Cisco Catalyst IE9300 Rugged Series Switches and Cisco Catalyst ESS9300 Embedded Series Switch

This document provides release information for the following Catalyst IE switches:

  • Cisco Catalyst IE9310 GE Fiber switch

  • Cisco Catalyst IE9320 GE Fiber switch

  • Cisco Catalyst IE9320 Fiber switch with 10 GE uplinks

  • Cisco Catalyst IE9320 10 GE Copper Data switch

  • Cisco Catalyst IE9320 10 GE PoE switch

  • Cisco Catalyst IE9320 10 G mGig 4PPoE switch

  • Cisco Catalyst IE9320 GE PoE switch

  • Cisco Catalyst ESS9300 Embedded Series Switch

Cisco Catalyst IE9300 Rugged Series Switches provide rugged and secure switching infrastructure for harsh environments. It is suitable for industrial Ethernet applications, including manufacturing, utility substations, intelligent transportation systems (ITSs), rail transportation, and other similar deployments.

The switch fulfills the need for a high-density SFP, RJ-45, and Power over Ethernet (PoE) rack-, or wall-mount switch that can function as a software-defined (SD)-Access fabric edge. It provides end-to-end architectural uniformity in the Cisco Digital Network Architecture (DNA) for Internet of Things (IoT) connected communities and extended enterprises.

In industrial environments, the switch can be connected to any Ethernet-enabled industrial communication devices. These devices include programmable logic controllers (PLCs), human-machine interfaces (HMIs), drives, sensors, and input and output (I/O) devices.

The Cisco Catalyst ESS9300 Embedded Series Switch is a Small Form Factor (SFF) Ruggedized 10 GigE Embedded platform for tactical, outdoor, and mobile environments. The compact design simplifies integration and offers the system integrator the ability to use the ESS9300 in a wide variety of applications. The Cisco ESS 9300 consists of one switch card. There are no cooling plates sold with it. It is up to the system integrator to design a thermal solution. The ESS-9300-10X-E board supports up to 10 ports of 10 GE fiber. Thermal power is 35 Watts.


Note


The documentation set for this product strives to use bias-free language. For purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hard coded in the user interfaces of the product software, language used based on standards documentation, or language that is used by a referenced third-party product.


New Features for Cisco Catalyst IE9300 Rugged Series Switches and the Cisco Catalyst ESS9300 Embedded Series Switch

The features in the following table are new in this release for the supported switches.

Table 1. New Features for Cisco Catalyst IE9300 Rugged Series Switches

Feature Name

License Level

Description

Supported Switches

Stacking Support—4 members

Network Essentials/Network Advantage

A switch stack has multiple stacking-capable switches connected through their StackWise ports. The stack members work together as a unified system. Layer 2 and Layer 3 protocols present the entire switch stack as a single entity to the network All IE9320 switches:
  • IE-9320-26S2C-E/A

  • IE-9320-22S2C4X-E/A

  • IE-9320-24T4X-E/A

  • IE-9320-24P4X-E/A

  • IE-9320-24P4S-E/A

  • IE-9320-16P8U4X-E/A

High-Availability Seamless Redundancy (HSR)—SAN

Network Essentials

HSR is a network protocol for Ethernet that is designed to achieve zero recovery time in ring topologies. It supports single fault in the ring with no downtime by sending each packet in both directions in the ring.

  • IE-9320-26S2C-E/A

  • IE-9320-22S2C4X-E/A

Media Redundancy Protocol (MRP)

Network Essentials

MRP provides fast convergence in a ring network topology for industrial automation networks. Twelve rings are supported on standalone switches.

The Media Redundancy Manager (MRM) defines its maximum recovery times for a ring in the following range: 200 ms and 500 ms.

All Cisco Catalyst IE9300 Rugged Series Switches

TrustSec Configuration on PRP Interface

Network Advantage

Cisco TrustSec builds secure networks by establishing domains of trusted network devices. Each device in the domain is authenticated by its peers.

TrustSec is supported only on physical interfaces. You can configure TrustSec on member interfaces of a PRP channel but not on a PRP interface.

  • IE-9320-26S2C-E/A

  • IE-9320-22S2C4X-E/A

VLAN Mapping

Network Essentials

A QnQ VLAN tunnel enables a service provider to segregate the traffic of different customers in their infrastructure, while still giving the customer a full range of VLANs for their internal use by adding a second 802.1Q tag to an already tagged frame.

All Cisco Catalyst IE9300 Rugged Series Switches

Table 2. New Features for the Cisco Catalyst ESS9300 Embedded Series Switch

Feature Name

License Level

Description

Supported Switches

Certificate-based MACsec

Network Essentials

Note

 

Network Advantage license required when using 256-bit MACsec.

Certificate-based MACsec Encryption feature uses 802.1X port-based authentication with Extensible Authentication Protocol–Transport Layer Security (EAP-TLS) to carry Certificates for ports where MACsec encryption is required.

This feature makes it feasible to manage the key at the centralized server over preshared key-based MACsec.

Cisco Catalyst ESS9300 Embedded Series Switch

Switch Model Numbers

Cisco Catalyst IE9300 Rugged Series Switches

The following table lists the supported IE9300 series hardware models and the default license levels that they are delivered with.

Model Number

Default License Level

Stacking Support

Description

IE-9310-26S2C-A

Network Advantage

No

  • Total ports: 28

  • SFP uplinks: 4x 1 Gb SFP

    SFP downlinks: 22x 100M/1000M SFP, 2x 100M/1000M dual-media

  • Power supplies: Support for field-replaceable, redundant AC or DC power supplies

IE-9310-26S2C-E

Network Essentials

IE-9320-26S2C-A

Network Advantage

Yes

  • Total ports: 28

  • SFP uplinks: 4x 1 Gb SFP

    SFP downlinks: 22x 100M/1000M SFP, 2x 100M/1000M dual-media

  • Power supplies: Support for field-replaceable, redundant AC or DC power supplies

IE-9320-26S2C-E

Network Essentials

IE-9320-22S2C4X-A

Network Advantage

Yes

  • Total ports: 28

  • SFP uplinks: 4x 10 Gb SFP+

  • SFP downlinks:

    22x 1 Gb SFP, 2x 1-Gb Dual-media ports

  • Power supplies: Support for field-replaceable, redundant AC or DC power supplies

IE-9320-22S2C4X-E

Network Essentials

IE-9320-24T4X-A

Network Advantage

Yes

  • Total ports: 28

  • SFP uplinks: 4x 10 Gb SFP+

  • Copper downlinks: 24x 1 Gb RJ45

  • Power supplies: Support for field-replaceable, redundant AC or DC power supplies.

IE-9320-24T4X-E

Network Essentials

IE-9320-24P4X-A

Network Advantage

Yes

  • Total ports: 28

  • SFP uplinks: 4x 10 Gb SFP+

  • Copper downlinks: 24x 1 Gb RJ45 PoE+

  • Power supplies: Support for field-replaceable, redundant AC or DC power supplies

IE-9320-24P4X-E

Network Essentials

IE-9320-16P8U4X-A

Network Advantage

Yes

  • Total ports: 28

  • SFP uplinks: 4x 10 Gb SFP

  • Copper downlinks: 16 ports 1 Gb RJ45 PoE+, 8 ports 2.5 Gb RJ45 4PPoE (90W/port)

  • Power supplies: Support for field-replaceable, redundant AC or DC power supplies

IE-9320-16P8U4X-E

Network Essentials

IE-9320-24P4S-A

Network Advantage

Yes

  • Total ports: 28

  • SFP uplinks: 4x 1Gb SFP

  • Copper downlinks: 24 ports 1 Gb RJ45 PoE+

  • Power supplies: Support for field-replaceable, redundant AC or DC power supplies

IE-9320-24P4S-E

Network Essentials

All Cisco Catalyst IE9300 Rugged Series Switches have 4 GB of DRAM, four alarm inputs, and one alarm output. Other I/O include the following:

  • SD-cards socket

  • Power input

  • RJ-45 (RS-232) console

  • Micro-USB console

  • USB-A host port


Note


Documentation sometimes uses the following terms:

  • IE9310 GE Fiber switch when referring to both IE-9310-26S2C-A and IE-9310-26S2C-E switches

  • IE9320 GE Fiber switch when referring to both IE-9320-26S2C-A and IE-9320-26S2C-E switches

  • IE9320 Fiber switch with 10 GE uplinks when referring to both IE-9320-22S2C4X-A and IE-9320-22S2C4X-E switches

  • IE9320 10 GE Copper Data switch when referring to both IE-9320-24T4X-A and IE-9320-24T4X-E switches

  • IE9320 10 GE PoE switch when referring to both IE-9320-24P4X-A and IE-9320-24P4X-E

  • IE9320 10 G mGig 4PPoE switch when referring to both IE-9320-16P8U4X-A and IE-9320-16P8U4X-E

  • IE9320 GE PoE switch when referring to both IE-9320-24P4S-A and IE-9320-24P4S-E


Cisco Catalyst ESS9300 Embedded Series Switch

The ESS9300 is a ruggedized 10G embedded platform that is designed for embedded applications for tactical, outdoor, and mobile installations requiring low power, small size, and ruggedization. Its features include:

  • Single board

  • Small form-factor board size (110 x 85 mm; 4.3 x 3.3 in.)

  • 10 ports of 10G: Enhanced Small Form-Factor Pluggable (SFP+)

  • Ethernet management port (optional)

  • RS-232 and USB console

  • Common +3.3VDC and +5VDC power inputs

  • Low power—35W (typical)

  • 4 GB DDR4 DRAM

  • 8 GB onboard eMMC flash storage (2.5 GB usable space)

Starting with release 17.10.1, both the Network Essentials license and the Network Advantage license are available. The features available in the two licenses follow the IE9300 series, with the exception of MACsec-256.

Table 3. Ordering Information

Product ID

Product Description

ESS-9300-10X-E

ESS9300 board, no cooling plate, Network Essentials software.

ESS9300-NW-A=

Cisco Network Advantage license for ESS9300 Series Spare.

Network Advantage License

Description

Security

MACsec-256

Routing

Layer 3 routing support

Upgrading the Switch Software

This section covers the various aspects of upgrading or downgrading the device software.


Note


See the Cisco IOS XE Migration Guide for IIoT Switches for the latest information about upgrading and downgrading switch software.


Finding the Software Version

The package files for the Cisco IOS XE software can be found on the system board flash device flash (flash:) or external SDFlash (sdflash:).

You can use the show version privileged EXEC command to see the software version that is running on your switch.


Note


Although the show version output always shows the software image running on the switch, the model name shown at the end of this display is the factory configuration and does not change if you upgrade the software license.

You can also use the dir filesystem: privileged EXEC command to see the names and versions of other software images that you might have stored in flash memory.

Software Images for Cisco IOS XE 17.13.x

The following table provides the filenames for the IOS XE 17.13.x software image for Cisco Catalyst IE9300 Rugged Series Switches and the Cisco Catalyst ESS9300 Embedded Series Switch.

Release

Image Type

Filename

Switch Models

Cisco IOS XE.17.13.1

Universal

ie9k_iosxe.17.13.01.SPA.bin

  • Cisco Catalyst IE9300 Rugged Series Switches

  • Cisco Catalyst ESS9300 Embedded Series Switch

Software Installation Options

The following table lists the options for the install command for Cisco Catalyst IE9300 Rugged Series Switches and the Cisco Catalyst ESS9300 Embedded Series Switch.

To install and activate the specified file, and to commit changes to be persistent across reloads, enter the following command: install add file filename [ activate commit]

Option

Description

abort

Abort the current install operation.

activate

Activate an installed package.

add

Install a package file to the system.

auto-abort-timer

Install auto-abort-timer.

autoupgrade

Initiate software auto-upgrade on all incompatible switches.

commit

Commit the changes to the load path.

deactivate

Deactivate an install package.

label

Add a label name to any installation point.

remove

Remove installed packages.

rollback

Rollback to a previous installation point.

Licensing

This section provides information about the licensing packages for features available on Cisco Catalyst IE9300 Rugged Series Switches and the Cisco Catalyst ESS9300 Embedded Series Switch.

License Levels

The software features available on Cisco Catalyst IE9300 Rugged Series Switches fall under these base or add-on license levels.

Base Licenses

  • Network Essentials

  • Network Advantage: Includes features available with the Network Essentials license and more.

Add-on Licenses

Add-on licenses require a Network Essentials or Network Advantage as a prerequisite. The features available with add-on license levels provide Cisco innovations on the switch, and on the Cisco Digital Network Architecture Center (Cisco DNA Center).

  • DNA Essentials

  • DNA Advantage: Includes features available with the DNA Essentials license and more.

To find information about platform support and to know which license levels a feature is available with, use Cisco Feature Navigator. To access Cisco Feature Navigator, go to https://cfnng.cisco.com. An account on Cisco.com is not required.

Cisco Catalyst ESS9300 Embedded Series Switch

The software features available for the Cisco Catalyst ESS9300 Embedded Series Switchfall under these base license levels.

Base Licenses

  • Network Essentials

  • Network Advantage: Includes features available with the Network Essentials license and more.

To find information about platform support and to know which license levels a feature is available with, use Cisco Feature Navigator. To access Cisco Feature Navigator, go to https://cfnng.cisco.com. An account on Cisco.com is not required.

Smart Licensing Using Policy

Smart Licensing Using Policy, which is an enhanced version of Smart Licensing, is the default and the only supported method to manage licenses.

Smart Licensing using Policy provides a licensing solution that does not interrupt the operations of your network. Instead, it enables a compliance relationship to account for the hardware and software licenses you purchase and use.

With this licensing model, you do not have to complete any licensing-specific operations, such as registering or generating keys before you start using the software and the licenses that are tied to it. Only export-controlled and enforced licenses require Cisco authorization before use. License usage is recorded on your device with timestamps, and the required workflows can be completed later.

Multiple options are available for license usage reporting – this depends on the topology you implement. You can use the Cisco Smart Licensing Utility (CSLU) Windows application, or report usage information directly to Cisco Smart Software Manager (CSSM). A provision for offline reporting for air-gapped networks, where you download usage information and upload to CSSM, is also available.

Starting with this release, Smart Licensing Using Policy is automatically enabled on the device. This is also the case when you upgrade to this release.

By default, your Smart Account and Virtual Account in CSSM is enabled for Smart Licensing Using Policy.

Caveats

Caveats describe unexpected behavior in Cisco IOS XE releases.

Open Caveats

Identifier

Description

CSCwh78844

Memory Leak under timingd process

CSCwi06291

IE9300 : Link is down with "GLC-TE" SFP after reload

Resolved Caveats

Identifier

Description

CSCwf41579

"logging alarm informational" command causes the generation of irrelevant information from PTP logs

CSCwh87343

Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

Troubleshooting

For the most up-to-date, detailed troubleshooting information, see the Cisco TAC website at this URL:

https://www.cisco.com/en/US/support/index.html

Go to Product Support and select your product from the list or enter the name of your product. Look under Troubleshoot and Alerts, to find information for the problem that you are experiencing.

Related Documentation

Information about Cisco IOS XE at this URL: https://www.cisco.com/c/en/us/products/ios-nx-os-software/ios-xe/index.html.

Information about Cisco Catalyst IE9300 Rugged Series Switches is at this URL: https://www.cisco.com/c/en/us/products/ios-nx-os-software/ios-xe/index.html

Information about the Cisco Catalyst ESS9300 Embedded Series Switch is at this URL:https://www.cisco.com/c/en/us/support/switches/catalyst-ess-9300-10x-embedded-switch/model.html

Cisco Validated Designs documents at this URL: https://www.cisco.com/go/designzone

To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: http://www.cisco.com/go/mibs