1. Product Overview & Use Cases
The Cisco Catalyst 9500 Series represents Cisco’s premier purpose-built fixed core and aggregation enterprise switching platform. Built from the ground up to defend against an evolving threat landscape, facilitate Internet of Things (IoT) integration, and handle cloud-scale traffic, it serves as the foundational building block for Cisco Software-Defined Access (SD-Access). The Catalyst 9500 Series is the industry’s first purpose-built 100 Gigabit, 40 Gigabit, 25 Gigabit, and 10 Gigabit Ethernet switch targeted directly at the enterprise campus core and aggregation layers.
Unlike modular chassis solutions, the Catalyst 9500 delivers immense port density and bandwidth capacity within a highly compressed 1-Rack Unit (1RU) physical footprint. It integrates extensive security mechanisms natively into the silicon, including TrustSec, MACsec-256, and Encrypted Traffic Analytics (ETA). The platform’s native integration with Cisco DNA Center enables Zero-Touch Provisioning (ZTP), automated software image management (SWIM), and intent-based networking deployment models.
Use cases include high-density enterprise campus core deployments, high-performance aggregation layer implementations, and collapsed core architectures for mid-sized enterprise networks. The platform leverages a centralized architectural model designed to handle heavy east-west traffic patterns generated by modern application workloads, video distribution, and ubiquitous mobility. Additionally, it provides robust MPLS, VPLS, and EVPN capabilities for complex campus inter-connectivity.
| Primary Use Case | Deployment Layer | Target Environment | Key Differentiator |
|---|---|---|---|
| SD-Access Fabric | Core / Border Node | Large Enterprise Campus | LISP/TrustSec hardware integration |
| High-Density Aggregation | Distribution Layer | Enterprise / University | Native 25G/100G high-density ports |
| Collapsed Core | Core / Distribution | Mid-sized Campus | StackWise Virtual for HA |
| Secure Routing | Edge / Peering | Corporate WAN Edge | High-performance MACsec-256 |
| BGP EVPN VxLAN | Data Center / Campus | Modern Multi-tenant Campus | Standards-based overlay support |
2. Architecture & Form Factors
The Catalyst 9500 Series utilizes the Cisco Unified Access Data Plane (UADP) Application-Specific Integrated Circuit (ASIC) architecture (UADP 2.0 and UADP 3.0), delivering optimized wire-rate routing and switching performance. The x86 CPU architecture provides robust control plane performance, supporting container-based application hosting directly on the switch through Cisco IOx. This edge computing capability allows administrators to run ThousandEyes Enterprise Agents, Wireshark, or custom Python scripts directly on the hardware.
The architecture is explicitly bifurcated into two main categories: Catalyst 9500 High Performance (featuring the highly advanced UADP 3.0 ASIC) and the standard Catalyst 9500 (featuring the mature UADP 2.0 XL ASIC). All models are fixed configuration, 1-Rack Unit (1RU) switches, optimizing expensive rack space while reducing the power and cooling footprint compared to legacy Catalyst 6500 or 6800 chassis.
The UADP 3.0 ASIC specifically introduces programmable pipeline capabilities, allowing microcode updates to adapt to emerging tunneling protocols and forwarding behaviors without requiring forklift hardware upgrades.
| Architectural Component | Catalyst 9500 High Performance (C9500-32C, C9500-32QC, C9500-48Y4C) | Catalyst 9500 Standard (C9500-24Q, C9500-12Q, C9500-40X, C9500-16X) |
|---|---|---|
| ASIC Architecture | UADP 3.0 | UADP 2.0 XL |
| Processor (CPU) | 2.4 GHz x86 4-core | 2.4 GHz x86 4-core |
| System Memory (DRAM) | 16 GB | 16 GB |
| Boot Flash Storage | 16 GB onboard | 16 GB onboard |
| Packet Buffer Size | Up to 36 MB | Up to 32 MB |
| Routing Entries (IPv4/IPv6) | Up to 212,000 / 212,000 | Up to 212,000 / 212,000 |
| MAC Address Table | 82,000 | 82,000 |
| VRF Instances | Up to 4,000 | Up to 4,000 |
| Multicast Routing Scale | 32,000 entries | 32,000 entries |
3. Performance & Scaling
The performance characteristics of the Catalyst 9500 Series are dictated by the underlying UADP ASIC capabilities. The High-Performance models deliver strictly non-blocking throughput across all ports, while maintaining predictable latency and jitter characteristics essential for modern campus voice, video, and real-time collaboration workloads.
Advanced scaling is achieved through modular internal resource allocation via Software Database Manager (SDM) templates. Network operators can dynamically reallocate TCAM resources based on the specific role of the switch—optimizing for routing depth, MAC scaling, or security ACL capacity depending on whether the switch acts as a core router or a Layer 2 distribution block.
| Model / Category | Switching Capacity | Forwarding Rate (IPv4) | Forwarding Rate (IPv6) | QoS Hardware Queues | Multicast Routes |
|---|---|---|---|---|---|
| C9500-32C | 6.4 Tbps | 2 Billion packets per second (Bpps) | 2 Bpps | 8 per port | Up to 32,000 |
| C9500-32QC | 3.2 Tbps | 1 Bpps | 1 Bpps | 8 per port | Up to 32,000 |
| C9500-48Y4C | 3.2 Tbps | 1 Bpps | 1 Bpps | 8 per port | Up to 32,000 |
| C9500-24Q | 1.92 Tbps | 1.42 Bpps | 1.42 Bpps | 8 per port | Up to 32,000 |
| C9500-12Q | 960 Gbps | 714.24 Mpps | 714.24 Mpps | 8 per port | Up to 32,000 |
| C9500-40X | 800 Gbps | 595.2 Mpps | 595.2 Mpps | 8 per port | Up to 32,000 |
| C9500-16X | 320 Gbps | 238.08 Mpps | 238.08 Mpps | 8 per port | Up to 32,000 |
Detailed Scale and Routing Table specifics across the UADP variations:
| Feature / Metric | UADP 3.0 Scale (High Performance) | UADP 2.0 XL Scale (Standard) |
|---|---|---|
| VLAN IDs | 4,094 | 4,094 |
| STP Instances | 1,000 | 1,000 |
| Switched Virtual Interfaces (SVIs) | 4,000 | 4,000 |
| Security ACL Scale | 27,000 | 27,000 |
| NetFlow Entries (Ingress/Egress) | 128,000 / 128,000 | 64,000 / 64,000 |
| LISP Instances (SD-Access) | 4,000 | 1,000 |
| BGP Peers | 4,000 | 4,000 |
| OSPF Routing Processes | 1,000 | 1,000 |
4. Power & Consumption
The Catalyst 9500 Series features high-efficiency Platinum-rated power supplies (up to 94% efficiency) offering robust 1+1 redundancy. Cooling is handled by N+1 redundant, hot-swappable variable-speed fan trays, accommodating front-to-back airflow ideal for hot-aisle/cold-aisle data center or aggregation closet designs. Both the power supplies and fan modules are Field Replaceable Units (FRUs), ensuring zero network downtime during maintenance events.
The flagship model C9500-32C operates with the following exact physical and power specifications:
* Depth: 21.39 inches
* Weight: 26.25 lbs
* Typical Power Consumption: 341 Watts
| Power Supply SKU | Capacity | Efficiency Rating | Typical Heat Dissipation | Input Voltage | Form Factor / Type |
|---|---|---|---|---|---|
| C9K-PWR-1600WAC-R | 1600W AC | Platinum (94%) | Up to 5459 BTU/hr | 115V to 240V AC | Hot-Swappable FRU |
| C9K-PWR-970WAC-R | 970W AC | Platinum (94%) | Up to 3310 BTU/hr | 115V to 240V AC | Hot-Swappable FRU |
| C9K-PWR-650WAC-R | 650W AC | Platinum (94%) | Up to 2217 BTU/hr | 115V to 240V AC | Hot-Swappable FRU |
| C9K-PWR-1600WDC-R | 1600W DC | High Efficiency | Up to 5459 BTU/hr | -40V to -72V DC | Hot-Swappable FRU |
| C9K-PWR-970WDC-R | 970W DC | High Efficiency | Up to 3310 BTU/hr | -40V to -72V DC | Hot-Swappable FRU |
| C9K-PWR-650WDC-R | 650W DC | High Efficiency | Up to 2217 BTU/hr | -40V to -72V DC | Hot-Swappable FRU |
| Switch Model | Max Power Rating (W) | Idle Power (W) | 100% Traffic Power (W) | Typical Operating Power (W) |
|---|---|---|---|---|
| C9500-32C | 1600W | 215W | 545W | 341W |
| C9500-32QC | 1600W | 210W | 450W | 335W |
| C9500-48Y4C | 970W | 160W | 425W | 285W |
| C9500-24Q | 970W | 145W | 345W | 210W |
| C9500-12Q | 650W | 115W | 225W | 165W |
| C9500-40X | 650W | 125W | 260W | 195W |
| C9500-16X | 650W | 95W | 185W | 145W |
5. Uplinks, Modules & Optics
The Catalyst 9500 Series eschews modular uplink cards in the High-Performance models in favor of a fixed-port architecture to maximize density and reliability in a 1RU form factor. Port flexibility is delivered via multi-rate optic support, breakout cables, and QSA (Quad to Serial) adapters. The standard C9500-40X and C9500-16X models utilize an optional network module slot for uplinks, accommodating either 10G or 40G uplinks depending on the module inserted.
The architecture extensively supports active optical cables (AOC) and direct attach copper (DAC) cables for cost-effective intra-rack connectivity, heavily utilized when clustering core switches via StackWise Virtual.
| Transceiver Type | Supported Distances | Cable Type | Connector Type | Form Factor | Backward Compatibility |
|---|---|---|---|---|---|
| QSFP-100G-SR4-S | Up to 100m | OM4 MMF | MPO-12 | QSFP28 | No |
| QSFP-100G-LR4-S | Up to 10km | SMF | LC Duplex | QSFP28 | No |
| QSFP-40G-SR4-S | Up to 150m | OM4 MMF | MPO-12 | QSFP+ | QSFP-40G |
| QSFP-40G-LR4-S | Up to 10km | SMF | LC Duplex | QSFP+ | QSFP-40G |
| SFP-25G-SR-S | Up to 100m | OM4 MMF | LC Duplex | SFP28 | SFP/SFP+ |
| SFP-25G-LR-S | Up to 10km | SMF | LC Duplex | SFP28 | SFP/SFP+ |
| SFP-10G-SR-S | Up to 400m | OM4 MMF | LC Duplex | SFP+ | SFP |
| SFP-10G-LR-S | Up to 10km | SMF | LC Duplex | SFP+ | SFP |
| GLC-TE | Up to 100m | Cat5e/6 UTP | RJ-45 | SFP | N/A |
Port Configuration per Model:
| Model | Primary Interfaces | Uplink / Breakout Capability | Network Module Slot | StackWise Virtual Link Ports |
|---|---|---|---|---|
| C9500-32C | 32x 100G QSFP28 | QSFP28 supports 4x25G or 4x10G breakout | None | Any native 100G/40G port |
| C9500-32QC | 32x 40G QSFP+ | 16x 100G QSFP28 (or 32x 40G QSFP+) | None | Any native 100G/40G port |
| C9500-48Y4C | 48x 25G/10G/1G SFP28 | 4x 100G/40G QSFP28 Uplinks | None | Any native 100G/40G port |
| C9500-24Q | 24x 40G QSFP+ | No direct breakout supported natively | None | Any native 40G port |
| C9500-12Q | 12x 40G QSFP+ | No direct breakout supported natively | None | Any native 40G port |
| C9500-40X | 40x 10G/1G SFP+ | Dependent on Network Module | 1x (8x10G or 2x40G) | Native 10G ports |
| C9500-16X | 16x 10G/1G SFP+ | Dependent on Network Module | 1x (8x10G or 2x40G) | Native 10G ports |
6. Comprehensive SKUs
Purchasing a Catalyst 9500 Series switch requires selecting the base chassis, primary and secondary power supplies, fan modules, and the absolutely mandatory DNA software subscription tier. The part numbers listed below denote the base chassis and the base OS license level. For example, a -E suffix mandates the purchase of a DNA Essentials subscription, while a -A suffix mandates the purchase of a DNA Advantage subscription.
| Base Switch SKU | Port Density | Description | Default Power Supply | Default Fans |
|---|---|---|---|---|
| C9500-32C-E | 32x 100G QSFP28 | Cisco Catalyst 9500 32-port 100G switch (Essentials) | C9K-PWR-1600WAC-R | FAN-T4-R (x5) |
| C9500-32C-A | 32x 100G QSFP28 | Cisco Catalyst 9500 32-port 100G switch (Advantage) | C9K-PWR-1600WAC-R | FAN-T4-R (x5) |
| C9500-32QC-E | 32x 40G QSFP+ | Cisco Catalyst 9500 32-port 40G switch (Essentials) | C9K-PWR-970WAC-R | FAN-T4-R (x5) |
| C9500-32QC-A | 32x 40G QSFP+ | Cisco Catalyst 9500 32-port 40G switch (Advantage) | C9K-PWR-970WAC-R | FAN-T4-R (x5) |
| C9500-48Y4C-E | 48x 25G SFP28 | Cisco Catalyst 9500 48-port 25G switch (Essentials) | C9K-PWR-650WAC-R | FAN-T4-R (x5) |
| C9500-48Y4C-A | 48x 25G SFP28 | Cisco Catalyst 9500 48-port 25G switch (Advantage) | C9K-PWR-650WAC-R | FAN-T4-R (x5) |
| C9500-24Q-E | 24x 40G QSFP+ | Cisco Catalyst 9500 24-port 40G switch (Essentials) | C9K-PWR-970WAC-R | FAN-T4-R (x5) |
| C9500-24Q-A | 24x 40G QSFP+ | Cisco Catalyst 9500 24-port 40G switch (Advantage) | C9K-PWR-970WAC-R | FAN-T4-R (x5) |
| C9500-12Q-E | 12x 40G QSFP+ | Cisco Catalyst 9500 12-port 40G switch (Essentials) | C9K-PWR-650WAC-R | FAN-T4-R (x5) |
| C9500-12Q-A | 12x 40G QSFP+ | Cisco Catalyst 9500 12-port 40G switch (Advantage) | C9K-PWR-650WAC-R | FAN-T4-R (x5) |
| C9500-40X-E | 40x 10G SFP+ | Cisco Catalyst 9500 40-port 10G switch (Essentials) | C9K-PWR-650WAC-R | FAN-T4-R (x5) |
| C9500-40X-A | 40x 10G SFP+ | Cisco Catalyst 9500 40-port 10G switch (Advantage) | C9K-PWR-650WAC-R | FAN-T4-R (x5) |
| C9500-16X-E | 16x 10G SFP+ | Cisco Catalyst 9500 16-port 10G switch (Essentials) | C9K-PWR-650WAC-R | FAN-T4-R (x5) |
| C9500-16X-A | 16x 10G SFP+ | Cisco Catalyst 9500 16-port 10G switch (Advantage) | C9K-PWR-650WAC-R | FAN-T4-R (x5) |
Network Modules (Applicable only to C9500-40X and C9500-16X):
| Network Module SKU | Port Density | Description | Pluggable Support |
|---|---|---|---|
| C9500-NM-8X | 8x 10G SFP+ | Cisco Catalyst 9500 8-port 10 Gigabit Ethernet Network Module | SFP, SFP+ |
| C9500-NM-2Q | 2x 40G QSFP+ | Cisco Catalyst 9500 2-port 40 Gigabit Ethernet Network Module | QSFP+ |
7. Environmental Specs & Warranty
The Cisco Catalyst 9500 Series requires strict adherence to environmental operational parameters to ensure longevity and consistent performance across the ASIC and memory components. The platform leverages heavy-duty conformal coating and variable speed fans to manage thermals effectively within typical enterprise data center, colocation, and distribution closet environments. Operating a fully loaded C9500-32C demands precise thermal isolation and proper rack exhaust venting.
| Specification | Value / Description | Note |
|---|---|---|
| Operating Temperature | 32°F to 104°F (0°C to 40°C) | Valid up to 10,000 ft |
| Short-Term Exception Temp | 23°F to 131°F (-5°C to 55°C) | Valid for 96 hours max per year |
| Storage Temperature | -40°F to 158°F (-40°C to 70°C) | Extended storage compliance |
| Operating Humidity | 5% to 90% non-condensing | Standard enterprise compliance |
| Storage Humidity | 5% to 95% non-condensing | Standard enterprise compliance |
| Operating Altitude | Up to 10,000 ft (3,048 m) | Performance derating applies above 5,000 ft |
| Mean Time Between Failures (MTBF) | 200,000+ hours | Exact value depends on PSU/Fan population |
The Catalyst 9500 Series is backed by the Cisco Enhanced Limited Lifetime Hardware Warranty (E-LLW). This provides Next-Business-Day (NBD) delivery of replacement hardware where geographically available and 90 days of 8×5 Cisco Technical Assistance Center (TAC) support for initial configuration guidance. Customers deploying these units in enterprise production environments are strictly advised to attach Cisco Smart Net Total Care (SNTC) services (such as 24x7x4 replacement SLAs) to satisfy uptime requirements and maintain active software update privileges.
| Warranty Feature | Cisco E-LLW Coverage | Smart Net Total Care (Recommended) |
|---|---|---|
| Hardware Replacement | Next-Business-Day (Best Effort) | 24x7x4 or 24x7x2 Hour (Guaranteed) |
| TAC Access | 90 days (8×5) | Ongoing (24x7x365) |
| OS Updates | Maintenance / Minor updates only | Major, Minor, and Maintenance updates |
| Lifecycle Management | None | Cisco Smart Net Portal Access |
| Hardware Return Shipping | Customer bears cost to Cisco | Cisco bears cost (RMA) |
8. Licensing Constraints
The Cisco Catalyst 9500 Series strictly employs Cisco’s Smart Licensing model and requires a mandatory Cisco DNA (Digital Network Architecture) software subscription at the time of hardware purchase. Subscriptions are exclusively available in 3-year, 5-year, or 7-year terms.
The software tier dictates the available switching, routing, and security feature set. Once the subscription expires, the underlying base network OS license (Network Essentials or Network Advantage) remains perpetually active and bound to the chassis, while the advanced DNA management, analytic, and controller-based features deactivate.
| License Tier | Base Perpetual Equivalent | SD-Access / DNA Center Integration | Key Routing Features | Security & Telemetry |
|---|---|---|---|---|
| Cisco DNA Essentials | Network Essentials | Limited (Telemetry provisioning only) | OSPF Routed Access, RIP, EIGRP Stub, PBR, HSRP | Flexible NetFlow, MACsec-128 |
| Cisco DNA Advantage | Network Advantage | Full Fabric Provisioning (SD-Access Core/Border) | BGP, Full EIGRP, OSPF, IS-IS, VRF, VPLS, MPLS L3VPN | MACsec-256, Encrypted Traffic Analytics (ETA) |
| Cisco DNA Premier | Network Advantage | Full Fabric Provisioning (SD-Access Core/Border) | BGP, Full EIGRP, OSPF, IS-IS, VRF, VPLS, MPLS L3VPN | Includes ISE Base/Plus, Stealthwatch Licensing |
Constraint Parameters:
1. Hardware/Software Parity: A switch purchased with a -E SKU fundamentally implies DNA Essentials must be attached. A -A SKU fundamentally implies DNA Advantage must be attached. Attempting to mix Essentials hardware SKUs with Advantage licensing requires complex license upgrades via the CSSM.
2. StackWise Virtual: Implementing StackWise Virtual (the Catalyst 9500 native High Availability clustering mechanism) absolutely requires the DNA Advantage tier. It is strictly not supported on DNA Essentials.
3. Smart Licensing Portal: Traditional Right-To-Use (RTU) Product Activation Key (PAK) licenses are completely deprecated on Cisco IOS XE 16.9.1 and later. The switch must communicate securely with the Cisco Smart Software Manager (CSSM) portal. This can occur directly via the internet, via an on-premise satellite server (SSM On-Prem), or through Smart Licensing Using Policy (SLUP).
4. MACsec Cryptography: High-performance line-rate MACsec-256 requires DNA Advantage and specific hardware export-control (HSEC) configurations to comply with international cryptography distribution laws.
5. BGP EVPN VxLAN: Designing a multi-tenant campus utilizing BGP EVPN over a VxLAN data plane demands the Network Advantage (and thereby DNA Advantage) feature set across the entire Catalyst 9500 core array.