Cisco Catalyst 9000 Switching
February 05, 2019

Cisco Catalyst 9000 Switching

Adithyo Dewangga Wijaya | TrustRadius Reviewer
Score 9 out of 10
Vetted Review

Overall Satisfaction with Cisco DNA Center

[Cisco Catalyst Switches addresses business problems for our clients related to] Trends in enterprise.
  • Security: Average cost of a data breach
  • Mobility: Changing workforce and apps hyper-connected
  • Enterprise IoT: Infrastructure, convergence & vulnerable endpoints
  • Cloud: Devices per Admin, agility consumption models
  • Automation
  • Security
  • Analytics
  • Campus, Business-critical branch and simple branch
  • Price
  • Licensing and subscription
  • Hardware bugs
  • 99 % Troubleshooting time savings
  • 94% Provisioning time savings
*High availability - Support redundancy for business resiliency.
Cisco Catalyst Switches offer innovative ISSU features and hot standby N+1 redundancy in stacks.
HPE cannot meet this requirement.
Huawei claims to have ISSU on some switches, but still is considered “lossy” as it drops packets. Huawei supports patching.
*Application Visibility and Control (AVC) - Recognize and service more than 1400 applications. Differentiate between nonencrypted and encrypted apps to help ensure appropriate treatment of business-critical traffic.
Cisco Access switches can inspect traffic and application flows to enforce network access policy and protect against attacks with Cisco AVC, Flexible NetFlow, NBAR2.
HPE - switching platforms are limited to sFlow, at best can sample 1 out 50 packets.
Huawei - Limited SLA monitoring with Huawei iPCA.
*Cisco offers Persistent PoE and Fast PoE and Universal PoE while providing multiple-level redundancy through StackPower.
HPE Limited - HPE offers basic PoE/ PoE+ (30W) support, and supplies 1:1 power redundancy via dual power supplies supported in a limited number of switches.
Huawei Limited - supports PoE and PoE+ PoH (95W) on a single S5700 platform. Power redundancy is 1:1 PoH (power over HDMI) (95W) on a single S5700 platform, Huawei also supports Fast PoE and Perpetual PoE with it’s latest software.
*Intent-Based Networking - Centralize and automate network design, policy, and provisioning of all wired and wireless networks with Cisco DNA Center.
HPE Limited - Aruba Tunneled Node is offered as a catch-all solution, but it cannot scale. Aruba wants to dumb down the switch and force every user to the WLC for unified policy and segmentation; still relies on a traditional network (L2, STP, etc) pushing the problem up the network hierarchy.
Huawei - SVF does not provide an Intent based networking, and is not controller based for automation, etc.
Solve the challenges by Software-Defined Access. Networking at the speed of software! With Cisco DNA Center central network management system, we can do automation for provisioning, zero-touch deployment and have a single pane of glass for all devices.

[Some of the downsides:]
  • Increased Network Complexity: Multiple steps, user credentials, complex interactions; Multiple touch-points
  • Difficult to Segment: Ever increasing number of users and endpoint types; Ever increasing number of VLANs and IP Subnets
  • Slower Issue Resolution: Separate user policies for wired and wireless networks; Unable to find users when troubleshooting