Important Notes
Unsupported Features: Cisco Catalyst 9500 Series Switches
-
Cisco TrustSec
-
Cisco TrustSec Network Device Admission Control (NDAC) on Uplinks
-
-
Interface and Hardware
-
Link Debounce Timer
-
M2 SATA Module
-
EnergyWise
-
-
IP Addressing Services
-
GRE Redirection
-
VRRPv3: Object Tracking Integration
-
GRE IPv6 Tunnels
-
HSRP and Switch Stack
-
HSRP Groups and Clustering
-
-
IP Multicast Routing
-
Unicast over Point-to-Multipoint (P2MP)
-
Generic Routing Encapsulation (GRE)
-
Multicast over P2MP GRE
-
-
IP Routing
-
PIM Bidirectional Forwarding Detection (PIM BFD), PIM Snooping
-
Border Gateway Protocol (BGP) Additional Paths
-
OSPF NSR
-
OSPFv3 NSR
-
OSPFv2 Loop-Free Alternate IP Fast Reroute
-
-
Layer 2
-
Audio Engineering Society: AES67 Timing Profile
-
Q-in-Q on a Trunk Port
-
-
Multiprotocol Label Switching
-
Hierarchical VPLS with MPLS Access
-
-
Network Management
-
Flexible NetFlow
-
NetFlow v5 Export Protocol
-
4-byte (32-bit) AS Number Support
-
TrustSec NetFlow IPv4 Security Group Access Control List (SGACL) Deny and Drop Export
-
-
-
Quality of Service
-
Classification (Layer 3 Packet Length, Time-to-Live (TTL))
-
Per queue policer support
-
L2 Miss
-
-
Security
-
Lawful Intercept
-
-
VLAN
-
QinQ VLAN Mapping
-
Unsupported Features: Cisco Catalyst 9500 Series Switches - High Performance
-
High Availability
-
Switch Stacks
-
-
Interface and Hardware
-
EnergyWise
-
-
IP Multicast Routing
-
IPv6 Multicast and IPv6 Multicast over Point-to-Point GRE
-
-
IP Routing
-
Unicast and Multicast over Point-to-Multipoint GRE
-
BFD Multihop Support for IPv4 Static Routes
-
-
Layer 2
-
Flexlink+
-
VLAN Load Balancing for FlexLink+
-
Preemption for VLAN Load Balancing
-
FlexLink+ Dummy Multicast Packets
-
Resilient Ethernet Protocol (REP)
-
-
Multiprotocol Label Switching
-
MPLS Label Distribution Protocol (MPLS LDP) VRF-Aware Static Labels
-
VPLS Routed Pseudowire IRB(v4) Unicast
-
-
Network Management
-
Cisco Application Visibility and Control (AVC)
-
-
Security
-
Wake-on-LAN (WoL)
-
-
System Management
-
Network-Based Application Recognition (NBAR) and Next-Generation NBAR (NBAR2)
-
Unsupported Features: Cisco Catalyst 9500X Series Switches
-
BGP EVPN VXLAN
-
Layer 2 Broadcast, Unknown Unicast, and Multicast (BUM) Traffic Forwarding using Ingress Replication
-
BUM Traffic Rate Limiting
-
Dynamic ARP inspection (DAI) and DHCP Rogue Server Protection
-
EVPN VXLAN Centralized Default Gateway
-
VXLAN-Aware Flexible Netflow
-
MPLS Layer 3 VPN Border Leaf Handoff
-
MPLS Layer 3 VPN Border Spine Handoff
-
VPLS over MPLS Border Leaf Handoff
-
VPLS over MPLS Border Spine Handoff
-
Interworking of Layer 3 TRM with MVPN Networks for IPv4 Traffic
-
Private VLANs (PVLANs)
-
BGP EVPN VXLAN with IPv6 in the Underlay (VXLANv6)
-
EVPN Microsegmentation
-
VRF aware NAT64 EVPN Fabric
-
Multihoming Single Active
-
-
Cisco TrustSec
-
Cisco TrustSec Manual Configuration
-
Cisco TrustSec Security Association Protocol (SAP)
-
Cisco TrustSec Metadata Header Encapsulation
-
Cisco TrustSec VLAN to SGT Mapping
-
Local Device SGT Mapping
-
Cisco TrustSec SGT Caching
-
TrustSec SGT Handling: L2 SGT Imposition and Forwarding
-
Cisco TrustSec SGT Inline Tagging
-
-
High Availability
-
Secure StackWise Virtual
-
Cisco Nonstop Forwarding with Stateful Switchover
-
Graceful Insertion and Removal
-
Switch Stacks
-
-
Interface and Hardware
-
Link Debounce Timer
-
EnergyWise
-
-
IP Addressing Services
-
Next Hop Resolution Protocol (NHRP)
-
Network Address Translation (NAT)
-
Gateway Load Balancing Protocol (GLBP)
-
Web Cache Communication Protocol (WCCP)
-
Switchport Block Unknown Unicast and Switchport Block Unknown Multicast
-
Message Session Relay Protocol (MSRP)
-
TCP MSS Adjustment
-
GRE IPv6 Tunnels
-
IP Fast Reroute (IP FRR)
-
-
IP Multicast Routing
-
Multicast Routing over GRE Tunnel
-
Multicast VLAN Registration (MVR) for IGMP Snooping
-
IPv6 Multicast over Point-to-Point GRE
-
IGMP Proxy
-
Bidirectional PIM
-
Multicast VPN
-
MVPNv6
-
mVPN Extranet Support
-
MLDP-Based VPN
-
PIM Snooping
-
PIM Dense Mode
-
-
IP Routing
-
OSPFv2 Loop-Free Alternate IP Fast Reroute
-
EIGRP Loop-Free Alternate IP Fast Reroute
-
Policy-Based Routing (PBR) for IPv6
-
VRF-Aware PBR
-
PBR for Object-Group Access Control List (OGACL) Based Matching
-
Multipoint GRE
-
Web Cache Communication Protocol (WCCP)
-
-
Layer 2
-
Multi-VLAN Registration Protocol (MVRP)
-
Loop Detection Guard
-
Cross-Stack UplinkFast
-
Optional Spanning Tree Protocol
-
Precision Time Protocol (PTP)
-
Audio Engineering Society: AES67 Timing Profile
-
PTPv2 on Cisco StackWise Virtual
-
Fast UniDirectional Link Detection
-
UniDirectional Link Detection (UDLD)
-
IEEE 802.1Q Tunneling
-
One-to-One VLAN Mapping
-
Selective Q-in-Q
-
Q-in-Q on a Trunk Port
-
Audio Video Bridging (AVB): IEEE 802.1BA
-
Flexlink+
-
VLAN Load Balancing for FlexLink+
-
Preemption for VLAN Load Balancing
-
FlexLink+ Dummy Multicast Packets
-
Resilient Ethernet Protocol
-
-
Multiprotocol Label Switching
-
LAN MACsec over Multiprotocol Label Switching (MPLS)
-
BGP Multipath Load Sharing for Both eBGP and iBGP in an MPLS VPN
-
MPLS over GRE
-
MPLS Layer 2 VPN over GRE
-
MPLS Layer 3 VPN over GRE
-
Virtual Private LAN Service (VPLS)
-
VPLS Autodiscovery, BGP-based
-
VPLS Layer 2 Snooping: Internet Group Management Protocol or Multicast Listener Discovery
-
Hierarchical VPLS with Multiprotocol Label Switching Access
-
VPLS Routed Pseudowire IRB(v4) Unicast
-
MPLS VPN Inter-AS Options (options B and AB)
-
MPLS VPN Inter-AS IPv4 BGP Label Distribution
-
Seamless Multiprotocol Label Switching
-
-
Network Management
-
ERSPAN
-
Flow-Based Switch Port Analyser
-
FRSPAN
-
Egress Netflow
-
IP Aware MPLS Netflow
-
NetFlow Version 5
-
-
Quality of Service
-
QoS Ingress Shaping
-
VPLS QoS
-
Microflow Policers
-
Per VLAN Policy and Per Port Policer
-
Mixed COS/DSCP Threshold in a QoS LAN-queueing Policy
-
Easy QoS: match-all Attributes
-
Classify: Packet Length
-
Class-Based Shaping for DSCP/Prec/COS/MPLS Labels
-
CoPP Microflow Policing
-
Egress Policing
-
Egress Microflow Destination-Only Policing
-
Ethertype Classification
-
Packet Classification Based on Layer3 Packet-Length
-
PACLs
-
Per IP Session QoS
-
Per Queue Policer
-
QoS Data Export
-
QoS L2 Missed Packets Policing
-
-
Security
-
Lawful Intercept
-
MACsec:
-
Switch-to-host MACsec
-
Cisco TrustSec Security Association Protocol
-
Fallback Key
-
MACsec EAP-TLS
-
-
MAC ACLs
-
Port ACLs
-
VLAN ACLs
-
IP Source Guard
-
IPv6 Source Guard
-
Web-based Authentication
-
Port Security
-
Weighted Random Early Detection mechanism (WRED) Based on DSCP, PREC, or COS
-
IEEE 802.1x Port-Based Authentication
-
Dynamic ARP Inspection
-
Dynamic ARP Inspection Snooping
-
-
System Management
-
Unicast MAC Address Filtering
-
-
VLAN
-
Wired Dynamic PVLAN
-
Private VLANs
-
Complete List of Supported Features
For the complete list of features supported on a platform, see Cisco Feature Navigator.
Choose the following in the context of the Cisco Catalyst 9500 Series Switches:
-
CAT9500: to see all the features supported on the C9500-12Q, C9500-16X, C9500-24Q, C9500-40X models
-
CAT9500 High Performance: to see all the features supported on the C9500-24Y4C, C9500-32C, C9500-32QC, and C9500-48Y4C models
-
CAT9500X: to see all the features supported on the C9500X-28C8D and C9500X-60L4D models
Default Behaviour—All Models
Beginning from Cisco IOS XE Gibraltar 16.12.5 and later, do not fragment bit (DF bit) in the IP packet is always set to 0 for all outgoing RADIUS packets (packets that originate from the device towards the RADIUS server).
Default Interface Behaviour on Cisco Catalyst 9500 Series Switches - High Performance and Cisco Catalyst 9500X Series Switches Only
From Cisco IOS XE Gibraltar 16.11.1, the default interface for all High Performance and 9500X models in the series changes from Layer 3 to Layer 2. Use the no switchport command to change the Layer 2 interface into Layer 3 mode.
The startup configuration has explicit configuration of the switchport command for Layer 2 interfaces and the no switchport command for Layer 3 interfaces to address this change in behaviour and to support seamless migration.