Full Official English Description – Cisco Catalyst C9300L-24P-4G-A

1. Product Overview

2. Port Hardware Specifications

• Downlink Copper Ports: 24 × 10/100/1000BASE-T RJ45 ports with full IEEE 802.3at PoE+ support, auto-MDI/MDIX and auto-speed negotiation; each port delivers up to 30W DC power
• Fixed Integrated Uplinks: 4 built-in Gigabit SFP slots, compatible with 1000BASE-SX, LX, ZX, BiDi and CWDM SFP transceivers for multi-mode and long-distance single-mode fiber upstream links
• Stacking Interfaces: Dedicated rear StackWise-320 stacking ports delivering 320 Gbps bidirectional stacking bandwidth; supports stacking of up to 8 physical switches consolidated into a single logical switching domain
• Management Interfaces:
  1 × RJ45 serial console port, 1 × USB Type-A console port
  1 × 1G out-of-band management Ethernet port
  1 × USB 3.0 storage port for offline firmware upgrades, log export and local configuration backup
• Onboard Memory & Storage: 8 GB DDR4 DRAM, 16 GB internal flash memory

3. Switching & Forwarding Performance

• Standalone Full-Duplex Switching Capacity: 56 Gbps
• Standalone Line-Rate Forwarding Rate: 41.66 Mpps
• Aggregated Full Stack Bandwidth: Up to 376 Gbps
• Stack Aggregated Forwarding Throughput: 279.76 Mpps
• MAC Address Table Capacity: 32,000 MAC forwarding entries
• IPv4 Routing Table: 32,000 route entries (24,000 direct routes + 8,000 indirect routes)
• IPv6 Routing Table: 16,000 route entries
• Multicast Group Table: 8,000 multicast group entries
• Shared Hardware Packet Buffer: 16 MB buffer to absorb bursty wireless, video and IoT traffic
• Hardware ACL Scale: 5,120 ingress rules + 5,120 egress ACL rules
• Flexible NetFlow Flow Table: 64,000 flow entries
• Jumbo Frame Support: Up to 9198 bytes
• Maximum Switched Virtual Interfaces (SVIs): 1000 SVIs for inter-VLAN routing

4. Power & Thermal Architecture

• Power Supply Support: 1 or 2 hot-swappable Platinum-efficiency AC power supplies with OIR (Online Insertion and Removal); factory default ships with single 715W AC PSU (PWR-C1-715WAC-P)
• PoE+ Power Budget Scaling:
  Single 715W PSU: 445W total PoE+ power allocation for 24×30W PoE+ endpoints
  Dual redundant high-wattage PSUs: Expanded PoE budget for full-power simultaneous operation of all PoE ports
• StackPower Technology: Cross-stack power resource pooling in ring topology, dynamic PoE load balancing and N+1 power redundancy across all stack members
• Cooling System: 3 field-replaceable variable-speed hot-swap fans with redundant cooling design, low acoustic noise suitable for office rack room deployment
• Universal Input Voltage: 100–240V AC, 50/60Hz mains input
• Typical Idle Power Consumption: ~88W under standard operating load

5. Stacking & High Availability Technology

• StackWise-320: 320 Gbps high-speed stacking backplane, sub-50ms traffic convergence upon stack member hardware failure
• SSO/NSF: Stateful Switchover and Nonstop Forwarding to eliminate service interruption during stack supervisor role failover
• Mixed Stack Compatibility: Fully inter-stackable with all Catalyst 9300L series switches (T/P/PF/UXG fixed-port variants); all stack units are managed under one unified logical domain on DNA Center
• Cross-stack EtherChannel, Flexlink+ and Extended Fast Software Upgrade supported to enhance stack-level service resiliency

6. Hardware-Accelerated Enterprise Security (Full Feature Set Unlocked by Network Advantage)

• MACsec 256-bit AES hardware link encryption supported on all PoE+ copper downlinks and SFP fiber uplink ports
• Encrypted Traffic Analytics (ETA) for AI-powered hidden malware detection within encrypted application flows
• Trustworthy Systems secure boot, runtime integrity verification and digital firmware authenticity validation via onboard Trust Anchor Module
• TrustSec SGT group-based microsegmentation for end-to-end SD-Access fabric policy enforcement
• Endpoint Authentication Suite: IEEE 802.1X, MAB, captive WebAuth multi-factor access control
• Layer 2 Threat Mitigation: Dynamic ARP Inspection (DAI), DHCP Snooping, IP Source Guard, BPDU Guard, broadcast/multicast storm suppression
• Secure Management Transport: SSH, HTTPS, SNMPv3, encrypted NETCONF/YANG streaming telemetry channels
• On-box containerized application hosting, Cisco Umbrella DNS filtering and ThousandEyes synthetic monitoring native support

7. Layer 2 & Layer 3 Protocol Support

Full Layer 2 Feature Set

Complete Advanced Layer 3 Routing Suite (Exclusive to -A License Tier)

8. Software & Cisco DNA Licensing Ecosystem

• Operating System: Cisco IOS XE universal switch image (17.x release train)
• Preinstalled Perpetual License Tier: Cisco DNA Network Advantage
  Unlocks complete enterprise feature portfolio: SD-Access fabric architecture, ETA malware analytics, TrustSec microsegmentation, full BGP/PBR advanced routing, containerized application hosting, ThousandEyes synthetic network monitoring, advanced streaming telemetry and full Layer 3 protocol suite
• Supported Management Interfaces:
  Local CLI via console/SSH, embedded web UI, Cisco Catalyst Center (DNA Center), Cisco Prime Infrastructure, Zero-Touch Provisioning (ZTP)
• Programmability: RESTCONF, NETCONF/YANG streaming telemetry, on-box Python guest shell, container hosting for local automation workloads

9. Physical & Environmental Specifications

• Form Factor: 1 Rack Unit (1RU) standard 19-inch EIA rack-mount chassis
• External Dimensions: 445 mm (W) × 410 mm (D) × 44 mm (H) / 17.5 × 16.1 × 1.73 inches
• Chassis Weight (single 715W PSU installed): 7.1 kg (15.65 lbs)
• Operating Ambient Temperature: 0°C ~ +45°C
• Storage Temperature: -40°C ~ +70°C
• Operating Humidity: 5% – 90% non-condensing
• Typical MTBF Rating: 208,500 hours under standard factory operating conditions
• Compliance Certifications: UL, CSA, CE, FCC Class A, ICES-003, RoHS, TAA, ENERGY STAR certified

10. Model Naming Breakdown

• C9300L: Catalyst 9300 Lite cost-optimized fixed-uplink stackable switching platform equipped with StackWise-320
• 24P: 24-port 10/100/1000BASE-T IEEE 802.3at PoE+ copper downlinks
• 4G: Four fixed Gigabit SFP fiber uplink ports
• A: Pre-activated Cisco DNA Network Advantage perpetual full-feature license tier

11. Typical Deployment Scenarios

1. Small & medium enterprise office wired access powering IP phones, entry-level Wi-Fi 5/6 APs and low-power PoE surveillance cameras with Gigabit fiber uplinks to distribution layers
2. Small branch office access layer combining wired workstations and wireless APs, managed centrally via DNA Center with full fabric segmentation capability
3. Education classrooms and training labs with PoE IP cameras, VoIP handsets and wireless access points
4. Light-density smart building IoT aggregation for access control panels, low-power lighting sensors and digital signage
5. SD-Access fabric access and intermediate node deployments requiring full TrustSec segmentation, BGP routing and encrypted traffic threat analytics

Key Distinction Note

• -A (Network Advantage): On-prem DNA Center managed, perpetual full-feature license with advanced routing, ETA analytics and SD-Access fabric support
• -E (Network Essentials): On-prem DNA Center managed, baseline perpetual license with limited Layer 3 routing and no advanced security/fabric features, lower upfront procurement cost
• -M (Meraki Cloud-Managed): Cloud subscription-based orchestration, split Meraki Enterprise/Advanced feature tiers without Cisco DNA perpetual licenses