Cisco C888-K9 Full Product Description

1. Short Overview

Suffix Breakdown

• C888: Base model identifier of Cisco 880 Series ISR optimized for G.SHDSL leased-line WAN access
• -K9: Permanent Cisco cryptographic license bundle enabling AES-128/AES-192/AES-256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 full encryption suite with hardware offload support

Core Differentiators

1. vs C888EA-K9: C888-K9 uses G.SHDSL ATM mode; C888EA-K9 supports G.SHDSL EFM Ethernet over copper for carrier Ethernet deployments.
2. vs wireless variant C888W-K9: C888-K9 omits integrated 2.4GHz 802.11n WLAN AP hardware; wireless SKUs add built-in wireless access point for on-site mobile client coverage.
3. vs cellular C888G-K9: No embedded 3.7G HSPA+ cellular WWAN modem; G variants provide independent wireless primary/backup WAN redundancy.
4. vs Ethernet-only C881-K9: C881-K9 has no G.SHDSL or ISDN BRI ports; C888-K9 integrates native G.SHDSL leased-line primary WAN plus ISDN BRI dial backup for copper-based service provider networks.
5. vs xDSL POTS/ISDN C886VA / C887VA series: 886VA/887VA use VDSL2/ADSL2+ DSL; C888-K9 targets G.SHDSL symmetrical leased-line carrier circuits with ISDN backup.
6. vs entry-level plastic C860 series routers: C888-K9 adopts robust metal chassis, larger memory capacity, native inline IPS, DMVPN dynamic VPN and full EIGRP/BGP enterprise routing protocols for superior multi-service concurrent performance.
7. vs industrial hardened C819HG series: C888-K9 is commercial desktop metal chassis with standard indoor temperature range, not certified for vehicle, railway or extreme outdoor industrial shock/vibration environments.

2. Hardware Interface & Performance Specifications

Dual Redundant WAN Interfaces

1. 1 × Integrated G.SHDSL WAN Port (ITU G.991.2 ATM mode)
   • Symmetrical G.SHDSL leased-line primary uplink, ATM encapsulation, multi-pair copper loop support, DSL OAM line monitoring and Dying Gasp fault detection
2. 1 × ISDN BRI S/T RJ45 WAN Port: Independent ISDN dial backup WAN for automatic failover during G.SHDSL line outages

LAN Switch Interfaces

• Supports 802.1Q VLAN tagging, port isolation, static MAC security, dedicated DMZ port assignment, broadcast storm control, SPAN port monitoring and Smartport macros

Management & Auxiliary Ports

1. 1 × Combo RJ45 Console/AUX dual-purpose port: Local CLI configuration via rollover cable; secondary analog dial modem for tertiary out-of-band backup connectivity
2. USB 2.0 Type-A host port: External flash storage for log archiving, offline configuration backup and EEM script automation extensions
3. Hardware reset button, Kensington security lock slot for physical anti-theft protection

Memory & Storage

• DRAM: 256 MB standard system memory (expandable to 768 MB) for concurrent VPN tunnels, dual-stack routing and inline IPS inspection
• Flash storage: 128 MB onboard flash, factory preloaded c880-universalk9-mz Advanced Security IOS image, minimum supported release 15.1(4)M

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: All-metal compact desktop chassis, optional wall-mount bracket available
• Dimensions (W × D × H): 325 mm × 249 mm × 44 mm (12.8 × 9.8 × 1.73 inches) with rubber anti-slip feet
• Weight: ~2.5 kg (5.5 lbs) without power supply
• Standard power supply: 60W external universal AC adapter, input 100–240 VAC 50/60 Hz, output 12 VDC
• Typical maximum power consumption: 20 W under full G.SHDSL + ISDN + all LAN ports active load
• Ingress protection: IP20, only suitable for dry indoor commercial office environments

Environmental Operating Specifications

• Operating temperature: 0°C ~ +40°C (32°F ~ 104°F); performance derates 1.5°C per 1000m altitude above 3000m
• Storage temperature: -40°C ~ +70°C
• Relative humidity: 10%–85% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor to offload IPsec VPN encryption traffic and eliminate CPU bottlenecks under up to 20 concurrent site-to-site and remote access VPN tunnels
• Permanent K9 crypto license unlocks complete enterprise encryption stack: DES, 3DES, AES-128/192/256, SHA-1/SHA-2 hash algorithms, IKEv1/IKEv2 static site-to-site tunnels, Easy VPN remote access and DMVPN hub-spoke dynamic tunnels
• Integrated G.SHDSL and ISDN traffic isolation filters to prevent copper loop intrusion threats

4. Cisco IOS Advanced Security Feature Suite

Dual-WAN G.SHDSL + ISDN Routing & Redundancy

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, full IPv4/IPv6 dual-stack support
• Automatic dual-WAN failover logic between G.SHDSL ATM primary leased-line and ISDN BRI dial backup
• G.SHDSL line management: Real-time line quality monitoring, rate adaptation, ATM OAM loop diagnostics
• Policy-based routing (PBR), NAT/PAT overload, multi-NAT pools for logical LAN endpoint segmentation
• DHCP server/relay/client, DNS proxy, dynamic DNS, Ethernet OAM for metro-Ethernet link health monitoring

Enterprise Security Suite

• Zone-Based Stateful Policy Firewall (ZBFW) for logical separation of internal LAN, DMZ and untrusted internet traffic
• Dynamic Multipoint VPN (DMVPN), Easy VPN Server & Client, IKEv2 IPsec encrypted tunnels for inter-branch corporate encrypted connectivity over G.SHDSL or ISDN transport
• Signature-based inline Intrusion Prevention System (IPS), Cisco ScanSafe cloud URL filtering, application control for HTTP, FTP, IM and mainstream business traffic
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on all 4 managed LAN switch ports
• Secure management only: SSHv2, HTTPS; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), MAC address port lockdown on Fast Ethernet switch ports

QoS & Leased-Line Bandwidth Optimization

• Weighted Fair Queuing (WFQ), Class-Based WFQ (CBWFQ), Low Latency Queuing (LLQ) for voice, video and real-time business traffic prioritization
• NBAR deep application recognition to classify and prioritize business-critical applications over metered G.SHDSL leased-line links
• RTP/TCP header compression, traffic shaping and policing to control leased-line bandwidth consumption and avoid overage charges

Remote Management & Automation

• Zero-Touch Provisioning (ZTP) for standardized mass service provider CPE and retail branch deployments
• Cisco IOS Embedded Event Manager (EEM) scriptable triggers for G.SHDSL line drop alerts and automatic ISDN backup failover actions
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance monitoring, dedicated SHDSL/ISDN MIB for copper line telemetry
• Native compatibility with Cisco Configuration Professional (CCP) web GUI for simplified no-CLI deployment and daily monitoring
• GOLD onboard diagnostics for continuous remote hardware health inspection of G.SHDSL modem, ISDN BRI and Ethernet interfaces

5. Typical Deployment Scenarios

1. Service Provider G.SHDSL Managed Small Business CPE
   Symmetrical G.SHDSL leased-line acts as primary carrier copper broadband uplink, ISDN BRI provides automatic dial backup during leased-line outages. The 4-port LAN switch connects office PCs, POS payment terminals and IP surveillance cameras, persistent IPsec DMVPN tunnels securely transmit business data back to enterprise corporate data centers, zone firewall + IPS jointly isolate sensitive internal systems from public internet threats.
2. Regional Small Satellite Office Symmetrical Leased-Line Secure Gateway
   G.SHDSL symmetrical bandwidth supports equal upload/download for cloud synchronization, video conferencing and large file transfers; ISDN BRI backup guarantees business continuity for critical corporate communications without fiber coverage.
3. Retail Chain Unconditioned Backroom G.SHDSL Branch Router
   Deployed on telco symmetrical copper circuits, VLAN segmentation isolates payment terminals and multi-camera surveillance systems, encrypted VPN backhaul connects retail locations to central corporate management platform, wide temperature tolerance adapts to fluctuating retail cabinet environments.
4. Low-Density Unmanned Industrial IoT Site Wired Edge Router
   Aggregates IP cameras and environmental monitoring sensors via FE LAN ports, G.SHDSL leased-line provides persistent symmetrical data backhaul, ISDN dial backup ensures uninterrupted sensor data transmission during primary copper line failures.
5. Teleworker Home Office G.SHDSL VPN Concentrator
   For remote employees serviced by carrier G.SHDSL symmetrical copper circuits, encrypted Easy VPN tunnels back to corporate headquarters, stateful firewall protects home office wired endpoints from internet malware and unauthorized access.

6. Standard Package Contents of C888-K9 SKU

Separately Sold Optional Accessories

• RJ45 rollover console cable for local CLI configuration
• G.SHDSL copper leased-line cable, ISDN BRI telephone line cord
• Spare replacement PWR-60W-AC power adapter
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for LAN connections

Software Licensing Information

• The-K9suffix includes a permanent built-in cryptographic license; no additional purchase required for IPsec, AES encryption and secure management protocols
• All core routing, dual-WAN failover, G.SHDSL/ISDN line management, firewall, inline IPS, QoS, ZTP and managed switch features are fully included in the base Advanced Security IOS image; no extra paid feature licenses required
• No wireless AP or cellular modem feature licenses applicable (corresponding hardware omitted from this wired-only SKU)

Short Commercial Catalog Summary for Quotation