Cisco C867VAE-K9 Full Product Description

1. Short Overview

Suffix Breakdown

• C867: Base model identifier of 860VAE series xDSL ISR for analog POTS telephone line deployment
• VAE: VDSL + ADSL Enhanced multimode DSL chipset, supporting dual VDSL2/ADSL2+ standards
• -K9: Permanent Cisco cryptographic license bundle enabling full AES-256, IPsec, IKEv1/IKEv2 encryption suite with dedicated hardware offload

Core Differentiators

1. vs C866VAE-K9: C867VAE-K9 integrates VDSL2/ADSL2+ over analog POTS (Annex A); C866VAE-K9 uses VDSL2/ADSL2+ over ISDN copper (Annex B/M), compatible with different telco copper infrastructure typesCisco.
2. vs wireless variant C867VAE-W-E-K9: C867VAE-K9 omits 2.4GHz 802.11n WLAN radio; wireless SKUs add integrated AP for on-site mobile client accessCisco Russ....
3. vs legacy 861-K9 / 862-K9 non-DSL routers: 861/862 only support Fast Ethernet WAN without integrated xDSL modem; C867VAE-K9 adds native multimode VDSL2/ADSL2+ POTS DSL WAN and GE uplink for dual broadband redundancy.
4. vs industrial hardened C819HG series: C867VAE-K9 is commercial fanless metal desktop chassis with standard indoor temperature range, not certified for vehicle, railway or extreme outdoor industrial environments.

2. Hardware Interface & Performance Specifications

Dual Selectable WAN Interfaces (Single active link at one time)

1. 1 × Integrated VDSL2/ADSL2+ over POTS port: Multimode DSL modem supporting Annex A analog telephone loops, auto-negotiates VDSL2 or ADSL2+ line profiles, complies with ITU G.993.2 VDSL2 standard
2. 1 × 10/100/1000BASE-T Gigabit Ethernet WAN port: Primary fiber/cable/metro-Ethernet broadband uplink, auto MDI/MDI-X speed and duplex negotiation

LAN Switch Interfaces

• Supports 802.1Q VLAN tagging, port isolation, static MAC security, dedicated DMZ port assignment, broadcast storm control, SPAN port monitoring and Smartport macrosCisco

Management & Auxiliary Ports

1. 1 × Combo RJ45 Console/AUX dual-purpose port: Local CLI configuration via rollover cable; analog dial modem for out-of-band backup connectivity
2. USB 2.0 Type-A host port: External flash storage for log archiving, offline configuration backup and EEM script extensions
3. Hardware reset button, Kensington security lock slot for physical anti-theft protection

Memory & Storage

• DRAM: 512 MB system memory for concurrent VPN tunnels, dual-stack routing and multi-service security processingCisco
• Flash storage: 128 MB onboard flash, factory preloaded c860vae-universalk9-mz Advanced Security IOS image, minimum supported release 15.4(2)TCisco

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Fanless all-metal compact desktop chassis, optional wall-mount bracket available
• Dimensions (H × W × D): 44 mm × 241 mm × 302 mm (1.75 × 9.5 × 11.8 inches) with rubber anti-slip feet
• Weight: ~1.5 kg (3.3 lbs) without power supply
• Standard power supply: External universal AC adapter, input 100–240 VAC 50/60 Hz, output 12 VDC / 2.5 A
• Typical maximum power consumption: 24 W under full DSL + GE + all LAN ports active load
• Ingress protection: IP20, only suitable for dry indoor commercial office environments

Environmental Operating Specifications

• Operating temperature: 0°C ~ +40°C (32°F ~ 104°F); performance derates 1.5°C per 1000m altitude above 3000m
• Storage temperature: -20°C ~ +65°C (-4°F ~ 149°F)
• Relative humidity: 10%–85% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor to offload IPsec VPN tunnel encryption and reduce main CPU overhead under concurrent site-to-site and remote access tunnel loads
• Permanent K9 crypto license unlocks complete enterprise encryption stack: DES, 3DES, AES-128/192/256, SHA-1/SHA-2 hash algorithms, IKEv1/IKEv2 static site-to-site tunnels and Easy VPN remote access tunnels
• Integrated DSL security filters for analog copper line traffic isolation against DSL loop intrusion threats

4. Cisco IOS Advanced Security Feature Suite

Dual-WAN & xDSL Routing Functions

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, GRE/MGRE tunnel encapsulation, full IPv4/IPv6 dual-stack support
• Automatic dual-WAN failover logic between VDSL2/ADSL2+ POTS DSL and Gigabit Ethernet uplink
• Multimode xDSL line management: DSL training, line quality monitoring, rate adaptation, DSL OAM loop diagnostics and Dying Gasp support
• Policy-based routing (PBR), NAT/PAT overload, multi-NAT pools for logical LAN endpoint segmentation
• DHCP server/relay/client, DNS proxy, dynamic DNS, Ethernet OAM for metro-Ethernet link health monitoring
• Dial backup via AUX serial port for secondary out-of-band connectivity

Enterprise Security Suite

• Zone-Based Stateful Policy Firewall (ZBFW) for logical separation of internal LAN, DMZ and untrusted internet traffic
• Easy VPN Server & Client, dynamic multipoint IPsec VPN tunnels for inter-branch corporate encrypted connectivity
• Basic signature-based threat detection, application filtering for HTTP, FTP and mainstream business traffic
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on all 4 managed LAN switch ports
• Secure management only: SSHv2, HTTPS; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), MAC address port lockdown on Fast Ethernet switch ports

QoS & xDSL Bandwidth Optimization

• Weighted Fair Queuing (WFQ), Class-Based WFQ (CBWFQ), Low Latency Queuing (LLQ) for voice, video and real-time business traffic prioritization
• NBAR deep application recognition to classify and prioritize business-critical applications
• RTP/TCP header compression, DSL traffic shaping and policing to control metered xDSL broadband bandwidth consumption and avoid overage charges

Remote Management & Automation

• Zero-Touch Provisioning (ZTP) for standardized mass service provider CPE and retail branch deployments
• Cisco IOS Embedded Event Manager (EEM) scriptable triggers for DSL line drop alerts and automatic WAN failover actions
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance monitoring
• Native compatibility with Cisco Configuration Professional (CCP) web GUI for simplified no-CLI deployment and daily monitoring
• GOLD onboard diagnostics for continuous remote hardware health inspection of DSL modem and Ethernet interfaces

5. Typical Deployment Scenarios

1. Analog POTS Small Retail Store Secure Dual-WAN Gateway
   Integrated VDSL2/ADSL2+ POTS DSL acts as primary telco analog copper broadband uplink, GE port serves as fiber/cable backup; 4-port LAN switch connects POS payment terminals, office PCs and IP surveillance cameras. Persistent IPsec VPN tunnels securely transmit transaction data back to retail corporate data centers, zone firewall isolates sensitive payment systems from public internet threats.
2. POTS Line Teleworker Home Office Secure VPN Router
   Deployed at remote employee residences with standard analog telephone copper infrastructure, supports VDSL2/ADSL2+ home broadband, encrypted Easy VPN tunnels back to corporate headquarters; stateful firewall protects home office devices from internet malware and unauthorized access.
3. Service Provider Managed POTS CPE for Small Business Subscribers
   Dual-WAN flexibility allows ISPs to provision either DSL over analog POTS or fiber GE connectivity on a single uniform hardware model, centralized ZTP mass deployment and remote monitoring via SNMP for managed service offerings.
4. Low-Density Unmanned IoT Site POTS Wired Edge Router
   Aggregates small-scale IP cameras and environmental monitoring sensors via FE LAN ports, maintaining persistent encrypted IPsec tunnels to central cloud or on-premises management platforms; DSL copper link provides persistent connectivity for remote sites without fiber coverage.
5. Mission-Critical Tiny Regional Satellite Office Dual-WAN Redundant Router
   Dual selectable WAN interfaces guarantee business continuity: POTS DSL as primary access, Gigabit Ethernet as backup link for critical business communications during copper line outages.

6. Standard Package Contents of C867VAE-K9 SKU

Separately Sold Optional Accessories

• RJ45 rollover console cable for local CLI configuration
• POTS DSL analog telephone line cord
• Spare replacement AC power adapter
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for LAN/GE WAN connections

Software Licensing Information

• The-K9suffix includes a permanent built-in cryptographic license; no additional purchase required for IPsec, AES encryption and secure management protocols
• All core routing, dual-WAN failover, xDSL line management, firewall, QoS, ZTP and managed switch features are fully included in the base Advanced Security IOS image; no extra paid feature licenses required
• No wireless AP feature licenses applicable (Wi-Fi radio hardware is omitted from this wired-only SKU)

Short Commercial Catalog Summary for Quotation