Cisco C881G-K9 Full Product Description

1. Short Overview

Suffix Breakdown

• C881: Base Ethernet platform of Cisco 880 Series enterprise small-branch ISR
• G: Embedded global multi-band HSPA+ cellular 3.7G WWAN modem with GPS/SMS support
• -K9: Permanent Cisco cryptographic license bundle enabling AES-128/AES-192/AES-256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 full encryption suite with dedicated hardware crypto offload

Core Differentiators

1. vs wired-only C881-K9: C881-K9 has no cellular modem; C881G-K9 adds embedded HSPA+ cellular WWAN for independent wireless primary/backup WAN redundancy.
2. vs Wi-Fi cellular C881GW-K9 variants: C881G-K9 omits integrated 2.4GHz/5GHz 802.11n WLAN AP hardware; GW models include built-in wireless access point for on-site mobile clients.
3. vs DSL integrated C887VAG-K9 series: 887VAG embeds onboard VDSL2/ADSL2+ POTS modem; C881G-K9 relies solely on Fast Ethernet fixed-line uplink paired with cellular backup.
4. vs entry-level plastic C812 / C861 routers: C881G-K9 uses robust metal chassis, larger memory capacity, native IPS intrusion prevention, DMVPN dynamic VPN and full EIGRP/BGP enterprise routing protocols, plus cellular wireless diversity.
5. vs industrial hardened C819HG series: C881G-K9 is commercial desktop metal chassis with standard indoor temperature range, not certified for vehicle, railway or extreme outdoor industrial shock/vibration environments.

2. Hardware Interface & Performance Specifications

Complete Port & Antenna Layout

Dual WAN Interfaces (Automatic Failover Supported)

1. 1 × 10/100BASE-T Fast Ethernet WAN port: Primary cable/fiber/metro-Ethernet broadband uplink, auto MDI/MDI-X speed and duplex negotiation
2. Embedded Global HSPA+ Release 7 Cellular WWAN Modem
   • Supported bands: 850/900/1900/2100 MHz UMTS/HSPA+ global roaming; backward compatible HSDPA, UMTS, EDGE, GPRS, GSMCisco
   • Throughput: Downlink up to 21.1 Mbps, uplink up to 5.76 Mbps
   • Built-in features: Standard 2FF SIM card slot, GPS geolocation tracking, SMS text messaging for remote link failure alerts
   • 2 × external SMA antenna ports: Separate cellular data and GPS signal extension antennas

LAN Switch Interfaces

• Supports 802.1Q VLAN tagging, port isolation, static MAC security, dedicated DMZ port assignment, broadcast storm control, SPAN port monitoring and Smartport macros

Management & Auxiliary Ports

1. 1 × Combo RJ45 Console/AUX dual-purpose port: Local CLI configuration via rollover cable; analog dial modem for tertiary out-of-band backup connectivity
2. USB 2.0 Type-A host port: External flash storage for log archiving, offline configuration backup and EEM script automation extensions
3. Hardware reset button, Kensington security lock slot for physical anti-theft protection

Memory & Storage

• DRAM: 512 MB standard system memory for concurrent VPN tunnels, dual-stack routing, IPS inspection and cellular WAN traffic processing
• Flash storage: 256 MB onboard flash; factory preloaded c880-universalk9-mz Advanced Security IOS image, minimum supported release 15.1(4)MCisco

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: All-metal compact desktop chassis, optional wall-mount bracket available
• Dimensions (W × D × H): 325 mm × 249 mm × 48 mm (12.8 × 9.8 × 1.9 inches) with rubber anti-slip feet
• Weight: 2.5 kg (5.5 lbs) without antennas
• Standard power supply: External universal AC adapter, input 100–240 VAC 50/60 Hz, output 12 VDC
• Typical maximum power consumption: 23 W under full FE + cellular + all LAN ports active load
• Ingress protection: IP20, only suitable for dry indoor commercial office environments

Environmental Operating Specifications

• Operating temperature: 0°C ~ +40°C (32°F ~ 104°F); performance derates 1.5°C per 1000m altitude above 3000m
• Storage temperature: -20°C ~ +65°C (-4°F ~ 149°F)
• Relative humidity: 10%–85% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor to offload IPsec VPN tunnel encryption and eliminate CPU bottlenecks under up to 20 concurrent site-to-site and remote access VPN tunnels
• Permanent K9 crypto license unlocks complete enterprise encryption stack: DES, 3DES, AES-128/192/256, SHA-1/SHA-2 hash algorithms, IKEv1/IKEv2 static site-to-site tunnels, Easy VPN remote access and DMVPN hub-spoke dynamic tunnels
• Cellular modem security features: SIM lock protection, SMS-triggered policy enforcement, GPS geofencing for location-based access control

4. Cisco IOS Advanced Security Feature Suite

Dual-WAN Cellular + Ethernet Routing & Redundancy

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, full IPv4/IPv6 dual-stack support
• Automatic policy-based dual-WAN failover logic between FE primary fixed-line WAN and HSPA+ cellular wireless backup
• Cellular-specific features: Cellular policy-based routing (PBR), metered cellular bandwidth shaping, SMS remote alerts for WAN outage events, GPS geofencing automation
• NAT/PAT overload, multi-NAT pools for logical LAN endpoint segmentation
• DHCP server/relay/client, DNS proxy, dynamic DNS, Ethernet OAM for metro-Ethernet link health monitoring
• Dial backup via AUX serial port for third-tier out-of-band connectivity

Enterprise Security Suite

• Zone-Based Stateful Policy Firewall (ZBFW) for logical separation of internal LAN, DMZ and untrusted internet traffic
• Dynamic Multipoint VPN (DMVPN), Easy VPN Server & Client, IKEv2 IPsec encrypted tunnels for inter-branch corporate encrypted connectivity over both wired and cellular links
• Signature-based inline Intrusion Prevention System (IPS), Cisco ScanSafe cloud URL filtering, application control for HTTP, FTP, IM and mainstream business traffic
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on all 4 managed LAN switch ports
• Secure management only: SSHv2, HTTPS; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), MAC address port lockdown on Fast Ethernet switch ports

QoS & Cellular Bandwidth Optimization

• Weighted Fair Queuing (WFQ), Class-Based WFQ (CBWFQ), Low Latency Queuing (LLQ) for voice, video and real-time business traffic prioritization
• NBAR deep application recognition to classify and prioritize business-critical applications over metered cellular links
• RTP/TCP header compression, traffic shaping and policing to prevent cellular data overage charges and control broadband bandwidth consumption

Remote Management & Automation

• Zero-Touch Provisioning (ZTP) for standardized mass retail and remote branch deployments
• Cisco IOS Embedded Event Manager (EEM) scriptable triggers for cellular signal loss, fixed-line link failure alerts and automated WAN failover actions
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance monitoring, dedicated 3G WWAN MIB for cellular modem telemetryCisco
• Native compatibility with Cisco Configuration Professional (CCP) web GUI for simplified no-CLI deployment and daily monitoring
• GOLD onboard diagnostics for continuous remote hardware health inspection of Ethernet and cellular modem interfaces

5. Typical Deployment Scenarios

1. Small Retail Store Dual-WAN Secure Gateway with Cellular Backup
   FE cable/fiber acts as primary POS transaction uplink; embedded HSPA+ cellular modem provides automatic failover during fixed-line outages. The 4-port LAN switch connects payment terminals, office PCs and IP surveillance cameras, persistent IPsec DMVPN tunnels securely transmit sensitive retail data back to corporate headquarters, while zone firewall + IPS isolate payment systems from public internet threats. GPS and SMS alerts deliver real-time notifications for store link outages.
2. Remote Teleworker Home Office Secure VPN Gateway with Wireless Backup
   Deployed at remote employee residences without reliable fixed broadband; cellular HSPA+ serves as primary or backup VPN transport to corporate network, stateful firewall protects home office devices from internet malware and unauthorized access.
3. Unmanned Remote IoT & Surveillance Site Edge Router
   Aggregates IP cameras and environmental monitoring sensors via FE LAN ports, cellular WWAN provides persistent encrypted IPsec tunnel backhaul for sites without fiber/cable coverage; SMS alerts notify operation teams of offline link status.
4. Mission-Critical Tiny Regional Satellite Office Redundant Branch Router
   Dual-WAN wired + cellular redundancy meets strict business continuity requirements, supporting EIGRP/BGP integration into enterprise core routing domains without purchasing separate external cellular modems.
5. Temporary Construction & Mobile Field Site Standalone Secure Router
   No fixed broadband infrastructure required; global multi-band cellular modem delivers primary internet/VPN connectivity for temporary office devices, surveillance cameras and access control equipment.

6. Standard Package Contents of C881G-K9 SKU

Separately Sold Optional Accessories

• RJ45 rollover console cable for local CLI configuration
• High-gain directional cellular/GPS antennas for weak signal field locations
• Spare replacement AC power adapter
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for LAN/FE WAN connections

Software Licensing Information

• The-K9suffix includes a permanent built-in cryptographic license; no additional purchase required for IPsec, AES encryption and secure management protocols
• All core routing, dual-WAN cellular failover, firewall, inline IPS, QoS, ZTP and managed switch features are fully included in the base Advanced Security IOS image; no extra paid feature licenses required
• No wireless AP feature licenses applicable (Wi-Fi radio hardware is omitted from this SKU)

Short Commercial Catalog Summary for Quotation