (LAN) MACsec and WAN-MACsec.
• Q200 does not have built-in Flow Cache memory (no hardware-based Netflow).
• UADP3 has built-in (HW) FNF, max 64K entries per ASIC
Flexible NetFlow* • C9500X & C9600X uses new Software-based FNF (≤ 2M entries), with a dedicated CPU core
• FNF shared with LPM, etc. in same 416K ASIC memory
(~2Mpps). FNF sampler rate 1:1000, ~10Tbps of 512-Byte packets = ~2Mpps.

* Roadmap

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Why OGACL/SGACL in Campus Core?
Object-Group ACLs for IP Scalable-Groups for SDA
C9500X/9600X C9500X/9600X
Core Switches CP/Border Nodes
C B C B

WAN/DC/SP WAN/DC/SP

IP SDA
Network E
Fabric E E

Clients = OGID C9300X/9400X C9300X/9400X Clients = SGT

Access Switches Edge Nodes

Object-Groups map IP/mask to Labels in CEM Scalable-Groups map IP/mask to Labels in CEM
• User defines IP/masks to simple OG name • ISE/DNAC defines IP/masks to simple SG name
• OGID labels are stored in Exact Match table • SGT labels are stored in Exact Match table
OGACL ACEs take minimal space in ACL TCAM SGACL ACEs take minimal space in ACL TCAM
• Only the Permit/Deny ACEs in TCAM • Only the Permit/Deny ACEs in TCAM
• OGACLs with same ACEs can reuse entries • SGACLs with same ACEs can reuse entries

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
Traditional ACL vs Group-Based ACL
Traditional ACL: One TCAM entry per ACL entry
perrmit udp 172.25.37.0/24 any 172.25.99.0/24 any
Src Dst Src Dst Other
IP Addr IP Addr Prot Por Por Fields Traditional Key perrmit udp 172.25.39.0/24 any 172.25.99.0/24 any
t t perrmit udp 172.25.45.0/24 any 172.25.99.0/24 any
perrmit udp 172.25.47.0/24 any 172.25.99.0/24 any
perrmit udp 172.25.51.0/24 any 172.25.99.0/24 any
perrmit udp 172.25.55.0/24 any 172.25.99.0/24 any
Free
Src Dest Free
Group Group
LPM LPM

Object Group ACL: One TCAM entry per group-combo

Group Key
permit udp src-group G1 any dst-group G2 any
Src Dst Prot Src Dst Other Free
Group Group Port Port Fields Free
Free
172.25.37.X 172.25.99.X Free
172.25.39.X
172.25.45.X Free
172.25.47.X
172.25.51.X
Free
172.25.55.X Free

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
Catalyst 9500/X & 9600/X Series Core Positioning
Next Generation Core + Edge Switching with Silicon One™ Q200

Feature Optimized Performance Optimized

C9500 & C9600-SUP-1 C9500X & C9600X-SUP-2

C9600-SUP-1 C9500 C9600X-SUP-2 C9500X

✓ Best-in-class Enterprise Core feature set ✓ Unmatched forwarding scale and performance
✓ Low speeds (1G – 40G) and port density ✓ High speeds (10G – 400G) and port density
✓ Comprehensive MPLS, EVPN and SDA ✓ Scaled MPLS and SDA, WAN-MACsec
✓ Ideal for Campus Core, Collapsed Core + Agg ✓ Ideal for Campus Core + Edge, or Centralized WLC

Ideal for C6K non-XL deployment migration Ideal for C6K XL deployment migration

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
WAN MACsec overview and use cases
Enabled in hardware on Catalyst 9000 Switches

• Hop-by-hop encryption
• Directly connected Layer 2 links only

MACsec • Secure any direct link in campus/

WAN, including DWDM
• 256/128-bit AES encryption
Supported on all Catalyst® 9000 models
All ports and speeds simultaneously

• End-to-end encryption across Layer

2 Ethernet WAN service
• EoMPLS/VPLS, Q-in-Q Industry’s
first

WAN • Point-to-point or point-to-

Catalyst 9600X
Catalyst 9500X
multipoint
MACsec Supported on Silicon One™ platforms*
• Applications include secure site All ports/speeds (up to 400G) simultaneously
interconnect, DCI, storage
replication

• 256/128-bit AES encryption

* Requires Release 17.8.1 and HSEC key ($1 PID).

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
 App Hosting on C9K Switches

“ “
Existing Hardware

IT Operations and Security Agents Cloud Gateways with Customer Specific

Managed via CLI and Functions
Monitoring Tools Serverless Edge Compute Applications
or Cisco DNA Center
Enhance Visibility & Reduce App
Consolidate 3 rd Party App
Security Latency
Real Time Processing Physical Hosting
Enforcement & Optimize App
Infrastructure
Traffic
Cybervision Rich ecosystem
Lower Latency
partnership with 25+
certified apps and
200+ active
Save Bandwidth
customer

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
App Hosting

Catalyst Catalyst Catalyst Catalyst

Resource type
9500 High Perf 9500-X 9600 9600-X
Mgmt Port*
Networking AppGig Port Mgmt Port* 2x10G Mgmt Port*
(2x10G CPU ports)
Memory 8GB 8GB 8GB 8GB

CPU 1 core 1 core 1 core 1 core

Resources
Up to 960GB Up to 960GB Up to 960GB Up to 960GB
Storage
(SATA) (SATA) (SATA) (SATA)

* Using loopback with any external ports

Catalyst 9500-High Perf/X Catalyst 9600/X

M2 SATA M2 SATA
Up to 90GB Up to 960GB

Back panel Plug into removable SUP

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
 StackWise Virtual
SW-1 SW-2

• Simplify Operations by
C9500
SVL and DAD
C9500
Eliminating STP, FHRP and
Multiple Touch-Points
SW-1 SW-2
• Double Bandwidth & Reduce
SVL Latency with Active-Active
Multi-chassis EtherChannel
DAD (MEC)
• Minimizes Convergence with
Sub-second Stateful and
Graceful Recovery (SSO/NSF)
• Supported on all the UADP base platform today
• Roadmap for the Silicon One ASIC platforms

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
Summary
The Catalyst 9000 Core and Dist Switches
Powering the cloud scale world

Catalyst 9600 / 9600X Extending Core Leadership

with Catalyst X Series
Supervisor-1 Supervisor-2
Powered by UADP 3.0 Powered by S1 Q200 2.6x Bandwidth

Cat 9500 / 9500X WAN MacSec Support

Powered by UADP 3.0 / S1 Q200 400G Uplinks

2M Route Scale
Deep Buffers
Catalyst 9500X 2.4Tbps Per Slot 6.4Tbps per Slot Cisco Catalyst
Powered by S1 9000 Core Series leadership
Fiber line cards
Q200 400G/100G/200G/50G/25G/10G/1G
Combo line cards SD-Access
100G/400G SKU’s • 40 x 50G/25G/10G/1G + 2 x
200G/100G + 2 x 400G MACsec-256 link encryption

Catalyst 9500 • 32x 100G; or 28x 100G + 400G; or High Availability (SSO/ISSU)
24x 100G + 2x 400G
Powered by UADP 3.0 • 24 x 100G / 40G
Application Hosting

• 48 x 50G/25G/10G/1G Model-driven programmability

• 48 x 1G
Secure
Patching and GIR

Copper line card Streaming telemetry

25G/100G SKU’s • 48 x Mgig (Non-PoE)

Simplicity with Open Backward compatible

for investment Secure
IOS-XE
protection
#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
Technical Session Surveys
• Attendees who fill out a minimum of four
session surveys and the overall event
survey will get Cisco Live branded socks!

• Attendees will also earn 100 points

in the Cisco Live Game for every
survey completed.

• These points help you get on the

leaderboard and increase your chances
of winning daily and grand prizes.

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
 Pay for Learning with
Cisco Learning Credits
Cisco Learning and Certifications (CLCs) are prepaid training
vouchers redeemed directly
From technology training and team development to Cisco certifications and learning with Cisco.
plans, let us help you empower your business and career. www.cisco.com/go/certs

Learn Train Certify

Cisco U. Cisco Training Bootcamps Cisco Certifications and
IT learning hub that guides teams Intensive team & individual automation Specialist Certifications
and learners toward their goals and technology training programs Award-winning certification
program empowers students
Cisco Digital Learning Cisco Learning Partner Program and IT Professionals to advance
Subscription-based product, technology, Authorized training partners supporting their technical careers
and certification training Cisco technology and career certifications
Cisco Guided Study Groups
Cisco Modeling Labs Cisco Instructor-led and 180-day certification prep program
Network simulation platform for design, Virtual Instructor-led training with learning and support
testing, and troubleshooting Accelerated curriculum of product,
technology, and certification courses Cisco Continuing
Cisco Learning Network Education Program
Resource community portal for Recertification training options
certifications and learning for Cisco certified individuals

Here at the event? Visit us at The Learning and Certifications lounge at the World of Solutions

#CiscoLive BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
 • Visit the Cisco Showcase
for related demos

• Book your one-on-one

Meet the Engineer meeting

• Attend the interactive education

with DevNet, Capture the Flag,
Continue and Walk-in Labs

your education • Visit the On-Demand Library

for more sessions at
www.CiscoLive.com/on-demand

BRKARC-2099 © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
Thank you

#CiscoLive
#CiscoLive