Introduction
Choosing the right wireless LAN controller (WLC) is one of the most important design decisions in an enterprise Wi-Fi deployment. The Cisco Catalyst 9800 Series offers consistency across hardware appliances, embedded controllers on Catalyst switches and access points, and cloud-based options, but which one best fits your environment?
For the bigger picture of the platform, see the Catalyst 9800 wireless complete guide.
In this post, we’ll break down the three major options in the 9800 family (appliances, embedded wireless controllers, and cloud-based controllers), compare their strengths, and help you decide which model to choose for your deployment.
Background: Why Controller Models Matter
The Catalyst 9800 family is Cisco’s next-generation controller platform. It runs a consistent IOS XE operating system across all form factors, meaning:
- Same IOS XE code, whether on a hardware appliance, a Catalyst switch or access point (embedded), or a cloud instance
- Easier migration from AireOS to IOS XE
- Centralized policy, security, and automation with DNA Center integration
The hardware form factor matters because it impacts scale, redundancy, and deployment model.
Catalyst 9800 Hardware Models
1. Appliance Models (9800-40, 9800-80, 9800-L)
Dedicated, rack-mounted controllers for large, medium, and small deployments.
- 9800-40: Mid-sized enterprises. Supports up to 2,000 APs / 32,000 clients, up to 40 Gbps.
- 9800-80: Large campuses. Supports up to 6,000 APs / 64,000 clients, up to 80 Gbps.
- 9800-L: Small and midsize sites. A half-width 1RU box with copper (9800-L-C) or fiber (9800-L-F) uplinks. Supports 250 APs / 5,000 clients and 5 Gbps, or 500 APs / 10,000 clients with the optional Performance license (up to 10 Gbps with large packets, still 5 Gbps with IMIX).
- Purpose-built for high availability and large throughput needs.
- Redundancy with SSO (Stateful Switchover) between active/standby controllers.
- Sale status: Cisco stopped selling the 9800-40 and 9800-80 on December 31, 2025 (support runs to December 31, 2030). Their listed replacements are the CW9800M and CW9800H1/H2. The 9800-L and 9800-CL are not affected.
Example use cases:
- Large universities
- Corporate headquarters with thousands of users
- Hospitals or airports with high-density requirements
2. Embedded Wireless Controller (EWC) on Catalyst Switches and APs
For customers already running Catalyst 9300, 9400, or 9500 switches, the 9800 controller software can run on the switch itself as the Embedded Wireless Controller (EWC), so there is no separate appliance to buy. Catalyst 9100 Wi-Fi 6 access points can run EWC too.
- EWC on Catalyst 9300, 9400, 9500, and 9500H switches: up to 200 APs / 4,000 clients per switch or stack (9300L models: 50 APs / 1,000 clients)
- On switches, EWC is supported in SD-Access fabric deployments; the standalone WebUI (non-SD-Access) mode ended with IOS XE 17.3.x
- Same IOS XE code as the appliances, but with lower scale and some features unsupported
- Great for collapsing services into fewer devices (switch + WLC together)
- EWC on Catalyst 9100 APs (9105AXI, 9115AX, 9117AX, 9120AX, 9124AX, 9130AX): up to 50 APs / 1,000 clients from IOS XE 17.12.1, with no controller hardware at all
- Lower hardware footprint, good for small branches
Example use cases:
- Enterprises consolidating gear onto Catalyst 9000 switches
- Organizations that want fewer standalone appliances
- Small SD-Access fabric sites already built on Catalyst 9000 switches
3. Cloud-Based Option (9800-CL)
A virtualized wireless controller that runs in the cloud or on-prem virtual environments.
- Deployed on VMware ESXi, KVM, Hyper-V, Cisco NFVIS, or in public cloud (AWS/Azure/GCP/OCI)
- Supports up to 6,000 APs / 64,000 clients with the large template (scale depends on VM resources; templates start at 100 APs / 1,000 clients)
- Up to 2.1 Gbps of throughput, or 5 Gbps with the high-throughput profile and SR-IOV NICs on ESXi or KVM
- Easy to spin up and scale without racking hardware
- Ideal for distributed enterprises or service providers
- Licensing is flexible - subscription-based
Example use cases:
- Cloud-first organizations
- Managed service providers offering Wi-Fi as a service
- Enterprises standardizing on virtualization
Which Model Should You Choose?
- Choose Appliance (9800-40/80/L):
If you need maximum performance, reliability, and scale in a dedicated device. Best for large campuses or mission-critical environments; the 9800-L covers small and midsize sites. - Choose Embedded (EWC):
If you want to run the controller on hardware you already own: a Catalyst 9300/9400/9500 switch in an SD-Access fabric, or a Catalyst 9100 access point. Best for small sites and branches. - Choose 9800-CL (Cloud):
If your organization is cloud-first, needs fast deployment, or prefers OPEX subscription models over CAPEX. Ideal for global organizations with multiple locations.
Pitfalls & Best Practices
- Don’t oversize - match model to actual AP/client counts (avoid wasted investment)
- Always deploy with redundancy (SSO or clustering) for production environments.
- For cloud (9800-CL), ensure hypervisor resource allocation is adequate (CPU/RAM)
- Keep all controllers updated with the latest Cisco IOS XE recommended release.
- For EWC on a switch, confirm the switch model, IOS XE release, and wireless sub-package, and that the site fits within 200 APs / 4,000 clients.
Summary / Cheat Sheet
- Depends on VM/cloud resources.
Key Commands:
show wireless summary
show wireless client summary
show redundancy summary
show license summary
More Information
The Cisco Catalyst 9800 Series continues to evolve with each new release. For the most up-to-date specifications, supported features, and detailed model comparisons, visit Cisco’s official product page:
👉 Cisco Catalyst 9800 Series Wireless Controllers
This resource includes:
- Latest scale numbers for APs and clients
- Supported software features and releases
- Datasheets, deployment guides, and configuration examples