Cisco C887VAM-K9 Full Product Description

1. Short Overview

Suffix Breakdown

• C887: Base model identifier of Cisco 880VA Series xDSL ISR for analog POTS telephone copper circuits
• VA: VDSL + ADSL Enhanced multimode DSL chipset compliant with ITU G.993.2 VDSL2 and G.992.5 ADSL2+ global standards
• M: Annex M DSL profile, optimized for boosted upstream transmission rates on POTS copper loops
• -K9: Permanent Cisco cryptographic license bundle enabling AES-128/AES-192/AES-256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 full encryption suite with dedicated hardware crypto offload

Core Differentiators

1. vs C887VA-K9: C887VA-K9 uses standard Annex A DSL with limited upstream bandwidth; C887VAM-K9 implements Annex M, reallocates spectrum to deliver higher ADSL2+ upload throughput for branches with heavy outbound traffic (cloud upload, video, POS data).
2. vs wireless variant C887VAM-W-K9: C887VAM-K9 omits integrated 2.4GHz 802.11n WLAN AP hardware; wireless SKUs add built-in wireless access point for on-site mobile client coverage.
3. vs cellular C887VAMG-K9: No embedded 3.7G HSPA+ cellular WWAN modem; G variants provide independent wireless primary/backup WAN redundancy.
4. vs ISDN DSL C886VA-K9: C886VA-K9 supports ISDN Annex B copper loops; C887VAM-K9 is designed for analog POTS Annex M telephone lines.
5. vs Ethernet-only C881-K9: C881-K9 has no integrated DSL modem; C887VAM-K9 adds native multimode high-upload Annex M VDSL2/ADSL2+ primary WAN plus GE backup link for dual broadband flexibility.
6. vs entry-level plastic C867VAE-K9: C887VAM-K9 adopts robust fanless metal chassis, larger memory capacity, native inline IPS, DMVPN dynamic VPN and full EIGRP/BGP enterprise routing protocols for superior concurrent multi-service performance.
7. vs industrial hardened C819HG series: C887VAM-K9 is commercial desktop metal chassis with standard indoor temperature range, not certified for vehicle, railway or extreme outdoor industrial shock/vibration environments.

2. Hardware Interface & Performance Specifications

Dual Selectable WAN Interfaces (Automatic Failover Supported)

1. 1 × Integrated Multimode VDSL2/ADSL2+ POTS Port (Annex M)
   • Auto-negotiates VDSL2 or ADSL2+ line profiles, optimized for Annex M to maximize upstream bandwidth
   • Supports DSL OAM, seamless rate adaptation (SRA), real-time line quality monitoring and Dying Gasp fault detection
2. 1 × 10/100/1000BASE-T Gigabit Ethernet WAN port: Backup fiber/cable/metro-Ethernet broadband uplink, auto MDI/MDI-X speed and duplex negotiation

LAN Switch Interfaces

• Supports 802.1Q VLAN tagging, port isolation, static MAC security, dedicated DMZ port assignment, broadcast storm control, SPAN port monitoring and Smartport macros

Management & Auxiliary Ports

1. 1 × Combo RJ45 Console/AUX dual-purpose port: Local CLI configuration via rollover cable; analog dial modem for tertiary out-of-band backup connectivity
2. USB 2.0 Type-A host port: External flash storage for log archiving, offline configuration backup and EEM script automation extensions
3. Hardware reset button, Kensington security lock slot for physical anti-theft protection

Memory & Storage

• DRAM: 512 MB standard system memory for concurrent VPN tunnels, dual-stack routing, IPS inspection and dual-WAN traffic processing
• Flash storage: 256 MB onboard flash; factory preloaded c880-universalk9-mz Advanced Security IOS image, minimum supported release 15.3(3)M

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Fanless all-metal compact desktop chassis, optional wall-mount bracket available
• Dimensions (H × W × D): 44 mm × 325 mm × 264 mm (1.75 × 12.8 × 10.4 inches) with rubber anti-slip feet
• Weight: ~2.5 kg (5.5 lbs) without power supply
• Standard power supply: External universal AC adapter, input 100–240 VAC 50/60 Hz, output 12 VDC / 5 A
• Typical maximum power consumption: 24 W under full DSL + GE + all LAN ports active load
• Ingress protection: IP20, only suitable for dry indoor commercial office environments

Environmental Operating Specifications

• Operating temperature: 0°C ~ +40°C (32°F ~ 104°F); performance derates 1.5°C per 1000m altitude above 3000m
• Storage temperature: -20°C ~ +65°C (-4°F ~ 149°F)
• Relative humidity: 10%–85% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor to offload IPsec VPN tunnel encryption and eliminate CPU bottlenecks under up to 20 concurrent site-to-site and remote access VPN tunnels
• Permanent K9 crypto license unlocks complete enterprise encryption stack: DES, 3DES, AES-128/192/256, SHA-1/SHA-2 hash algorithms, IKEv1/IKEv2 static site-to-site tunnels, Easy VPN remote access and DMVPN hub-spoke dynamic tunnels
• Integrated DSL security filters for analog POTS copper line traffic isolation against DSL loop intrusion threats

4. Cisco IOS Advanced Security Feature Suite

Dual-WAN & xDSL Routing Functions

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, full IPv4/IPv6 dual-stack support
• Automatic dual-WAN failover logic between Annex M VDSL2/ADSL2+ primary DSL and Gigabit Ethernet backup link
• Multimode xDSL line management: DSL training, real-time line quality monitoring, rate adaptation, DSL OAM loop diagnostics optimized for Annex M high-upload profiles
• Policy-based routing (PBR), NAT/PAT overload, multi-NAT pools for logical LAN endpoint segmentation
• DHCP server/relay/client, DNS proxy, dynamic DNS, Ethernet OAM for metro-Ethernet link health monitoring
• Dial backup via AUX serial port for third-tier out-of-band connectivity

Enterprise Security Suite

• Zone-Based Stateful Policy Firewall (ZBFW) for logical separation of internal LAN, DMZ and untrusted internet traffic
• Dynamic Multipoint VPN (DMVPN), Easy VPN Server & Client, IKEv2 IPsec encrypted tunnels for inter-branch corporate encrypted connectivity over DSL or GE transport
• Signature-based inline Intrusion Prevention System (IPS), Cisco ScanSafe cloud URL filtering, application control for HTTP, FTP, IM and mainstream business traffic
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on all 4 managed LAN switch ports
• Secure management only: SSHv2, HTTPS; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), MAC address port lockdown on Fast Ethernet switch ports

QoS & High-Upload xDSL Bandwidth Optimization

• Weighted Fair Queuing (WFQ), Class-Based WFQ (CBWFQ), Low Latency Queuing (LLQ) for voice, video and real-time business traffic prioritization
• NBAR deep application recognition to prioritize cloud upload, SCADA, POS payment and video surveillance traffic leveraging Annex M elevated upstream capacity
• RTP/TCP header compression, DSL traffic shaping and policing to control metered xDSL bandwidth consumption and avoid overage charges

Remote Management & Automation

• Zero-Touch Provisioning (ZTP) for standardized mass service provider CPE and retail branch deployments
• Cisco IOS Embedded Event Manager (EEM) scriptable triggers for DSL line drop alerts and automatic WAN failover actions
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance monitoring, dedicated DSL MIB for copper line telemetry
• Native compatibility with Cisco Configuration Professional (CCP) web GUI for simplified no-CLI deployment and daily monitoring
• GOLD onboard diagnostics for continuous remote hardware health inspection of DSL modem and Ethernet interfaces

5. Typical Deployment Scenarios

1. High-Upload Small Retail Store Secure Dual-WAN Gateway
   Annex M VDSL2/ADSL2+ DSL delivers enhanced upstream bandwidth for bulk POS transaction uploads and multi-camera surveillance streaming; GE port serves as fiber/cable backup. The 4-port LAN switch connects payment terminals, office PCs and IP cameras, persistent IPsec DMVPN tunnels securely transmit large retail data back to corporate headquarters, zone firewall + IPS jointly isolate sensitive payment systems from public internet threats.
2. Cloud-Focused Teleworker Home Office Secure VPN Router
   Deployed at remote employee residences with analog POTS copper infrastructure, Annex M’s boosted upload performance supports large file cloud synchronization and video conferencing, encrypted Easy VPN tunnels back to corporate headquarters; stateful firewall protects home office devices from internet malware and unauthorized access.
3. Service Provider Managed High-Upload POTS CPE for Business Subscribers
   Dual-WAN flexibility allows ISPs to provision high-bandwidth Annex M DSL or fiber GE connectivity on a single uniform hardware model, centralized ZTP mass deployment and remote monitoring via SNMP for managed service offerings targeting customers with heavy outbound traffic demands.
4. Unmanned IoT Site High-Data Backhaul Edge Router
   Aggregates high-resolution IP cameras and environmental monitoring sensors via FE LAN ports, Annex M DSL provides sufficient upstream throughput to stream continuous video and sensor data to central cloud platforms without fiber coverage; automatic GE failover ensures uninterrupted data transmission during copper line outages.
5. Mission-Critical Tiny Regional Satellite Office Dual-WAN Redundant Router
   Dual selectable WAN interfaces guarantee business continuity: Annex M high-upload DSL as primary access, Gigabit Ethernet as backup link for critical cloud, video and payment communications during copper line outages, EIGRP/BGP integration into enterprise core routing domains.

6. Standard Package Contents of C887VAM-K9 SKU

Separately Sold Optional Accessories

• RJ45 rollover console cable for local CLI configuration
• POTS DSL analog telephone line cord
• Spare replacement AC power adapter
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for LAN/GE WAN connections

Software Licensing Information

• The-K9suffix includes a permanent built-in cryptographic license; no additional purchase required for IPsec, AES encryption and secure management protocols
• All core routing, dual-WAN failover, Annex M xDSL line management, firewall, inline IPS, QoS, ZTP and managed switch features are fully included in the base Advanced Security IOS image; no extra paid feature licenses required
• No wireless AP or cellular modem feature licenses applicable (corresponding hardware omitted from this wired-only ISDN SKU)

Short Commercial Catalog Summary for Quotation