Cisco CISCO862-K9 Full Product Description

1. Short Overview

Suffix Breakdown

• CISCO862: Official full PID part number for Ethernet + Serial backup base model of Cisco 860 Series small business ISR
• -K9: Permanent Cisco cryptographic license bundle enabling AES-128/AES-192/AES-256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 full encryption suite with dedicated crypto hardware offload

Core Differentiators

1. vs CISCO861-K9: CISCO861-K9 only carries a Combo Console/AUX port for low-speed dial backup; CISCO862-K9 adds a dedicated independent High-Speed Smart Serial 12-in-1 synchronous leased-line WAN port for high-rate serial backup links, separate from console management.
2. vs wireless variant CISCO862W-GN-A-K9: CISCO862-K9 omits integrated dual-band 802.11n MIMO WLAN AP hardware; wireless SKUs support on-site mobile wireless client access.
3. vs ADSL integrated CISCO867-K9 series: 867 embeds onboard ADSL2/2+ POTS modem; CISCO862-K9 relies on Ethernet broadband primary uplink plus serial leased-line backup.
4. vs industrial hardened C819HG series: CISCO862-K9 is commercial indoor desktop chassis with standard narrow temperature range, not certified for extreme industrial, vehicle or outdoor cabinet environments.
5. vs compact C812-K9: C812 only has two standalone Gigabit ports without internal switch or dedicated serial WAN; CISCO862-K9 embeds 4-port managed FE switch and independent high-speed serial backup interface.

2. Hardware Interface & Performance Specifications

Complete Port Layout

1. 1 × 10/100BASE-T Fast Ethernet WAN port: Primary broadband uplink for cable, fiber media converter or metro-Ethernet, auto MDI/MDI-X auto speed and duplex negotiation
2. 4 × 10/100BASE-T Fast Ethernet managed LAN switch ports
   • Supports 802.1Q VLAN tagging, port isolation, static MAC security, dedicated DMZ port assignment, broadcast storm control, SPAN port monitoring and Smartport macros
3. 1 × Independent High-Speed Smart Serial 12-in-1 WAN port: Dedicated synchronous/asynchronous/bisync leased-line backup interface, max 8 Mbps synchronous throughput, compatible with all Cisco serial DTE/DCE cables
4. 1 × Combo RJ45 Console/AUX dual-purpose port: Local CLI configuration via rollover cable; auxiliary analog dial modem for secondary out-of-band backup
5. USB 2.0 Type-A host port: External flash storage for log archiving, offline configuration backup and EEM script extensions
6. Hardware reset button, Kensington security lock slot for physical anti-theft protection

Memory & Storage

• DRAM: 256 MB standard system memory
• Flash storage: 128 MB onboard flash; factory preloaded c860-universalk9-mz Advanced Security IOS image, minimum supported release 12.4(15)XZ

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Desktop plastic commercial chassis, optional wall-mount bracket available
• Dimensions (W × D × H): 325 mm × 249 mm × 48 mm (12.8 × 9.8 × 1.9 inches) with rubber anti-slip feet
• Weight: 2.5 kg (5.5 lbs)
• Standard power supply: PWR-22W-AC external universal AC adapter, input 100–240 VAC 50/60 Hz, output 12 VDC
• Typical maximum power consumption: 19 W under full port load with serial WAN active
• Ingress protection: IP20, only suitable for dry indoor commercial office environments

Environmental Operating Specifications

• Operating temperature: 0°C ~ +40°C (32°F ~ 104°F)
• Storage temperature: -40°C ~ +70°C
• Relative humidity: 10%–85% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor to offload IPsec VPN tunnel encryption and reduce main CPU overhead under concurrent site-to-site and remote access tunnel loads
• Permanent K9 crypto license unlocks complete enterprise encryption stack: DES, 3DES, AES-128/192/256, SHA-1/SHA-2 hash algorithms, IKEv1/IKEv2 static site-to-site tunnels and Easy VPN remote access tunnels

4. Cisco IOS Advanced Security Feature Suite

WAN & Redundant Routing Functions

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, GRE/MGRE tunnel encapsulation, L2TP/L2TPv3 support
• Dual-WAN failover logic between FE primary Ethernet WAN and Smart Serial leased-line backup
• Policy-based routing (PBR), NAT/PAT overload, multi-NAT pools for logical LAN endpoint segmentation
• DHCP server/relay/client, DNS proxy, dynamic DNS, Ethernet OAM for metro-Ethernet link health monitoring
• Serial leased-line automatic failover triggered by primary WAN link loss

Enterprise Security Suite

• Zone-Based Stateful Policy Firewall (ZBFW) for logical separation of internal LAN, DMZ and untrusted internet traffic
• Easy VPN Server & Client, dynamic multipoint IPsec VPN tunnels for inter-branch corporate encrypted connectivity
• Basic signature-based threat detection, application filtering for HTTP, FTP and mainstream business traffic
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on all 4 managed LAN switch ports
• Secure management only: SSHv2, HTTPS; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), MAC address port lockdown on Fast Ethernet switch ports

QoS & Bandwidth Optimization

• Weighted Fair Queuing (WFQ), Class-Based WFQ (CBWFQ), Low Latency Queuing (LLQ) for voice, video and real-time business traffic prioritization
• NBAR deep application recognition to classify and prioritize business-critical applications
• RTP/TCP header compression, traffic shaping and policing to control metered broadband bandwidth consumption and avoid overage charges

Remote Management & Automation

• Zero-Touch Provisioning (ZTP) for standardized mass retail branch deployments
• Cisco IOS Embedded Event Manager (EEM) scriptable triggers for link failure alerts and automated WAN failover actions
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance monitoring
• Native compatibility with Cisco Configuration Professional (CCP) web GUI for simplified no-CLI deployment and daily monitoring
• GOLD onboard diagnostics for continuous remote hardware health inspection

5. Typical Deployment Scenarios

1. Small Retail Store Secure Redundant Broadband Gateway
   The integrated 4-port LAN switch connects POS payment terminals, office PCs and IP surveillance cameras; FE Ethernet acts as primary broadband uplink, while dedicated Smart Serial leased-line provides automatic backup during cable/fiber outages. Persistent IPsec VPN tunnels securely transmit transaction data back to retail corporate data centers, with zone firewall isolating sensitive payment systems from public internet threats.
2. Mission-Critical Tiny Regional Satellite Office Branch Router
   Cost-effective wired ISR for small remote offices requiring redundant WAN connectivity, supporting up to four local wired endpoints without purchasing external access switches. Serial leased-line backup guarantees uptime for critical business communications during primary broadband failure.
3. Teleworker Home Office Secure VPN Gateway with Serial Backup
   Deployed at remote employee residences to establish encrypted Easy VPN tunnels back to corporate headquarters; dedicated serial port supports low-speed leased-line backup for business continuity, stateful firewall protects home office devices from internet malware and unauthorized access.
4. Low-Density Unmanned IoT Site Wired Edge Router with Dual-WAN Redundancy
   Aggregates small-scale IP cameras and environmental monitoring sensors via FE LAN ports, maintaining persistent encrypted IPsec tunnels to central cloud or on-premises management platforms. Serial leased-line backup ensures uninterrupted data transmission if primary Ethernet uplink fails.
5. Small Financial Branch Secure Redundant Edge Router
   Dual-WAN redundancy meets strict financial business continuity requirements, encrypted IPsec tunnels transmit sensitive financial transaction data, hardware crypto acceleration supports multiple concurrent VPN tunnels without performance degradation.

6. Standard Package Contents of CISCO862-K9 SKU

Separately Sold Optional Accessories

• RJ45 rollover console cable for local CLI configuration
• Cisco Smart Serial synchronous leased-line DTE/DCE interface cables
• Spare replacement PWR-22W-AC power adapter
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for LAN/WAN connections

Software Licensing Information

• The-K9suffix includes a permanent built-in cryptographic license; no additional purchase required for IPsec, AES encryption and secure management protocols
• All core routing, dual-WAN failover, firewall, QoS, ZTP and managed switch features are fully included in the base Advanced Security IOS image; no extra paid feature licenses required
• No wireless AP feature licenses applicable (Wi-Fi radio hardware is omitted from this wired-only SKU)

Short Commercial Catalog Summary for Quotation