Cisco Catalyst CW9800H1 and CW9800H2 Wireless Controllers Data Sheet

 

Product overview

CW9800H1 Wireless Controller

CW9800H2 Wireless Controller

Engineered from the ground up to be the most powerful and energy-efficient wireless controllers Cisco has ever developed, the Cisco Catalyst ^™ CW9800H1 and CW9800H2 wireless controllers boast up to a 36% increase in performance and consume up to 40% less power compared to the Catalyst 9800-80. Additionally, both the CW9800H1 and CW9800H2 models are built with a space-saving single-rack-unit design, giving you flexibility within your data centers. Together, these advancements, along with a host of innovative features, deliver a best-in-class wireless solution tailored to accommodate the dynamic and evolving needs of your organization.

The emergence of 6GHz Wi-Fi, along with the rise of new devices, cloud-based applications, smart workplaces, and IoT, calls for a new approach to network deployments, management, and troubleshooting. These new applications and increasing demands are met head-on by the powerful and efficient Cisco Catalyst CW9800 wireless controllers, which are engineered to address your most stringent needs and set the stage for the future.

The Cisco Catalyst CW9800 wireless controllers, built on Cisco IOS^® XE, are specifically designed to thrive in dynamic environments, offering simplicity, security, and sustainability. In conjunction with the comprehensive suite of Cisco Catalyst solutions, the CW9800 wireless controllers deliver an unmatched wireless experience, catering to the growing demands of your organization. By integrating these controllers with Cisco Catalyst Center, you can harness applied AI for analytics and insights, automate intricate tasks, and enhance troubleshooting efficiency—helping ensure optimal user experiences and enabling you to focus on your organization's wider strategic objectives.

The Cisco Catalyst CW9800H1 and CW9800H2 support up to 6000 access points and 64,000 clients with
up to 100Gbps of maximum throughput. Additionally, they offer your choice of uplinks with either 4 x 25 Gbps (CW9800H1) or 2 x 40 Gbps (CW9800H2) configurations to meet the high throughput demands of next-generation wireless. The Cisco Catalyst CW9800H1 and CW9800H2 are feature rich with high-performance capabilities to power your business-critical operations and transform user experiences:

●     High availability and seamless software updates, enabled by hot patching, keep your clients and services always on in planned and unplanned events.

●     Secure the airwaves, devices, and users with the Cisco Catalyst CW9800H1 and CW9800H2. Wireless infrastructure becomes the strongest first line of defense with Cisco^® Encrypted Traffic Analytics (ETA) and Software-Defined Access (SD-Access). Additionally, because the Cisco Catalyst CW9800H1 and CW9800H2 controllers are designed for Wi-Fi Protected Access 3 (WPA3) and beyond, security is front and center. This includes Secure Boot, runtime defenses, image signing, integrity verification, and hardware authenticity. The Catalyst CW9800H1 and CW9800H2 also support hardware cryptographic offload to enable advanced encryption without any performance degradation.

●     The CW9800H1 and CW9800H2 feature open and programmable APIs that enable automation of day-0 to day-N network operations. Model-driven streaming telemetry provides deep insights into the health of your network and clients.

●     Cisco User Defined Network Plus, allows IT to give end users control of their very own wireless network partition on a shared network. End users can then remotely and securely deploy their devices on this network. Perfect for university dormitories or extended hospital stays, Cisco User Defined Network Plus advanced control, allowing each user to choose who can connect to their network.

●     The CW9800 wireless controllers offer support for application hosting, enabling you to reduce your dependence on IoT overlay networks and consequently save on both CapEx and OpEx. With this feature, you can upload, deploy, and manage Cisco IOx applications directly on your Catalyst access points. It also provides third-party developers with the capability to create and run containerized applications using Docker, with access to designated CW9800 resources. This integration facilitates streamlined operations and enhances the overall efficiency of your network infrastructure.

●     With Cloud Monitoring for Catalyst Wireless, you get a unified view of your Cisco infrastructure to help with troubleshooting including root cause analysis of network and client issues. Cloud monitoring is delivered through the Cisco Meraki^® dashboard, included in Cisco DNA Essentials and Advantage, and helps you ensure the delivery of services while maximizing network performance and uptime. Additionally, because it is cloud based, you can access it anywhere. And best of all, it uses your existing hardware without the need for an immediate upgrade. Cloud monitoring for CW9800 wireless controllers will be available in a future software release.

●     With Cisco In-Service Software Upgrade (ISSU), network downtime during a software update or upgrade is a thing of the past. ISSU performs a complete image upgrade and update while the network is still running. The software image—or patch—is pushed onto the wireless controller while traffic forwarding continues uninterrupted. All access point and client sessions are retained during the upgrade process. With just a click, your network automatically upgrades to the newest software.

Feature highlights

The Catalyst CW9800H1 and CW9800H2 boast a fully programmable multicore network processor that improves controller performance by up to 36% while consuming up to 40% less power when compared to the Catalyst 9800-80. It offers both 1 Gbps RJ-45 and 1/10 Gbps Small Form-Factor Pluggable (SFP) High Availability (HA) ports, giving you the option of using either 4 x 25 Gbps (CW9800H1) or 2 x 40 Gbps (CW9800H2) uplinks, depending on your requirements. The CW9800H1 and CW9800H2 are also sized to reduce rack space, coming in a single rack unit that gives you more deployment flexibility.

Features

Table 1.           Key features

Always on

Seamless software updates enable faster resolution of critical issues, introduction of new access points with zero downtime, and flexible software upgrades. Stateful Switchover (SSO) with 1:1 active standby and N+1 redundancy keeps your network, services, and clients always on, even during unplanned events. Cisco Advanced Wireless Intrusion Prevention System (aWIPS) is a complete wireless security solution that uses the Cisco Unified Access^® infrastructure to detect, locate, mitigate, and contain wired and wireless rogues and threats.

Secure

Secure airwaves, devices, and users with the Cisco Catalyst CW9800 Wireless Controllers. Wireless infrastructure becomes the strongest first line of defense with ETA and SD-Access. The controller comes with built-in security: Secure Boot, runtime defenses, image signing, integrity verification, and hardware authenticity.

Open and programmable

The controller is built on the Cisco IOS XE operating system, which offers a rich set of open standards-based programmable APIs and model-driven telemetry that provide an easy way to automate day-0 to day-N network operations.

Details

Cisco Catalyst CW9800H1

Cisco Catalyst CW9800H2

Physical dimensions

Table 2.           Physical dimensions

Front panel

 

CW9800H1 Front panel

 

CW9800H2 Front panel

CW9800H1 port identification

CW9800H2 port identification

Ports

Table 3.           Ports and their purposes

Front panel LEDs

Table 4.           Front panel LEDs

Rear panel

Rear panel

The chassis has a front-to-rear airflow.

●     Four internal fans draw cooling air in through the front of the chassis and across the internal components to maintain an acceptable operating temperature.

●     The fans are located at the rear of the chassis.

Power

The CW9800H1 and CW9800H2 controllers ship with redundant power supply units, either AC or DC, based on the customer’s choice.

The Power Entry Module (PEM) provides redundant power to the system, and the CW9800H1 and CW9800H2 can operate continuously with only a single PEM installed. The PEMs are hot-swappable, and replacement of a single PEM can be made without power interruption to the system. All external connections to the PEMs are made from the rear panel of the chassis, and they are removed or inserted from the rear. The main power switch for the unit is located directly next to the PEMs on the rear of the chassis.

Table 5.           Power supply options

Note:       Redundancy is supported with the same power supply types.

SFPs supported

●     All 1, 10, 25, and 40 Gbps ports can be configured independently.

●     Online Insertion and Removal (OIR) for SFP, SFP+, and QSFP.

●     Modules are hot-swappable.

Table 6.           SFPs supported

Benefits

Cisco IOS XE opens a completely new paradigm in network configuration, operation, and monitoring through network automation. Cisco’s automation solution is open, standards-based, and extensible across the entire lifecycle of a network device. The various mechanisms that bring about network automation are outlined below, based on a device lifecycle.

●     Automated device provisioning: This is the ability to automate the process of upgrading software images and installing configuration files on Cisco access points when they are being deployed in the network for the first time. Cisco provides turnkey solutions such as Plug and Play (PnP) that enable an effortless and automated deployment.

●     API-driven configuration: Modern wireless controllers such the Cisco Catalyst CW9800H1 and CW9800H2 support a wide range of automation features and provide robust open APIs over Network Configuration Protocol (NETCONF) using YANG data models for external tools, both off-the-shelf and custom built, to automatically provision network resources.

●     Granular visibility: Model-driven telemetry provides a mechanism to stream data from a wireless controller to a destination. The data to be streamed is driven through subscription to a data set in a YANG model. The subscribed data set is streamed out to the destination at configured intervals. Additionally, Cisco IOS XE enables the push model, which provides near-real-time monitoring of the network, leading to quick detection and rectification of failures.

●     Seamless software upgrades and patching: To enhance OS resilience, Cisco IOS XE supports patching, which provides fixes for critical bugs and security vulnerabilities between regular maintenance releases. This support allows customers to add patches without having to wait for the next maintenance release.

Always on

●     High Availability: Stateful switchover with 1:1 active standby and N+1 redundancy keeps your network, services, and clients always on, even in unplanned events.

●     Software Maintenance Upgrades (SMUs) with hot patching: Patching allows for a patch to be installed as a bug fix without bringing down the entire network and eliminates the need to requalify an entire software image. The SMU is a package that can be installed on a system to provide a patch fix or security resolution to a released image. SMUs allow you to address the network issue quickly while reducing the time and scope of the testing required. The Cisco IOS XE platform internally validates the SMU compatibility and does not allow you to install incompatible SMUs. All SMUs are integrated into the subsequent Cisco IOS XE Software maintenance releases.

●     Intelligent rolling access point upgrades and seamless multisite upgrades: The Cisco Catalyst CW9800H1 and CW9800H2 wireless controllers comes equipped with intelligent rolling access point upgrades to simplify network operations. Multisite upgrades can now be done in stages, and access points can be upgraded intelligently without restarting the entire network.

●     Standby monitoring of the Cisco Catalyst CW9800H1 and CW9800H2 in high-availability mode enables you to monitor the health of the system on a standby controller in a high-availability pair using programmatic interfaces (NETCONF/YANG, RESTCONF) and Command Line Interfaces (CLIs) without going through the active controller. For more details refer to the technical documentation.

●     In-Service Software Upgrade (ISSU): ISSU is a complete image upgrade/update with zero downtime while the network is still on. The software image or a patch is pushed onto the wireless controller while traffic forwarding continues uninterrupted. All access point and client sessions are retained during the upgrade process.

With just a click, your network automatically upgrades to the newest software. Your backup 9800 controller receives the new software that is pushed via the active 9800 controller. The backup controller becomes active and takes over your network, while your previously active controller turns into a backup controller and processes the software upgrade. Using an intelligent RF-based rolling access point upgrade, all access points are upgraded in a staggered fashion without impacting any wireless session. This procedure is carried out without any manual intervention natively from the controller and without the need for an external orchestrator or additional licenses.

Security

●     Encrypted Traffic Analytics (ETA): ETA is a unique capability for identifying malware in encrypted traffic coming from the access layer. Since more and more traffic is being encrypted, the visibility this feature provides related to threat detection is critical for keeping your network secure at different layers.

●     Trustworthy systems: Cisco Trust Anchor Technologies provide a highly secure foundation for Cisco products. With the Cisco Catalyst CW9800H1 and CW9800H2, these trustworthy systems help assure hardware and software authenticity for supply chain trust and strong mitigation against man-in-the-middle attacks on software and firmware. Trust Anchor capabilities include:

●     Image signing: Cryptographically signed images provide assurance that the firmware, BIOS, and other software are authentic and unmodified. As the system boots, its software signatures are checked for integrity.

●     Secure Boot: Cisco Secure Boot technology anchors the boot sequence chain of trust to immutable hardware, mitigating threats against a system's foundational state and the software that is to be loaded, regardless of a user's privilege level. It provides layered protection against the persistence of illicitly modified firmware.

●     Cisco Trust Anchor Module: A tamper-resistant, strong cryptographic, single-chip solution hardware solution uniquely identifies the product so that its origin can be confirmed to Cisco, providing assurance that the product is genuine.

●     Cisco Wireless Intrusion Prevention System (WIPS): WIPS offers advanced network security to detect, locate, mitigate, and contain any intrusion or threat on your wireless network. It can monitor and detect wireless network anomalies, unauthorized access, and RF attacks. A new, dedicated classification engine for rogues and aWIPS is built on Cisco Catalyst Center. A fully integrated stack for the WIPS solution includes Cisco Catalyst Center, a Cisco Catalyst 9800 series controller, Wave 2, and Cisco Catalyst 9100 Access Points. This new architecture provides improved detection and security, simplicity, and ease of use, and fewer false positive alarms.

Flexible NetFlow

●     Flexible NetFlow (FNF): Cisco IOS FNF is the next generation in flow visibility technology, allowing optimization of the network infrastructure, reducing operating costs, and improving capacity planning and security incident detection with increased flexibility and scalability.

Application visibility and control

●     Next-Generation Network-Based Application Recognition (NBAR2): NBAR2 enables advanced application classification techniques, with up to 1400 predefined and well-known application signatures and up to 150 encrypted applications on the Cisco Catalyst CW9800H1 and CW9800H2. NBAR2 provides the network administrator with an important tool to identify, control, and monitor end-user application usage while helping ensure a quality user experience and securing the network from malicious attacks. It uses FNF to report application performance and activities within the network to any supported NetFlow collector, such as Cisco Prime^®, Cisco Secure Network Analytics, or any compliant third-party tool.

Quality of service

●     Superior Quality of Service (QoS): QoS technologies are tools and techniques for managing network resources and are considered the key enabling technologies for the transparent convergence of voice, video, and data networks. QoS on the Cisco Catalyst CW9800H1 and CW9800H2 consists of classification of traffic based on packet data as well as application recognition and traffic control actions such as dropping, marking and policing. A modular QoS command-line framework provides consistent platform-independent and flexible configuration behavior. The CW9800H1 and CW9800H2 also supports policies at two levels of target: BSSID as well as client. Policy assignment can be granular down to the client level.

Smart operation

●     WebUI: WebUI is an embedded GUI-based device-management tool that provides the ability to provision the device, simplifying device deployment and manageability and enhancing the user experience. WebUI comes with the default image. There is no need to enable anything or install any license on the device. You can use WebUI to build a day-0 and day-1 configuration and from then on monitor and troubleshoot the device without having to know how to use the CLI.

Specifications

Table 7.           Specifications

Software requirements

The Cisco Catalyst CW9800H1 and CW9800H2 runs on Cisco IOS XE Software Release 17.14.1 or later.

Licensing

No licenses are required to boot up a Cisco Catalyst CW9800 wireless controller. However, in order to connect any access points to the controller, Cisco DNA software subscriptions are required. To be entitled to connect to a CW9800 Series controller, each access point requires a Cisco DNA subscription license.

Determining license requirements for access points connecting to Cisco Catalyst CW9800 Series Wireless Controllers

The access points connecting to the Cisco Catalyst CW9800 controllers have new and simplified software subscription packages.

They can support both tiers of Cisco DNA software: Cisco DNA Essentials and Cisco DNA Advantage.

Cisco DNA software subscriptions provide Cisco innovations on the access point. They also include perpetual Network Essentials and Network Advantage licensing options, which cover wireless fundamentals such as 802.1X authentication, QoS, and PnP; telemetry and visibility; and single-sign-on, as well as security controls.

Cisco DNA subscription software has to be purchased for a 3-, 5-, or 7-year subscription term. Upon expiration of the subscription, the Cisco DNA features will expire, whereas the Network Essentials and Network Advantage features will remain.

For the full feature list of Cisco DNA Software, including the perpetual Network Essentials and Network advantage, please see the feature matrix: https://www.cisco.com/c/m/en_us/products/software/dna-subscription-wireless/en-sw-sub-matrix-wireless.html?oid=porew018984.

Two modes of licensing are available:

●     Cisco Smart Licensing is a flexible licensing model that provides you with an easier, faster, and more convenient way to purchase and manage software across the Cisco portfolio and across your organization. And it’s secure-you control what users can access. With Smart Licensing you get:

◦    Easy activation: Smart Licensing establishes a pool of software licenses that can be used across the entire organization—no more PAKs (product activation keys).

◦    Unified management: My Cisco Entitlements (MCE) provides a complete view into all of your Cisco Products and services in an easy-to-use portal, so you always know what you have and what you are using.

◦    License flexibility: Your software is not node-locked to your hardware, so you can easily use and transfer licenses as needed.

◦    To use Smart Licensing, you must first set up a Smart Account on Cisco Software Central (software.cisco.com).

For a more detailed overview of Cisco licensing, go to cisco.com/go/licensingguide.

Four levels of license are supported on the Cisco Catalyst CW9800 wireless controllers. The controllers can be configured to function at any one of the four levels:

●     Cisco DNA Essentials: At this level the Cisco DNA Essentials feature set will be supported.

●     Cisco DNA Advantage: At this level the Cisco DNA Advantage feature set will be supported.

●     NE: At this level the Network Essentials feature set will be supported. This is available with Cisco DNA Essentials.

●     NA: At this level the Network Advantage feature set will be supported. This is available with Cisco DNA Advantage.

For customers who purchase Cisco DNA Essentials, Network Essentials will be supported and will continue to function even after term expiration. And for customers who purchase Cisco DNA Advantage, Network Advantage will be supported and will continue to function even after term expiration.

Initial bootup of the controller will be at the Cisco DNA Advantage level.

For questions, contact the Cisco Catalyst CW9800 Series wireless controllers Licensing mailer group at
ask-catalyst9800licensing@cisco.com.

Managing licenses with Smart Accounts

Creating Smart Accounts by using the Cisco Smart Software Manager (SSM) enables you to order devices and licensing packages and also manage your software licenses from a centralized website. You can set up the Smart Account to receive daily email alerts and to be notified of expiring add-on licenses that you want to renew. A Smart Account is mandatory for the Cisco Catalyst CW9800 wireless controllers. For more information on Smart Accounts, refer to https://www.cisco.com/go/smartaccounts.

Warranty

Find warranty information on Cisco.com at the Product Warranties page.

Cisco 1-year limited hardware warranty terms

The following are terms applicable to your hardware warranty. Your embedded software is subject to the Cisco EULA and/or any SEULA or specific software warranty terms for additional software products loaded on the device.

Duration of hardware warranty: One (1) year.

Replacement, repair, or refund procedure for hardware: Cisco or its service center will use commercially reasonable efforts to ship a replacement part within ten (10) working days after receipt of the Return Materials Authorization (RMA) request. Actual delivery times may vary depending on customer location.

Cisco reserves the right to refund the purchase price as its exclusive warranty remedy.

Cisco environmental sustainability

Information about Cisco’s environmental sustainability policies and initiatives for our products, solutions, operations, and extended operations or supply chain is provided in the “Environment Sustainability” section of Cisco’s Corporate Social Responsibility (CSR) Report. Reference links to information about key environmental sustainability topics (mentioned in the “Environmental Sustainability” section of the CSR Report) are provided in the following table:

Table 8.           Links to sustainability information

Cisco makes the packaging data available for informational purposes only. It may not reflect the most current legal developments, and Cisco does not represent, warrant, or guarantee that it is complete, accurate, or up to date. This information is subject to change without notice.

Ordering information

Table 9.           Ordering information

Cisco Capital

Flexible payment solutions to help you achieve your objectives

Cisco Capital^® makes it easier to get the right technology to achieve your objectives, enable business transformation, and stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments Learn more.