C9600-SUP-1 – 9.6 Tbps System Capacity – 2.4 Tbps Per Slot – Catalyst 9600 Supervisor Engine

4.917 reviews10 Questions3 sold this month
List Price: $62,965.41 97% OFF
$1,750.00
Price Alert
In StockShips in as little as 1 business day Brand New
Related models
Cisco SN CheckSN verification before shipment.Verify authenticity3-Year WarrantyExtended, enterprise-gradeWarranty terms14-Day ReturnsStraightforward RMA processReturn policyExpress Shipping2-6 Business Daysvia UPS, FedEx, DHL and more
Trusted & Secure Payments

Why Layer23-Switch

Stocked, Shipped and Supported by One Team

Founded
Customers
Units shipped
Countries

Inventory You Can See

Cisco stock on hand
Models ready to ship
Warehouse space

Ships in 1 Business Day

In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.

DHL FedEx UPS Duties included: US · CA · UK

LSCare Warranty

3years on enterprise equipment

  • Advance replacement for in-stock models
  • New unit for dead-on-arrival
  • 14-day returns on sealed items

Free CCIE Support

Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.

Part number check Configuration Troubleshooting

Verify Before You Pay

100%factory-sealed

Get label and serial photos before shipment, and check every serial number with Cisco.

C9600-SUP-1 Description

The C9600-SUP-1 is a Cisco Catalyst 9600 Series Supervisor 1 Module for the dedicated supervisor slots of the Catalyst 9606R core chassis. The module has three UADP 3.0 ASICs, up to 9.6 Tbps of system switching capacity, up to 2.4 Tbps per line-card slot and a 3 Bpps forwarding rate. It is the only engine that accepts the C9600-LC-48S line card, and it does not support the C9600X-LC-56YL4C or C9600X-LC-32CD line cards or Cisco WAN MACsec.

Quick Specs

Parameter

Specification

Product ID

C9600-SUP-1

ASIC

Three Cisco UADP 3.0

System switching capacity

Up to 9.6 Tbps, or 4.8 Tbps full-duplex

Bandwidth per line-card slot

Up to 2.4 Tbps, or 1.2 Tbps full-duplex

Forwarding rate

3 Bpps, at 1 Bpps per ASIC

ACL scale

QoS ACL up to 16,000 IPv4 and 8,000 IPv6; security ACL up to 27,000 IPv4 and 13,500 IPv6

Encryption

MACsec with 256-bit AES-GCM and up to 2,000 sessions; Cisco WAN MACsec not available

Supported line cards

Five cards, including C9600-LC-48S which no other Catalyst 9600 engine accepts

Memory and buffer

16 GB DRAM, 16 GB flash, up to 960 GB SSD, up to 108 MB packet buffer at 36 MB per ASIC

MTBF

271,420 hours

Application Scenarios

Policy-Dense Campus Core

A campus core that enforces large access control lists can use the table depth of up to 27,000 IPv4 security ACL entries and 16,000 IPv4 QoS ACL entries.

Existing Gigabit Line Cards

A Catalyst 9606R that aggregates access links on C9600-LC-48S 1GE line cards keeps them in service under this engine, the only one that accepts that card.

Product Comparison

Parameter

C9600-SUP-1

C9600X-SUP-2

C9400X-SUP-2XL

System switching capacity

Up to 9.6 Tbps (4.8 Tbps full-duplex)

Up to 25.6 Tbps (12.8 Tbps full-duplex)

Up to 9.6 Tbps

Per-slot switching capacity

Up to 2.4 Tbps (1.2 Tbps full-duplex)

Up to 6.4 Tbps (3.2 Tbps full-duplex)

Up to 480 Gbps

Forwarding rate

3 Bpps (1 Bpps per ASIC)

8 Bpps

3 Bpps

IPv4 routes

Up to 256,000

Up to 2,000,000

Up to 256,000

Security ACL scale (IPv4/IPv6)

Up to 27,000/13,500

Up to 8,000/4,000

Not published

Cisco WAN MACsec (256-bit AES-GCM)

Not available

Available (HSEC license required)

Not published

C9600-SUP-1 and C9600X-SUP-2 split on table scale rather than on a simple good-better order: C9600X-SUP-2 reaches 25.6 Tbps and up to 2,000,000 IPv4 routes against 9.6 Tbps and 256,000, but C9600-SUP-1 holds the deeper ACL tables at 27,000 IPv4 and 13,500 IPv6 security entries against 8,000 and 4,000. A policy-heavy core stays on C9600-SUP-1, which is also the only engine that accepts C9600-LC-48S. Route scale above 256,000, Cisco WAN MACsec under an HSEC license, or more than 2.4 Tbps per line-card slot moves the order to C9600X-SUP-2. C9400X-SUP-2XL is the Catalyst 9400 engine at 480 Gbps per slot and is not a substitute inside a Catalyst 9600 chassis.

Ordering Checklist

  • Chassis: Place the engine in C9606R supervisor slot 3 or 4. It fits only the two dedicated supervisor slots of the Catalyst 9600 chassis.
  • Line cards: Use C9600-LC-40YL4CD, C9600-LC-24C, C9600-LC-48YL, C9600-LC-48TX and C9600-LC-48S; not C9600X-LC-56YL4C or C9600X-LC-32CD, which do not seat on this engine.

Front Panel Components

1

Supervisor engine LEDs

6

Ejector levers

2

Reset button

7

RJ-45 console port

3

USB 3.0 Type A ports

8

USB mini Type B console port

4

RJ-45 Ethernet management port

9

10 G SFP+ management port

5

RFID embedded on the left ejector lever

–

–

Specifications

Parameter Specification Parameter Specification
Product ID C9600-SUP-1 Cisco ordering description Cisco Catalyst 9600 Series Supervisor 1 Module, spare part number C9600-SUP-1=, redundant supervisor PID C9600-SUP-1/2
Compatible chassis C9606R 6 slot chassis with 4 line card slots and 2 dedicated supervisor engine slots at positions 3 and 4 Interface scale 1,000 switched virtual interfaces and 9,216-byte jumbo frames
Supported line cards C9600-LC-40YL4CD from Cisco IOS XE 17.7.1, C9600-LC-24C from 16.11.1, C9600-LC-48YL from 16.11.1, C9600-LC-48TX from 17.1.1 and C9600-LC-48S from 17.2.1 Unsupported line cards C9600X-LC-56YL4C and C9600X-LC-32CD
Maximum chassis port density 48 ports of 100G, 96 of 40G and 192 ports each of 25G, 10G, 5G, 2.5G, 1G, 100M and 10M in a C9606R Optics support reference Optical transceivers are required for fiber line cards and the supported modules are published in the Cisco TMG compatibility matrix
System switching capacity Up to 9.6 Tbps, or 4.8 Tbps full-duplex, based on a C9606R chassis with four line cards operating at 2.4 Tbps Forwarding rate 3 Bpps, at 1 Bpps per ASIC
Bandwidth per line-card slot Up to 2.4 Tbps, or 1.2 Tbps full-duplex DRAM 16 GB
Flash 16 GB SSD storage Up to 960 GB
Packet buffer Up to 108 MB at 36 MB per ASIC ASIC Three Cisco UADP 3.0
ARP entries Up to 90,000 NDP entries Up to 128,000
GRE tunnels Up to 1,024 Encryption MACsec with 256-bit AES-GCM and up to 2,000 MACsec sessions; Cisco WAN MACsec not available on this engine
Resiliency features Software Maintenance Upgrade, Cisco StackWise Virtual, StackWise Virtual QuadSup RPR, Stateful Switchover and In-Service Software Upgrade on two supervisors in a StackWise Virtual configuration, Graceful Insertion and Removal and MKA High Availability Security features Trustworthy Solutions, Image Signing, Secure Boot and the Cisco Trust Anchor Module
MAC addresses Up to 128,000 IPv4 routes Up to 256,000
IPv6 routes Up to 256,000 Multicast routes Up to 32,000
Multicast snooping entries Up to 16,000 VLAN IDs 4,094
QoS ACL scale Up to 16,000 IPv4 and 8,000 IPv6 entries Security ACL scale Up to 27,000 IPv4 and 13,500 IPv6 entries
PVST instances 1,000 STP virtual ports for PVST 16,000
STP virtual ports for MST 100,000 NetFlow entries Up to 384,000 in full mode, at 128,000 per ASIC
Supervisor redundancy Supported across the two dedicated supervisor slots of the C9606R chassis Rack units 1 RU
Dimensions (H x W x D) 1.7 x 15.0 x 13.41 inches (4.32 x 38.1 x 34.06 cm) to the faceplate and 1.7 x 15.0 x 15.7 inches (4.32 x 38.1 x 39.88 cm) to the ejector Operating temperature -5°C to 45°C (23°F to 113°F) up to 6,000 feet and -5°C to 40°C (23°F to 104°F) up to 10,000 feet
Storage temperature -40°C to 70°C (40°F to 158°F) Operating humidity 10 to 95 percent, noncondensing
Operating altitude -60 to 3,000 m (-197 to 9843 feet) MTBF 271,420 hours

Quality Certifications

Customer Reviews

Write A Review
4.9
(17 reviews)
5 Stars
16
4 Stars
1
3 Stars
0
2 Stars
0
1 Stars
0
    Tyler Lewis
    Posted on 28/01/2026
    Verified Buyer
    5.0

    Everything fit and worked the first time. That’s what we like to see.

    Elena Ruiz
    Posted on 26/01/2026
    Verified Buyer
    5.0

    Even the small details — labels, screws, finish — match the genuine article.

    Mei Bell
    Posted on 09/12/2025
    Verified Buyer
    5.0

    We rate vendors on reliability, communication, and pricing. Layer23 scores top marks on all three.

    Sam Wilson
    Posted on 08/09/2025
    Verified Buyer
    5.0

    Speedy delivery. Wings not included, but it flew here fast.

    SysAdmin
    Posted on 12/04/2025
    Verified Buyer
    5.0

    Order arrived quickly. Good service.

Questions & Answers

  • Which chassis slots and line cards does C9600-SUP-1 support?

    C9600-SUP-1 installs in C9606R supervisor slot 3 or 4 and accepts C9600-LC-40YL4CD, C9600-LC-24C, C9600-LC-48YL, C9600-LC-48TX and C9600-LC-48S. C9600X-LC-56YL4C and C9600X-LC-32CD do not seat on the engine, and the two dedicated supervisor slots are the only place it fits.
  • Which Cisco IOS XE release does each line card need on C9600-SUP-1?

    On C9600-SUP-1, C9600-LC-24C and C9600-LC-48YL start at Cisco IOS XE 16.11.1, C9600-LC-48TX at 17.1.1, C9600-LC-48S at 17.2.1 and C9600-LC-40YL4CD at 17.7.1. C9600X-LC-56YL4C and C9600X-LC-32CD are not supported on this engine at any release, so those cards need another supervisor.
  • From which release does C9600-SUP-1 support ISSU?

    C9600-SUP-1 supports ISSU from Cisco IOS XE 16.12.1, and it needs two supervisors running SSO. The upgrade runs as one step with install add file activate issu commit, or in three steps of add, activate and commit with an abort timer for rollback.
  • Which redundancy mode do two C9600-SUP-1 modules use in a C9606R?

    Two C9600-SUP-1 modules run SSO, which is the default and only redundancy mode. The active supervisor programs the hardware on both modules, and Cisco lists a switchover time under 5 ms. The second module orders as C9600-SUP-1/2, and the spare PID for a failed module is C9600-SUP-1=.
  • Can the RJ-45 and SFP+ management ports of C9600-SUP-1 be used together?

    No. C9600-SUP-1 offers an RJ-45 10/100/1000 port, Gi0/0 in Mgmt-vrf and enabled by default, or an SFP+ port at 1G or 10G, and only one of them works at a time. The two consoles, RJ-45 at 9600 baud and mini USB, also work one at a time.
  • How much power does C9600-SUP-1 draw at maximum?

    C9600-SUP-1 draws up to 775 W at maximum, per the Catalyst 9600 supervisor installation note. Count that draw once for each installed supervisor when you size the power supplies of a C9606R that holds two engines.
  • Which SSD PIDs can be added to C9600-SUP-1?

    C9600-SUP-1 takes an optional SATA SSD in C9K-F2-SSD-240GB, C9K-F2-SSD-480GB or C9K-F2-SSD-960GB, with the supervisor ordering at 960 GB by default. The SSD supports container-based application hosting, and each of the three PIDs also exists as a spare.
  • What must be removed from the C9606R supervisor slot before installing C9600-SUP-1?

    Remove the C9606-SLOT-BLANK= blank panel from supervisor slot 3 or 4 before installing C9600-SUP-1. The same step applies to C9600X-SUP-2. The blank covers an unused supervisor slot, and the engine fits only the two dedicated supervisor slots of the Catalyst 9600 chassis.
  • Which SDM templates does C9600-SUP-1 offer and what does the NAT template set?

    C9600-SUP-1 offers Distribution, Core and NAT templates, with Core as the default. The NAT template sets security ACL entries to 20,000, QoS ACL entries to 8,000 and PBR/NAT entries to 15,500. The SD-Access template is not listed for this engine.
  • Which license tier applies to C9600-SUP-1?

    C9600-SUP-1 uses Network Advantage licensing, which is bundled, together with the DNA Advantage and Catalyst Advantage subscriptions. Both Catalyst 9600 supervisors follow the same Network Advantage and DNA Advantage model, so the license choice does not depend on which engine sits in the chassis.

Warranty

Visit How to Pay page for more information

FREE NETWORK TOOLS

Verify, plan, and comparewith confidence

Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.

DataSheet Downloads

  • C9600-SUP-1 Datasheet