C9600-SUP-1 – 9.6 Tbps System Capacity – 2.4 Tbps Per Slot – Catalyst 9600 Supervisor Engine
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
C9600-SUP-1 Description
The C9600-SUP-1 is a Cisco Catalyst 9600 Series Supervisor 1 Module for the dedicated supervisor slots of the Catalyst 9606R core chassis. The module has three UADP 3.0 ASICs, up to 9.6 Tbps of system switching capacity, up to 2.4 Tbps per line-card slot and a 3 Bpps forwarding rate. It is the only engine that accepts the C9600-LC-48S line card, and it does not support the C9600X-LC-56YL4C or C9600X-LC-32CD line cards or Cisco WAN MACsec.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
C9600-SUP-1 |
|
ASIC |
Three Cisco UADP 3.0 |
|
System switching capacity |
Up to 9.6 Tbps, or 4.8 Tbps full-duplex |
|
Bandwidth per line-card slot |
Up to 2.4 Tbps, or 1.2 Tbps full-duplex |
|
Forwarding rate |
3 Bpps, at 1 Bpps per ASIC |
|
ACL scale |
QoS ACL up to 16,000 IPv4 and 8,000 IPv6; security ACL up to 27,000 IPv4 and 13,500 IPv6 |
|
Encryption |
MACsec with 256-bit AES-GCM and up to 2,000 sessions; Cisco WAN MACsec not available |
|
Supported line cards |
Five cards, including C9600-LC-48S which no other Catalyst 9600 engine accepts |
|
Memory and buffer |
16 GB DRAM, 16 GB flash, up to 960 GB SSD, up to 108 MB packet buffer at 36 MB per ASIC |
|
MTBF |
271,420 hours |
Application Scenarios
A campus core that enforces large access control lists can use the table depth of up to 27,000 IPv4 security ACL entries and 16,000 IPv4 QoS ACL entries.
A Catalyst 9606R that aggregates access links on C9600-LC-48S 1GE line cards keeps them in service under this engine, the only one that accepts that card.
Product Comparison
|
Parameter |
C9600-SUP-1 | ||
|---|---|---|---|
|
System switching capacity |
Up to 9.6 Tbps (4.8 Tbps full-duplex) |
Up to 25.6 Tbps (12.8 Tbps full-duplex) |
Up to 9.6 Tbps |
|
Per-slot switching capacity |
Up to 2.4 Tbps (1.2 Tbps full-duplex) |
Up to 6.4 Tbps (3.2 Tbps full-duplex) |
Up to 480 Gbps |
|
Forwarding rate |
3 Bpps (1 Bpps per ASIC) |
8 Bpps |
3 Bpps |
|
IPv4 routes |
Up to 256,000 |
Up to 2,000,000 |
Up to 256,000 |
|
Security ACL scale (IPv4/IPv6) |
Up to 27,000/13,500 |
Up to 8,000/4,000 |
Not published |
|
Cisco WAN MACsec (256-bit AES-GCM) |
Not available |
Available (HSEC license required) |
Not published |
C9600-SUP-1 and C9600X-SUP-2 split on table scale rather than on a simple good-better order: C9600X-SUP-2 reaches 25.6 Tbps and up to 2,000,000 IPv4 routes against 9.6 Tbps and 256,000, but C9600-SUP-1 holds the deeper ACL tables at 27,000 IPv4 and 13,500 IPv6 security entries against 8,000 and 4,000. A policy-heavy core stays on C9600-SUP-1, which is also the only engine that accepts C9600-LC-48S. Route scale above 256,000, Cisco WAN MACsec under an HSEC license, or more than 2.4 Tbps per line-card slot moves the order to C9600X-SUP-2. C9400X-SUP-2XL is the Catalyst 9400 engine at 480 Gbps per slot and is not a substitute inside a Catalyst 9600 chassis.
Ordering Checklist
- Chassis: Place the engine in C9606R supervisor slot 3 or 4. It fits only the two dedicated supervisor slots of the Catalyst 9600 chassis.
- Line cards: Use C9600-LC-40YL4CD, C9600-LC-24C, C9600-LC-48YL, C9600-LC-48TX and C9600-LC-48S; not C9600X-LC-56YL4C or C9600X-LC-32CD, which do not seat on this engine.
Front Panel Components
|
1 3674_7e5873-e1> |
Supervisor engine LEDs 3674_03d3a4-77> |
6 3674_9fdd69-f2> |
Ejector levers 3674_e748d2-cc> |
|
2 3674_9fb1c7-fc> |
Reset button 3674_422991-4d> |
7 3674_b423c3-ee> |
RJ-45 console port 3674_3a58cc-ef> |
|
3 3674_5fb6a3-a3> |
USB 3.0 Type A ports 3674_8d44a6-0d> |
8 3674_f5756d-41> |
USB mini Type B console port 3674_2603fd-a1> |
|
4 3674_d8a3ea-37> |
RJ-45 Ethernet management port 3674_cae63b-a0> |
9 3674_e462d0-3f> |
10 G SFP+ management port 3674_6e8c6b-f2> |
|
5 3674_b0be9b-fe> |
RFID embedded on the left ejector lever 3674_047b95-64> |
– 3674_0bd67e-27> |
– 3674_726073-81> |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | C9600-SUP-1 | Cisco ordering description | Cisco Catalyst 9600 Series Supervisor 1 Module, spare part number C9600-SUP-1=, redundant supervisor PID C9600-SUP-1/2 |
| Compatible chassis | C9606R 6 slot chassis with 4 line card slots and 2 dedicated supervisor engine slots at positions 3 and 4 | Interface scale | 1,000 switched virtual interfaces and 9,216-byte jumbo frames |
| Supported line cards | C9600-LC-40YL4CD from Cisco IOS XE 17.7.1, C9600-LC-24C from 16.11.1, C9600-LC-48YL from 16.11.1, C9600-LC-48TX from 17.1.1 and C9600-LC-48S from 17.2.1 | Unsupported line cards | C9600X-LC-56YL4C and C9600X-LC-32CD |
| Maximum chassis port density | 48 ports of 100G, 96 of 40G and 192 ports each of 25G, 10G, 5G, 2.5G, 1G, 100M and 10M in a C9606R | Optics support reference | Optical transceivers are required for fiber line cards and the supported modules are published in the Cisco TMG compatibility matrix |
| System switching capacity | Up to 9.6 Tbps, or 4.8 Tbps full-duplex, based on a C9606R chassis with four line cards operating at 2.4 Tbps | Forwarding rate | 3 Bpps, at 1 Bpps per ASIC |
| Bandwidth per line-card slot | Up to 2.4 Tbps, or 1.2 Tbps full-duplex | DRAM | 16 GB |
| Flash | 16 GB | SSD storage | Up to 960 GB |
| Packet buffer | Up to 108 MB at 36 MB per ASIC | ASIC | Three Cisco UADP 3.0 |
| ARP entries | Up to 90,000 | NDP entries | Up to 128,000 |
| GRE tunnels | Up to 1,024 | Encryption | MACsec with 256-bit AES-GCM and up to 2,000 MACsec sessions; Cisco WAN MACsec not available on this engine |
| Resiliency features | Software Maintenance Upgrade, Cisco StackWise Virtual, StackWise Virtual QuadSup RPR, Stateful Switchover and In-Service Software Upgrade on two supervisors in a StackWise Virtual configuration, Graceful Insertion and Removal and MKA High Availability | Security features | Trustworthy Solutions, Image Signing, Secure Boot and the Cisco Trust Anchor Module |
| MAC addresses | Up to 128,000 | IPv4 routes | Up to 256,000 |
| IPv6 routes | Up to 256,000 | Multicast routes | Up to 32,000 |
| Multicast snooping entries | Up to 16,000 | VLAN IDs | 4,094 |
| QoS ACL scale | Up to 16,000 IPv4 and 8,000 IPv6 entries | Security ACL scale | Up to 27,000 IPv4 and 13,500 IPv6 entries |
| PVST instances | 1,000 | STP virtual ports for PVST | 16,000 |
| STP virtual ports for MST | 100,000 | NetFlow entries | Up to 384,000 in full mode, at 128,000 per ASIC |
| Supervisor redundancy | Supported across the two dedicated supervisor slots of the C9606R chassis | Rack units | 1 RU |
| Dimensions (H x W x D) | 1.7 x 15.0 x 13.41 inches (4.32 x 38.1 x 34.06 cm) to the faceplate and 1.7 x 15.0 x 15.7 inches (4.32 x 38.1 x 39.88 cm) to the ejector | Operating temperature | -5°C to 45°C (23°F to 113°F) up to 6,000 feet and -5°C to 40°C (23°F to 104°F) up to 10,000 feet |
| Storage temperature | -40°C to 70°C (40°F to 158°F) | Operating humidity | 10 to 95 percent, noncondensing |
| Operating altitude | -60 to 3,000 m (-197 to 9843 feet) | MTBF | 271,420 hours |
Quality Certifications
Customer Reviews
Questions & Answers
-
Which chassis slots and line cards does C9600-SUP-1 support?
-
Which Cisco IOS XE release does each line card need on C9600-SUP-1?
-
From which release does C9600-SUP-1 support ISSU?
-
Which redundancy mode do two C9600-SUP-1 modules use in a C9606R?
-
Can the RJ-45 and SFP+ management ports of C9600-SUP-1 be used together?
-
How much power does C9600-SUP-1 draw at maximum?
-
Which SSD PIDs can be added to C9600-SUP-1?
-
What must be removed from the C9606R supervisor slot before installing C9600-SUP-1?
-
Which SDM templates does C9600-SUP-1 offer and what does the NAT template set?
-
Which license tier applies to C9600-SUP-1?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:












Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.

Everything fit and worked the first time. That’s what we like to see.
Even the small details — labels, screws, finish — match the genuine article.
We rate vendors on reliability, communication, and pricing. Layer23 scores top marks on all three.
Speedy delivery. Wings not included, but it flew here fast.
Order arrived quickly. Good service.