Cisco Catalyst and Cisco DNA Software Subscription

Matrix for Switching

Network Essentials Network Advantage Cisco Catalyst (DNX) and Cisco DNA Essentials Cisco Catalyst (DNX) and Cisco DNA Advantage
License type Perpetual license compatible with Perpetual license compatible with 3/5/7 year term subscription Includes Cisco Catalyst and Cisco DNA Essentials,
Cisco Catalyst and Cisco DNA Essentials. Cisco Catalyst and Cisco DNA Advantage. 3/5/7 year term subscription
Cannot be purchased as a standalone license Cannot be purchased as a standalone license

Management options Manual, WebUI Manual, WebUI Automation through Cisco Catalyst Center Automation through Cisco Catalyst Center
including Manual, WebUI including Manual, WebUI

Features
Network Network Cisco Catalyst Cisco Catalyst
Cisco DNA Essentials Cisco DNA Advantage
Essentials Advantage Essentials (DNX) Advantage (DNX)

Essential switch capabilities

Layer 2, routed access, OSPF, PBR, PIM Stub Multicast, PVLAN, VRRP, PBR, Cisco Discovery Protocol, QoS, FHS, 802.1X,
MACsec-128, CoPP, SXP, IP SLA responder, SSO, StackWise (Catalyst 9300/9200).

L3 Routed access
L3 Routed access (RIP, EIGRP Stub, OSPF (1000 routes)).

Programmability, NETCONF/RESTCONF/gRPC/YANG
Model-driven programmability lets you automate configuration and control of your network devices with
programmable interfaces.

Zero Touch Provisioning

Automated provisioning of a new Cisco switch using the Zero Touch Provisioning functionality built into the switch.

128-bit MACsec encryption

Configure 128-bit MACsec for authenticating and encrypting packets between MACsec-capable devices.

Advanced telemetry SPAN, RSPAN

Manual/CLI or WebUI configuration of SPAN, RSPAN for providing near real-time access to operational statistics. No automation
through Cisco Catalyst Center.

Streaming telemetry and visibility

Model-driven telemetry lets you monitor your network by streaming data from network devices, continuously providing
near-real-time access to operational statistics.

Cisco Trustworthy Solutions

Help ensure hardware and software authenticity for supply chain trust and strong mitigation against man-in-the-middle attacks
that compromise software and firmware.

Software Image Management (SWIM)

Manually manage software upgrades and control the consistency of image versions through CLI or WebUI. Automation through
Cisco Catalyst Center not supported.

Full L3 routing functionality

BGP*, OSPF, IS-IS*.

Flexible network segmentation

VRF*, VXLAN, LISP,* SGT, MPLS*, BGP-EVPN with VXLAN*.

High availability
Support operational continuity and maintain availability during routine maintenance, and perform disaster recovery. NSF*, GIR*, HSRP, Stackwise Virtual*,
ISSU*/eFSU*.

Patch/SMU lifecycle management***

Manual/CLI operations or through WebUI only. Automation through Cisco Catalyst Center not supported.

Optimize bandwidth utilization (Advanced Multicast)

Multicast is used between routers so they can track which multicast packets to forward to each other and to their directly connected LANs. RP Discovery*,
PIM BI-DIR*.

256-bit MACsec encryption

Configure 256-bit MACsec* for authenticating and encrypting packets between MACsec-capable devices.

Precision Time Protocol

Timing and synchronization for time sensitive applications with PTPv2 as default profile (IEEE 1588v2/PTPv2, gPTP (IEEE 802.1AS), AES67 and G8275.1
profiles with less than 100 nano seconds precision.

Audio Video Bridging

Cisco AVB simplifies digitization of audio and video and offers superior quality of experience with standards like IEEE1588v2 PTPv2, AES67 timing profile.

Full Flexible NetFlow

This next generation in flow technology optimizes the network infrastructure, reducing operating costs and improving capacity planning and security incident detection. (License is
required for Manual/CLI, WebUI or automated Cisco Catalyst Center configuration).

Cisco IOS Embedded Event Manager (EEM)

EEM is a powerful and flexible subsystem that provides real-time network event detection and onboard automation. It gives you the ability to adapt the behavior of your network devices
to align with your business needs.

Software Image Management (SWIM)

Automate software upgrades and control the consistency of image versions through Cisco Catalyst Center.

Overall health dashboard

Gives a high-level overview of the health of every network device/client on the network, wired and wireless, through Cisco Catalyst Center or cloud monitoring for Catalyst.

Overall health dashboard for Device, Network, Application and Client for 24 hours only
Gives a high-level overview of the health of wired network devices/clients on the network, managed by Cisco Catalyst Center.

Network Plug and Play (PnP) provisioning application

Zero-touch provisioning for new device installation of Cisco devices to be provisioned simply by connecting to the network, managed by Cisco Catalyst Center.

Out of box reports

Cisco Catalyst Center pre-built reports that can be consumed directly or exported to third-party tools such as Tableau.

Cloud monitoring for Catalyst

Offers cloud monitoring options with Cisco® Catalyst® 9000 switches to deliver visibility and troubleshooting. Limited visibility Limited visibility

Cisco Spaces Extend

A powerful end-to-end, indoor location services cloud platform that extends platform capabilities via integrations and partner applications. Includes Cisco Spaces See.
Available for Cisco Catalyst 9300 and 9400 Series Switches.

Cisco ThousandEyes Network and Application Synthetics**

Deliver superior network and application experience with Cisco ThousandEyes, now integrated into Cisco Catalyst 9300 and 9400 Series switches.

ISE Advantage Licenses (included in Catalyst software subscription only)****

Achieve faster deployment of zero-trust network security solutions such as SD-Access, Client Assurance, and network authentication/authorization. ISE license quantity depends on switch model.

Controller Orchestrated Fabric Management and Configuration

Any Cisco or a third-party controller orchestrating a Fabric like EVPN, MPLS etc.

Fabric, Segmentation, and eWC

Enables policy-based automation with secure segmentation, complete visibility, and delivery of new services quickly on SD-Access devices, managed by Cisco Catalyst Center only.

Cisco AI Network Analytics

AI and machine learning technologies are implemented on Cisco Catalyst Center and in the AI Network Analytics cloud to enhance the insight and remediation capabilities of Cisco Assurance.

AI Endpoint Analytics
Identify and check compliance of endpoints, and use AI/ML techniques to classify them into groups.

Group-Based Policy Analytics

Makes segmentation policy simpler by discovering traffic flows between scalable groups to determine the right policies.

AI Trust Analytics
Verifies that connected endpoints are legitimate. Use this information to define security policies that isolate rogue or compromised endpoints to reduce threat proliferation.

LAN automation
Automate configurations and deployment of networks with Cisco Catalyst Center.

Patch/SMU lifecycle management

Automated management of SMU/Patches patching by Cisco Catalyst Center.

Compliance
Compliance reports managed by Cisco Catalyst Center.

IPsec
Supports 100G+ HW encryption for high-bandwidth secure L3 transport between sites or from cloud to site.

Device 360, Client 360, and Network Health Insights

Display devices and client connectivity from any angle or context, providing for very granular troubleshooting in seconds.

Application policy creation

Assign policies to applications based on business relevance and business-critical QoS priority for life-saving devices, manual through CLI or automation through Cisco Catalyst Center.

Application hosting
Allows third-party applications to be hosted in a secure container environment on the switch. License is required for both manual/CLI configuration or automation through Cisco Catalyst Center.

Third-party API integration

A flexible framework is provided to integrate third-party application software.

Encrypted Traffic Analytics (ETA)*: (No Stealthwatch License Included)

Detect malware within encrypted traffic. License is required for both manual/CLI configuration or automation through Cisco Catalyst Center.

Cisco DNA Service for Bonjour

This software-defined, controller-based solution enables Bonjour services discovery and advertisement at scale across multiple domains. License is required for both manual/CLI configuration or automation through
Cisco Catalyst Center.

ERSPAN*
Monitor and re-direct traffic. License is required for both manual/CLI configuration or automation through Cisco Catalyst Center.

Wireshark*
Packet capture for analysis. License is required for both manual/CLI configuration or automation through Cisco Catalyst Center.

AVC (NBAR2)*
Gain application visibility and control through Next-Generation Network-Based Application Recognition. License is required for both manual/CLI configuration or automation through
Cisco Catalyst Center.

Network Network Cisco Catalyst Cisco Catalyst

Support Essentials Advantage
Cisco DNA Essentials
Essentials (DNX)
Cisco DNA Advantage
Advantage (DNX)

E-LLW
90 days of Cisco TAC support; local business hours, 8x5; hardware replacement (next business day where available); Warranty
duration is lifespan of hardware product.

Software support
Software support service in the subscription software stack includes TAC support and software updates and upgrades in Cisco
Catalyst Center.

SNTC
• 24x7 access to the Cisco TAC for hardware issues
• 60-minute TAC response objective for severity 1 and 2 service requests
• TAC response objective for severity levels 3 and 4 service requests:
- 60 minutes during business hours Optional Optional Optional Optional
- Next Business Day during business hours if the request is made outside of business hours
• OS updates
• Self-help resources (tools, documentation, and videos) via Cisco.com
• Return Materials Authorization (RMA) with eight service level options

Base product-level software and hardware support:

• 24x7 access to the Cisco TAC phone support for software and hardware issues: Cisco Catalyst Software for Switching, Catalyst
9000 Switches, and the OS.
• 4-hr TAC response objective for severity 1 and 2 service requests
• Next business day TAC response objective for severity 3 and 4 service requests Included with Cisco Included with Cisco
Catalyst software Catalyst software Not included Not included
• Access to the CX Cloud base experience: step-by-step adoption task lists and success tips, asset and license views, and case subscription (DNX) subscription (DNX)
management.
• Software and OS updates
• Self-help resources (documentation and videos) via Cisco.com Hardware replacements with a next business day service level
are accessed via the Catalyst 9000 Extended Lifetime Warranty (E-LLW)

Cisco Success Tracks

• Get streamlined support across software, hardware, and providers for faster complex issue resolution
• Improve operational efficiency and reduce risk with proactive and predictive analytics-driven insights
Optional (recommended) Optional (recommended) Optional (recommended) Optional (recommended)
• Speed adoption with personalized use case guidance
• Avoid adoption pitfalls with best practices and one-on-one consulting
• Return Materials Authorization (RMA) with eight service level options

The Cisco DNA Expansion Pack is a flexible way to purchase Cisco ISE, Cisco Spaces, Secure Network Analytics (Stealthwatch), ThousandEyes and other licenses, appliances, and services in one convenient bundle. Enhance your Cisco networking solutions such as SD-Access, Zero Trust solutions,
Encrypted Traffic Analytics (ETA), location analytics, and assurance. You can add the pack to your Cisco DNA software licenses and choose the license count that fits your needs.

For more details, contact a Cisco sales or Cisco registered partner.

Does not require Cisco Catalyst Center.

* Not supported on all platforms.
** Cisco ThousandEyes Network and Application Synthetics entitlements will be provided as described in ThousandEyes with Cisco Catalyst 9000 Switches.
*** Supported on Network Advantage from Cisco IOS XE Fuji 16.9.7 onwards. Prior to Cisco IOS Fuji XE 16.9.7, Cisco Catalyst or Cisco DNA Advantage is also required.
**** Not applicable for Catalyst 9200 series.

© 2024 Cisco and/or its affiliates. All rights reserved.