Cisco C931-4PATT Full Product Description

1. Short Overview

Suffix Breakdown

• C931: High-performance dual-Gigabit Ethernet router platform of Cisco 900 Series with internal power supply
• 4: Integrated 4-port full Gigabit LAN switch
• P: All LAN ports support IEEE 802.3af PoE with total 60W PoE power budget (max 15.4W per port)
• ATT: Carrier-specific LTE variant pre-certified and band-locked for AT&T North America cellular network (LTE B2/B4/B12/B14 bands)

Core Differentiators

1. vs wired-only C931-4P: C931-4P has no embedded cellular modem; C931-4PATT integrates AT&T-locked CAT4 LTE wireless WAN for off-grid sites without fixed fiber/copper lines.
2. vs global LTE C931-4PLTEGB / Latin America C931-4PLTELA: Those support multi-region global cellular bands; C931-4PATT is hard-tuned only for AT&T USA LTE spectrum and cannot operate on other carriers.
3. vs DSL series C926 / C927: Those integrate VDSL/ADSL2+ copper DSL modems; C931-4PATT uses pure Ethernet fixed-line WAN plus cellular LTE backup.
4. vs older C899G-LTE-K9 ISR G2: C899G runs legacy IOS without native SD-WAN, external power brick and larger chassis; C931-4PATT adopts modern IOS XE SD-WAN, compact slim form factor, internal integrated PSU and simplified maintenance.
5. vs industrial rugged routers: C931-4PATT is commercial indoor desktop hardware with standard temperature range, not ruggedized for vehicle, railway or extreme outdoor shock/vibration environments.

2. Hardware Interface & Performance Specifications

Multi-Tier Redundant WAN Interfaces (Automatic Failover Supported)

1. Embedded AT&T-Certified CAT4 4G LTE Multimode Cellular Modem
   Hard-locked for AT&T USA LTE bands B2, B4, B12, B14; supports LTE FDD, DC-HSPA+, UMTS, EDGE, GPRS. Equipped with single 2FF mini-SIM slot with SIM lock security, dual external SMA antenna ports for LTE receive/transmit, built-in SMS remote alert functionality and cellular data usage monitoring. Theoretical peak throughput up to 150 Mbps down / 50 Mbps up, multi-APN cellular QoS and Multi-VRF over LTE for segregated corporate/internet traffic. Serves as primary WAN for remote locations without fixed broadband.
2. Dual Independent Copper Gigabit Ethernet WAN Ports (GE0/0 & GE0/1)
   Two 10/100/1000BASE-T RJ45 fixed-line WAN ports, auto MDI/MDI-X speed & duplex negotiation, support HSRP, VRRP, MHSRP and policy-based multi-path failover as secondary/tertiary backup when cellular LTE link fails.

4-Port Full Gigabit PoE Managed LAN Switch

• 802.1Q VLAN tagging, port isolation, static MAC port security, dedicated DMZ port assignment
• Broadcast storm suppression, SPAN traffic mirroring, LACP link aggregation, Smartport auto-config macros
• Per-port CoS marking, port bandwidth limiting, private VLAN segmentation

Management & Auxiliary Ports

1. Single USB 2.0 Type-A host port: External flash storage for offline config backups, system log archiving, EEM automation scripts and Zero-Touch Provisioning files
2. Separate RJ45 Console port: Dedicated local CLI access via rollover cable for out-of-band device management
3. Fully integrated internal AC power supply unit (100–240V universal mains input, no external power brick required)
4. Hardware reset button, Kensington anti-theft lock slot for physical equipment protection
5. Embedded RTC real-time clock for accurate timestamping of security logs, digital certificates and network fault events

Memory & Storage

• DRAM: 1 GB fixed system memory, supports up to 50 concurrent IPsec/DMVPN tunnels, SD-WAN multi-path forwarding, inline NGIPS inspection and full PoE/cellular traffic processing
• Flash storage: 256 MB onboard flash; factory preloadedc900-universalk9-mzIOS XE Universal Advanced Security image, minimum supported firmware release 15.8(3)Mb

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Slim compact metal desktop chassis, optional wall-mount and 19-inch rack-mount bracket (ACS-900-RM-19) available
• Dimensions (H × W × D): 43.2 mm × 228.6 mm × 241.3 mm (1.7 × 9.0 × 9.5 inches) with anti-slip rubber feet
• Weight: ~1.2 kg (2.6 lbs) with integrated internal power supply
• Built-in internal universal AC power supply (100–240V AC, 50/60Hz), no separate external power adapter needed
• Typical maximum power consumption: 22 W under full LTE cellular + dual GE WAN + all 4 PoE LAN ports full load
• Ingress protection: IP20, only suitable for dry indoor commercial office environments

Environmental Operating Specifications

• Operating temperature: 0°C ~ +50°C (32°F ~ 122°F); performance degrades 1.5°C per 1000 m altitude above 3000 m
• Storage temperature: -20°C ~ +65°C (-4°F ~ 149°F)
• Relative humidity: 5%–95% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor fully offloads IPsec, IKEv2 and SSL VPN encryption traffic, eliminating CPU bottlenecks under heavy concurrent remote access and site-to-site tunnel loads
• Permanent integrated universal security license enables full enterprise encryption stack: AES-128/192/256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 static tunnels, Easy VPN remote access and DMVPN dynamic hub-spoke tunnels
• Built-in cellular traffic isolation filters to segregate AT&T LTE wireless transport and protect internal corporate LAN via independent VLAN zoning; SIM lock and cellular inbound firewall filters block unauthorized cellular network access.

4. Cisco IOS XE Advanced Security & SD-WAN Feature Suite

Multi-Tier WAN Redundancy (AT&T LTE Cellular + Dual Copper GE)

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, complete IPv4/IPv6 dual-stack routing support
• Automatic policy-based multi-path failover logic between primary AT&T LTE cellular link and secondary/tertiary dual copper GE WAN links via HSRP/VRRP/MHSRP
• LTE cellular dedicated management features: Multi-APN, multi-bearer QoS, cellular Multi-VRF, SMS remote event alerts, SIM authentication lock, real-time cellular data usage metering and traffic shaping
• Policy-Based Routing (PBR), multi-NAT pools, PAT overload for logical segmentation of PoE-powered IoT devices and standard wired LAN endpoints
• DHCP server/relay/client, DNS proxy, dynamic DNS, IP SLA active link performance monitoring, dedicated LTE MIB extensions for signal strength, SIM status and cellular data consumption telemetry

Unified Enterprise Threat Security Suite

• Zone-Based Stateful Inspection Firewall (ZBFW) to isolate internal corporate LAN, PoE camera/VoIP subnet, DMZ and untrusted internet traffic zones
• Next-Generation Intrusion Prevention System (NGIPS), Cisco cloud URL filtering, deep NBAR2 advanced application control for HTTP, FTP, IM, video conferencing and mainstream business applications
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on all 4 Gigabit PoE LAN ports
• Secure management only: SSHv2, HTTPS, SNMPv3; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), static MAC address port lockdown on Gigabit switch ports, cellular ingress anti-DDoS and anti-spoofing filters

SD-WAN & Bandwidth Optimization for Cellular & Gigabit Ethernet

• Native Cisco SD-WAN integrated functionality for intelligent application-aware traffic steering across LTE and dual GE fixed-line paths, application-based SLA policy enforcement
• WFQ, CBWFQ, LLQ low-latency queuing mechanisms for priority forwarding of voice, video surveillance, POS payment and industrial SCADA real-time traffic over metered AT&T cellular links
• NBAR2 deep packet inspection to classify and prioritize bandwidth-heavy business workloads (cloud sync, video backhaul, bulk POS data)
• RTP/TCP header compression, cellular traffic shaping and policing to control metered LTE data consumption and avoid carrier overage charges
• PoE QoS scheduling to guarantee stable power and bandwidth priority for mission-critical IP cameras and VoIP handsets

Remote Management & Automation

• Cisco Zero-Touch Provisioning (ZTP) for mass standardized deployment of retail branches and AT&T managed cellular CPE
• Cisco IOS Embedded Event Manager (EEM): Scriptable triggers for LTE signal loss, GE WAN circuit failure, PoE power faults and SMS/email alert notifications for remote IT staff
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance telemetry, dedicated MIBs for LTE cellular diagnostics and copper Ethernet circuit status
• Compatible with Cisco Configuration Professional (CCP), Cisco DNA Lite and vManage SD-WAN controller for unified single-pane-of-glass remote monitoring of routing, security, PoE and cellular LTE subsystems
• GOLD non-disruptive onboard diagnostics for continuous remote hardware health checks of LTE modem, dual copper Ethernet and PoE subsystems

5. Typical Deployment Scenarios

1. Off-Grid Retail AT&T Cellular Multi-Redundant PoE Secure Gateway
   AT&T CAT4 LTE cellular acts as primary wireless broadband for remote retail kiosks without copper/fiber fixed-line infrastructure; dual copper GE WAN ports provide redundant backup when wired circuits are available. The 4-port Gigabit PoE LAN switch powers POS payment terminals, VoIP phones and multi-camera surveillance cameras. SMS alerts notify IT teams of WAN outages, VLAN segmentation isolates sensitive payment infrastructure from public internet threats. Persistent IPsec DMVPN/SD-WAN tunnels transmit retail transaction and video data securely back to central corporate data centers, zone firewall + NGIPS mitigate intrusion risks over public cellular networks.
2. Unattended Industrial IoT Remote Site Cellular Branch Router
   Three-layer WAN redundancy (LTE cellular primary, GE0 secondary, GE1 tertiary backup) meets strict business continuity requirements for unmanned industrial monitoring sites. Full Gigabit PoE eliminates separate power injectors for environmental sensors and IP cameras, native SD-WAN enables intelligent multi-path traffic steering to corporate core networks via EIGRP/BGP.
3. AT&T Service Provider Managed Cellular Business CPE
   Uniform carrier-certified hardware platform enables AT&T to deliver LTE wireless + dual GE Metro Ethernet managed broadband services to North American enterprise subscribers in rural areas without fixed-line coverage. Centralized ZTP mass deployment and remote SNMP/SMS monitoring support bundled managed security, PoE and SD-WAN networking service packages.
4. Campus Remote Building PoE Surveillance Edge Router with Cellular Backup
   PoE ports connect high-resolution IP cameras and access control hardware; dual copper GE WAN links deliver primary backhaul to campus core network, automatic LTE cellular failover ensures uninterrupted video and sensor data transmission during complete wired circuit outages.
5. Rural Teleworker Small Office Secure VPN Concentrator
   Deployed at remote employee residences without wired broadband, AT&T LTE provides stable wireless primary transport for encrypted Easy VPN/SD-WAN connectivity to corporate headquarters. PoE ports power home IP cameras and VoIP equipment, integrated unified security services defend all wired Gigabit endpoints against malware and unauthorized internet access over public cellular infrastructure.

6. Standard Package Contents of C931-4PATT

Separately Sold Optional Accessories

• RJ45 rollover console cable for local CLI configuration
• CAT5e/CAT6 Ethernet patch cords for LAN and dual GE WAN connections
• ACS-900-RM-19 19-inch rack mount kit
• USB flash storage drives for log archiving and offline configuration backup
• 2FF mini-SIM USIM cards activated on AT&T cellular network

Software Licensing Information

• Permanent integrated security & crypto license included; no additional purchase required for IPsec, AES encryption, zone firewall and NGIPS threat defense features
• All core routing, multi-path LTE/GE failover, AT&T cellular modem management, SMS alert functionality, PoE power management, native SD-WAN intelligent traffic steering, QoS, ZTP and 4-port Gigabit managed switch features are fully included in the base IOS XE universal image; no extra paid feature licenses needed
• No wireless AP feature licenses apply (WLAN radio hardware is omitted from this cellular wired hybrid SKU)

Short Commercial Catalog Summary for Quotation