1. Product Overview & Use Cases
The Cisco Catalyst 9400 Series is the premier modular enterprise switching access and distribution platform, engineered to address advanced security, Internet of Things (IoT), enterprise mobility, and multi-cloud integration. As the foundational building block for Cisco Software-Defined Access (SD-Access), the Catalyst 9400 Series delivers state-of-the-art high availability, supporting zero-downtime operations through In-Service Software Upgrade (ISSU), Non-Stop Forwarding (NSF), and Stateful Switchover (SSO).
Built on a centralized architecture, the platform utilizes Cisco’s programmable Unified Access Data Plane (UADP) Application-Specific Integrated Circuit (ASIC) technology. This architecture provides robust backward compatibility and future-proofing for emerging network encapsulation protocols. The series supports macro- and micro-segmentation with Cisco TrustSec Security Group Tags (SGT), inline native MACsec-256 encryption, and advanced telemetry through Full Flexible NetFlow (FNF).
| Deployment Tier | Architecture Focus | Catalyst 9400 Fit | Key Enablers |
|---|---|---|---|
| Enterprise Access Edge | High-density PoE/UPOE+, IoT aggregation, wireless access point connectivity | 10-slot and 7-slot chassis providing up to 384 ports of 90W UPOE+ or mGig | UADP ASIC, 90W UPOE+, mGig (1/2.5/5/10G), SD-Access Edge Node |
| Campus Distribution | Layer 3 routing boundary, policy enforcement, aggregation of access layer switches | 4-slot and 7-slot chassis consolidating uplink bandwidth from edge tiers | 100G/40G/25G supervisor uplinks, VRF-lite, TrustSec SGT, BGP/OSPF |
| Collapsed Core | Mid-size campus core and distribution combined into a single logical tier | 7-slot chassis handling both dense access and high-speed core routing | Cisco StackWise Virtual (SVL), High Availability (SSO/NSF), BGP EVPN |
| IoT and Operational Technology (OT) | Industrial and smart building infrastructure convergence | Deployment of dense 90W power for LED lighting, PTZ cameras, and digital signage | IEEE 802.3bt UPOE+, Perpetual PoE, Fast PoE, Audio Video Bridging (AVB) |
| SD-Access Fabric | Automated fabric provisioning and identity-based policy | Deployment as Fabric Edge, Fabric Border, or Fabric Control Plane nodes | LISP, VXLAN, Cisco DNA Center integration, TrustSec |
The integration of the UADP ASIC ensures the Catalyst 9400 can adapt to new data plane protocols without requiring expensive forklift hardware upgrades. The platform seamlessly functions as the Control Plane Node, Border Node, or Edge Node within a Cisco SD-Access environment.
2. Architecture & Form Factors
The Catalyst 9400 Series physical architecture centers around a high-speed passive backplane design, relying entirely on the active Supervisor engine for all centralized forwarding, switching, and routing operations. The modular architecture separates the control plane, data plane, and power provisioning into dedicated physical modules.
The control plane is driven by an x86-based multi-core CPU complex, executing a modular 64-bit Cisco IOS XE operating system. The data plane is powered by the UADP 2.0, 2.0 XL, or 3.0 ASIC, depending on the supervisor generation. The system accommodates dual supervisors for 1+1 redundancy. Upon failure of the active supervisor, the standby unit synchronizes state data and resumes forwarding operations within sub-second intervals via SSO.
| Chassis Model | Part Number | Total Slots | Supervisor Slots | Line Card Slots | Max Switching Capacity (Sup-2XL) | Max Port Density (10/100/1000) | Maximum Output Power |
|---|---|---|---|---|---|---|---|
| Catalyst 9404R | C9404R | 4 | 2 (Slots 2, 3) | 2 (Slots 1, 4) | 1.92 Tbps | 96 ports | 9,600 Watts |
| Catalyst 9407R | C9407R | 7 | 2 (Slots 3, 4) | 5 (Slots 1, 2, 5-7) | 4.80 Tbps | 240 ports | 19,200 Watts |
| Catalyst 9410R | C9410R | 10 | 2 (Slots 5, 6) | 8 (Slots 1-4, 7-10) | 7.68 Tbps | 384 ports | 25,600 Watts |
The flagship model of the series is the Catalyst 9410R, designed for maximum density in large enterprise campus environments.
| Flagship Model: Catalyst 9410R | Exact Specifications |
|---|---|
| Rack Units (RU) | 13 RU |
| Height | 22.61 inches (57.43 cm) |
| Width | 17.30 inches (43.94 cm) |
| Depth | 16.30 inches (41.40 cm) |
| Weight (Empty Chassis) | 65.0 lbs (29.48 kg) |
| Weight (Fully Loaded) | ~ 155.0 lbs (70.3 kg) |
| Maximum Backplane Capacity | Up to 480 Gbps per slot (with Sup-2XL) |
| Maximum Power Supply Bays | 8 |
3. Performance & Scaling
System performance in the Catalyst 9400 Series is explicitly dictated by the installed Supervisor Engine. The platform has progressed through two primary generations of supervisors: Series 1 (Sup-1, Sup-1XL, Sup-1XL-Y) built on the UADP 2.0 architecture, and Series 2 (Sup-2, Sup-2XL) built on the massive UADP 3.0 architecture.
| Supervisor Engine | ASIC Generation | System Switching Capacity | Bandwidth per Slot | Forwarding Rate (IPv4) | MAC Addresses | IPv4 Routes (Indirect + Direct) | Flexible NetFlow (FNF) Entries |
|---|---|---|---|---|---|---|---|
| C9400-SUP-1 | UADP 2.0 | 1.44 Tbps | 80 Gbps | 900 Mpps | 64,000 | 112,000 | 384,000 |
| C9400-SUP-1XL | UADP 2.0 XL | 3.20 Tbps | 120 Gbps / 240 Gbps | 2.0 Bpps | 96,000 | 256,000 | 384,000 |
| C9400-SUP-1XL-Y | UADP 2.0 XL | 3.20 Tbps | 120 Gbps / 240 Gbps | 2.0 Bpps | 96,000 | 256,000 | 384,000 |
| C9400-SUP-2 | UADP 3.0 | 4.80 Tbps | 240 Gbps | 2.8 Bpps | 128,000 | 256,000 | 384,000 |
| C9400-SUP-2XL | UADP 3.0 XL | 9.60 Tbps | 480 Gbps | 5.6 Bpps | 128,000 | 256,000 | 384,000 |
Advanced Layer 3 capabilities include BGP, OSPF, EIGRP, IS-IS, and VXLAN routing. The UADP 3.0 ASIC dramatically increases hardware table sizes to accommodate vast IoT and endpoint deployments.
| Advanced Scaling Metric | C9400-SUP-1/1XL Series Limits | C9400-SUP-2/2XL Series Limits |
|---|---|---|
| IPv4 Multicast Routes | 56,000 (Sup-1), 128,000 (1XL) | 128,000 |
| IPv6 Routes (Indirect + Direct) | 56,000 (Sup-1), 128,000 (1XL) | 128,000 |
| QoS Access Control Entries (ACEs) | 18,000 | 18,000 |
| Security Access Control Entries (ACEs) | 18,000 | 18,000 |
| Active VLANs | 4,094 | 4,094 |
| Spanning Tree Instances | 1,000 | 1,000 |
| SD-Access Virtual Networks (VN) | 256 | 256 |
| Switched Port Analyzer (SPAN) | 8 bidirectional sessions | 8 bidirectional sessions |
| Jumbo Frame Size | 9198 bytes | 9198 bytes |
4. Power & Consumption
The Catalyst 9400 Series features an advanced power delivery architecture supporting AC and DC platinum-rated power supplies. The chassis backplane separates system power (allocated for the supervisor, active line cards, and the dynamic fan tray) from inline power (allocated for PoE, UPOE, and UPOE+ ports), ensuring that massive PoE load spikes do not compromise core switching operations.
Power supplies operate in N+N (fully redundant) or N+1 modes. Cisco power pooling enables combining the available capacity of all active power supplies to support dense PoE environments. The Catalyst 9410R typical system power consumption is 850 Watts (calculated using a base configuration: one C9400-SUP-2XL, one C9400-PWR-3200AC, a system fan tray, and zero line cards). Fully loaded with eight 48-port 90W UPOE+ line cards operating at maximum draw, system power consumption scales linearly up to 15,000 Watts.
| Power Supply SKU | Input Voltage Range | Output Power (Max) | System Power Budget | Inline Power (PoE) Budget | Efficiency Rating | Physical Dimensions (H x W x D) |
|---|---|---|---|---|---|---|
| C9400-PWR-3200AC | 200V to 240V AC | 3200 W | 3200 W | 3200 W | Platinum (94% at 50% load) | 1.6 x 3.0 x 13.6 inches |
| C9400-PWR-3200AC | 100V to 120V AC | 1570 W | 1570 W | 1570 W | Platinum (94% at 50% load) | 1.6 x 3.0 x 13.6 inches |
| C9400-PWR-3200DC | -40V to -72V DC | 3200 W | 3200 W | 3200 W | 92% efficiency | 1.6 x 3.0 x 13.6 inches |
| C9400-PWR-2100AC | 200V to 240V AC | 2100 W | 2100 W | 2100 W | Platinum (94% at 50% load) | 1.6 x 3.0 x 13.6 inches |
| C9400-PWR-2100AC | 100V to 120V AC | 940 W | 940 W | 940 W | Platinum (94% at 50% load) | 1.6 x 3.0 x 13.6 inches |
The platform fully supports the IEEE 802.3bt (UPOE+) standard, delivering up to 90W per port. It supports Fast PoE (restoring power to endpoints during initial switch boot) and Perpetual PoE (maintaining uninterrupted power to endpoints during a software reload).
| Chassis Model | Max Total PoE Power Available (Combined PSUs) | Max 90W (UPOE+) Ports | Max 60W (UPOE) Ports | Max 30W (PoE+) Ports | Max 15.4W (PoE) Ports |
|---|---|---|---|---|---|
| Catalyst 9404R | 9,600 W | 96 | 96 | 96 | 96 |
| Catalyst 9407R | 19,200 W | 213 | 240 | 240 | 240 |
| Catalyst 9410R | 25,600 W | 284 | 384 | 384 | 384 |
5. Uplinks, Modules & Optics
The Catalyst 9400 Series leverages a distinct hardware separation between line card access ports and supervisor uplink ports. Line cards range from standard 10/100/1000Base-T to Multigigabit Ethernet (1G/2.5G/5G/10G) and high-density fiber (1G/10G/25G).
| Line Card SKU | Port Density | Media Type | Speed / Interface | Maximum PoE Support | Backplane Bandwidth Requirement |
|---|---|---|---|---|---|
| C9400-LC-48U | 48 ports | Copper RJ-45 | 10/100/1000 | 60W UPOE | 48 Gbps |
| C9400-LC-48H | 48 ports | Copper RJ-45 | 10/100/1000 | 90W UPOE+ | 48 Gbps |
| C9400-LC-48UX | 48 ports | Copper RJ-45 | 100M/1G/2.5G/5G/10G mGig | 60W UPOE | 240 Gbps |
| C9400-LC-48HX | 48 ports | Copper RJ-45 | 100M/1G/2.5G/5G/10G mGig | 90W UPOE+ | 240 Gbps |
| C9400-LC-48T | 48 ports | Copper RJ-45 | 10/100/1000 | Data Only (No PoE) | 48 Gbps |
| C9400-LC-24S | 24 ports | Fiber SFP | 1 Gigabit Ethernet (SFP) | N/A | 24 Gbps |
| C9400-LC-48S | 48 ports | Fiber SFP | 1 Gigabit Ethernet (SFP) | N/A | 48 Gbps |
| C9400-LC-24XS | 24 ports | Fiber SFP+ | 10 Gigabit Ethernet (SFP+) | N/A | 240 Gbps |
| C9400-LC-48XS | 48 ports | Fiber SFP+ | 10 Gigabit Ethernet (SFP+) | N/A | 480 Gbps |
| C9400-LC-48YL | 48 ports | Fiber SFP28 | 25 Gigabit Ethernet (SFP28) | N/A | 480 Gbps (Requires Sup-2XL) |
Supervisor uplink modules determine the core-facing speeds, providing direct interconnects into the campus distribution or core tiers.
| Supervisor Engine | Built-in Uplink Port Configuration | Maximum Uplink Speeds Supported | MACsec-256 Support |
|---|---|---|---|
| C9400-SUP-1 | 8x SFP/SFP+ (10G/1G) or 2x QSFP (40G) | 40 Gbps, 10 Gbps, 1 Gbps | Full |
| C9400-SUP-1XL | 8x SFP/SFP+ (10G/1G) or 2x QSFP (40G) | 40 Gbps, 10 Gbps, 1 Gbps | Full |
| C9400-SUP-1XL-Y | 8x SFP28 (25G/10G/1G) or 2x QSFP28 (100G) | 100 Gbps, 40 Gbps, 25 Gbps, 10 Gbps, 1 Gbps | Full |
| C9400-SUP-2 | 4x SFP28 (25G/10G) + 4x SFP+ (10G) | 25 Gbps, 10 Gbps | Full |
| C9400-SUP-2XL | 4x QSFP28 (100G) or 8x SFP28 (25G) | 100 Gbps, 40 Gbps, 25 Gbps, 10 Gbps | Full |
Optics compatibilities encompass standard short-reach (SR), long-reach (LR), Extended Reach (ER), BiDirectional (BiDi), CWDM, DWDM, and Twinax Direct Attach Cables (DAC/AOC).
| Transceiver Type | Wavelength | Fiber Media Type | Maximum Distance | Core Size (Microns) | Bandwidth (MHz-km) |
|---|---|---|---|---|---|
| QSFP-100G-SR4-S | 850 nm | MMF (OM4) | 100 m | 50.0 | 4700 |
| QSFP-100G-LR4-S | 1310 nm | SMF | 10 km | 9.0 | N/A |
| QSFP-40G-SR4-S | 850 nm | MMF (OM4) | 150 m | 50.0 | 4700 |
| SFP-25G-SR-S | 850 nm | MMF (OM4) | 100 m | 50.0 | 4700 |
| SFP-10G-SR | 850 nm | MMF (OM3) | 300 m | 50.0 | 2000 |
| SFP-10G-LR | 1310 nm | SMF | 10 km | 9.0 | N/A |
| SFP-10G-ER | 1550 nm | SMF | 40 km | 9.0 | N/A |
| GLC-TE (1G) | N/A | Copper UTP | 100 m | N/A | N/A |
6. Comprehensive SKUs
Proper deployment planning requires selecting the accurate combination of chassis, supervisors, line cards, power supplies, and thermal control units.
| Component Category | Part Number | Technical Description |
|---|---|---|
| Chassis Component | C9404R | Catalyst 9400 Series 4-Slot Chassis |
| Chassis Component | C9407R | Catalyst 9400 Series 7-Slot Chassis |
| Chassis Component | C9410R | Catalyst 9400 Series 10-Slot Chassis |
| Supervisor Engine | C9400-SUP-1 | Catalyst 9400 Series Supervisor 1 Engine (UADP 2.0) |
| Supervisor Engine | C9400-SUP-1XL | Catalyst 9400 Series Supervisor 1XL Engine (UADP 2.0 XL) |
| Supervisor Engine | C9400-SUP-1XL-Y | Catalyst 9400 Series Supervisor 1XL-Y with 25G/100G uplinks |
| Supervisor Engine | C9400-SUP-2 | Catalyst 9400 Series Supervisor 2 Engine (UADP 3.0) |
| Supervisor Engine | C9400-SUP-2XL | Catalyst 9400 Series Supervisor 2XL Engine (UADP 3.0 XL) |
| Copper Line Card | C9400-LC-48U | 48-Port UPOE 10/100/1000Base-T Line Card |
| Copper Line Card | C9400-LC-48H | 48-Port UPOE+ 10/100/1000Base-T Line Card |
| Multigigabit Card | C9400-LC-48UX | 48-Port UPOE Multigigabit (100M/1G/2.5G/5G/10G) Line Card |
| Multigigabit Card | C9400-LC-48HX | 48-Port UPOE+ Multigigabit (100M/1G/2.5G/5G/10G) Line Card |
| Copper Data Card | C9400-LC-48T | 48-Port Data-Only 10/100/1000Base-T Line Card |
| Fiber Line Card | C9400-LC-48S | 48-Port 1 Gigabit Ethernet (SFP) Line Card |
| Fiber Line Card | C9400-LC-48XS | 48-Port 10 Gigabit Ethernet (SFP+) Line Card |
| Fiber Line Card | C9400-LC-48YL | 48-Port 25 Gigabit Ethernet (SFP28) Line Card |
| Power Supply Unit | C9400-PWR-3200AC | 3200W AC Power Supply (Platinum Rated) |
| Power Supply Unit | C9400-PWR-2100AC | 2100W AC Power Supply (Platinum Rated) |
| Power Supply Unit | C9400-PWR-3200DC | 3200W DC Power Supply |
| Thermal Fan Tray | C9404-FAN | Variable-Speed Fan Tray for 4-Slot Chassis |
| Thermal Fan Tray | C9407-FAN | Variable-Speed Fan Tray for 7-Slot Chassis |
| Thermal Fan Tray | C9410-FAN | Variable-Speed Fan Tray for 10-Slot Chassis |
7. Environmental Specs & Warranty
The Catalyst 9400 Series operates within rigorous environmental parameters, compliant with Network Equipment Building System (NEBS) Level 3 specifications. High-efficiency variable-speed fans adjust dynamically based on readings from dedicated thermal sensors located across the chassis, line cards, and supervisors. The system supports full EMI and EMC compliance (FCC Part 15 Class A, EN 55022 Class A, EN 55032).
| Environmental Metric | Specification Limit |
|---|---|
| Operating Temperature | 27°F to 109°F (-5°C to 45°C) at altitudes up to 6,000 feet |
| Short-term Operating Temp | 27°F to 131°F (-5°C to 55°C) at sea level |
| Storage Temperature | -40°F to 158°F (-40°C to 70°C) |
| Operating Humidity | 10% to 95% non-condensing |
| Operating Altitude | Up to 10,000 feet (3,000 meters) |
| Acoustic Noise (Minimum Load) | 52.4 dBA |
| Acoustic Noise (Maximum Load) | 75.3 dBA |
| Shock and Vibration Standard | MIL-STD-810G, GR-63-CORE |
| MTBF (C9410R Chassis) | 3,115,100 Hours |
| MTBF (C9400-SUP-2XL) | 326,980 Hours |
| MTBF (C9400-PWR-3200AC) | 377,290 Hours |
Hardware warranty is provisioned via the Cisco Enhanced Limited Lifetime Hardware Warranty (E-LLW).
| Warranty Element | E-LLW Coverage Description |
|---|---|
| Device Coverage | Applies to the chassis bare metal, supervisors, line cards, and fan trays |
| Hardware Replacement SLA | Next Business Day (NBD) where locally available; otherwise within 90 days |
| Cisco TAC Support SLA | 8×5 Cisco Technical Assistance Center (TAC) support for 90 days post-purchase |
| Software Updates | Maintenance releases and specific bug fixes for the base OS features |
8. Licensing Constraints
The Catalyst 9400 Series operates exclusively via Cisco Smart Licensing Using Policy. The hardware must be procured with a mandatory Cisco DNA term license (available in 3, 5, or 7-year increments). Cisco DNA licenses dictate the software control plane and forwarding capabilities of the platform, remaining logically distinct from the perpetual Network Essentials or Network Advantage licenses bundled directly with the hardware.
| Feature / Capability | Network Essentials (Perpetual) | Network Advantage (Perpetual) | Cisco DNA Essentials (Term) | Cisco DNA Advantage (Term) |
|---|---|---|---|---|
| Basic Layer 2/3 Switching | Yes | Yes | Base Requirement | Base Requirement |
| VLANs / STP / LACP | Yes | Yes | Base Requirement | Base Requirement |
| Advanced Routing (BGP, IS-IS) | No | Yes | Base Requirement | Base Requirement |
| VRF, PIM Multicast Routing | No | Yes | Base Requirement | Base Requirement |
| MACsec-256 Link Encryption | Yes | Yes | Base Requirement | Base Requirement |
| Full Flexible NetFlow (FNF) | Included | Included | Yes | Yes |
| SD-Access / Cisco DNA Center | Included | Included | Limited (Access Edge Only) | Full (Border, Control Plane) |
| Cisco ThousandEyes | Included | Included | No | Yes |
| Encrypted Traffic Analytics | Included | Included | No | Yes |
| VXLAN BGP EVPN | Included | Included | No | Yes |
A device originally purchased with a DNA Essentials license can be subsequently upgraded to DNA Advantage. Upon the expiration of the DNA term license, all network features mapped to the perpetual Network license (Essentials or Advantage) will remain fully operational and untouched. However, capabilities explicitly tied to the DNA term license—such as SD-Access fabric provisioning, Encrypted Traffic Analytics (ETA), and Cisco DNA Center orchestration—will cease to be manageable until the license is officially renewed.
Smart Licensing Using Policy (introduced globally in Cisco IOS XE 17.3.2) fundamentally removes the requirement for persistent online communication with the Cisco Smart Software Manager (CSSM). Instead, the Catalyst 9400 generates non-blocking Resource Utilization Measurement (RUM) reports, enabling asynchronous license reconciliation and completely removing technical enforcement barriers during deployment, staging, or within highly secure air-gapped operations.