Overview

Software Release 17.10.x for the Catalyst 9400 Series continues support for a modular enterprise access switching platform focused on secure and scalable campus deployments. This release extends the unified ASIC architecture and supports high availability, enhanced forwarding behaviors, and programmability improvements.

New and updated features in this release include expanded forwarding and overlay capabilities, quality enhancements in EVPN VXLAN environments, and improvements to control-plane security and DHCP processing. Subsequent maintenance releases in this software train focus on stability and platform reliability.


New Features and Enhancements

17.10.1

Hardware and Software Enhancements

  • BGP EVPN VXLAN with IPv6 Underlay Support: Enables use of IPv6 addressing in the underlay for EVPN VXLAN fabrics, including deployment and migration paths for dual-stack environments.

  • Custom EAPoL Control: Allows customization of default EAPoL EtherType for MACsec configurations.

  • DHCP Gleaning Support: Introduces read-only DHCP snooping functionality for selective processing of DHCPv4 packets.

  • Enhanced Password Security: New character-repetition and restrict-consecutive-letters rules for policy enforcement commands.

  • MACsec Fallback Key with High Availability: Supports MACsec fallback key establishment during key mismatch scenarios.

  • Programmability Enhancements: Updated YANG models to version 1.1, expanded YANG data models, and ERSPAN capabilities on app-hosting interfaces.

  • PTPv2 Support with StackWise Virtual: Introduces Precision Time Protocol version 2 in StackWise Virtual configurations.

  • RADIUS Automated Testing Probe-on: Adds automated RADIUS test capabilities.

  • Reflexive Access Lists (IPv4): Adds support for session-aware access filtering.

  • Secure Data Wipe Option: Adds support for secure factory reset with data sanitization.

  • SHA256 Password-Masking: Adds SHA256-based password input masking.

  • Standalone Mode on Layer 3 EtherChannels: Enables independent mode configurations for Layer 3 EtherChannel interfaces.

Maintenance Releases (17.10.2 – 17.10.x)

  • Focused on defect resolution, performance improvements, and enhanced stability across campus deployments.

  • No major hardware features added beyond those in 17.10.1.


Supported Hardware

Chassis Models

Model Description
C9404R 4-slot chassis with redundant supervisors, two line-card slots, hot-swappable fan trays, and four power supply slots
C9407R 7-slot chassis with redundant supervisors, five line-card slots, and hot-swappable fan trays
C9410R 10-slot chassis with high-density line-card scalability

Supervisor Modules

Model Description
C9400-SUP-1XL-Y Advanced supervisor module
C9400-SUP-1XL Standard supervisor module

Line Cards

Model Description
C9400-LC-24S 24-port Gigabit Ethernet SFP module
C9400-LC-24XS 24-port 1G/10G SFP+ module
C9400-LC-48H 48-port Gigabit Ethernet UPOE+ module
C9400-LC-48HN 48-port multigigabit Ethernet module
C9400-LC-48P 48-port PoE/PoE+ Gigabit Ethernet module
C9400-LC-48S 48-port Gigabit Ethernet SFP module

Important Notes

Unsupported Features

The following technologies either are not supported in this release or have limited support on some hardware configurations:

  • TrustSec Network Device Admission Control on uplinks

  • Fast PoE modes

  • Audio Video Bridging standards

  • IPsec VPN on specific supervisor lineups

  • MACsec switch-to-switch on selected modules

  • VRF-aware web authentication

  • Some performance monitoring features


Upgrade and Maintenance Information

This release includes procedures for verifying installed software versions, software image installation, ROMMON and complex programmable logic device (CPLD) upgrades, supported downgrade paths, and in-service software upgrade procedures.


Limitations and Restrictions

Known limitations include quality-of-service policy constraints, redundancy behavior guidance, and interface-specific feature restrictions. Refer to the software documentation for operational checks prior to redundancy or upgrade events.


If needed, please contact
https://itmall.sale/