C9600-SUP-1 – 9.6 Tbps System Capacity – 2.4 Tbps Per Slot – Catalyst 9600 Supervisor Engine
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
C9600-SUP-1 Description
The C9600-SUP-1 is the Cisco Catalyst 9600 Series Supervisor 1 Module, one of only two engines that drive the C9606R chassis and the one built on three Cisco UADP 3.0 ASICs. It delivers up to 9.6 Tbps of system switching capacity, or 4.8 Tbps full-duplex, measured on a C9606R holding four line cards at 2.4 Tbps, and up to 2.4 Tbps per line card slot at a 3 Bpps forwarding rate of 1 Bpps per ASIC. Its distinguishing characteristic is not raw throughput but table depth in two specific areas: QoS ACL scale reaches up to 16,000 IPv4 and 8,000 IPv6 entries and security ACL scale reaches up to 27,000 IPv4 and 13,500 IPv6 entries, both larger than the newer engine provides, alongside MACsec encryption with 256-bit AES-GCM and up to 2,000 MACsec sessions. It carries 16 GB DRAM, 16 GB flash, up to 960 GB SSD and up to 108 MB of packet buffer at 36 MB per ASIC, supports five of the seven Catalyst 9600 line cards including the C9600-LC-48S that no other engine accepts, and brings Software Maintenance Upgrade, StackWise Virtual, Graceful Insertion and Removal, Secure Boot and the Cisco Trust Anchor Module. The module occupies one dedicated supervisor slot at 1 RU and 5.45 kg (12.02 lbs), pairs through C9600-SUP-1/2 for redundancy, and is rated at 271,420 hours MTBF.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
C9600-SUP-1 |
|
ASIC |
Three Cisco UADP 3.0 |
|
System switching capacity |
Up to 9.6 Tbps, or 4.8 Tbps full-duplex |
|
Bandwidth per line-card slot |
Up to 2.4 Tbps, or 1.2 Tbps full-duplex |
|
Forwarding rate |
3 Bpps, at 1 Bpps per ASIC |
|
ACL scale |
QoS ACL up to 16,000 IPv4 and 8,000 IPv6; security ACL up to 27,000 IPv4 and 13,500 IPv6 |
|
Encryption |
MACsec with 256-bit AES-GCM and up to 2,000 sessions; Cisco WAN MACsec not available |
|
Supported line cards |
Five cards, including C9600-LC-48S which no other Catalyst 9600 engine accepts |
|
Memory and buffer |
16 GB DRAM, 16 GB flash, up to 960 GB SSD, up to 108 MB packet buffer at 36 MB per ASIC |
|
Rated MTBF |
271,420 hours |
Application Scenarios
Installed where the campus core enforces large security and QoS access control lists, using the higher IPv4 and IPv6 ACL table depth this engine provides.
Deployed where inter-building links run MACsec with 256-bit AES-GCM across a large session count, on a platform that also carries Secure Boot and the Cisco Trust Anchor Module.
Racked as two engines in a StackWise Virtual configuration so Stateful Switchover and In-Service Software Upgrade carry forwarding through a switchover or an image change.
Product Comparison
|
Parameter |
C9600-SUP-1 | ||
|---|---|---|---|
|
ASIC |
Three Cisco UADP 3.0 |
One Q200 |
Cisco UADP 3.0sec |
|
System switching capacity |
Up to 9.6 Tbps |
Up to 25.6 Tbps |
Up to 9.6 Tbps |
|
Bandwidth per line-card slot |
Up to 2.4 Tbps |
Up to 6.4 Tbps |
Up to 480 Gbps |
|
Forwarding rate |
3 Bpps |
8 Bpps |
3 Bpps |
|
DRAM and flash |
16 GB DRAM, 16 GB flash |
32 GB DRAM, 16 GB flash |
16 GB DRAM, 20 GB flash |
|
IPv4 routes |
Up to 256,000 |
Up to 2,000,000 |
Up to 256,000 |
|
QoS ACL scale (IPv4/IPv6) |
Up to 16,000/8,000 |
Up to 8,000/4,000 |
Not stated for this engine |
|
Security ACL scale (IPv4/IPv6) |
Up to 27,000/13,500 |
Up to 8,000/4,000 |
Not stated for this engine |
|
Cisco WAN MACsec |
Not available |
Available with an HSEC license |
Not stated for this engine |
|
MACsec sessions |
Up to 2,000 |
Up to 1,024 per PHY |
Not stated for this engine |
|
Rated MTBF |
271,420 hours |
305,880 hours |
304,315 hours |
- The upgrade to C9600X-SUP-2 is not uniform: capacity rises from 9.6 Tbps to 25.6 Tbps and IPv4 routes from 256,000 to 2,000,000, but QoS ACL scale falls from 16,000/8,000 to 8,000/4,000 and security ACL scale from 27,000/13,500 to 8,000/4,000, so a policy-heavy core can lose table depth by moving up.
- MACsec behaviour splits the two Catalyst 9600 engines in both directions. C9600-SUP-1 supports up to 2,000 MACsec sessions but has no Cisco WAN MACsec, while C9600X-SUP-2 adds WAN MACsec under an HSEC license and counts sessions per PHY at up to 1,024.
- Against C9400X-SUP-2XL the platforms are not comparable on slot rate: 2.4 Tbps per slot here against 480 Gbps there, while system capacity is the same 9.6 Tbps figure, so the Catalyst 9600 engine concentrates far more bandwidth into fewer, faster slots.
- For deciding which SKU to order, count the security and QoS ACL entries the design actually needs first, because that is the one dimension where this engine leads, then check whether route scale above 256,000 or WAN MACsec is required, since either one moves the choice to C9600X-SUP-2.
Selection Guide
1. The Engine Where ACL Depth Peaks
C9600-SUP-1 carries up to 27,000 IPv4 and 13,500 IPv6 security ACL entries against 8,000 and 4,000 on C9600X-SUP-2, so a core enforcing large segmentation or filtering policies keeps more than three times the table depth by staying on this engine, at the cost of capacity and route scale.
2. C9600-LC-48S Exists Only Here
The C9600-LC-48S 48-port 1GE line card is supported on this engine and on no other Catalyst 9600 supervisor, so a chassis that must terminate large numbers of 1G fiber links has one engine choice rather than two.
3. Where WAN MACsec Ends The Discussion
Cisco WAN MACsec is not available on this engine and is available on C9600X-SUP-2 with an HSEC license; a design encrypting links across a provider WAN cannot be built on C9600-SUP-1 regardless of how the other figures compare.
4. Two And A Half Terabits Against Six
A slot on this engine tops out at 2.4 Tbps while the same slot reaches 6.4 Tbps on C9600X-SUP-2, so a chassis expected to hold C9600X-LC-56YL4C or C9600X-LC-32CD cards is already outside this engine’s supported card list and outside its bandwidth envelope.
5. Choosing Between The Two Modular Platforms
C9400X-SUP-2XL drives 480 Gbps into each of up to eight line-card slots while this engine drives 2.4 Tbps into each of four, so a design terminating many moderate-speed access ports fits the Catalyst 9400 platform better and one concentrating high-speed core links fits this one.
Ordering Checklist
|
Check Item |
What to Confirm |
Why It Matters |
|---|---|---|
|
Line card list against the five |
Confirm every planned line card appears among C9600-LC-40YL4CD, C9600-LC-24C, C9600-LC-48YL, C9600-LC-48TX and C9600-LC-48S. |
C9600X-LC-56YL4C and C9600X-LC-32CD will not seat on this engine, and discovering that after delivery means replacing the supervisor. |
|
Per-card software floor |
Confirm the chassis image meets the floor for each card: 17.7.1 for C9600-LC-40YL4CD, 16.11.1 for C9600-LC-24C and C9600-LC-48YL, 17.1.1 for C9600-LC-48TX and 17.2.1 for C9600-LC-48S. |
Each card has its own minimum release on this engine, so one card can hold back the whole chassis image plan. |
|
Free supervisor slot |
Confirm slot 3 or slot 4 of the C9606R chassis is unused. |
Those two positions are dedicated to supervisor engines and no line card can occupy them. |
|
Redundant supervisor PID |
Confirm the second engine is ordered as C9600-SUP-1/2 when a redundant pair is planned. |
Cisco lists a distinct redundant PID, and ordering the base PID twice does not match the documented configuration. |
|
ACL table sizing |
Confirm the required security and QoS ACL entry counts against 27,000/13,500 and 16,000/8,000. |
These are the figures this engine leads on, and a design that fits inside the smaller tables of the newer engine has no ACL reason to choose it. |
|
Optics against the TMG matrix |
Confirm the planned transceivers appear in the Cisco TMG compatibility matrix for the chosen line cards. |
Fiber line cards ship without optics, and an unlisted transceiver may be rejected by the host port. |
|
SSD requirement |
Confirm whether SSD storage is needed and which capacity, up to the 960 GB the engine supports. |
SSD capacity is a separate order line and cannot be added from the engine PID. |
Front Panel Components
|
1 |
Supervisor engine LEDs |
6 |
Ejector levers |
|
2 |
Reset button |
7 |
RJ-45 console port |
|
3 |
USB 3.0 Type A ports |
8 |
USB mini Type B console port |
|
4 |
RJ-45 Ethernet management port |
9 |
10 G SFP+ management port |
|
5 |
RFID embedded on the left ejector lever |
– |
– |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | C9600-SUP-1 | Cisco ordering description | Cisco Catalyst 9600 Series Supervisor 1 Module, spare part number C9600-SUP-1=, redundant supervisor PID C9600-SUP-1/2 |
| ASIC | Three Cisco UADP 3.0 | Forwarding rate | 3 Bpps, at 1 Bpps per ASIC |
| System switching capacity | Up to 9.6 Tbps, or 4.8 Tbps full-duplex, based on a C9606R chassis with four line cards operating at 2.4 Tbps | Bandwidth per line-card slot | Up to 2.4 Tbps, or 1.2 Tbps full-duplex |
| DRAM and flash | 16 GB DRAM and 16 GB flash | SSD and packet buffer | Up to 960 GB SSD capacity and up to 108 MB packet buffer at 36 MB per ASIC |
| VLAN and STP scale | 4,094 VLAN IDs, 1,000 PVST instances, 16,000 STP virtual ports for PVST and 100,000 for MST | Interface scale | 1,000 switched virtual interfaces and 9,216-byte jumbo frames |
| MAC addresses | Up to 128,000 | IPv4 and IPv6 routes | Up to 256,000 each |
| ARP and NDP entries | Up to 90,000 ARP and up to 128,000 NDP | Multicast and snooping | Up to 32,000 multicast routes and up to 16,000 IGMP and MLD snooping entries |
| QoS ACL scale | Up to 16,000 IPv4 and 8,000 IPv6 entries | Security ACL scale | Up to 27,000 IPv4 and 13,500 IPv6 entries |
| GRE tunnels | Up to 1,024 | NetFlow entries | Up to 384,000 in full mode, at 128,000 per ASIC |
| Encryption | MACsec with 256-bit AES-GCM and up to 2,000 MACsec sessions; Cisco WAN MACsec not available on this engine | Resiliency features | Software Maintenance Upgrade, Cisco StackWise Virtual, StackWise Virtual QuadSup RPR, Stateful Switchover and In-Service Software Upgrade on two supervisors in a StackWise Virtual configuration, Graceful Insertion and Removal and MKA High Availability |
| Security features | Trustworthy Solutions, Image Signing, Secure Boot and the Cisco Trust Anchor Module | Supported line cards | C9600-LC-40YL4CD from Cisco IOS XE 17.7.1, C9600-LC-24C from 16.11.1, C9600-LC-48YL from 16.11.1, C9600-LC-48TX from 17.1.1 and C9600-LC-48S from 17.2.1 |
| Unsupported line cards | C9600X-LC-56YL4C and C9600X-LC-32CD | Maximum chassis port density | 48 ports of 100G, 96 of 40G and 192 ports each of 25G, 10G, 5G, 2.5G, 1G, 100M and 10M in a C9606R |
| Compatible chassis | C9606R 6 slot chassis with 4 line card slots and 2 dedicated supervisor engine slots at positions 3 and 4 | Supervisor redundancy | Supported across the two dedicated supervisor slots of the C9606R chassis |
| Dimensions (H x W x D) | 1.7 x 15.0 x 13.41 inches (4.32 x 38.1 x 34.06 cm) to the faceplate and 1.7 x 15.0 x 15.7 inches (4.32 x 38.1 x 39.88 cm) to the ejector | Weight and rack units | 5.45 kg (12.02 lbs), 1 RU |
| Operating temperature | -5 to 45 degrees C (23 to 113 degrees F) up to 6,000 feet and -5 to 40 degrees C (23 to 104 degrees F) up to 10,000 feet | Storage temperature | -40 to 70 degrees C (40 to 158 degrees F) |
| Relative humidity | 10 to 95 percent, noncondensing | Altitude | -60 to 3,000 m (-197 to 9843 feet) |
| Rated MTBF | 271,420 hours | Optics support reference | Optical transceivers are required for fiber line cards and the supported modules are published in the Cisco TMG compatibility matrix |
Get More Information
Need pricing, stock, or shipping details for the C9600-SUP-1 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Which chassis function belongs to C9600-SUP-1?
-
Which chassis family uses C9600-SUP-1?
-
What front-panel ports matter on C9600-SUP-1?
-
How does C9600-SUP-1 differ from C9600X Supervisor Engine 2?
-
Why do redundancy questions appear around C9600-SUP-1?
-
Does C9600-SUP-1 provide access switch ports by itself?
-
Which software planning issue matters for C9600-SUP-1?
-
What ordering detail prevents a C9600-SUP-1 mismatch?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Everything fit and worked the first time. That’s what we like to see.
Even the small details — labels, screws, finish — match the genuine article.
We rate vendors on reliability, communication, and pricing. Layer23 scores top marks on all three.
Speedy delivery. Wings not included, but it flew here fast.
Order arrived quickly. Good service.