Technical Overview of Cisco Catalyst 9200 Series Switches
•Download as PPTX, PDF•
3 likes•9,692 views
TechWiseTV's Cisco Container Platform live workshop took place on July 18th. For the first time in the industry, a single family of fixed, stackable, and modular switches are running on the same IOS-XE operating system along with a common ASIC. Cisco’s Catalyst 9200 rounds out the lower end of its incredible Catalyst 9000 family of switches. The 9200 is designed for small, medium, and branch deployments, providing greater modularity, redundancy, and stackability than the Catalyst 2960 it replaces. Register now.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Technical Overview of Cisco Catalyst 9200 Series Switches
Similar to Technical Overview of Cisco Catalyst 9200 Series Switches (20)
More from Robb Boyd
More from Robb Boyd (20)
Recently uploaded
Recently uploaded (20)
Technical Overview of Cisco Catalyst 9200 Series Switches
- 1. Tanya Bhatia Technical Marketing Engineer 18/07/2019 Technical Overview of Catalyst 9200 switches
- 2. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential • Catalyst 9200 Series switching overview • System Architecture • Cisco IOS® XE • High availability • Intent-based networking • QoS • Security • POE innovations • Programmability • Application visibility • Manageability Agenda
- 3. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Extending intent-based networking everywhere Catalyst 9200 Series switches built on industry leading Catalyst 9000 switching attributes Catalyst 9300 Series switches Lead Fixed Access Catalyst 9400 Series switches Lead Modular Access Catalyst 9500 Series switches Lead Fixed Core Fast, Flexible and light ASIC Cisco UADP 2.0 mini Security Macsec-128 Programmability YANG Models SD-Access Edge Node Catalyst 9200 Series switches New Resiliency Redundant PS, Fans Catalyst 9600 Series switches
- 4. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential The New Catalyst 9200 Series switches Unmatched Full POE+ Resiliency – Perpetual/Fast POE+ Flexible Fast and Light ASIC UADP 2.0 mini In-built Memory 4GB/2GB Memory 4GB Flash *Bluetooth Dongle Support (USB 2.0) Modular and Fixed Uplink offering 4 x 1Gig, 4 x 10Gig, 2x 25G Most Dense downlink offering 24 port, 48 port Built in RFID * Hardware Capable
- 5. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Catalyst 9200 Series switching 1G Model SKUs Catalyst 9200 Series switching SKUs 9200 (Modular Uplinks and Fans) 9200L (Fixed Uplinks and Fans) Data 4 x 1G and 4 x 10G Uplinks POE+ Data 4 x 1G and 4 x 10G Uplinks POE+ Modular Power Supplies available on all the SKUs 48X1G Ports 24X1G Ports 48X1G Ports 48X1G Ports 24X1G Ports 24X1G Ports 48X1G Ports 24X1G Ports
- 6. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Catalyst 9200 Series switching Multigigabit Model 9200L (Fixed Uplinks and Fans) All models support Full PoE+ POE+ Modular Power Supplies available on all the SKUs 16X1G Ports 8XmGig Ports 4X10G Uplinks POE+ 36X1G Ports 12XmGig Ports 4X10G Uplinks POE+ 16X1G Ports 8XmGig Ports 2X25G Uplinks POE+ 40X1G Ports 8XmGig Ports 2X25G Uplinks
- 7. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Modular uplink options on Catalyst 9200 Series switches • 4 x 1 Gig • SFP Transceivers • Supported on all modular SKUs • 4 x 10 Gig • SFP/SFP + Transceivers • Supported on all modular SKUs* All modular uplink modules are Field Replaceable Units Modular uplinks supported on Catalyst 9200 Series modular SKUs
- 8. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Resilient power supplies Power Supplies are Field Replaceable Units Redundant Power Supply should be identical Silver Rated (80% efficiency) 125WAC Supported only on 1G Data SKUs Platinum Rated (90% efficiency) 600WAC Supported only on 24 Port POE+ SKUs 1000WAC Supported only on 48 Port POE+ SKUs Load sharing (1+1) mode supported for PoE+ SKUs
- 9. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential StackWise-160/80 with SSO Up to 8 member stack • StackWise-160 supported on all modular Catalyst 9200 Series switching models • StackWise-80 supported on all fixed Catalyst 9200 Series switching models • Same Cisco IOS XE and license required on all members Stack Adapters Stacking Cable Ordered Separately Stacking cable comes with three options: 50cm, 1m, 3m Stacking Kit *Mix stacking not supported between StackWise-160 and StackWise-80
- 10. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Resilient Fan Modules Switch can operate on a single fan at ambient temperature Catalyst 9200 Series Modular models Catalyst 9200 Series Fixed models FRU Fan Modules Fixed Fan Modules
- 11. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Catalyst 9200 Series Switching Architecture
- 12. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Architectural simplicity with powerful innovations Embedded CPU Investment Protection Flexible Pipeline Enhanced Scale/Buffering Multicore resource share 100GE Bandwidth 6MB Packet Buffer 1/2.5/5/10/40G Supports Different Speeds 16K Netflow Records Flexible Programmable Modules SDM Templates Flexibility 160/80G Stacking Capacity Up to 2X to 4X forwarding + TCAM
- 13. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Some of the Key Capabilities of UADP ASIC Flex Parser & Programmable Pipelines Recirculation Capability Micro Engines No Compromise on Performance Adaptable Tables
- 14. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential UADP 2.0 mini – Core Architecture Look up Tables Recirculation engine Encryption engine Ingress FIFO Egress FIFO EQS SQS AQM IQS Q QQ Rewrite engine Stack interface Ingress Forwarding Controller (IFC) Egress Forwarding Controller (EFC) PBC – Packet Buffers Complex Network Interfaces - Front Panel Ports + CPU + Network Redundant Uplinks (NRU) MACsecMACsec
- 15. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Catalyst 9200 Series switch - 24 Port Layout 160/80G Stack interface Octal PHY Octal PHY Octal PHY 12 Port PoE+ 12 Port PoE+ 24 x 1G 10/100/1000 UADP ASIC Clock - 500 MHz/64Gbps MGMT Flash 4/2GB RAM 2GB LED USB 2.0 USB 2.0 Mini USB Console Forwarding Controller Packet Buffer Ingress FIFO Egress FIFO Network Interface CPU Reassembly CryptoASIC0 Uplinks RJ-45 Console
- 16. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 40G SIF Forwarding Controller Packet Buffer Ingress FIFO Egress FIFO Reassembly Crypto Network Interface ASIC1 Forwarding Controller Packet Buffer Ingress FIFO Egress FIFO Network Interface CP U Reassembly Crypto ASIC0 160/80G Stack interface UADP ASIC Clock - 500 MHz/64Gbps MGMT Flash 4/2GB RAM 2GB LED USB 2.0 USB 2.0 Mini USB Console RJ-45 Console Octal 1G PHY Octal 1G PHY Quad mGIG PHY 16 x 1G 10/100/1000 8 x mGIG 100/1000/2.5G/5G/10G 4x 10G Uplink Catalyst 9200L- C9200L-24PXG-4X 12 Port PoE+ 12 Port PoE+ Quad mGIG PHY
- 17. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential ASIC to port Mapping Catalyst 9200 Series – 24 Port Catalyst 9200-24P Switch Ports Model SW Version SW Image Mode *1 32 C9200- 24P 16.10.1 CAT9K_LITE _IOSXE Bundle Switch#show platform software fed swi 1 ifm mappings Interface IF_ID Inst Asic Core Port SubPort Mac Cntx LPN GPN Type Active GigabitEthernet1/0/1 0x7 0 0 0 4 0 33 4 1 1 NIF Y GigabitEthernet1/0/2 0x8 0 0 0 5 0 7 5 2 2 NIF Y GigabitEthernet1/0/3 0x9 0 0 0 6 0 35 6 3 3 NIF Y GigabitEthernet1/0/4 0xa 0 0 0 7 0 34 7 4 4 NIF Y GigabitEthernet1/0/5 0xb 0 0 0 8 0 37 8 5 5 NIF Y GigabitEthernet1/0/6 0xc 0 0 0 9 0 36 9 6 6 NIF Y GigabitEthernet1/0/7 0xd 0 0 0 10 0 39 10 7 7 NIF Y GigabitEthernet1/0/8 0xe 0 0 0 11 0 38 11 8 8 NIF Y GigabitEthernet1/0/9 0xf 0 0 0 12 0 40 12 9 9 NIF Y GigabitEthernet1/0/10 0x10 0 0 0 13 0 8 13 10 10 NIF Y | | GigabitEthernet1/0/20 0x1a 0 0 0 23 0 48 23 20 20 NIF Y GigabitEthernet1/0/21 0x1b 0 0 0 24 0 51 24 21 21 NIF Y GigabitEthernet1/0/22 0x1c 0 0 0 25 0 50 25 22 22 NIF Y GigabitEthernet1/0/23 0x1d 0 0 0 26 0 53 26 23 23 NIF Y GigabitEthernet1/0/24 0x1e 0 0 0 27 0 52 27 24 24 NIF Y GigabitEthernet1/1/1 0x1f 0 0 0 0 0 0 0 25 25 NIF N GigabitEthernet1/1/2 0x20 0 0 0 1 0 1 1 26 26 NIF N GigabitEthernet1/1/3 0x21 0 0 0 2 0 2 2 27 27 NIF N GigabitEthernet1/1/4 0x22 0 0 0 3 0 3 3 28 28 NIF N TenGigabitEthernet1/1/1 0x23 0 0 0 0 0 0 0 29 29 NIF Y TenGigabitEthernet1/1/2 0x24 0 0 0 1 0 1 1 30 30 NIF Y TenGigabitEthernet1/1/3 0x25 0 0 0 2 0 2 2 31 31 NIF Y TenGigabitEthernet1/1/4 0x26 0 0 0 3 0 3 3 32 32 NIF Y
- 18. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential TCAMs, buffers and scale
- 19. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Netflow Entries: 16k per ASIC Lookup tables Forwarding Resources Feature Resources Netflow 9200 9200L MAC 32k 16k Host Route 10k 8k IGMP Groups 1k 1k Indirect Route 4k 3k Multicast Route 1k 1k SGT 2k 2k 9200 9200L Security ACL • PACL • VACL • RACL 1k 1k QoS ACL 1k 1k Netflow ACEs 128 128
- 20. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Scale and TCAM partition Switch#show platform hardware fed switch active fwd-asic resource tcam utilization 0 CAM Utilization for ASIC [0] Table Max Values Used Values -------------------------------------------------------------------------------- Unicast MAC addresses 16384/256 14/21 L3 Multicast entries 1024/256 0/7 L2 Multicast entries 1024 9 Directly or indirectly connected routes 10240/4096 2/19 QoS Access Control Entries 1024 40 Security Access Control Entries 1408 125 Ingress Netflow ACEs 128 8 Policy Based Routing ACEs 512 9 Egress Netflow ACEs 128 8 Flow SPAN ACEs 256 13 Control Plane Entries 512 213 Tunnels 128 17 Lisp Instance Mapping Entries 128 3 SGT_DGT 2048/256 0/1 CLIENT_LE 2048/64 0/0 INPUT_GROUP_LE 1024 0 OUTPUT_GROUP_LE 1024 0 Macsec SPD 128 2
- 21. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential QoS scalability QoS Scale Numbers Class-maps (Ingress) 1,024 Class-maps (egress) 512 Table-maps (ingress) 16 Table-maps (egress) 16 Aggregate Policers 1k Wired Queues/port 8 queues Buffer/ASIC 6 MB
- 22. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco IOS XE Lite
- 23. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco IOS XE Single Release Simplicity Operational Efficiency Cisco IOS XE Feature Consistency Run Any Feature Anywhere (RAFA) Same Cisco IOS XE code base as Catalyst 9000 family Faster Troubleshooting Modularized Upgrades Support Install and Bundle Modes for bootup Plug-n-Play Enhanced Web UI Simplified Lifecycle Management
- 24. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Highly available ModernOptimized LightConsistent Same image across all Catalyst 9200 Series switches Cisco IOS XE Lite: Powering the Catalyst 9200 Series switches Cisco IOS XE Cisco IOS XE Lite Optimized for Catalyst 9200 Series switches • Same code base of Cisco IOS XE • Optimized for lower memory on Catalyst 9200 Series switches • Reduced image size by 50% • Removed unused libraries • IOSd optimizations • Bash Optimizations • Model-driven programmability • Streaming telemetry • Network monitoring • Modularized feature block • Status Recovery • Failure Isolation
- 25. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential High availability
- 26. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Stacking Architecture EQS SQS AQM Q Q Packet rewrite Network Interface Stack interface Packet Buffer Ingress FIFO Egress FIFO Recirculation Encryption Sends traffic across switches/ASICs IQS Q Ingress Forwarding Controller Egress Forwarding Controller 160/80G stack interface
- 27. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential The stack ring – StackWise 160 ASIC Stack Interface ASIC Stack Interface Assuming 4 x 24-port 9200 Switches • 2 rings in total • 1 ring goes East • 1 ring goes West • Each ring is 40 Gbps • 80 Gbps bi-direction • Spatial Reuse= 160 Gbps
- 28. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Stateful switchover in StackWise Hardware Redundancy Stackwise-160 and Stackwise-80 How? Stateful Switchover Ability to stack multiple switches through stack cables If the active switch fails, the standby switch assumes the role of the active switch and continues to keep the stack operational The active switch creates and updates all the switching, routing information and constantly synchronizes that information with the standby switch Use stateful switchover to provide resiliency within the stack
- 29. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential How many can I stack together? Up to 8 switches can be stacked using back stacking cables All Catalyst 9200 Series switching models support stacking however mixed stacking not supported, including Catalyst 2960X/XR and Catalyst 9300 Series Same Cisco IOS XE and license required on all members
- 30. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Fans in Redundant Mode Thermal Sensors Detect ambient temperature and adjust fan speeds Can operate with individual fan failure Up to 45 °C ambient temperature, no need to RMA the box Hot Swappable Insert and Remove Fan on go Front-to-back airflow Irreversible flow
- 31. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Redundant power supply Field-replaceable power supplies for Resilient Switching and PoE Non-stop power in 1 RU Optional power redundancy with dual supplies Hot Swappable Insert and Remove PS on go Easy field replacement of failed PSU Redundancy in combined mode PoE budget gets doubled with second PS
- 32. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Power supply modes Non-POE SKUs POE+ SKUs • First power supply is used for system power • Second power supply is in redundant mode • No Load sharing between the power supplies • Combined mode by default • Both the power supplies will add to POE Budget • System Power is redundant 125 W 125 WActive PS Backup PS 600 W 600 W POE Output of 600W PS = 370W 370 x 2(Output Power) = 740W
- 33. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Power priority In case of power shortage Higher priority ports get preference for power Higher power priority ports Whichever PD negotiates power faster By default power priority is low C9200-1(config)#int gi1/0/1 C9200-1(config-if)#power inline port prio C9200-1(config-if)#power inline port priority? high high prority port low low prority port C9200-1(config-if)#power inline port priority high C9200-1(config-if)# C9200-1#show power inline priority Interface Admin Oper Admin State State Priority ---------- ------ ---------- ---------- Gi1/0/1 auto off high Gi1/0/2 auto off low
- 34. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential POE Budget of all Catalyst 9200 Series switching SKUs PID Power Supply Available PoE Budget with One PS Available PoE Budget with Two PS C9200-24P 600W 370W 740W C9200-48P 1000W 740W 1440W C9200L-24PXG-2Y 600W 370W 740W C9200L-24PXG-4X 600W 370W 740W C9200L-24P-4G 600W 370W 740W C9200L-24P-4X 600W 370W 740W C9200L-48PXG-2Y 1000W 740W 1440W C9200L-48PXG-4X 1000W 740W 1440W C9200L-48P-4G 1000W 740W 1440W C9200L-48P-4X 1000W 740W 1440W Redundant Power Supply should be identical
- 35. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Intent-based networking
- 36. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential SD-Access Fabric Fabric Edge Node for SD-Access Fabric Edge Nodes – A fabric device that connects wired endpoints to the SD-Access Fabric Provides first-hop services for Users/Devices connected to a fabric 9200 SKUs 9200L SKUs Number of User VRFs 4 1 Supports: • LISP • VxLAN Scale: NCP ISE NDP B Cisco DNA Center B C Fabric Edge Nodes
- 37. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Programmability and automation Programmable Bootstrap Day 0 Programmable Interfaces Day 1 Telemetry Day 2 Device Provisioning Configuration Monitoring Streaming Telemetry YANG Models REST CONF NET CONF Bootstrap Agent (PnP) PXE (Preboot eXecution Environment) gNMI NETCON F Dial-in gRPC Dial-out
- 38. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Patching SMU is an emergency point fix positioned for expedited delivery to a customer in case of a network down or revenue affecting scenario. Cold Patching: Install of a SMU will require a system reload in the first release. It is traffic impacting. Add Patch Reload Activate Patch Commit Patch
- 39. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential QoS
- 40. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Key differences – Catalyst 9200 Series switches vs Catalyst 2960X/XR Series switches • MLS QoS • Untrust by Default • 4 Queues per Port • 4 MB Buffer per ASIC • No HQoS • MQC • Trust by Default • 8 Queues per Port • 6 MB Buffer per ASIC • HQoS – 2 Level Hierarchical Policy Catalyst 9200 Series switches Catalyst 2960X/XR Series switches
- 41. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential QoS Activities on Ingress and Egress Classification Policing Unconditional Marking Conditional Marking Conditional Marking Policing Unconditional Marking Classification Scheduler Priority Queues Ingress Port Activity Egress Port Activity
- 42. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Security
- 43. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential MACsec-128 Securing the network via link encryption MACSEC Catalyst 9200 modular SKU Catalyst 9200 fixed SKUs SW License SW License Switch to Switch 128 Bits SAP 16.10.1 NE 16.9.2 NE 128 Bits MKA 16.10.1 NE 16.9.2 NE Host to Switch 128 Bits MKA 16.10.1 NE 16.10.1 NE MACsec encryption performed at hardware Switch to Switch (can be any front panel port or Network Module ports) but usually uses the network module uplink ports MACsec is not supported on the Port-channel Logical Link but it can be enabled on the port-members individually (MKA Mode only) SwitchSwitch Radius RADIUS EAPoL Encrypted Data RADIUS NE: Network Essentials
- 44. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Where is MACsec performed in Hardware? EQS SQS AQM IQS Q Q Q Packet rewrite Network Interface Stack interface Ingress Forwarding Controller Egress Forwarding Controller Packet Buffer Ingress FIFO Egress FIFO Recirculation Encryption MACsec CPU SPQ Encrypt/ Decrypt Module
- 45. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Trustworthy solution Catalyst 9200 Series switches provides strong resistance against today’s threats HW Anchored Secure Boot Image Signing and Secure Boot work together to ensures that authentic Cisco SW boots up on a Cisco Platform Trust Anchor Module HW Authenticity Check Secure Unique Device Identification Tamperproof ID for the device
- 46. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential PoE innovations
- 47. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco innovations in PoE deliver a robust low voltage infrastructure Perpetual PoE • Uninterrupted PoE power during control plane reboot 2-event classification • Fast power negotiation without LLDP • Physical layer negotiation < 1s Fast PoE • Bypasses IOS control plane boot • Restores power to PD within 30 sec of power resumption
- 48. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2-Event classification Switch> enable Switch# configure terminal Switch(config)# interface gigabitethernet2/0/1 Switch(config-if)# power inline port 2-event Switch(config-if)# end • Class 4 PD gets 30W even before the link comes up, otherwise 15.4W • Type-2 PSE sends classification voltage (2nd Handshake) pulse to Class 4 PD (PoE+, 12.96-25.5 W) confirming it is a high power capable PSE • 30W of power is allocated for PD (PD draws up to 25.5W) • Both PSE and PD need to support 2-Event • No waiting for CDP/LLDP exchange for PoE+ power levels Without 2-Event Classification LLDP (Layer 2) LLDP (Layer 2) 20-25 sec With 2-Event Classification (Hardware Based) Electrical signal (Layer 1) Electrical signal (Layer 1) 3-5 sec
- 49. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Perpetual PoE PoE devices connected to switch stay powered even on Switch Reload! Switch> enable Switch# configure terminal Switch(config)# interface gigabitethernet2/0/1 Switch(config-if)# power inline port perpetual-poe-ha Switch(config-if)# end • PoE devices continue to get Last Negotiated Power • Applicable to “Soft” Reload – image upgrade, software crash, manual reboot • Supported with Stacking deployments • Not applicable during power outage to switch/FEP removed • Not applicable when switch is in hibernation mode Switch SOFT Reload!
- 50. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Fast PoE MCU Main CPU PSE Controller Power Supplies Status 2 event Classification PoE configuration: Enable, Port PoE Priority, Power Budget etc CLI/CDP/LLDP PD Switch> enable Switch# configure terminal Switch(config)# interface gigabitethernet2/0/1 Switch(config-if)#power inline port perpetual-poe-ha Switch(config-if)#power inline port poe-ha Switch(config-if)# end • Restores power to PD in less than 30 seconds post restoration of power • Works even before IOS comes up • Allocates last power (stored in NVRAM) drawn from PDs • Works in Stacking deployments
- 51. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Application visibility and control
- 52. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential • Only ingress • 8K Flow/ASIC • No match on Layer2 VLAN Header • Both ingress and egress • 16K Flows/ASIC • Match on Layer2 VLAN header as well Full flexible netflow Key Differences – Catalyst 9200 Series switches vs Catalyst 2960X/XR Series switches Catalyst 9200 Series switches Catalyst 2960X/XR Series switches Layer 2, IPv4 and IPv6 capable 4 banks in ASIC, 2 ingress, 2 egress Ipv4 flows: 8k per direction Layer 2 and Ipv6 flows: 4k per direction Ingress and Egress FnF supported on all ports, VLANs
- 53. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Benefits of full flexible netflow Forensics Troubleshooting Traffic Analysis Behavioral anomaly-detection Configuration Interface type Multiple monitors per interface • Traffic type support • Ipv4 • Ipv6 • datalink • Switchport • Non switchport (routed port) • Vlan configure • Port-channel member interface Multiple monitors for different traffic types per interface per direction
- 54. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Application Visibility and Control Granular Detection, Advanced Monitoring & Business Logic Based Policies Monitor Your ApplicationsKnow Your Applications Control Your Applications Prioritized Applications, Bandwidth Management Fault Isolation, Troubleshooting Performance Assessment Granular App Detection Encrypted Application
- 55. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Manageability
- 56. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Switch Stack Active switch UP Ports POE status Standby switch WebUI Small Branch - CPC Migration DNAC Part of the Larger Network Catalyst 9200 can be Managed multiple ways
- 57. C97-741405-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Catalyst 9200 Series switching H/W characteristics Catalyst 9200 Series modular switches Catalyst 9200 Series fixed switches Catalyst 2960-XR Series switches Catalyst 2960-X Series switches CPU 4 Core @ 1.4Ghz Embedded ARM 4 Core @1.4Ghz Embedded ARM Dual Core CPU@600MHz Dual Core CPU@600MHz DRAM (DDR3) 4GB 2GB 512MB 512MB Flash On board 4GB 4GB 256MB 128MB Buffer 6MB/ASIC 6MB/ASIC 4MB/ASIC 4MB/ASIC Stacking (module) Stackwise-160 Stackwise-80 FlexStack-Plus/ Extended module FlexStack-Plus/ Extended module # of Stack Members 8 8 8 8 Stack Bandwidth 160Gbps 80Gbps 80Gbps 80Gbps Power Supply 2 FRUable PS 2 FRUable PS 2 FRUable PS Single Fixed Max PoE Budget 1440W 1440W 740W 740W Modular Uplinks Yes No No No Modular Fans Yes No No No Max Depth 13.8” 11.3”(13.8” for mGIG) 16” 14.5”
- 58. Thank you for watching.
Editor's Notes
- Introduce Cat9k launch to introduce IBN Cat9200 launch to extend IBN to customers who were not able to take advantage of this network architecture mainly our small medium and branch depolyments What and how of Catalyst 9200 Hardware SW that powers this HW Work together seamlessly and provide some very cool features Makes C9200 the most capable switch in this class of switches. Part of existing C9k series Same ASIC and software 3 pillars – Resiliency – HW and SW Level Security – TWS and MACSEC-128 Programmability – introducing standard APIs and making Day0 onboarding extremely easy Entire HW and SW is. Built around these 3 pillars
- Features consistent to Cat9k Bult in RFID – inventory scanning easy Blue beacon Offerings – 24 and 48 1Gig downlink ports and 1 and 10G uplink ports Full POE+ compared to 2960x. - increased POE budget HW spec improved – BT ready – in future SW enables OTA using BT
- Modular uplinks on 9200 Hot swappable – Swap 1G with 10G , no need of new HW On running switch swap them – switch will keep running Fixed uplinks – Replace HW if want to upgrade Auto sensing
- Huge competitive differentiator Platinum rated PS in this class of switches Highly efficient PS – power consumption will be low , there will be less heat and will require less cooling . Not only saves power , reduces TCO because of redcued cooling and power requirements of the switch Redundant PS Secondary PS should be exactly the same FRU -
- Another update – all stackable , 8 member stack . BW taken to next level and introduced HIGH availability features 9200 supports 160Gbps 9200L – 80 Gbps Similar archi as 9300 Benefit of stackwise – users get SSO – active and. Standby . No Mix stacking - have different Stacking BW Same IOS XE and license – consistent to C9300 From orderability – stacking kit needs to be ordered separately . 9200 and 9300 stack cables are different . The Pins on stack adapter are different . We cannot stack 9200 and 9200L together because RAM capacities are different when we form a stack 9200 have more mac learning capacity 9200L has less . how will the sync happen . All the features are checked.
- Both have 2 fans Fixed on 9200L , 9200 – modular In case of failure buy new fan and hot swap it in 9200 and switch will run fine These are redundant – switch wont go down if a fan fails . Variable fan speeds , pick up the load and keep operating , noise level would vary based on how many fans . Resiliency and redundancy built at every level Long way in ensuring systems is always available We wanted to optimize feature/functionality with right price . Thus we cant mix and match the PS , like have a combination of 1000W and 600W because of increased cost this helps us with saving cost at DF site the more options you give, the higher the cost not optimal for distis Silver Rated : 80% efficient Platinum Rated : 90% efficient If we insert a different PS , error message on console and SW will shut the PS Power supply highlights : Maximum output 12V/125W at 220V/110V AC input For 1000W and 600W PS, efficiency is >90% at 50% to 100% load when AC input is 230Vac. At 115Vac input, the efficiency is very close to 90%. For 125W PS, efficiency is less than 90% at 50% to 100% load. Power hold-up time is >20 ms at 90% load
- Change photo here
- Arch is really simple but powerful Powered by UADP 2.0 mini – optimized UADP2.0 on C9300 Another differentiator – embedded CPU on ASIC – first catalyst – meet the cost structure and deliver all the innovations Cat9k sells on . Programmable asic – future proof for any new protocol that comes up Buffer and scale way higher than 2k and competition – 6mb buffer , 16k netflow records , 160g stack BW , tcam much higher compared to existing 2k , bandwidth 100G Arch is really simple , single core single asic and embedded cpu , but very powerful
- ASIC capabilities – not limited to 9300-9500 also for 9200 Recirculation – multiple recirculations required before packet goes out , we can do that within the asic itself Microengines – do features like macsec. At hw level without any compromise . Adaptable tables – use unused part of tables if not used by one certain feature Capabilties of uadp asic carried over to 9200
- Same as 9k Consistency not just outer Also at asic level Exactly the same with reduced scale
- “As far as the QoS scalability is concerned, you have now 1024 class-maps on the ingress, 512 on the egress. Some table-maps, which are used for your wireless applications, as well as for wired [unintelligible] if you have any. Ad then there are 2000 policers, and then, so microflow policing is only supported for wireless clients today. And those are, again, raw numbers. The one thing which the ASIC brings to the table is now we have eight queues per wired port, and there are four queues on the port on which the AP is attached, to match the four queues on the AP. And then you have a six meg buffer, which is, again, an increase from the two meg buffer which we had on the earlier 3K.”
- Common attributues – UADP Same. IOS XE powers 9200 Why ios XE Lot of benefits – 1.Single release for all campus switching – classic on 2k , ios xe on cat9k – difficult to. Keep track . Now made consistent . Same 16.9 , 16.10 will be carried over to 9200 2.Simplicity – embedded web ui on the box , pnp 3. operational simplicity – behavior of features will be same – cli level
- Resiliency at hw level Same resiliency at sw level Took monolithic code block from classic and broke down to different sub systems – think of these as features . These are all modular . Failure of one sub process doesn’t affect rest of the sub systems . Xe database – stores the states of the processes before crash – less convergence time HA at SW level as well Ios xe on 9200 – optimized version of ios xe – lighter image – 1.Image size – 640 mb on 9k , 9200 half the size 2.How we did that – optimizing – take all of the. Unused libraries – features that do not make sense – like bgp – taken out and optimized Optimised for this switch . Benefits of ios xe still there – HS , telemetry
- So let’s understand the stack ring, right. If you assume that these four switches, or even if you consider say two 48 port systems, in this case each of those blocks are the ESPM ASIC. There are six rings in total, three rings go east, three rings go west, and each ring is running at forty gig, so the total stack bandwidth is 240 gig and then with spatial reuse you can double it up to 480 gig. So before transmission on the stack, the packets are segmented into 256 byte segments, which are again reassembled at the destination. So this is how the stacking architecture looks like in the 3850.
- Big differentiator Do stateful switchover in case of failure of active switch
- that means if we have for example two 1000W PS inserted ( total of 2000W available ) , out of that 1440W ( 48*30W) will be used for POE in combined mode , and rest of ( 1000-720 = 280W ) of second PS will be used for redundancy of system power suppose we have 2 PS connected. and all 48 ports are connected to PDs. if we remove 2nd PS. port from 25-48 will go down. due to insufficient power. assuming each port consumes maximum budget i.e 30W Reserved power depends on the Power Supply capacity. switch Type PS type System reserved Power PoE power Non PoE 125w 125w 0w 24port PoE 600w 230w 370w 48port PoE 1000w 260w 740w Again, in redundancy case, more system power reserved switch Type PS in redundant System reserved Power PoE power Non PoE 125w 250w 0w 24port PoE 600w 460w 740w 48port PoE 1000w 520w 1480w
- We also support power policing on 9200
- SDAccess is leading campus architecture . Catalyst 9200 can act as a fabric edge node . Which is basically where your end points are connected . It is an entry level switch to this . It helps you run sd. Access on a small branch where you don’t many vrfs. Scale . s
- Here we see the benefits of open ios xe . Programmable model. Configs using yang model. Support restconf,netconf and gnmi . Day0 provisioning made easy with – pxe and pnp using dnac Monitoring purpose we support streaming telemetry
- Do not have to qualify the whole release Point fix for the issue Lesser in size – easy to download and install
- To enhance the security of Cisco networks, Cisco has been designing technologies into our solutions for over a decade which help protect against counterfeit and prevent malicious software from running on a Cisco platform We call these trustworthy technologies This includes technologies such as image signing, secure boot, runtime defenses, and Trust Anchor module, among others These technologies are widely available on many of Cisco’s leading products, including the Cat 9200 The ability to verify the integrity of the network infrastructure is a competitive advantage for Cisco and is especially important to customers in service provider, government, military, energy, and other critical or regulated industries Trustworthy technologies in the Cat 9 and many other Cisco platform help protect against counterfeit and software modification They provide greater visibility into the authenticity (Is the product genuine Cisco?) and integrity (Has the platform been modified?) of Cisco networking solutions Cisco embeds security across the entire product lifecycle to enhance the security and resilience of our solutions
- Increasing number of devices getting powered by IOT – responsibility for us to make sure they are always up and running
- When you have a new end point connected to the switch , it usually waits for the link to come up and using Layer 2 CDP or LLDP exchange messages , allocates a certain power to the end point .This usually takes around 20-25 seconds. Using 2 even classification , it will not wait for the link to come up , but. Instead. Using the laye 1electrical signals at the physical layer , negotiate the power and allocate it to the end point . This is a very quick process and takes less than 5 seconds .
- Ppoe comes into picture when the switch is going for a soft reload and you want your end points to have continue supply of power . So in cases of image upgrade or software crash , the end points will also get shut down , however using pope feature the POE devices continue to get the last negotiated power and it really helps in ensuring the end points. Are always powered up .
- Fast POE feature comes into picture when there is a complete outage of the power . And when the power restores for the switch , it usually waits for ios to come up to allocate the power to the end point . However using. Fast poe , 30 seconds post the restoration of power the switch picks up the data from nvram regarding the last allocated power and immedidately powers up the end point .
- dCloud timeline
- *