Cisco WS-X4013+ (Supervisor Engine II-Plus) Full Official Technical Specification Document

1. Product Overview

Official Full Designation

Cisco WS-X4013+ is theCatalyst 4500 Series Supervisor Engine II-Plus, a primary/redundant Layer 2/Light Layer 3 supervisor control module for Cisco Catalyst 4500 modular chassis switches, designed for enterprise wiring closets, branch offices, and medium-sized campus access layer deployments.

Core Definition: Hot-swappable 1U rack-mount supervisor engine that provides centralized switching control, chassis management, uplink connectivity, Layer 2 switching, basic Layer 3 routing, QoS, and enterprise security services for Catalyst 4500 modular switch chassis. It supports dual redundant deployment for high availability, and runs Cisco IOS native switch operating systemCisco.

SKU Naming Breakdown

1. WS-X: Cisco modular switch service/line card product series prefix
2. 4013: Base model identifier for Supervisor Engine II platform for Catalyst 4500
3. +: Enhanced "Plus" revision, upgraded memory and processing vs. original WS-X4013 base supervisor

Product Lifecycle Notice

• Official Global Release Year: 2007
• End-of-Sale (EoS) Announcement: Cisco ceased manufacturing WS-X4013+ and stopped new unit shipments
• Minimum Supported IOS Version: 12.2(37)SG for E-series chassis; 12.2(40)SG for 4507R/4510R chassisCisco
• End of Software Maintenance: No new feature releases post-EoS; limited critical security patch support concluded
• Final End-of-Support (EoSS) Date: Cisco official hardware repair and TAC engineering support terminated
• Legacy Status: All datasheets, installation guides, and IOS configuration manuals are archived on Cisco’s legacy collaboration documentation portal; only best-effort third-party refurbished hardware support is available.

Supported Chassis Compatibility

WS-X4013+ is fully compatible with all standard and E-series Catalyst 4500 modular switch chassis:

• WS-C4503, WS-C4506, WS-C4507R
• WS-C4503-E, WS-C4506-E, WS-C4507R-E / 4507R+E

Standard Factory Complete Bundle Contents

Each factory-sealed WS-X4013+ retail package contains all hardware and accessories required for out-of-box chassis deployment:

1. WS-X4013+ Supervisor Engine II-Plus hot-swappable 1U module
2. Region-specific AC power cord (for chassis power supply, not supervisor itself)
3. RJ-45 console rollover cable for local CLI management
4. Quick start hardware installation guide for supervisor insertion/removal
5. Global regulatory compliance, safety, and electromagnetic interference (EMI) certification documentation packet

Supported Software & Enterprise Deployment Architectures

Compatible Cisco IOS Software

WS-X4013+ exclusively runs Catalyst 4500 IOS SG train releases, minimum version 12.2(37)SG up to final stable maintenance releases. Modern IOS-XE platforms are not compatible with this legacy supervisor hardwareCisco.

Supported Deployment Architectures

1. Standalone Single Supervisor Deployment Single WS-X4013+ installed in Catalyst 4500 chassis for non-critical branch office access layer switches; all switching, routing and management functions run on the single supervisor engine.
2. Redundant Dual Supervisor High Availability Deployment Two identical WS-X4013+ supervisor engines inserted into the dual supervisor slots of redundant chassis (4507R, 4507R-E). Stateful Switchover (SSO) and Non-Stop Forwarding (NSF) are supported to eliminate data-plane outages during active supervisor hardware/software failures.
3. Campus Access Layer Enterprise Deployment Deployed in wiring closet Catalyst 4500 switches for user access, IP phone PoE aggregation, and basic inter-VLAN routing. Interoperable with CUCM for voice VLAN and IP phone QoS policy enforcement.
4. Branch Office WAN Edge Deployment Used in small regional branch Catalyst 4500 switches, supporting static routing, EIGRP stub routing, and ACL security policies for WAN internet and site-to-site VPN traffic filtering.

Core Integrated Functional Capabilities: 64 Gbps non-blocking switching fabric capacity, 48 Mpps wire-speed packet forwarding, Layer 2 802.1Q VLAN switching, basic Layer 3 static/EIGRP stub routing, IGMP Snooping multicast optimization, per-port hardware QoS classification/policing/shaping, 802.1X NAC user authentication, TACACS+/RADIUS centralized management security, SSO/NSF redundant high availability, OBTP calendar-based meeting QoS prioritization, centralized chassis line-card power/health monitoring, and RJ-45 console + Ethernet out-of-band management portsCisco.

2. Hardware & Performance Specifications

Core Switching & Routing Performance

• Total Switching Fabric Capacity: 64 Gbps non-blocking shared memory architecture
• Maximum Packet Forwarding Throughput: 48 million packets per second (Mpps) wire-speed L2/L3 forwarding
• CPU Processor: 266 MHz embedded RISC control CPU
• System Synchronous DRAM (SDRAM): 256 MB base onboard memory (non-upgradable)
• Onboard Flash Memory: 32 MB for IOS operating system image storage, configuration files, and logging data
• IP Forwarding Information Base (FIB) Table Size: Maximum 32,000 Layer 3 route entries
• Active VLAN Table Capacity: Up to 2,000 concurrent 802.1Q VLANs
• Multicast Group Table Capacity: 8,000 IGMP multicast entries with hardware snooping support
• Spanning Tree Protocol (STP) Instance Limit: 1,500 concurrent STP instances for multi-VLAN loop prevention
• Switched Virtual Interface (SVI) Limit: 1,000 Layer 3 inter-VLAN SVIs for basic campus routing

Front Panel Physical Port & Indicator Layout

1. Uplink Interfaces (2 × GBIC slots)
   • Two wire-speed Gigabit Ethernet GBIC uplink slots (Uplink 1 / Uplink 2) for fiber or copper Gigabit uplink connections to core campus switches
   • Per-port status LEDs: Link status, Active/Standby redundancy role indicator
2. Out-of-Band Management Interfaces
   • 1 × RJ-45 Console Port: Local serial CLI management for switch configuration, troubleshooting, and IOS image upgrades
   • 1 × 10/100BASE-TX RJ-45 Management Port (DTE): Independent out-of-band Ethernet management interface, isolated from data-plane traffic
3. System Status & Control Elements
   • Recessed protected factory reset switch for restoring full default chassis/supervisor configuration
   • Global system status LED: Green = healthy operational state, Red = critical hardware/fault error condition
   • Aggregate switch fabric load LED bar graph: Visual percentage indicator (1–100%) of total chassis switching throughput utilization

Hardware Chassis Physical Specifications

• Form Factor: Hot-swappable single 1U slot module for Catalyst 4500 series 19-inch rack-mount chassis
• Overall Module Dimensions (Width × Height × Depth): Standard Catalyst 4500 supervisor slot footprint, compatible with all supported chassis models
• Module Net Weight: ~1.7 kg bare supervisor unit
• Operating Temperature Range: 0°C to 35°C (32°F to 95°F) standard indoor data center/wiring closet environment
• Operating Relative Humidity: 10% to 90% non-condensing humidity for 24/7 continuous chassis operation
• Storage & Transport Temperature Range: -20°C to 60°C (-4°F to 140°F); non-condensing humidity 10%–90%
• Acoustic Operating Noise: Passive heatsink cooling design with no onboard fan; all chassis cooling fans are mounted on the main chassis power supply modules

3. Supported Layer 2 / Layer 3 Protocol & Feature Set

Layer 2 Switching Features

• IEEE 802.1Q tagged VLAN trunking (2,000 maximum active VLANs)
• IEEE 802.1D STP, IEEE 802.1w Rapid STP (RSTP), IEEE 802.1s Multiple STP (MSTP)
• IGMP v1/v2/v3 Snooping hardware multicast optimization (8,000 multicast group entries)
• Port security, MAC address learning limiting, static secure MAC address binding
• Private VLAN (PVLAN) host isolation for shared access ports
• Voice VLAN auto-detection and prioritization for Cisco IP phones
• Broadcast suppression (software-based rate limiting for broadcast flood traffic)

Layer 3 Routing Features (Lightweight, Access-Layer Optimized)

• Static IP routing, default static route for WAN internet access
• EIGRP Stub Routing only (full EIGRP/BGP/IS-IS not supported on WS-X4013+)
• Switched Virtual Interfaces (SVI) for inter-VLAN routing (1,000 maximum SVIs)
• Hardware ACL support: Router ACLs (RACLs), VLAN ACLs (VACLs), Port ACLs (PACLs) with zero performance overhead
• No native NetFlow hardware support on WS-X4013+ supervisor engine

QoS Traffic Management Features

• Full hardware-based per-port QoS classification, marking, policing and shaping
• Ingress policer capacity: 512 independent policer instances
• Egress policer capacity: 512 independent policer instances
• Traffic classification: Layer 2 CoS, Layer 3 DSCP/IP Precedence, port-based ACL matching
• Egress queue scheduling: Strict priority queuing, weighted round-robin (WRR) shared queue shaping
• Dynamic Buffer Limiting (DBL) congestion avoidance to eliminate egress buffer overflow packet loss
• QoS sharing for non-blocking Gigabit Ethernet port traffic only

Enterprise Security Features

• Centralized AAA authentication, authorization, accounting via TACACS+ and RADIUS protocol servers
• IEEE 802.1X port-based Network Access Control (NAC)
  • Dynamic VLAN assignment for authenticated user devices
  • Voice VLAN coexistence with data 802.1X authentication
  • Guest VLAN and Private Guest VLAN for unauthenticated endpoints
  • RADIUS-supplied session timeout policy enforcement
• DHCP Snooping with DHCP Option 82 insertion to block rogue DHCP server attacks
• Layer 2 trusted boundary security policy to prevent unauthorized DHCP/ARP traffic injection
• Per-port ingress/egress ACL security filtering for data-plane traffic

High Availability Redundancy Features

• Stateful Switchover (SSO): Full synchronization of Layer 2 MAC address tables, ARP tables, user session state between active and standby WS-X4013+ redundant supervisors
• Non-Stop Forwarding (NSF): Maintains wire-speed Layer 3 packet forwarding during active supervisor failover, eliminates inter-VLAN routing traffic outages
• Hot-swappable supervisor module design: Insert/remove replacement supervisor without powering down the entire Catalyst 4500 chassis

4. Network Security & QoS Compliance Standards

1. Dual-stack IPv4 / IPv6 network protocol support; DHCP dynamic IP address assignment or static manual IP configuration for management ports
2. Enterprise Network Access Security Controls: IEEE 802.1X EAP-TLS/EAP-PEAP wireless/wired authentication; multi-level local administrator password access control; granular role-based access control (RBAC) policies for web-based device management portal
3. End-to-End Media Traffic Encryption: H.235v3 compliant AES encryption for management CLI and remote API control traffic; TLS encrypted HTTPS web management portal communications
4. Remote Administration Security Protocols: Encrypted SSH v2 secure shell CLI remote access; HTTPS TLS 1.1 / TLS 1.2 encrypted web management portal; XML/SOAP encrypted remote API interfaces for integration with third-party network monitoring and AV control systems
5. Digital Identity Certificate Support: Manufacturer-Installed Certificates (MIC), Locally Significant Certificates (LSC), and X.509 DER/Base64 digital identity certificates for secure TLS authentication to TACACS+/RADIUS AAA servers
6. QoS Traffic Prioritization Compliance: IEEE 802.1Q VLAN tagging for logical segmentation of voice/media traffic and enterprise data traffic; IEEE 802.1p Layer 2 CoS marking to prioritize real-time voice/video media streams above standard office data packets, eliminating conference audio/video latency and packet loss artifacts.

5. Call Control & Intelligent Network Automation Features

Core Enterprise Unified Communications & Meeting QoS Feature Set

1. Supported Unified Communications Deployment Scenarios:
   • Campus IP phone access layer aggregation with Cisco CUCM integration
   • Branch office WAN edge voice traffic filtering and QoS prioritization
   • Scheduled enterprise conference meeting traffic dynamic bandwidth prioritization
2. Complete Voice & Video Call Control Operations:
   • Voice VLAN auto-detection for Cisco IP phones, automatic CoS/DSCP marking of VoIP media packets
   • Per-port voice traffic policing to limit rogue voice stream bandwidth consumption
   • OBTP (One Button To Push) calendar-scheduled meeting dynamic QoS policy activation, automatically prioritizing video conference traffic during pre-booked enterprise meetings
3. Directory & Network Log Management Capabilities:
   • LDAP corporate directory lookup compatibility integrated with Cisco Unified Communications Manager (CUCM) and Cisco TelePresence Management Suite (TMS)
   • Persistent local switch logging storage on onboard flash memory; remote syslog server export for centralized enterprise network audit tracking
4. Supplementary Unified Communications Features: Integrated visual voicemail indicator support for IP phone endpoints, single number reach mobility feature support, ad-hoc point-to-point video conference traffic prioritization; URI dialing support for SIP video endpoints, RFC 4733 DTMF tone transmission for analog PSTN gateway integration; NTP network time synchronization for accurate meeting log timestamps, DNS service discovery, automatic gatekeeper discovery for legacy H.323 TelePresence endpoint interoperability.

Intelligent Network Workflow Automation Functions

1. OBTP (One Button To Push) Scheduled Meeting QoS Sync: When enterprise video conferences are scheduled via Microsoft Outlook/Google Calendar and launched from Cisco TelePresence endpoints connected to the Catalyst 4500 access switch, the WS-X4013+ supervisor automatically applies high-priority QoS policies to the conference endpoint port without manual administrator configuration
2. Automatic System Hardware Fault Monitoring: Continuous real-time monitoring of all chassis line-card power consumption, temperature, and link status; automated SNMP trap alert generation sent to enterprise network monitoring servers for hardware failure pre-alerting
3. Multi-Platform Meeting Interoperability: Native certified support for Cisco Webex Meetings traffic QoS prioritization, all third-party standards-compliant SIP/H.323 video conferencing endpoints without requiring auxiliary external AV switching hardware or third-party media bridge equipment
4. Multi-Mode Device Control Interfaces: Full Catalyst 4500 chassis and supervisor function control via three independent user interface methods:
   • Local RJ-45 console CLI (primary local administrator control method for all switch configuration and troubleshooting functions)
   • Remote HTTPS encrypted web administration portal for off-site enterprise IT administrator full chassis configuration and real-time port/route status monitoring
   • Bidirectional SNMP v2c / v3 MIB control integration for third-party enterprise network monitoring automation systems (SolarWinds, PRTG, Zabbix)
5. Third-Party Enterprise Network Monitoring Automation Integration: Supports SNMP trap notification linkage with third-party network monitoring platforms, standardized MIB object libraries for chassis resource utilization tracking, fully customizable automation macros for scheduled switch configuration backup, IOS image upgrade scheduling, and routine port status audit workflows
6. Digital Signage Kiosk Standby Mode QoS: Configurable automatic QoS policy adjustment for connected digital signage kiosk endpoints during off-hours non-meeting periods, lowering signage traffic priority to reserve bandwidth for critical enterprise voice and video conference traffic

6. Supported Enterprise Compatibility Platforms

1. On-Premises Unified Communications Architecture: Cisco Unified Communications Manager (CUCM) version 8.x, 9.x, 10.x stable official software releases with dedicated Catalyst 4500 access switch voice VLAN and QoS compatibility configuration templates, integrated with Cisco Unified Presence (Jabber IM/presence synchronization) and Cisco TelePresence Management Suite (TMS) for enterprise-wide IP phone and video conference endpoint full-lifecycle management
2. Remote Access & Cloud Hybrid Architecture: Cisco TelePresence Expressway-C / Expressway-E cross-firewall traversal gateways for secure off-site remote TelePresence endpoint registration across corporate network firewalls via Gigabit Ethernet wired LAN infrastructure; native support for Cisco WebEx cloud meeting platform and Cisco TelePresence Management Suite (TMS) centralized on-premises device management portal
3. Third-Party Interoperability Compliance: Fully standards-compliant SIP RFC signaling protocol, H.323 and H.460 firewall traversal communication protocols, compatible with all industry-standard third-party video conferencing platforms, IP PBX telephone systems and multi-vendor TelePresence endpoint hardware from competing collaboration vendors, as well as all third-party enterprise network monitoring and SNMP management platforms.

7. Core Deployment Advantages of Cisco WS-X4013+ Supervisor Engine II-Plus

1. Standard hot-swappable 1U supervisor module form factor optimized for medium enterprise wiring closets and small regional branch office Catalyst 4500 modular chassis switches; dual redundant supervisor deployment capability eliminates single points of failure for business-critical campus access layer networks
2. Native AES encrypted management control traffic and full enterprise-grade 802.1X NAC security policy enforcement meets strict enterprise, government, healthcare and financial regulated industry network access compliance standards, enabling deployment within classified corporate campus and branch office network environments without external dedicated standalone security gateway hardware
3. Hardware wire-speed Layer 2 switching and lightweight Layer 3 routing delivers 64 Gbps non-blocking fabric and 48 Mpps forwarding throughput while maintaining low chassis power consumption, ideal for high-density PoE IP phone and desktop user access layer switch deployments
4. Built-in SSO/NSF redundant high availability functionality eliminates requirement for complex external routing protocol failover architecture for campus access layer networks, reducing enterprise unified communications hardware capital expenditure for headquarters and regional branch office deployments
5. Dual independent uplink GBIC slots plus separate out-of-band Ethernet management port segregates production data-plane traffic from administrative switch management traffic, reducing security exposure risks and simplifying enterprise network access control policy design
6. Passive heatsink cooling design delivers zero audible operational noise for the supervisor module itself; all cooling load is handled by the main chassis power supply fans, making WS-X4013+ ideal for quiet wiring closet and small office equipment room environments where noisy active-cooled supervisor modules create disruptive background distractions
7. Full backward compatibility with all legacy Catalyst 4500 series non-E and E-series modular switch chassis, fully interoperable with existing enterprise CUCM/VCS/TMS on-premises unified communications infrastructure, enabling cost-effective legacy supervisor hardware replacement without full corporate campus access layer switch chassis refresh investment
8. Centralized mass Gigabit Ethernet wired LAN device fleet management via CUCM, TMS or VCS simplifies bulk IOS SG firmware batch upgrades, batch standardized enterprise security/QoS policy template deployment, real-time distributed headquarters/branch office Catalyst 4500 chassis hardware health monitoring and remote IT administrator troubleshooting, drastically reducing daily enterprise IT administration workload for large-scale distributed global corporate headquarters and regional branch office network fleets.

8. Supplementary Product Specification Notes

SKU / Model Naming Recap

• WS-X4013+: Cisco Catalyst 4500 Series Supervisor Engine II-Plus modular switch control module, 64Gbps switching fabric, 48Mpps forwarding throughput, dual GBIC Gigabit uplink ports, separate RJ45 console and out-of-band Ethernet management ports, universal 100–240V AC chassis power input compatible, K9 secure IOS firmware compliant with AES encrypted management traffic and full enterprise NAC security policy support for regulated industry network deployments.
• K9 Compliance Note: All factory WS-X4013+ IOS SG firmware releases implement H.235v3 AES 128-bit encrypted remote CLI, web portal and SNMP management traffic, meeting Cisco K9 secure network hardware classification standards required for government, military, healthcare, and financial regulated enterprise campus and branch office network deployments.
• NR Variant Note: No separate RF-restricted NR cellular radio variant exists for WS-X4013+; the supervisor module contains no integrated cellular mobile radio signal generation or transmission modules, all network connectivity is delivered exclusively via wired Gigabit Ethernet GBIC uplinks and copper RJ45 management ports only.

Regulatory Compliance Certifications

Fully compliant with global international industry certification standards including EU Low-Voltage Directive 2014/35/EU (IEC/EN 60950-1), EMC Electromagnetic Compatibility Directive 2004/108/EC, UL 60950-1 safety certification, CAN/CSA-C22.2 No. 60950-1, FCC CFR 47 Part 15 Class B electromagnetic emissions certification for office IT networking equipment, and global RoHS hazardous substance restriction compliance approval.

Factory Hardware Warranty Terms

Standard 1-year limited hardware warranty coverage for brand-new factory-sealed complete WS-X4013+ supervisor engine modules purchased through official Cisco authorized global distribution channel partners. Critical lifecycle limitation note: The product EoS/EoSS status restricts active hardware replacement warranty service eligibility for all WS-X4013+ units purchased after Cisco’s official End-of-Sale cutoff date; all formal Cisco technical TAC engineering hardware repair support services terminated permanently at the published End-of-Support date.

UNSPSC Classification Code

43191500 (Modular enterprise LAN switch supervisor control module, 64Gbps non-blocking switching fabric, wire-speed L2/L3 packet forwarding, SSO/NSF redundant high availability, AES encrypted network management traffic, 802.1X NAC enterprise security, compatible with Cisco Catalyst 4500 series modular rack-mount access layer chassis switches).