You are on page 1of 62

Cisco Catalyst 9000

Foundation for a new era


in intent-based networking
EN Switching Product Management
Catalyst 9000 Switching Family

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
7.5B
Things

Enterprise IoT 3.64


Devices
Infrastructure per person
convergence
vulnerable
endpoints Changing workforce
and apps hyper-

Trends in connected
Mobility

Enterprise
100K AWS
Windows 10 Security
Devices
Devices per Admin
Agility
Cloud consumption
models $3.5M
Average cost of a
data breech
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Key Operational Challenges for Traditional Networks

Difficult to Segment Complex to Manage Slower Issue Resolution

Ever increasing number of Multiple steps, Separate user policies for


users and endpoint types user credentials, complex wired and wireless networks
interactions
Ever increasing number of Unable to find users
VLANs and IP Subnets Multiple touch-points when troubleshooting

Traditional Networks Cannot Keep Up!


C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Advanced persistent threats (APTs) changing
the security landscape
Perimeter security
ineffective with APTs

Email attachment

DDoS attack
4 Data exfiltration
Phishing

Email link Malware on


personal device Botnet creation
3
Privilege escalation

Social media Site with 1


malware
Initial compromise
2 Malware propagation

Network requirements for security

Before During After


Reduce attack surface Malware and threat detection Rapid threat containment
by segmentation, through behavioral analytics through automated incident response
access control, and encryption
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
IoT devices on the corporate network introduce
additional security challenges
Users, devices, and things are coming onto the network Securing these devices is hard

HVAC
Unsophisticated devices
• Limited security and crypto
capabilities, prone to hacks
Lighting

Non-IT
Sensors Endpoint identity
• No support for standard
authentication mechanisms
Badging system

Policy ownership (IT, OT, Mfg)


Fire alarm
system • Who defines policy? Who
holds liability?
Mobile Laptops/PCs Bonjour Audio Video Healthcare Printers Security
cameras
Users IT

The network needs to offer an extended trust domain, with scalable device classification and policy
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
IoT requires a diverse set of functions from the network
Classes of devices

Managed User devices IT services Non-IT services Managed


by IT by OT
(Laptops, phones, PCs) (Printers, audio, video, displays) (Lighting, alarms, surveillance)

• Consistent access across • Service discovery for • Network and power HA for
Network wired/wireless printing, Apple TV emergency
requirements • Granular quality of service • network timing for audio • Traffic monitoring for
and AVC and video surveillance

Virtual segmented networks with SLA guarantees | Ability to consume the network as a service

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
The need for intent-based networking

Learning
Catalyst
9000
Switches.
Intent Context

Powered by intent.
Informed by context.
Security
Best-in-class products
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco’s Catalyst 9000 Switching Platform
Intent-based and SD-Access-enabled switches across the portfolio

Cisco Catalyst Cisco Catalyst


4500E Series 3850F/4500-X

Cisco Catalyst
9400 Series

Cisco Catalyst
3850/3650 copper
Cisco Catalyst
Cisco Catalyst Cisco Catalyst 9500 Series
9300 Series
9000 Switches
NE
W
Cisco Catalyst Cisco Catalyst
2960-X/XR Series 6840-X/ 6880-X

Cisco Catalyst
9200 Series

Access switching Backbone switching


C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Intent-based networking
Digital business Network

Translation
Capture business intent,
translate to policies,
and check integrity

Activation
Orchestrate policies and
configure systems

Public Assurance
Continuous verification,
insights and visibility,
Mobile Security IoT Multicloud and corrective actions

Powered by intent. Informed by context.


C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Principles of Intent-Based Networking
Cisco DNA Center

Applications Bridging intent-based networking portfolio


APIs
Domain Controllers

Powered by Cisco IOS XE


Open programmable architecture
Physical and Virtual
Infrastructure

ASIC

Built-in security, streaming telemetry and


rich analytics

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Scalability, Reliability, Security across the Network
Access Points Access Switches Core/Agg Switches Wireless Controller
Catalyst Catalyst Catalyst Catalyst
9100
9200/9300/9400 9500/9600 9800 Series
Series Series

mGig
1G 40G
10 G
40 G
100G

Meraki MR 45/55 Meraki MS355 Meraki MS450

The Full Experience End to End

Built for intent-based networking


© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Automation Security Analytics
Cisco Catalyst 9000 switching transitions
Greater flexibility to the branch and to small and medium sized businesses
who require low-end fixed access switching.

Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst


9200 Series 9300 Series 9400 Series 9500 Series

NEW

Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst Cisco Catalyst
2960 X/XR 3850 copper 4500-E/6500 3850F/4500-X 6840-X/ 6880-X

Access switching Core switching

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9000 Switching
– built to see you through the next decade
UADP 2.0, 2.0 mini, 3.0 Standard leadership Platform innovations

Ethernet Alliance and


NBASE-T

IEEE

• Programmable pipeline • 802.3bz density (Multigigabit) • High Availability


• Flexible tables • 802.11ax optimized • X86 with TB storage
• Cisco StackWise® Virtual • 802.3bt scale (60W) • Campus-optimized
thermals, mechanicals
• Campus-optimized 40G
• Bluetooth
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential * Not available at FCS
Catalyst 9000 Access Switching Portfolio
Intent-based Networking for Everyone

Encrypted Traffic Analysis, Embedded WLC, Cisco DNA Service for Bonjour, App
,Routing and Segmentation
Full Automaton/Assurance

Hosting
Advantage

Cisco
DNA

Advanced Assurance*
Software Defined Access*
High Availability
NW

Full Layer 3, Network Segmentation*


Base Automation
Essentials

Cisco
DNA

Base Automation & Base Assurance


with L2/L3

Layer 2, Routed Access, Programmability


NW
Stacking, Dual FRU PS,
Built with UADP.
Platform

FRU Fan/UL

High Density mGig, UPOE,


Full PoE+, 10G UL 25/40G UL
Integrated CPU, MACSec-128 x86 CPU, Stackpower, MACSec-256

Catalyst 9200 Series switches Catalyst 9300 Series switches Catalyst 9400 Series switches

Increased Scale, Increased Performance, Lower TCO


C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

* Increased functionality and scale on Catalyst 9400/9300


Catalyst 9200 Series switches
Next Generation of entry level access switches for IBN
Cisco Catalyst 9200 Series Switch
Differentiators
UADP 2.0 mini
Fixed SKUs Modular SKUs Cisco IOS® XE Software
Recommended for small scale SD-Access
SD-Access deployments
AES-128/MACsec-128
Security 48 ports Full POE+/Data, 10G Uplink Trustworthy solutions

Perpetual/Fast PoE
48 ports Full POE+/Data, Available
48 ports Full POE+/Data, 1G Uplink early Programmability w/ NETCONF/RESTCONF
CY19 Cold Patching

24 ports Full POE+/Data, 10G Uplink Streaming telemetry


Programmability 24 ports Full POE+/Data

24 ports Full POE+/Data, 1G Uplink

Higher-efficiency AC
FRU power supplies
FRU uplinks* FRU fans*
Resiliency
Platinum Platinum
Rated Rated

4x 10G 4x 1G
125W 600W 1000W
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

*Catalyst 9200 Series switch modular SKUs only


Higher Stacking Bandwidth for increasing demand

Stack up to 8 members
Up to 160 Gbps bandwidth

Mix & match within*


1G/10G/25G/40G, 24/48-port, PoE/data

Not backward compatible


No mixing with Catalyst 2960X/XR
2 Stack Adapters Stacking Cable

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential *C9200 SKUs cannot mix with C9200L SKUs
What is new with Cisco Catalyst 9300 Series switching
New generation of fixed access switching
Cisco Catalyst 9000 leadership
48 ports 5G UADP 2.0
2.5G at the with UPOE Cisco IOS® XE Software
Highest
price of 1G SD-Access
2.5G, 5G,
40G at the Multigigabit 12 ports Multigigabit+ 36 x86 CPU and containers
price of 10G density in ports 2.5G with UPOE
Encrypted Traffic Analytics (ETA)
the industry
AES-256/MACsec-256
24 ports Multigigabit Trustworthy solutions
with UPOE
Cisco StackWise® Virtual
Only IEEE1588 and AVB
stackable 24 ports 1G
NBAR2
switch with Data/POE+/UPOE
8x 10G Perpetual/Fast PoE
and 2x 25G Model-driven programmability
uplinks 48 ports 1G Patching/GIR
Data/POE+/UPOE Streaming telemetry

Modular Higher-efficiency AC and


Modular uplinks
fans DC power supplies
New
NEW NEW NEW NEW NEW Platinum
rated

8x 10G 2x 40G 4x Multigigabit 4x 1G 2x 25G 315W AC 715W AC/DC* 1100W AC

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
New additions to the Cisco Catalyst 9300 Series

New C9300-48UXM: 48-port 2.5 Gigabit Ethernet (12 full Multigigabit)

Modular uplinks Modular power


Modular supplies
Fans New New

New
Platinum
rated
8x10G 2x40G 4x Multigigabit 4x1G 2x 25G 350W 715W 1100W

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9300 Series switching innovations
and benefits
Flexible ASIC Optional bluetooth Powerful CPU complex Wireless scale Most dense and flexible Unmatched PoE
• UADP 2.0 management • Intel x86 CPU • 48x Wave 2 uplink offering • Resiliency – Extends Catalyst 3850
• USB 2.0* • 4-core 1.8GHz access points • 8x 10G, perpetual/fast leadership
• 8 GB memory in 1RU Multigigabit, 25G • High power – 60W
• 16 GB flash Cisco UPOE® 1.5x throughput

4x VRF scale

2x wireless scale

4x Wave 2 access points supported

2x to 4x flash, memory

Pluggable storage

2x CPU performance

2x uplink scale

25G and Multigigabit uplinks

Densest 5G access

8x 10G, 2x 40G UL at price of 2x 10G


Local storage Most flexible stacking Redundant fans Intelligent power Optional power High-efficiency power supplies
• Removable • Front* and back stacking management supplies • Power supplies (AC+DC)
storage (120GB) • Multiple cabling types – • Cisco StackPower® • Power supplies
copper and fiber (AC+DC)
• Best HA – NSF/SSO

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Introducing the Cisco Catalyst 9400 Series switches
New generation of modular access
Cisco® Catalyst® 9000
9 Tbps switching leadership
system
bandwidth UADP 2.0

Open Cisco IOS® XE


Redundancy
is now SD-Access
table stakes

NEW Industry’s
highest PoE
x86 CPU and containers

scale Encrypted Traffic Analytics

MACsec-256 encryption

Trustworthy solutions

Cisco StackWise® Virtual

IEEE1588 and AVB

NBAR2
4-Slot 7-Slot 10-Slot
Model-driven programmability
Supervisor Access line cards Core line cards Power supply
• Sup-1: 80G per slot access optimized • 24x Multigigabit • 24x 10G SFP+ • 3200W AC
• Sup-1XL: 120G/240G per slot core optimized • 48x 1G SFP • 3200W DC Patching and GIR
24x Cisco UPOE®
• Sup-1XL-Y: 120G/240G per slot core optimized • 48x Cisco UPOE • 24x 1G SFP • 2100W AC
• 48x PoE+, 48x data Streaming telemetry

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9400 Series - Sup-1XL

Optimized for 1G and 10G


Small to midsize backbone

40G

8p 10G uplinks SD-Access


2p 40G uplinks Border and edge

Now
shipping 240G per slot C9404R MPLS, NAT (16.9)
120G per slot C9407R support
80G per slot C9410R

Extending the Cisco Catalyst 9400 Series switching performance without compromise
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9400 Series - Sup-1XL-Y

Optimized for 1G and 10G


Small to midsize backbone

25G
40G

8p 10G uplinks SD-Access


2p 25G uplinks Border and edge
2p 40G uplinks

NEW 240G per slot C9404R MPLS, NAT (16.9)


120G per slot C9407R support
80G per slot C9410R

Extending the Cisco Catalyst 9400 Series switching performance without compromise
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9400 Series Switches
– Multigigabit and PoE+
Shipping

48x 10/100/1000 48x 10/100/1000 24x Multigigabit +


Cisco UPOE 24x 1G
24x 1G + 24x Multigigabit
Cisco UPoE®

PoE+ for price-


neutral transition

192 ports of Multigigabit


48x 10/100/1000 PoE+

Highest Multigigabit port density in the industry

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9500 Series Switches
New generation of purpose-built fixed core/aggregation

UADP 2.0 UADP 3.0


• 40G at the price of 10G • 1TB SSD storage
Extending Cisco®
• Industry’s first 40G enterprise switch • Industry’s first 100G enterprise switch
Catalyst® 4000 and
• Optimized 10G switch for midsize backbone • 8x buffering vs. the competition 6000 Series
leadership in
fixed core
Cisco Catalyst Cisco Catalyst
9500-16X 9500-24Y4C 13x throughput (3.2 Tbps)
Cisco Catalyst Cisco Catalyst
9500-40X 9500-48Y4C 6x performance (1 Bpps)
Cisco Catalyst Cisco Catalyst No oversubscription
9500-24Q 9500-32QC
Cisco Catalyst Cisco Catalyst 8x 40G density
9500-12Q 9500-32C Pluggable SSD storage
USB 3.0
4x memory and flash
2x CPU cores
Customizable templates
Cisco StackWise® Virtual
Modular Storage for
Modular fans Modular uplinks
power supplies application hosting

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9500 Series Switches:
Offering a comprehensive high-density portfolio on campus
with 100G, 40G, 25G, 10G
10G 25G 40G 100G
Architectural flexibility
• Broad support for 10G, 25G, 40G,
100G from aggregation to core

> 24 48P 25G


ports (Uplinks: 4P 100G)
40P 10G
32P 40G
Infrastructure investment protection (Uplinks: 8P 10G, 32P 100G
2P 40G)
• Non-disruptive migration from 10G to
25G and beyond

24P 40G
<= 24
Cost-effective optics ports
• Innovation in standards to support 16P 10G 24P 25G
(Uplinks: 8P 10G/2P 40G) (Uplinks: 4P 100G)
high-density, multilane optics 16P 100G
12P 40G

Platform
benefits
Up to 1TB Customizable Same Cisco N+1 fan 1:1 power
SSD storage ASIC templates IOS® image redundancy supply redundancy

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9500 Series Switches:
New generation fixed core for high density 100G, 40G, 25G
Extending Cisco
Industry’s Catalyst 6000 Series
Powered
1TB SSD first 100G leadership in fixed
by
Cisco® Catalyst® UADP 3.0 storage enterprise core
9000 switching switch
13x throughput (3.2 Tbps)
leadership
Cisco Catalyst 6x performance (1 Bpps)
Open Cisco IOS® XE 9500-48Y4C
No oversubscription
SD-Access 8x 40G density
Cisco Catalyst
Fabric NetFlow 9500-32QC Pluggable SSD storage
USB 3.0
ETA, SLN, MACSec-256
Cisco Catalyst 4x memory and flash
AVB, NBAR2, DNS-AS, 9500-32C
2x CPU cores
patching, GIR, streaming
telemetry, model-driven Customizable templates
programmability

Accelerating high-speed transitions for all campus types

32P 100G 32P 40G/16P 100G 48P 10/25G + 4P 100G 24P 10/25G + 4P 100G

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9600 Switching Series:
Bedrock of the Cloud Scale Campus
Highest
Most Programmable L2 Scale
ASIC in Industry (ACLs)

Purpose Built:
Resiliency with Scalability

Full MPLS,
Industry’s Most BGP, EVPN,
SD-Access
Comprehensive Security
Designed for Campus
25G Dual Rate Optics
25.6 Tbps switching capacity
Grows with Your Flexible Speeds:
Business at Lowest TCO 10G/25G/40G/100G

Flexible MACSec 256


© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Netflow
Your Business Stops If the Core Is Down
Gold Standard for Catalyst 9600 — Raising the
Campus Core Bar on Campus Core

Catalyst 9600
Powered by UADP 3.0, Open
IOS-XE
Catalyst 6500 Catalyst 6800

High Availability & Resiliency Ready for IBN With C6K Parity
Security, Automation and Richest feature-set in the
Security at Scale
Analytics industry

Breadth of Services
Architectural Flexibility:
Flexible Speed, Any Place
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9600 Series:
Chassis, supervisor, line cards, Cisco DNA license options

Chassis and supervisor Line cards Cisco DNA subscription


C9606R – 6-slot chassis C9600-LC-24C (QSFP+, QSFP28) C9600-DNA-P-3Y/5Y/7Y Chassis capacity
(Side-to-side airflow) 24-port 40 GE / 12-port 100 GE (Cisco DNA Premier includes Total/per slot:
100 flows /endpoints for Stealthwatch/ISE) 25.6 Tbps/6.4Tbps

Powered
by UADP
3.0 Sup-1 switching capacity
Cisco DNA
Total / per slot:
Premier 9.6 Tbps /2.4Tbps

C9600-SUP-1 C9600-LC-48YL (SFP/SFP+/SFP28) C9600-DNA-A-3Y, -5Y, -7Y System port density


• 8-core x86 CPU, 6G DDR4 memory 48-port 25 GE, 10 GE, 1GE • 192 ports x 10G/25G
• Copper and fiber mgmt ports • 96 ports x 40G
• 48 ports x 100G
Cisco DNA
Advantage
Power supply
2000W AC
2000W DC

Performance, flexibility, and investment protection


C97-742140-00 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9600 Series Switches Powered by
Ready for Cisco Catalyst 6500/6800 Series migration UADP 3.0 and
open Cisco
Richest feature set in the industry IOS® XE

20 years of innovation Cisco Catalyst 6000 Intent-based


Series parity networking ready
$50B in installed base
Layer 2, Layer 3, ETA,** MACsec-256,
multicast, ACL, QoS trustworthy systems

Programmability
Resiliency: ISSU and telemetry Cisco
and SVL*
Catalyst
NBAR2 AVC,** Assurance 9600 Series
Cisco Catalyst Flexible NetFlow
Hot patching, graceful
6500/6800 Series insertion and removal (GIR)

Breadth of SD-Access, MPLS EVPN BGP VXLAN


Resiliency Security
services

Cisco Catalyst 6000 Series –


gold standard for campus Cisco Catalyst 9600 Series — raising the bar on campus core * FCS+1
core ** FCS ++
C97-742140-00 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Simplified operations and serviceability with Cisco
Catalyst 9000 switching
Lower TCO with better ergonomics
Ease of serviceability with blue beacons on
Inventory management efficiency with built-in RFID
each component

Ergonomic design with industry-standard icons Wireless console access with Bluetooth

Icons

Mobile Laptop

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Catalyst 9000 Software Licensing

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
New packaging and licensing
Network stack and Cisco DNA component are bundled together

Advantage
Essentials IP Services
package
package
Cisco DNA
Advantage
Cisco DNA (3 yr)
Essentials (3y) NBAR2,
ERSPAN,
EEM
Price

Price
IP Base Wireshar
LAN Base k,
+
+ Flexible
Hardware Network
Hardware NetFlow,
Network Advantage
Essentials + Cisco
+ Hardware Hardware DNA
Service
for
Bonjour

Perpetual Subscription Perpetual Subscription (3, 5, 7 yr)

On expiration of Cisco DNA term, all functionality continues to operate Entitlement for perpetual functionality remains
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Perpetual
Catalyst 9000 Switches Licensing Tiers Subscription (3, 5, 7yr)

Key to enabling continuum of Cisco’s IBN innovations in every network

Cisco DNA Essentials Cisco DNA Advantage (Incl. Cisco DNA Essentials)

 Day-0/Day-1 Automation with PnP, LAN Automation  Software-Defined Segmentation with SD-Access
Value Add with  Element Mgmt. with SWIM, Discovery, Inventory  Predictable Application Experience with App Policy Unleash Cisco’s IBN
Cisco DNA Center  Advanced Assurance with Cisco DNA Assurance
Innovations
 Reduced Network Downtime with Patch Lifecycle Mgmt.

Key Benefits
without Cisco DNA  Network Visibility with Full Flexible NetFlow  Malware detection/prevention with ETA Cisco Catalyst
 On-Device scripting with Embedded Event Mgr.  Application Visibility with NBAR2 Differentiators
Center
 Monitoring & Troubleshooting with ERSPAN,
Wireshark

Network Essentials Network Advantage (Incl. Network Essentials)

Raising the bar for


 Essential Switching with Layer2, Routed Access  Full Routing with BGP, HSRP, OSPF, VRF, MPLS Competition
 DevOps Integration with NetConf/Yang, RestConf, Guest  End to End Security with TrustWorthy Systems, MACSec
Shell link encryption
 Resiliency for mission Critical Environments with
ISSU, NSF, Stackpower, Patching (CLI)
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
WAN
Switch
Wireless

Tiered Structure Across Fabric Common

Enterprise Agreement (EA) Eligible

Enterprise Agreement (EA) Eligible Cisco DNA Premier


Single
Cisco DNA Advantage SKU
3/5/7 Year Subscriptions

Single
Cisco DNA Essentials SKU
3/5/7 Year Subscriptions
WAN Optimization
Single
3/5/7 Year Subscriptions Analytics
SKU

Stealthwatch

CMX Base

Prime
Prime
AP License
Prime AP License
ISE Base + ISE Plus
AP License Cisco DNA Advantage Cisco DNA Advantage
Cisco DNA Essentials Cisco DNA Essentials
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco DNA Essentials
Cisco ONE
Enterprise Networking (Routing, Switching, Wireless)

Previous model New Licensing

Perpetual Subscription Perpetual Subscription

Cisco DNA
Cisco ONE
Premier
Cisco ONE Advantage Cisco ONE
Advanced Advanced Cisco
C1 SWSS Cisco DNA DNA Cisco DNA
Required Advantage (C1 SWSS Advantage
Benefits
Cisco ONE Cisco ONE Included)
Foundation Cisco DNA Foundation Cisco DNA
Essentials Essentials

Perpetual Subscription SWSS Subscription


(Software Support Included)

Cisco DNA Attach with Cisco DNA Premier Purchase | Free Cisco DNA Center appliance*
C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Catalyst 9000 Switches - Advantage vs. Essentials
Catalyst 9200, 9300, 9400, 9500 Series switches
Advantage Essentials
3,5,7 Year Terms
Cisco DNA Advantage (Inclusive of Cisco DNA Essentials) Cisco DNA Essentials 3,5,7 Year Terms

Advanced Automation Assurance & Analytics Basic Automation Basic Assurance


 SD-Access  Global Insights, Trends,  PnP Application  Health Dashboards – Network, Client,
 Application Policy  Compliance, Custom Reports  LAN Automation Application
 Encrypted Traffic Analytics*  Switch 360 & Wired Client 360  Embedded Event Manager  Basic Switch & Wired Client Health
 Cisco DNA Service for Bonjour*  SD-Access and Switch Insights Monitoring
 Third-party App Hosting  Application Health, Application 360,
Performance (Loss, Latency, Jitter)

Element Management Telemetry & Visibility Element Management Telemetry


 Patch Lifecycle Management  ERSPAN  Software Image Management  Full Flexible NetFlow
 AVC (NBAR2)*  Discovery, Inventory, Topology
 Wireshark

Network Advantage (Inclusive of Network Essentials) Perpetual Network Essentials Perpetual

Enhanced Security Flexible Network Segmentation Essential Switch Capabilities DevOps Integration
Controls VRF, VXLAN, LISP, SGT, MPLS Layer 2,  NETCONF, RESTCONF, gRPC
Routed Access -RIP, EIGRP Stub,  Yang Data Models
MACsec-256 Encryption*
OSPF (1000 routes),  GuestShell (On-Box Python)
High Availability & 
IoT & Mobility PBR, PIM Stub Multicast (1000 routes) PnP Agent, ZTP
CoAP*, AVB*, PTP* Resiliency PVLAN, VRRP, PBR, CDP, QoS,
NSF, GIR, Stackwise Virtual+, FHS, 802.1x, MACsec-128, CoPP,
ISSU/eFSU, Patching (CLI) SXP, IP SLA Responder Telemetry & Visibility
Optimize Bandwidth Utilization SSO  Model-driven Telemetry
Full Routing Functionality  Sampled NetFlow
BGP, HSRP, OSPF, ISIS,GLBP with Multicast  SPAN,RSPAN
MSDP, mVPN, AutoRP, PIM-BIDIR

 Catalyst 9000 switching HW includes the Perpetual Network Stack - Network Essentials or Network Advantage
 C97-738949-02
Mandatory©to 2018 Cisco and/or
attach Cisco its DNA
affiliates. All rights reserved.
License Cisco Confidential
when ordering Catalyst 9000 switches
 Cisco DNA License includes Switch and Cisco DNA Center Features * Not available on Catalyst 9200 Series Switches +Catalyst 9400/9500 Series switches
Catalyst 9000 Wireless Products

C97-738949-02 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Introducing Cisco’s Next Generation Wireless Stack
new
Cisco DNA Center Cisco DNA Spaces
Translate business intent into network policy and capture actionable insights Digitize people, spaces and things

new new

Catalyst 9800 Catalyst 9100


Wireless Controller Access Point

Resilient Secure Adaptive


Global
With Innovations in Performance, Security and Analytics
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

S a l e s Tr a i n i n g
End-to-end leadership enabling next-generation mobility
Access Points Wireless Controller Management Services

Catalyst Catalyst Cisco DNA Center Cisco DNA Spaces


9100 Series 9800 Series

See  Act  Engage


Industry’s only modular
WLC with 40G/100G Automation
Wi-Fi 6
uplinks
Cisco RF ASIC
Assurance

Public Cloud & Private


Cloud Ready Policy

The Full Experience End to End

Built for intent-based


© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Automation Security Analytics
Global
networking S a l e s Tr a i n i n g
Cisco Catalyst Next Gen Wireless Architecture
Catalyst 9800
Next Generation Wireless Controller
ENCS *

Built for Intent-based Networking | Powered by IOS XE | Deploy Anywhere

The Most Deployed Controller A Modern Modular OS


RF excellence │ Device ecosystem │ Wireless assurance High Availability │ Programmability │ Scale

Bringing together network leadership with RF innovation


© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

* In early field trials


Deploy It the Way You Want It

ENCS

Catalyst 9800-CL+ Catalyst 9800-CL Catalyst 9800-CL


1000 APs, 10K Clients 3000 APs, 32K Clients 6000 APs, 64K Clients^

200 APs 1000 APs 2000 APs 3000 APs 6000 APs

Catalyst 9800-SW* Catalyst 9800-40 Catalyst 9800-80


200 APs, 4K Clients 2000 APs, 32K Clients, 40 Gbps 6000 APs, 64K Clients, 80 Gbps

On-premise Appliance | Pubic or Private Cloud | On a Switch


© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
*SD-Access only
+C9800-CL for Public Cloud with Flexconnect; GCP for EFT only
^Future
Cisco Catalyst Wireless Platform Support
Wireless Controller Access Points

C9800-40-K9 Cisco Catalyst 9800


C9800-80-K9 Wireless Controller Series

AP1540/AP1560
AP1810, AP1815, AP2800/
AP1830, AP1850 AP3800/AP4800

Cisco Catalyst 9800


C9800-CL-K9 Wireless Controller for
Cloud 11ac Wave 1 and Wave 2 Access Points
AP18xx, 28xx, 38xx, 48xx, 15xx, 1700, 2700, 3700

Deployment Modes
Centralized, Distributed Branch, SDA and Mobility Express
(Future)

C9800-SW-K9 Catalyst 9800 SD-Access AP Modes


Embedded Wireless Local, FlexConnect, Monitor, Mesh, Flex+ Mesh, Sensor,
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Sniffer
New Cisco Catalyst 9100 Series Access Points
Ideal for small to medium-sized deployments Mission critical

Mar Mar May


‘19 ‘19 ‘19

Powered by
Cisco RF ASIC
9115AX 9117AX 9120AX
(Wi-Fi 6 Certifiable) (Wi-Fi 6 Compatible) (Wi-Fi 6 Certifiable)
• 4x4 + 4x4 • 8x8 + 4x4 • 4x4 + 4x4
• MU-MIMO, OFDMA • MU-MIMO, OFDMA (only DL) • Cisco RF ASIC for Next gen CleanAir
• Spectrum Intelligence • Spectrum intelligence • Dual 5GHz, HDX
• 1 x 2.5 mGig • 1 x 5 mGig • RF signature capture
• TWT • TWT (Non Triggered) • IoT ready (Zigbee, Thread)
• Integrated Antenna only • Application Hosting
• 1 x 2.5 mGig
• TWT

Cisco DNA Assurance with Integrated or external


iCAP
© 2017 Cisco and/or its affiliates. All rights reserved. Bluetooth 5
Cisco Confidential USB antenna SKUs
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco DNA Center & DNA Spaces

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Consistent policy across IT and OT New in
SD-Access
SD-Access Extension for IoT and Distributed Campus 1.2

C B B

B B C C B B

Traffic Outdoor Energy IP


sensors wireless sensors cameras

SD-Access Extension for IoT SD-Access for Distributed Campus


• Provides micro-segmentation for IT and OT • Enables policy enforcement across extended
environments
• Automates who gets access to what
• Supports over 1 million clients • Increases awareness of what’s on the network
• Improves threat detection and containment

Scale and secure operations across a metro environment.


C97-740529-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Extend security policy automation to IoT
SD-Access Extension for IoT

Before After
Connected
Campuses workspaces
• Disparate OT and IT • One network for OT
networks HQs
Warehouses and and IT
Data centers
manufacturing
• Security breach in OT Cloud
• Security breach better
led to major IT breach contained
Roadways
• No or inconsistent • Consistent security
security policy for IoT, Connected
policies across OT and
resulting in vulnerability lighting IT network

Outdoor
spaces

IT and OT efficiency | Scalable IoT security | Clear division of IT/OT roles

C97-740529-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Securely consolidate IT and OT to one network
SD-Access Extension for IoT
Cisco DNA Center • Operational simplicity for IT designed and
managed as well as IT designed and OT managed
• Greater visibility to a broad set of
IoT devices
• Improved threat detection and containment

Extended node portfolio


Enterprise
campus

IE 4000 IE 4010 IE 5000


Series Series Series

Extended
nodes
enterprise

Cisco® Catalyst® Cisco Catalyst


Extended

Digital Building Series 3560-CX Series compact


REP ring

C97-740529-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Software-Defined Access (SD-Access)
Networking at the speed of software
Cisco DNA Center

Identity-based
Policy Automation Analytics policy and segmentation
Security policy definition decoupled from
VLAN and IP address

Automated
network fabric
Single fabric for wired and wireless with
workflow-based automation

Insights
and telemetry
SD-Access
Extension User Analytics and insights into user and
mobility
Policy stays with user application behavior

IoT network Employee network

C97-740529-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Introducing SD-Access for Distributed Campus
Enhanced resiliency and scale for large deployments

Site 1
Extend SD-Access benefits campuswide

C B B • End-to-end policy and segmentation


• Enhanced resiliency and local isolation
• Direct Internet access per site
Site 2 Site 3 • Automated intersite connectivity
B B C C B B
• Scalable to 100+ sites
• Flexible: 50 to 100,000 users per site

Automation and Assurance managed through Cisco DNA Center.


C97-740529-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
SD-Access support
A single fabric for your digital-ready network
Switching Routing Wireless Extension
Cisco® Catalyst® 9400 Series
ASR 1000-X
5520 WLC
Cisco Catalyst
9300 Series Cisco Catalyst
Digital Building Series
ASR 1000-HX
8540 WLC

4430 ISR
3504 WLC
Cisco Catalyst 9500 Series
4450 ISR
Cisco Catalyst 3560-CX
Wave 2 APs (Aironet® 1800, Series
4351 ISR 2800, 3800 Series)
Cisco Catalyst Cisco Catalyst Cisco Nexus®
4500E Series 6000 Series 7700 4331 ISR

5400 ENCS**
Wave 1 APs* (Aironet 1700, IE switches
Cisco Catalyst 3850 and 3650 Series CSRv 2700, 3700 Series) (4000 and 5000 Series)
C97-740529-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
* With caveats.
**Future.
Cisco DNA Center components
Cisco DNA Center

Policy Design

Provision Assurance

Cisco DNA Center appliance


Automation software module
Assurance software module
Cisco® Identity Services Engine

Cisco DNA ready hardware


and non Cisco DNA ready
hardware
Switch Router Wireless LAN Access
controller point
C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Introducing
Cisco DNA Spaces
Retail Hospitality Transportation

What’s
They use behavior common
data across
of people andthese
thingscompanies?
as a strategic advantage

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Carpeted Enterprise Education Manufacturing
A Blind spot Remains in Physical Spaces
The Data
Blindspot

Limited visibility
What if your into
network
behavior
could of people
deliver more
thanthings
and connectivity?

Your business is missing billions of data points everyday


© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Unlock the Physical Space Blind Spot

how people and things


See behave on site

on insights through
Act digitization toolkits

platform capabilities to
Extend drive business outcomes

Cisco wireless delivers


connectivity + business insights

Digitizing Physical Spaces: People and Things


© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco DNA Spaces
Digitizing Spaces: People & Things

See Act Extend


See what’s happening at Translate network view of people and Location App Store for partner apps
your properties assets into business view
Extensions for enterprise software such
Unlock insights and trends into Trigger contextual notifications and as:
customer, employee and workflows based on the behavior of • Marketing Automation
asset behavior people and assets • Customer Relationship (CRM)
• Point-of-sale (POS)
Benchmark performance with industry Leverage APIs to integrate with • Building Automation
other applications • Human Resources (HRMS)

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Business Value
See Act Extend
Improve Experience Customer Engagement & Enterprise Integrations
• Understand visitor behavior to measure Satisfaction • Integrate location data into enterprise systems
engagement, stickiness, etc. and • Deliver relevant services and notifications at and create a holistic view
improve experience the right time and place
• Inform staff so they’re better able to serve
customers

Drive Efficiencies Boost Loyalty Vertical Solutions


• Improve space utilization and layout. • Boost loyalty program membership • Ready to use enterprise partner apps and
Correlate with lease pricing • Acquire customers and expand customer base custom apps specific to your industry
• Improve staff efficiencies • Recognize and deliver differentiated experience
• Improve service standards and productivity to loyal customers

Business Decision Making Influence Behavior Custom Solutions


• Informed decision making with • Influence visitor behavior through at-location • Custom solutions for your business
gold standard data engagements and drive sales
• Benchmark performance • Drive monetization through captive portals and
• Commercially relevant metrics at-location engagements

Impact Analysis Optimize Operations End-to-End Monitoring


• Understand variables impacting visitor behavior • Reduce time wasted on finding assets • End-to-end monitoring for enhanced reliability
• Reduce material spoilage
• Reduce inventory excess and avoid loss
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• Reduce manual process and save cost
Cisco DNA Spaces Business Value
Line of Business Operations IT

Understand Visitor Enterprise Integrations


Optimize Operations
Behavior & Data Export

Improve Experience Employee Productivity Centralized


Management

Customer Acquisition & Drive Efficiencies Compliance


Loyalty

Boost Satisfaction Reduce manual End-to-End Monitoring


© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential processes and save and SLAs
cost
Cisco DNA Spaces Capabilities
See Act Extend
INDUSTRY STANDARD LOCATION DIGITIZATION TOOLKITS: PARTNER SERVICES:
DATA:
Behavior Metrics Captive Portals
How are people behaving in my property? Operational Insights Partner App Store
Acquire & identify visitors and map to
enterprise identity Identify & monitor assets, detect Discover new, vertically focused
anomalies and trigger alerts location based services applications
Benchmarks [coming soon]
Compare performance of your locations with
against industry and organization benchmarks
Location Personas
Profile and segment visitors based on
Wi Fi Adoption Metrics behavior. Detect & Locate
Measure the adoption of Wi-Fi by visitors to your Search and display location of
Enterprise Software
locations devices based on MAC or IP Extend your location data into
Engagements address. enterprise software platforms such
as CRMs, Data hubs, Analytics
Right Now Metrics Trigger notifications to visitors & Platforms, Marketing clouds, etc.
What is happening at my property right now? employees via multiple channels through built-in connectors
(SMS, Email, App push, API trigger, WebEx teams)
[coming soon]
BLE Manager (Beta)
Location Hierarchy Location SDK (Beta) set and manage functions of BLE
Map business taxonomy to network Provides real time location for Radios
infrastructure triggers, wayfinding paths, and points Solutions Partners/
of interest Developer Teams
Work with third party developers to
Location Compute Location Compute create customized solutions using
• On Prem RSSI location compute is included. • Cloud or On Prem RSSI location included. Cisco DNA Spaces APIs for your
For use by Cisco Apps (Cisco DNA-C, Cisco • Hyperlocation included On-Prem. business
Prime) only. • For On Prem location compute, 3375 Appliance or equivalent VM required. [coming soon]
• © 2018
For Cisco and/or
On Prem its affiliates.
location compute, All rights
3375reserved. Cisco Confidential
Appliance or equivalent VM required.

You might also like