C9400-SUP-1XL-Y – 2x 25G Uplinks – 240/120/80 Gbps Per Slot – Catalyst 9400 Supervisor Engine
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
C9400-SUP-1XL-Y Description
The C9400-SUP-1XL-Y is the Cisco Catalyst 9400 Series Supervisor 1XL with 25G Module, the engine that adds a 25 Gigabit Ethernet uplink option to the previous supervisor generation for core and aggregation roles. Cisco positions 25G here as the popular alternative to 10G in the core, and the module offers up to 2 non-blocking 25GE uplinks alongside the up to 2 non-blocking 40GE QSFP and up to 8 non-blocking 10GE SFP+ uplinks it shares with the rest of that generation. Built on the Cisco Unified Access Data Plane 2.0 ASIC with up to 1.44 Tbps centralized wired capacity and a 900 Mpps IPv4 forwarding rate, it delivers 240 Gbps per line-card slot in a C9404R, 120 Gbps in a C9407R and 80 Gbps in a C9410R, and its hardware supports MPLS, software-defined access control and border capabilities such as a host-tracking database, cross-domain connectivity and VRF-aware LISP, plus the Access, Core, SD-Access and NAT flexible ASIC templates. Two limitations set it apart from its siblings and belong in any evaluation: MACsec is currently not supported in hardware on this engine, and LRM optics are currently not supported either. It occupies one dedicated supervisor slot, pairs through C9400-SUP-1XL-Y/2 for 1+1 redundancy with NSF/SSO and sub-200 msec ISSU, supports nine line cards, and runs from Cisco IOS XE 16.9.1.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
C9400-SUP-1XL-Y |
|
ASIC |
Cisco Unified Access Data Plane 2.0 |
|
Bandwidth per line-card slot |
240 Gbps on C9404R, 120 Gbps on C9407R and 80 Gbps on C9410R |
|
Centralized wired capacity |
Up to 1.44 Tbps, with 900 Mpps IPv4 and 782.6 Mpps IPv6 forwarding at 95 bytes |
|
Uplinks |
Up to 2 non-blocking 25GE, up to 2 non-blocking 40GE QSFP and up to 8 non-blocking 10GE SFP+ |
|
Hardware limitations |
MACsec is currently not supported in hardware, and LRM optics are currently not supported |
|
Supported line cards |
Nine cards; C9400-LC-48HX, C9400-LC-48XS, C9400-LC-24XY, C9400-LC-12QC and C9400-LC-48TX are not supported |
|
Table scale |
Up to 64,000 MAC addresses, 144,000 IPv4 routes and 56,000 IPv6 routes |
|
Memory and buffer |
16 GB DRAM, 10 GB flash, up to 960 GB SSD, 96 MB packet buffer |
|
Minimum software release |
Cisco IOS XE 16.9.1 |
Application Scenarios
Installed where a campus core chassis needs 25G uplinks toward the distribution or data center layer without moving the whole platform to the current supervisor generation.
Deployed in a C9404R where the 240 Gbps per line-card slot this engine provides matches what the current generation access engine delivers in the same chassis.
Racked where the chassis terminates MPLS or acts as a software-defined access border using the host-tracking database, cross-domain connectivity and VRF-aware LISP the hardware supports.
Product Comparison
|
Parameter |
C9400-SUP-1XL-Y | ||
|---|---|---|---|
|
ASIC |
Cisco UADP 2.0 |
Cisco UADP 2.0 |
Cisco UADP 3.0sec |
|
Bandwidth per line-card slot |
240 Gbps on C9404R, 120 Gbps on C9407R, 80 Gbps on C9410R |
240 Gbps on C9404R, 120 Gbps on C9407R, 80 Gbps on C9410R |
240 Gbps on all three chassis |
|
Highest uplink speed |
25 GE |
40 GE |
100 GE |
|
Hardware MACsec |
Not supported |
Supported |
Supported |
|
LRM optics |
Not supported |
Not listed as restricted |
Not listed as restricted |
|
Centralized wired capacity |
Up to 1.44 Tbps |
Up to 1.44 Tbps |
Up to 9.6 Tbps |
|
IPv4 routes |
Up to 144,000 |
Up to 144,000 |
Up to 256,000 |
|
Flash and packet buffer |
10 GB flash, 96 MB buffer |
10 GB flash, 96 MB buffer |
20 GB flash, 108 MB buffer |
|
Supported line cards |
9 |
9 |
14 |
|
Minimum software release |
Cisco IOS XE 16.9.1 |
Cisco IOS XE 16.6.2 on C9407R and C9410R |
Cisco IOS XE 17.7.1 |
|
Rated MTBF |
237,670 hours |
253,010 hours |
304,308 hours |
- C9400-SUP-1XL-Y buys a 25G uplink option and pays for it twice over against C9400-SUP-1XL: hardware MACsec disappears and LRM optics stop working, while capacity, slot rate, table scale, flash, buffer and line card support stay identical, so the 25G uplink has to be worth losing link encryption in hardware.
- Reliability moves the same direction as the feature loss. Rated MTBF falls to 237,670 hours here against 253,010 on C9400-SUP-1XL and 304,308 on C9400X-SUP-2, making this the lowest-rated engine of the three in the comparison.
- Against C9400X-SUP-2 the gap is generational and one-sided: 1.44 Tbps against 9.6 Tbps capacity, 144,000 against 256,000 IPv4 routes, 9 against 14 supported line cards, and a chassis-dependent slot rate against a flat 240 Gbps, with hardware MACsec restored on the newer engine.
- For deciding which SKU to order, treat hardware MACsec as the first gate because it eliminates this engine outright where link encryption is mandatory, then ask whether 25G uplinks are genuinely required, since C9400-SUP-1XL matches every other figure and C9400X-SUP-2 exceeds them all at 100G.
Selection Guide
1. Twenty-Five Gigabit Uplinks Cost Hardware MACsec
This engine is the only Catalyst 9400 supervisor with a 25GE uplink option in its generation, but MACsec is currently not supported in hardware on it while C9400-SUP-1XL retains that capability at otherwise identical figures; a core that must encrypt links cannot take the 25G option at this generation.
2. LRM Optics Are Off The Table
LRM optics are currently not supported on this engine, so an installed base that runs long-reach multimode links over legacy fiber has to re-plan those spans or stay on C9400-SUP-1XL; the restriction applies to the engine rather than to any particular line card.
3. The Compact Chassis Narrows The Generational Gap
In a C9404R this engine delivers the same 240 Gbps per line-card slot that C9400X-SUP-2 provides, so the choice there rests on table scale, line card entitlement and MACsec rather than slot throughput; in a C9410R it drops to 80 Gbps and the newer engine wins on rate alone.
4. Nine Line Cards Cap The Chassis Roadmap
C9400-LC-48HX, C9400-LC-48XS, C9400-LC-24XY, C9400-LC-12QC and C9400-LC-48TX are unavailable on this engine, so a chassis that will later need 25G or 100G line cards is buying a supervisor it must replace rather than supplement.
5. Templates Still Follow The Flexible ASIC Model
Access, Core, SD-Access and NAT flexible ASIC templates apply to this engine, which the current generation replaces with Custom ASIC templates; an estate standardised on those four template profiles keeps its operating model here and has to rework it on a move to C9400X-SUP-2 or C9400X-SUP-2XL.
Ordering Checklist
|
Check Item |
What to Confirm |
Why It Matters |
|---|---|---|
|
Link encryption requirement |
Confirm whether any link on this chassis must run MACsec in hardware. |
MACsec is currently not supported in hardware on this engine, and no software setting restores it. |
|
Optic type on existing spans |
Confirm no planned uplink relies on LRM optics. |
LRM optics are currently not supported on this engine, so an existing long-reach multimode span will not come up. |
|
Chassis software floor |
Confirm the target C9404R, C9407R or C9410R can run Cisco IOS XE 16.9.1 or later. |
The engine has no supported operation below that release on any of the three chassis. |
|
Free supervisor slot |
Confirm a dedicated supervisor slot is unused: slots 2 or 3 on C9404R, 3 or 4 on C9407R, 5 or 6 on C9410R. |
Line cards are not supported in supervisor slots and supervisor engines cannot occupy line-card slots. |
|
Redundant supervisor PID |
Confirm the second engine is ordered as C9400-SUP-1XL-Y/2 when a redundant pair is planned. |
Cisco lists a distinct redundant PID, and ordering the base PID twice does not match the documented configuration. |
|
Line card list against the nine |
Confirm every planned line card appears in the nine this engine supports. |
Five newer cards will not seat on this engine, and discovering that after delivery means replacing the supervisor. |
|
Uplink port combination |
Confirm which uplink combination the design uses, since a single supervisor runs 2x 25GE on ports 1 and 5, or 4x 10GE plus 1x 25GE, or 1x 25GE plus 1x 40GE, among other fixed combinations. |
Not all uplink ports are simultaneously active, so a link plan counting every port will come up short. |
|
SSD requirement |
Confirm whether C9400-SSD-240GB, C9400-SSD-480GB or C9400-SSD-960GB is needed for application hosting. |
The SSD is a separate order line and cannot be added from the engine PID. |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | C9400-SUP-1XL-Y | Cisco ordering description | Cisco Catalyst 9400 Series Supervisor 1XL with 25G Module, spare part number C9400-SUP-1XL-Y=, redundant supervisor PID C9400-SUP-1XL-Y/2 |
| ASIC | Cisco Unified Access Data Plane 2.0 | Processor and storage | Intel 2.4-GHz x86 with up to 960 GB SATA SSD local storage for container-based application hosting |
| Bandwidth per line-card slot | 240 Gbps on C9404R, 120 Gbps on C9407R and 80 Gbps on C9410R | Centralized wired capacity | Up to 1.44 Tbps |
| Forwarding rate | 900 Mpps for IPv4 and 782.6 Mpps for IPv6 at 95 bytes | Uplink ports | Up to 2 non-blocking 25 Gigabit Ethernet, up to 2 non-blocking 40 Gigabit Ethernet QSFP and up to 8 non-blocking 10 Gigabit Ethernet SFP+ |
| Single-supervisor uplink combinations | 2x 25GE active on ports 1 and 5, 4x 10GE plus 1x 25GE, 1x 25GE plus 1x 40GE, 8x 10GE, 2x 40GE, or 4x 10GE plus 1x 40GE | Hardware limitations | MACsec is currently not supported in hardware on this engine, and LRM optics are currently not supported |
| Advanced services | MPLS, software-defined access control and border capabilities including a host-tracking database, cross-domain connectivity and VRF-aware LISP, and flexible ASIC templates | Flexible ASIC templates | Access for MAC addressing and security, Core for unicast and multicast routing, SD-Access for fabric deployment, and NAT for Layer 3 and NAT in collapsed core WAN deployments |
| Supported line cards | C9400-LC-48U, C9400-LC-48T, C9400-LC-48UX, C9400-LC-24XS, C9400-LC-48P, C9400-LC-24S, C9400-LC-48S, C9400-LC-48H and C9400-LC-48HN | Unsupported line cards | C9400-LC-48HX, C9400-LC-48XS, C9400-LC-24XY, C9400-LC-12QC and C9400-LC-48TX |
| MAC addresses | Up to 64,000, depending on the SDM template | IPv4 and IPv6 routes | Up to 144,000 IPv4 and up to 56,000 IPv6 |
| Multicast and snooping | Up to 32,000 multicast routes and 16,000/8,000 IGMP and MLD snooping entries | QoS and ACL entries | Up to 18,000 QoS hardware entries and 18,000 security ACL hardware entries |
| DRAM and flash | 16 GB DRAM and 10 GB flash | Packet buffer | 96 MB |
| VLAN and interface scale | 4096 VLAN IDs and 1,000 switched virtual interfaces | Jumbo frames | 9216 bytes |
| High availability | 1+1 supervisor redundancy with NSF/SSO for continuous forwarding during switchover and ISSU under 200 msec on dual engines | Supervisor slot positions | Slots 2 or 3 on C9404R, slots 3 or 4 on C9407R and slots 5 or 6 on C9410R, with line cards not supported in those slots |
| Compatible chassis | C9404R, C9407R and C9410R, providing 2, 5 and 8 line-card slots respectively | Minimum software release | Cisco IOS XE 16.9.1 on all three chassis |
| Rated MTBF | 237,670 hours | Dimensions (H x W x D) | 1.7 x 15.0 x 13.41 in. (4.32 x 38.1 x 34.06 cm) to the faceplate and 1.7 x 15.0 x 15.7 in. (4.32 x 38.1 x 39.88 cm) to the ejector |
| Weight and rack units | 10 lb (4.5 kg), 1 RU | Operating temperature | -5 to +45 degrees C up to 6,000 feet and -5 to +40 degrees C up to 10,000 feet |
| Storage temperature | -40 to 70 degrees C | Relative humidity | 10 to 95 percent, noncondensing |
| Operating altitude | -60 to 3,000 m | SSD options | C9400-SSD-240GB, C9400-SSD-480GB and C9400-SSD-960GB M2 SATA memory |
| Management interfaces | Bluetooth dongle support as a wireless management interface and an embedded WebUI in the default image with no additional license | Optics support reference | Supported optical modules and their minimum software releases are published in the Cisco transceiver module device support tables rather than in the supervisor engine data sheet |
Get More Information
Need pricing, stock, or shipping details for the C9400-SUP-1XL-Y ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What does C9400-SUP-1XL-Y add to Catalyst 9400?
-
When does C9400-SUP-1XL-Y fit over C9400-SUP-1XL?
-
How much per-slot bandwidth does C9400-SUP-1XL-Y provide?
-
Which uplink speeds matter on C9400-SUP-1XL-Y?
-
What software baseline matters for C9400-SUP-1XL-Y?
-
What security limitation matters for C9400-SUP-1XL-Y?
-
What migration question fits C9400-SUP-1XL-Y?
-
What optics planning matters for C9400-SUP-1XL-Y?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Post-sale communication was always professional and helpful.
Buying from Layer23 felt like the right decision throughout.
Power on, configure, deploy. Same simple process Layer23 products always allow.
Perfectly organized delivery. Documentation was flawless.
Excellent customer service. Sales rep answered all questions.