Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Cisco Catalyst 9800-80 Wireless Controller Data Sheet

Data Sheet

Available Languages

Download Options

  • PDF
    (1.3 MB)
    View with Adobe Reader on a variety of devices
Updated:February 27, 2020

Available Languages

Download Options

  • PDF
    (1.3 MB)
    View with Adobe Reader on a variety of devices
Updated:February 27, 2020


Product overview

Cisco Catalyst 9800-80 Wireless Controller

Figure 1.               

Cisco Catalyst 9800-80 Wireless Controller

Built from the ground-up for the Intent-based networking and Cisco DNA, Cisco Catalyst 9800 Series Wireless Controllers are Cisco IOS® XE based and integrate the RF excellence of Cisco Aironet® access points creating the best-in-class wireless experience for your evolving and growing organization. The Cisco Catalyst 9800 Series Wireless Controllers are built on an open and programmable architecture with built-in security, streaming telemetry and rich analytics.

The Cisco Catalyst 9800 Series Wireless Controllers are built on the three pillars of network excellence—always on, secure, and deployed anywhere—which strengthen the network by providing the best wireless experience without compromise, while saving time and money.

The Cisco® Catalyst® 9800-80 is a modular wireless controller with optional 100 Gigabit Ethernet (GE) modular uplinks and seamless software updates for large enterprises and campuse.

The Cisco Catalyst 9800-80 is feature rich and enterprise ready to power your business-critical operations and transform end-customer experiences:

     High availability and seamless software updates, enabled by hot patching, keep your clients and services always on in planned and unplanned events.

     Secure air, devices, and users with the Cisco Catalyst 9800-80. Wireless infrastructure becomes the strongest first line of defense with Cisco Encrypted Traffic Analytics (ETA) and Software-Defined Access (SD-Access). The controller comes with built-in security: secure boot, runtime defenses, image signing, integrity verification, and hardware authenticity.

     Built on a modular operating system, the 9800-80 features open and programmable APIs that enable automation of day-0 to day-N network operations. Model-driven streaming telemetry provides deep insights into the health of your network and clients.


Table 1.           Key features



Maximum number of access points

Up to 6000

Maximum number of clients


Maximum throughput

Up to 80 Gbps

Maximum WLANs


Maximum VLANs


Max site tags


Max Flex APs per site


Max policy tags


Max RF tags


Max RF profiles


Max policy profiles


Max flex profiles


Fixed uplinks

8x 10 GE or 6x 10 GE + 2x 1 GE SFP+/SFP

Modular uplinks (optional)

The supported uplink modules are:


The uplink modules are hot-swappable.

Supports 10 GE, 40 GE, and 100 GE QSFP transceivers

Redundant power supply

AC or DC power supply

Maximum power consumption with modules


Deployment modes

Centralized, Cisco FlexConnect®, and Fabric Wireless (SD-Access)

Form factor



Smart License enabled

Operating system

Cisco IOS XE


Cisco DNA Center, Cisco Prime® Infrastructure, integrated WebUI, and third party (open standards APIs)*


AireOS-based controllers*

Policy engine

Cisco Identity Services Engine (ISE)*

Location platform

Cisco Connected Mobile Experiences (CMX)/Cisco DNA Spaces*

Access points

Aironet 802.11ac Wave 1 and Wave 2 access points, Catalyst 9100 802.11ax access points

* For information on compatibility: Compatibility Guide  

Always on

Seamless software updates enable faster resolution of critical issues, introduction of new access points with zero downtime, and flexible software upgrades. Stateful switchover (SSO) with 1:1 active standby and N+1 redundancy keeps your network, services, and clients always on, even in unplanned events.


Secure air, devices, and users with the Cisco Catalyst 9800-80 Wireless Controller. Wireless infrastructure becomes the strongest first line of defense with ETA and SD-Access. The controller comes with built-in security: secure boot, runtime defenses, image signing, integrity verification, and hardware authenticity.

Open and programmable

The controller is built on the Cisco IOS XE operating system, which offers a rich set of open standards-based programmable APIs and model-driven telemetry that provide an easy way to automate day-0 to day-N network operations.



Physical dimensions

Table 2.           Physical dimensions




17.3 inches (43.94 cm)


20.5 inches (52.07 cm)


3.47 inches (8.81 cm)


31.5 lb (14.29 kg)

Front panel

Front panel

Figure 2.               

Front panel

Front panel components

Figure 3.               

Front panel components

10 GE/1 GE ports

Figure 4.               

10 GE/1 GE ports

Table 3.           Descriptions of front-panel components




Power supply (PEM 0)


Power supply (PEM 1)


Power (PWR) switch


PWR: Power LED


SYS: System LED


ALM: Alarm LED


HA: High-availability LED


SP: RJ-45 10/100/1000 management Ethernet port


RP: RJ-45 10/100/1000 redundancy Ethernet port


RP: 1 GE SFP port (the only SFPs supported on the RP port are GLC-SX-MMD and GLC-LH-SMD)


USB ports 0 and 1


Fixed: 6x 10 GE and 2x 1 GE or 8x 10 GE


CON: RJ-45 compatible console port


LINK: RJ-45 connector LED


CON: Mini USB console port


SSD: SSD activity LED


SSD access


Modular uplink


Table 4.           Ports and their purposes



1x RJ-45 console port

Console port for out-of-band management

1x USB 3.0 console port

Console port for out-of-band management

2x USB 3.0 ports

USB 3.0 ports for plugging in external memory

1x RJ-45 management port

Management port for out-of-band management. Also known as service port.

1x RJ-45 redundancy port

Redundancy port used for SSO

1x SFP Gigabit Ethernet redundancy port

  Redundancy port used for SSO; works with Cisco supported SFPs (GLC-LH-SMD and GLC-SX-MMD) for RP port

Fixed uplink: 10 GE SFP+/1 GE SFP ports

The ports are fixed uplinks, which can be used as 8x10 GE SFP+ or 6x 10 GE plus 2x 1 GE

Modular uplink

The supported uplink modules are:


The uplink modules are hot-swappable.

Supports 10 GE, 40 GE, and 100 GE QSFP transceivers

Front panel LEDs

Table 5.           Front panel LEDs







Green if all power rails are within spec




On: IOS has boot complete

Blinking: IOS boot in progress


On: System crash

Blinking: Secure boot failure

Off: ROMMON boot




On: ROMMON boot complete

Blinking: System upgrade in progress


On: ROMMON boot and SYSTEM bootup

Blinking: Temperature error and secure boot failure




On: HA active

Blinking: HA standby hot


Slow blink: Booted with HA standby cold

Fast blink: HA maintenance




When LED is lit, USB console is enabled (RJ-45 console is disabled)

10/100/1000 RJ45 I/F



Solid green indicates link

10/100/1000 RJ45 I/F



Flashing green indicates activity

SSD Activity



Indicates active use of the hard disk SSD memory devices in the unit

Rear panel

Rear panel

Figure 5.               

Rear panel

     The chassis has a front-to-rear airflow.

     Four internal fans draw cooling air in through the front of the chassis and across the internal components to maintain an acceptable operating temperature.

     The fans are located at the rear of the chassis.

     The fans are numbered from 0 to 3, right to left.


The 9800-80 controller ships with redundant power supply units, either AC or DC, based on the customer’s choice.

The Power Entry Module (PEM) provides redundant power to the system, and the 9800-80 can operate continuously with only a single PEM installed. The PEMs are hot-swappable, and replacement of a single PEM can be made without power interruption to the system. All external connections to the PEMs are made from the rear panel of the chassis, and they are removed or inserted from the rear. The main power switch for the unit is located directly next to the PEMs on the rear of the chassis.

Table 6.           Power supply options

Power supply condition

Green (OK) LED status

Amber (Fail) LED status

No AC power to all power supplies



Power supply failure (includes over voltage, over current, over temperature, and fan failure)


Red for power supply failure

Amber for fan failure

Power supply warning events in which the power supply continues to operate (high temperature, high power, and slow fan)


1 Hz blinking

Note:       Redundancy is supported with the same power supply types.

SFPs supported

     All 1 GE, 10 GE, 40 GE, and 100 GE ports can be configured independently.

     Online Insertion and Removal (OIR) for SFP, SFP+, and QSFP.

     Modules are hot-swappable.

Table 7.           SFPs supported


Modules supported

Small Form-Factor Pluggable (SFP)







Enhanced SFP (SFP+)











DWDM-SFP10G-30.33 - DWDM-SFP10G-61.41













Cisco IOS XE opens a completely new paradigm in network configuration, operation, and monitoring through network automation. Cisco’s automation solution is open, standards-based, and extensible across the entire lifecycle of a network device. The various mechanisms that bring about network automation are outlined below, based on a device lifecycle.

     Automated device provisioning: This is the ability to automate the process of upgrading software images and installing configuration files on Cisco access points when they are being deployed in the network for the first time. Cisco provides turnkey solutions such as Plug and Play (PnP) that enable an effortless and automated deployment.

     API-driven configuration: Modern wireless controllers such the Cisco Catalyst 9800-80 Wireless Controller support a wide range of automation features and provide robust open APIs over Network Configuration Protocol (NETCONF) using YANG data models for external tools, both off-the-shelf and custom built, to automatically provision network resources.

     Granular visibility: Model-driven telemetry provides a mechanism to stream data from a wireless controller to a destination. The data to be streamed is driven through subscription to a data set in a YANG model. The subscribed data set is streamed out to the destination at configured intervals. Additionally, Cisco IOS XE enables the push model, which provides near-real-time monitoring of the network, leading to quick detection and rectification of failures.

     Seamless software upgrades and patching: To enhance OS resilience, Cisco IOS XE supports patching, which provides fixes for critical bugs and security vulnerabilities between regular maintenance releases. This support allows customers to add patches without having to wait for the next maintenance release.

Always on

     High availability: Stateful switchover with 1:1 active standby and N+1 redundancy keeps your network, services, and clients always on, even in unplanned events.

     Software Maintenance Upgrades (SMUs) with hot patching: Patching allows for a patch to be installed as a bug fix without bringing down the entire network and eliminates the need to requalify an entire software image. The SMU is a package that can be installed on a system to provide a patch fix or security resolution to a released image. SMUs allow you to address the network issue quickly while reducing the time and scope of the testing required. The Cisco IOS XE platform internally validates the SMU compatibility and does not allow you to install incompatible SMUs. All SMUs are integrated into the subsequent Cisco IOS XE Software maintenance releases.

     Intelligent rolling access point upgrades and seamless multisite upgrades: The Cisco Catalyst 9800-80 Wireless Controller comes equipped with intelligent rolling access point upgrades to simplify network operations. Multisite upgrades can now be done in stages, and access points can be upgraded intelligently without restarting the entire network.


     Encrypted Traffic Analytics (ETA): ETA is a unique capability for identifying malware in encrypted traffic coming from the access layer. Since more and more traffic is being encrypted, the visibility this feature provides related to threat detection is critical for keeping your network secure at different layers.

     Trustworthy systems: Cisco Trust Anchor Technologies provide a highly secure foundation for Cisco products. With the Cisco Catalyst 9800-80, these trustworthy systems help assure hardware and software authenticity for supply chain trust and strong mitigation against man-in-the-middle attacks on software and firmware. Trust Anchor capabilities include:

     Image signing: Cryptographically signed images provide assurance that the firmware, BIOS, and other software are authentic and unmodified. As the system boots, its software signatures are checked for integrity.

     Secure boot: Cisco Secure Boot technology anchors the boot sequence chain of trust to immutable hardware, mitigating threats against a system's foundational state and the software that is to be loaded, regardless of a user's privilege level. It provides layered protection against the persistence of illicitly modified firmware.

     Cisco trust anchor module: A tamper-resistant, strong cryptographic, single-chip solution hardware uniquely identifies the product so that its origin can be confirmed to Cisco, providing assurance that the product is genuine.

Flexible netFlow

     Flexible NetFlow (FNF): Cisco IOS FNF is the next generation in flow visibility technology, allowing optimization of the network infrastructure, reducing operating costs, and improving capacity planning and security incident detection with increased flexibility and scalability.

Application visibility and control

     Next-Generation Network-Based Application Recognition (NBAR2): NBAR2 enables advanced application classification techniques, with up to 1400 predefined and well-known application signatures and up to 150 encrypted applications on the Cisco Catalyst 9800-80. Some of the most popular applications included are Skype, Office 365, Microsoft Lync, Cisco Webex®, and Facebook. Many others are already predefined and easy to configure. NBAR2 provides the network administrator with an important tool to identify, control, and monitor end-user application usage while helping ensure a quality user experience and securing the network from malicious attacks. It uses FNF to report application performance and activities within the network to any supported NetFlow collector, such as Cisco Prime, Stealthwatch®, or any compliant third-party tool.

Quality of service

     Superior Quality of Service (QoS): QoS technologies are tools and techniques for managing network resources and are considered the key enabling technologies for the transparent convergence of voice, video, and data networks. QoS on the Cisco Catalyst 9800-80 consists of classification of traffic based on packet data as well as application recognition and traffic control actions such as dropping, marking and policing. A modular QoS command-line framework provides consistent platform-independent and flexible configuration behavior. The 9800-80 also supports policies at two levels of target: BSSID as well as client. Policy assignment can be granular down to the client level.

Smart operation

     Bluetooth ready: The Cisco Catalyst 9800-80 has hardware support to connect a Bluetooth dongle to the controller, enabling you to use this wireless interface as a management port. This port functions as an IP management interface and can be used for configuration and troubleshooting using WebUI or the Command-Line Interface (CLI), and to transfer images and configurations.

     WebUI: WebUI is an embedded GUI-based device-management tool that provides the ability to provision the device, simplifying device deployment and manageability and enhancing the user experience. WebUI comes with the default image. There is no need to enable anything or install any license on the device. You can use WebUI to build a day-0 and day-1 configuration and from then on monitor and troubleshoot the device without having to know how to use the CLI.


Table 8.           Specifications





IEEE 802.11a, 802.11b, 802.11g, 802.11d, WMM/802.11e, 802.11h, 802.11n, 802.11k, 802.11r, 802.11u, 802.11w, 802.11ac Wave 1 and Wave 2, 802.11ax


Wired, switching, and routing

IEEE 802.3 10BASE-T, IEEE 802.3u 100BASE-TX, 1000BASE-T, 1000BASE-SX, 1000-BASE-LH, IEEE 802.1Q VLAN tagging, IEEE 802.1AX Link Aggregation


Data standards

  RFC 768 User Datagram Protocol (UDP)
  RFC 791 IP
  RFC 2460 IPv6
  RFC 792 Internet Control Message Protocol (ICMP)
  RFC 793 TCP
  RFC 826 Address Resolution Protocol (ARP)
  RFC 1122 Requirements for Internet Hosts
  RFC 1519 Classless Interdomain Routing (CIDR)
  RFC 1542 Bootstrap Protocol (BOOTP)
  RFC 2131 Dynamic Host Configuration Protocol (DHCP)
  RFC 5415 Control and Provisioning of Wireless Access Points (CAPWAP) Protocol
  RFC 5416 CAPWAP Binding for 802.11


Security standards

  Wi-Fi Protected Access (WPA)
  IEEE 802.11i (WPA2, RSN)
  Wi-Fi Protected Access 3 (WPA3)
  RFC 1321 MD5 Message-Digest Algorithm
  RFC 1851 Encapsulating Security Payload (ESP) Triple DES (3DES) Transform
  RFC 2104 HMAC: Keyed-Hashing for Message Authentication
  RFC 2246 TLS Protocol Version 1.0
  RFC 2401 Security Architecture for the Internet Protocol
  RFC 2403 HMAC-MD5-96 within ESP and AH
  RFC 2404 HMAC-SHA-1-96 within ESP and AH
  RFC 2405 ESP DES-CBC Cipher Algorithm with Explicit IV
  RFC 2407 Interpretation for Internet Security Association Key Management Protocol (ISAKMP)
  RFC 2409 Internet Key Exchange (IKE)
  RFC 2451 ESP CBC-Mode Cipher Algorithms
  RFC 3280 Internet X.509 Public Key Infrastructure (PKI) Certificate and Certificate Revocation List (CRL) Profile
  RFC 4347 Datagram Transport Layer Security (DTLS)
  RFC 5246 TLS Protocol Version 1.2


Encryption standards

  Static Wired Equivalent Privacy (WEP) RC4 40, 104 and 128 bits
  Advanced Encryption Standard (AES): Cipher Block Chaining (CBC), Counter with CBC-MAC (CCM), Counter with CBC Message Authentication Code Protocol (CCMP)
  Data Encryption Standard (DES): DES-CBC, 3DES
  Secure Sockets Layer (SSL) and Transport Layer Security (TLS): RC4 128-bit and RSA 1024- and 2048-bit
  802.1AE MACsec encryption


Authentication, Authorization, and Accounting (AAA)

  IEEE 802.1X
  RFC 2548 Microsoft Vendor-Specific RADIUS Attributes
  RFC 2716 Point-to-Point Protocol (PPP) Extensible Authentication Protocol (EAP)-TLS
  RFC 2865 RADIUS Authentication
  RFC 2866 RADIUS Accounting
  RFC 2867 RADIUS Tunnel Accounting
  RFC 2869 RADIUS Extensions
  RFC 3576 Dynamic Authorization Extensions to RADIUS
  RFC 5176 Dynamic Authorization Extensions to RADIUS
  RFC 3579 RADIUS Support for EAP
  RFC 3580 IEEE 802.1X RADIUS Guidelines
  RFC 3748 Extensible Authentication Protocol (EAP)
  Web-based authentication
  TACACS support for management users


Management standards

  Simple Network Management Protocol (SNMP) v1, v2c, v3
  RFC 854 Telnet
  RFC 1155 Management Information for TCP/IP-based Internets
  RFC 1156 MIB
  RFC 1157 SNMP
  RFC 1350 Trivial File Transfer Protocol (TFTP)
  RFC 1643 Ethernet MIB
  RFC 2030 Simple Network Time Protocol (SNTP)
  RFC 2616 HTTP
  RFC 2665 Ethernet-Like Interface Types MIB
  RFC 2674 Definitions of Managed Objects for Bridges with Traffic Classes, Multicast Filtering, and Virtual Extensions
  RFC 2819 Remote Monitoring (RMON) MIB
  RFC 2863 Interfaces Group MIB
  RFC 3164 Syslog
  RFC 3414 User-Based Security Model (USM) for SNMPv3
  RFC 3418 MIB for SNMP
  RFC 3636 Definitions of Managed Objects for IEEE 802.3 MAUs
  RFC 4741 Base NETCONF protocol
  RFC 4742 NETCONF over SSH
  RFC 6242 NETCONF over SSH
  RFC 5277 NETCONF event notifications
  RFC 5717 Partial Lock Remote Procedure Call
  RFC 6243 With-Defaults capability for NETCONF
  RFC 6020 YANG
  Cisco private MIBs


Management interfaces

  Web-based: HTTP/HTTPS
  Command-line interface: Telnet, Secure Shell (SSH) Protocol, serial port


Hard Disk Drives (HDD)

  SATA solid-state drive (SSD)
  240 GB of memory


Environmental conditions supported

Operating temperature:

  Normal: 0° to 45° C (32° to 113°F)
  Short term: 5° to 50° C (41° to 122°F)

Nonoperating temperature:

  -40° to 65° C (-104° to 149°F)

Operating humidity:

  Normal: 5% to 85% noncondensing
  Short term: 5% to 90% noncondensing

Nonoperating temperature humidity:

  5% to 93% at 82°F (28°C)

Operating altitude:

  Appliance operating: 0 to 3000 m (0 to 10,000 ft)
  Appliance nonoperating: 0 to 12,192 m (0 to 40,000 ft)

Electrical input:

  AC input frequency range: 47 to 63 Hz
  AC input range: 90 to 264 VAC with AC PEM
  DC input range: -40 to -72 VDC with DC PEM

Maximum power with modules: 600W

Heat dissipation: 2047 BTU/hr

Sound power level measure:

  A-weighted sound power level is 70.5 LpAm(dBA) @ 27C nominal operation


Regulatory compliance


  UL/CSA 60950-1
  IEC/EN 60950-1
  AS/NZS 60950.1
  CAN/CSA-C22.2 No. 60950-1



EMC – Emissions:

  FCC 47CFR15
  CISPR 22
  EN55022/EN55032 (EMI-1)
  KN 32 (EMI-2)

Class A

EMC – Emissions:

  EN61000-3-2 Power Line Harmonics (EMI-3)
  EN61000-3-3 Voltage Changes, Fluctuations, and Flicker (EMI-3)


EMC – Immunity:

  IEC/EN61000-4-2 Electrostatic Discharge Immunity
  IEC/EN61000-4-3 Radiated Immunity
  IEC/EN61000-4-4 EFT-B Immunity (AC Power Leads)
  IEC/EN61000-4-4 EFT-B Immunity (DC Power Leads)
  IEC/EN61000-4-4 EFT-B Immunity (Signal Leads)
  IEC/EN61000-4-5 Surge AC Port
  IEC/EN61000-4-5 Surge DC Port
  IEC/EN61000-4-5 Surge Signal Port
  IEC/EN61000-4-6 Immunity to Conducted Disturbances
  IEC/EN61000-4-8 Power Frequency Magnetic Field Immunity
  IEC/EN61000-4-11 Voltage Dips, Short Interruptions, and Voltage Variations
  K35 (EMI-2)




  EN 300 386 Telecommunications Network Equipment (EMC) (EMC-3)
  EN55022 Information Technology Equipment (Emissions)
  EN55024/CISPR 24 Information Technology Equipment (Immunity)
  EN50082-1/EN61000-6-1 Generic Immunity Standard (EMC-4)


Software requirements

The Cisco Catalyst 9800-80 runs on Cisco IOS XE Software version 16.10.1 or later. This software release includes all the features listed earlier in the Platform Benefits section.

Table 9.           Minimum software requirements



Minimum software requirement


Cisco Catalyst 9800-80 Wireless Controller

Cisco IOS XE Software Release 16.10.1


The Cisco Catalyst 9800 Series Wireless Controllers require mandatory Smart Licensing. This provides ease of use for Cisco DNA license management, consumption, and tracking.

No licenses are required to boot up a Cisco Catalyst 9800 Series Wireless Controller. However, in order to connect any access points to the controller, Cisco DNA licenses are required. Every access point connecting to Catalyst 9800 requires a Cisco DNA subscription license to be entitled to connect to the controller. See Figure 6.

Related image, diagram or screenshot

Figure 6.               

The APs connecting to Catalyst 9800 has a new and simplified licensing package

They can support 3 types of Cisco DNA license: Cisco DNA Essentials, Cisco DNA Advantage and Cisco DNA Premier:

The Cisco DNA licenses provide Cisco innovations on the AP. The Cisco DNA license also includes the Network Essentials and Network Advantage licensing options which cover wireless fundamentals such as 802.1x authentication, QoS, PnP etc, telemetry and visibility, SSO, as well as security controls. These Network essentials and Network advantage components are perpetual and is valid till the life of the AP.

Cisco DNA subscription licenses have to be purchased for a 3-, 5-, or 7-year subscription term. However. upon expiry of Cisco DNA license, Cisco DNA features will expire, whereas network essentials and network advantage features will remain.

Here is a brief description of what each base and add-on package includes:

Wireless Subscription Offer Structure


Catalyst Wireless License Packaging

Note:       It is not required to deploy Cisco DNA Center just to use one of the above packages.

The following table shows the features included in the Network Advantage and Network Essentials package.

Table 10.             Features included in the Network Advantage and Network Essentials packages


Network Essentials

Network Advantage

Essential capabilities

  802.1x authentications, Guest access, device onboarding, Infra and client IPv6, ACLs, QoS, Videostream, Smart defaults, RRM, Spectrum intelligence, BLE, Zigbee, USB, TrustSec SXP, AP and Client SSO, Dynamic QoS, Analytics, ADP, OpenDNS, mDNS, IPSec, Rogue Management and Detection on Controller, Mobility

Optimized RF

  FRA, Client link, CleanAir Advanced
  NG-HDX, Predictive/Proactive RRM

Internet of Things (IoT) optimized

  Identity Pre-Shared Keys (PSK), enhanced device profilers

DevOPS integration

  PnP Agent
  Yang Data Models
  GuestShell (On-Box Python) *

Federal certifications

  Federal Information Processing Standards (FIPS), CC, UCAPL, USGV6

Telemetry and visibility

  Model-driven Telemetry
  NETCONF dial-in, gRPC dial out *

High availability and resiliency (advanced)

  ISSU (Beta), Process Restart
  Rolling AP Upgrades
  Patching (CLI)
  AP service pack/AP device pack

Flexible network segmentation


The following table shows the features included in the Cisco DNA Advantage and Cisco DNA Essentials packages.

Table 11.             Features included in the Cisco DNA Advantage and Cisco DNA Essentials packages


Cisco DNA Essentials

Cisco DNA Advantage/Premier

Base automation

Plug and Play, network site design and device provisioning

Element management

Software Image management, network topology and discovery, AVC

Base assurance

Health dashboard (network, client, and application), AP floor map and coverage map, predefined reports


Flexible NetFlow

Base security

Cisco DNA Center management and visibility for Rogue detection

Advanced automation

Location plug and play

Automated ISE integration for guest

3rd party API integration

Assurance and Analytics

Guided remediation

Apple iOS insights

Proactive issue detection

  Aironet active sensor tests
  Intelligent capture
  Client location heatmaps
  Spectrum analyzer

Application performance (Packet Loss, Latency and Jitter),

App 360, AP 360, Client 360 and WLC 360

Custom Reports*

Docker Container support*

Enhanced security and IoT

Encrypted traffic analytics, Advanced WIPS (Detailed Signatures)**

Policy-based workflows

EasyQoS configuration, EasyQoS monitoring, Policy based automation

Element management

Patch lifecycle management

Advanced Security

Adaptive WIPS

* Future
** Future in Cisco DNA Center

Two modes of licensing are available:

     SL: Smart Licensing simplifies and adds flexibility to licensing. It is:

     Simple: Procure, deploy, and manage licenses easily. Devices self-register, removing the need for Product Activation Keys (PAKs).

     Flexible: Pool license entitlements in a single account. Move licenses freely through the network, wherever you need them.

     Smart: Manage your license deployments with real-time visibility of ownership and consumption.

     SLR mode

     Specific License Reservation (SLR) is a feature used in highly secure networks. It provides a method for customers to deploy a software license on a device (Product Instance) without communicating usage information to Cisco. There will be no communication with Cisco or a satellite. The licenses will be reserved for every controller. It will be node-based licensing.

Four levels of license are supported on the Cisco Catalyst 9800 Series Wireless Controllers. The controllers can be configured to function at any one of the four levels.

     Cisco DNA Essential: At this level the Cisco DNA Essentials feature set will be supported.

     Cisco DNA Advantage: At this level the Cisco DNA Advantage feature set will be supported.

     NE: At this level the Network Essentials feature set will be supported.

     NA: At this level the Network Advantage feature set will be supported.

     For customers who purchase Cisco DNA Essentials, Network Essentials will be supported and will continue to function even after term expiration. And for customers who purchase Cisco DNA Advantage, Network Advantage will be supported and will continue to function even after term expiration.

     Initial bootup of the controller will be at the Cisco DNA Advantage level.

For questions, contact the Cisco Catalyst 9800 Series Wireless Controllers Licensing mailer group at ask-catalyst9800licensing

Managing licenses with Smart Accounts

Creating Smart Accounts by using the Cisco Smart Software Manager (CSSM) enables you to order devices and licensing packages and also manage your software licenses from a centralized website. You can set up the Smart Account to receive daily email alerts and to be notified of expiring add-on licenses that you want to renew. A Smart Account is mandatory for Catalyst 9800 controller. For more information on Smart Account refer to https://www.cisco.com/go/smartaccounts.


Find warranty information on Cisco.com at the Product Warranties page.

Cisco 1-year limited hardware warranty terms

The following are terms applicable to your hardware warranty. Your embedded software is subject to the Cisco EULA (link available below) and/or any SEULA or specific software warranty terms for additional software products loaded on the device.

Duration of hardware warranty: One (1) year.

Replacement, repair, or refund procedure for hardware: Cisco or its service center will use commercially reasonable efforts to ship a replacement part within ten (10) working days after receipt of the Return Materials Authorization (RMA) request. Actual delivery times may vary depending on customer location.

Cisco reserves the right to refund the purchase price as its exclusive warranty remedy.

Cisco environmental sustainability

Information about Cisco’s environmental sustainability policies and initiatives for our products, solutions, operations, and extended operations or supply chain is provided in the “Environment Sustainability” section of Cisco’s Corporate Social Responsibility (CSR) Report.

Reference links to information about key environmental sustainability topics (mentioned in the “Environment Sustainability” section of the CSR Report) are provided in the following table:

Sustainability topic


Information on product material content laws and regulations


Information on electronic waste laws and regulations, including products, batteries, and packaging

WEEE compliance

Cisco makes the packaging data available for informational purposes only. It may not reflect the most current legal developments, and Cisco does not represent, warrant, or guarantee that it is complete, accurate, or up to date. This information is subject to change without notice.

Ordering information

Table 12.             Ordering Information


Product ID


Wireless controller


Cisco Catalyst 9800-80 Wireless Controller


Cisco Catalyst 9800 Series Wireless Controller DTLS License

Accessories, spares


Cisco Catalyst Wireless Controller 1100 AC Power Supply


Cisco Catalyst Wireless Controller 950W DC Power Supply


Cisco Catalyst 9800-80 GE Module


Cisco Catalyst 9800-80 10 GE Module


Cisco Catalyst 9800-80 1 Port 40 GE Module


Cisco Catalyst 9800-80 2 Ports 40 GE Module


Cisco Catalyst 9800-80 1 Port 100 GE Module

Cisco Capital

Flexible payment solutions to help you achieve your objectives

Cisco Capital makes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more.

Document history

New or revised topic

Described In


Licensing Information updated


December 6, 2018, January 08 2020

Cosmetic changes to various tables were made


November 15, 2018, January 08 2020

Updated images were included


November 15, 2018, January 08 2020

Learn more