Cisco C887VA-K9 Full Product Description

1. Short Overview

Suffix Breakdown

• C887: Base model identifier of Cisco 880VA Series xDSL ISR optimized for analog POTS Annex A telephone copper circuits
• VA: VDSL + ADSL Enhanced multimode DSL chipset compliant with ITU G.993.2 VDSL2 and G.992.5 ADSL2+ global standards
• -K9: Permanent Cisco cryptographic license bundle enabling AES-128/AES-192/AES-256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 full encryption suite with dedicated hardware crypto offloadCisco

Core Differentiators

1. vs C886VA-K9: C886VA-K9 supports VDSL2/ADSL2+ over ISDN Annex B copper loops; C887VA-K9 works with standard analog POTS Annex A telephone lines, compatible with mainstream telco residential/business copper infrastructureCisco.
2. vs wireless variant C887VA-W-K9: C887VA-K9 omits integrated 2.4GHz 802.11n WLAN AP hardware; wireless SKUs add built-in wireless access point for on-site mobile client coverage.
3. vs cellular C887VAG-K9: No embedded 3.7G HSPA+ cellular WWAN modem; G variants provide independent wireless primary/backup WAN redundancy.
4. vs Ethernet-only C881-K9: C881-K9 has no integrated DSL modem; C887VA-K9 adds native multimode POTS VDSL2/ADSL2+ primary WAN plus GE backup link for dual broadband flexibility.
5. vs entry-level plastic C867VAE-K9: C887VA-K9 adopts robust fanless metal chassis, larger memory capacity, native inline IPS, DMVPN dynamic VPN and full EIGRP/BGP enterprise routing protocols for superior concurrent multi-service performance.
6. vs industrial hardened C819HG series: C887VA-K9 is commercial desktop metal chassis with standard indoor temperature range, not certified for vehicle, railway or extreme outdoor industrial shock/vibration environments.

2. Hardware Interface & Performance Specifications

Dual Selectable WAN Interfaces (Automatic Failover Supported)

1. 1 × Integrated Multimode VDSL2/ADSL2+ POTS Port (Annex A)
   • Auto-negotiates VDSL2 or ADSL2+ line profiles, compatible with standard analog POTS copper loop infrastructure
   • Supports DSL OAM, seamless rate adaptation (SRA), real-time line quality monitoring and Dying Gasp fault detection
2. 1 × 10/100/1000BASE-T Gigabit Ethernet WAN port: Backup fiber/cable/metro-Ethernet broadband uplink, auto MDI/MDI-X speed and duplex negotiation

LAN Switch Interfaces

• Supports 802.1Q VLAN tagging, port isolation, static MAC security, dedicated DMZ port assignment, broadcast storm control, SPAN port monitoring and Smartport macros

Management & Auxiliary Ports

1. 1 × Combo RJ45 Console/AUX dual-purpose port: Local CLI configuration via rollover cable; analog dial modem for tertiary out-of-band backup connectivity
2. USB 1.1 Type-A host port: External flash storage for log archiving, offline configuration backup and EEM script automation extensionsCisco
3. Hardware reset button, Kensington security lock slot for physical anti-theft protection

Memory & Storage

• DRAM: 512 MB standard system memory for concurrent VPN tunnels, dual-stack routing, IPS inspection and dual-WAN traffic processing
• Flash storage: 256 MB onboard flash; factory preloaded c880-universalk9-mz Advanced Security IOS image, minimum supported release 15.3(3)M

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Fanless all-metal compact desktop chassis, optional wall-mount bracket available
• Dimensions (H × W × D): 44 mm × 325 mm × 264 mm (1.75 × 12.8 × 10.4 inches) with rubber anti-slip feet
• Weight: ~2.5 kg (5.5 lbs) without power supply
• Standard power supply: External universal AC adapter, input 100–240 VAC 50/60 Hz, output 12 VDC / 5 A
• Typical maximum power consumption: 24 W under full DSL + GE + all LAN ports active load
• Ingress protection: IP20, only suitable for dry indoor commercial office environments

Environmental Operating Specifications

• Operating temperature: 0°C ~ +40°C (32°F ~ 104°F); performance derates 1.5°C per 1000m altitude above 3000m
• Storage temperature: -20°C ~ +65°C (-4°F ~ 149°F)
• Relative humidity: 10%–85% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor to offload IPsec VPN tunnel encryption and eliminate CPU bottlenecks under up to 20 concurrent site-to-site and remote access VPN tunnels
• Permanent K9 crypto license unlocks complete enterprise encryption stack: DES, 3DES, AES-128/192/256, SHA-1/SHA-2 hash algorithms, IKEv1/IKEv2 static site-to-site tunnels, Easy VPN remote access and DMVPN hub-spoke dynamic tunnels
• Integrated DSL security filters for analog POTS copper line traffic isolation against DSL loop intrusion threats

4. Cisco IOS Advanced Security Feature Suite

Dual-WAN & xDSL Routing Functions

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, full IPv4/IPv6 dual-stack support
• Automatic dual-WAN failover logic between POTS VDSL2/ADSL2+ primary DSL and Gigabit Ethernet backup link
• Multimode xDSL line management: DSL training, real-time line quality monitoring, rate adaptation, DSL OAM loop diagnostics
• Policy-based routing (PBR), NAT/PAT overload, multi-NAT pools for logical LAN endpoint segmentation
• DHCP server/relay/client, DNS proxy, dynamic DNS, Ethernet OAM for metro-Ethernet link health monitoring
• Dial backup via AUX serial port for third-tier out-of-band connectivity

Enterprise Security Suite

• Zone-Based Stateful Policy Firewall (ZBFW) for logical separation of internal LAN, DMZ and untrusted internet traffic
• Dynamic Multipoint VPN (DMVPN), Easy VPN Server & Client, IKEv2 IPsec encrypted tunnels for inter-branch corporate encrypted connectivity over DSL or GE transport
• Signature-based inline Intrusion Prevention System (IPS), Cisco ScanSafe cloud URL filtering, application control for HTTP, FTP, IM and mainstream business trafficCisco
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on all 4 managed LAN switch ports
• Secure management only: SSHv2, HTTPS; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), MAC address port lockdown on Fast Ethernet switch ports

QoS & xDSL Bandwidth Optimization

• Weighted Fair Queuing (WFQ), Class-Based WFQ (CBWFQ), Low Latency Queuing (LLQ) for voice, video and real-time business traffic prioritization
• NBAR deep application recognition to classify and prioritize business-critical applications over metered DSL links
• RTP/TCP header compression, DSL traffic shaping and policing to control metered xDSL bandwidth consumption and avoid overage charges

Remote Management & Automation

• Zero-Touch Provisioning (ZTP) for standardized mass service provider CPE and retail branch deployments
• Cisco IOS Embedded Event Manager (EEM) scriptable triggers for DSL line drop alerts and automatic WAN failover actions
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance monitoring, dedicated DSL MIB for copper line telemetry
• Native compatibility with Cisco Configuration Professional (CCP) web GUI for simplified no-CLI deployment and daily monitoring
• GOLD onboard diagnostics for continuous remote hardware health inspection of DSL modem and Ethernet interfaces

5. Typical Deployment Scenarios

1. Analog POTS Copper Small Retail Store Secure Dual-WAN Gateway
   Integrated VDSL2/ADSL2+ POTS DSL acts as primary telco copper broadband uplink, GE port serves as fiber/cable backup; 4-port LAN switch connects POS payment terminals, office PCs and IP surveillance cameras. Persistent IPsec DMVPN tunnels securely transmit transaction data back to retail corporate data centers, zone firewall + IPS jointly isolate sensitive payment systems from public internet threats.
2. POTS Line Teleworker Home Office Secure VPN Router
   Deployed at remote employee residences with standard analog telephone copper infrastructure, supports VDSL2/ADSL2+ home broadband, encrypted Easy VPN tunnels back to corporate headquarters; stateful firewall protects home office devices from internet malware and unauthorized access.
3. Service Provider Managed POTS CPE for Small Business Subscribers
   Dual-WAN flexibility allows ISPs to provision either POTS DSL or fiber GE connectivity on a single uniform hardware model, centralized ZTP mass deployment and remote monitoring via SNMP for managed service offerings.
4. Low-Density Unmanned IoT Site POTS Wired Edge Router
   Aggregates small-scale IP cameras and environmental monitoring sensors via FE LAN ports, maintaining persistent encrypted IPsec tunnels to central cloud or on-premises management platforms; DSL copper link provides persistent connectivity for remote sites without fiber coverage.
5. Mission-Critical Tiny Regional Satellite Office Dual-WAN Redundant Router
   Dual selectable WAN interfaces guarantee business continuity: POTS DSL as primary access, Gigabit Ethernet as backup link for critical business communications during copper line outages, EIGRP/BGP integration into enterprise core routing domains.

6. Standard Package Contents of C887VA-K9 SKU

Separately Sold Optional Accessories

• RJ45 rollover console cable for local CLI configuration
• POTS DSL analog telephone line cord
• Spare replacement AC power adapter
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for LAN/GE WAN connections

Software Licensing Information

• The-K9suffix includes a permanent built-in cryptographic license; no additional purchase required for IPsec, AES encryption and secure management protocols
• All core routing, dual-WAN failover, xDSL line management, firewall, inline IPS, QoS, ZTP and managed switch features are fully included in the base Advanced Security IOS image; no extra paid feature licenses required
• No wireless AP or cellular modem feature licenses applicable (corresponding hardware omitted from this wired-only ISDN SKU)

Short Commercial Catalog Summary for Quotation