This document is to help customers find a stable software release for the enterprise switching platforms running Catalyst 9000 series switches. The information in this document is not meant to be exhaustive and is intended to serve as a general guide to customers especially in cases of mass deployments/upgrades. Beyond these recommendations, if customers are required to run a release to utilize newer software features or hardware, the recommendation is to select Extended Maintenance (EM) release trains wherever possible.
For customers deploying Software Defined Access, please refer to the product compatibility matrix which is available here.
For customers looking for software recommendation on Cisco Catalyst 9800 Series Wireless Controllers, please refer to this page.
Cisco IOS XE Software Support
Each Cisco IOS XE software release is classified as either a Standard Maintenance release or an Extended Maintenance release.
Standard Maintenance Release - A sustaining support lifetime of 12 months from First Customer Shipment (FCS) with scheduled rebuilds. Examples are Cisco IOS XE Software releases 16.10, 16.11, 17.1 and 17.2
Extended Maintenance Release - A sustaining support lifetime of 36 months from First Customer Shipment (FCS) with scheduled rebuilds. Examples are Cisco IOS XE Software releases 16.9, 16.12 and 17.3
Note: Every subsequent third release (for example, Cisco IOS XE Software release 16.9, 16.12 and 17.3) will be an Extended Maintenance release.
Given that Standard Maintenance releases have much shorter support lifetimes whereas Extended Maintenance releases have longer support with more scheduled rebuilds / bug fixes, it is recommended that customers stay on Extended Maintenance releases wherever possible.
The recommendations stated below are current as of January 2021, and these will be updated as and when appropriate.
Note: The recommendation below does not necessitate that customers with stable deployments on IOS XE Software release 16.6 and 16.9 are required to upgrade to the recommended IOS XE Software release in the table below. However as the IOS XE 16.6 & 16.9 software trains approach their end of life milestones, customers are encouraged to migrate to the 16.12 software train.
Note: If TACACS+ is being used for AAA, please take note of configuration CLI syntax change in IOS XE version 16.12.X in Security Configuration Guide. The legacy CLI tacacs-server host needs to be migrated to the new CLI tacacs server before upgrade to IOS XE version 16.12.X from an older release. This will ensure seamless tacacs operation post upgrade.
+ If you are not prepared for smart licensing, then 16.6.8 is the recommended version for Catalyst 3850 and 3650 Switches.
Engineering Special Releases
In certain cases, critical bugs are made available on Engineering Special (ES) builds. These builds are not available on CCO (cisco.com). If you are running into any issues specific to your environment which is not already fixed in existing cisco.com releases, please contact Cisco Customer Experience (CX) to explore the possibility of an Engineering Special (ES) code. Engineering Special builds are meant to be deployed for a limited time frame and customers are advised to move to the next maintenance rebuild as soon as it is available on cisco.com. Engineering special builds are fully supported by the Cisco Customer Experience (CX) and the Business Unit (BU).