Cisco C931-6P Full Product Description

1. Short Overview

Suffix Breakdown

• C931: High-performance dual-Gigabit wired router platform of Cisco 900 Series with built-in internal power supply
• 6: Integrated 6-port full Gigabit LAN switch (upgraded from 4-port C931-4P)
• P: All six LAN ports support IEEE 802.3af PoE with total 90W PoE power budget (max 15.4W per port for IP cameras, VoIP phones, wireless access points)

Core Differentiators

1. vs C931-4P / C931-4PATT: Those only provide 4 PoE LAN ports with 60W PoE budget; C931-6P expands to 6 PoE-capable Gigabit ports with higher total 90W PoE power budget for more connected IoT/surveillance devices.
2. vs LTE variant C931-4PLTE series: C931-6P has no embedded CAT4 LTE cellular modem; LTE models add wireless cellular primary/backup transport for off-grid sites without fixed-line infrastructure.
3. vs DSL C926 / C927 series: Those integrate VDSL2/ADSL2+ xDSL modems; C931-6P is pure Ethernet architecture without DSL hardware, optimized for Metro Ethernet carrier networks.
4. vs legacy ISR G2 C890 series: C890 routers run older IOS without native SD-WAN, external power bricks and smaller PoE budgets; C931-6P adopts modern IOS XE, integrated internal PSU, compact slim form factor and expanded PoE port density.
5. vs industrial ruggedized routers: C931-6P is commercial indoor desktop hardware with standard temperature operating range, not ruggedized for vehicle, railway or extreme outdoor shock/vibration environments.

2. Hardware Interface & Performance Specifications

Dual Redundant Gigabit Ethernet WAN Ports (Automatic Failover Supported)

6-Port Full Gigabit PoE Managed LAN Switch

• 802.1Q VLAN tagging, port isolation, static MAC port security, dedicated DMZ port assignment
• Broadcast storm suppression, SPAN traffic mirroring, LACP link aggregation, Smartport auto-config macros
• Per-port CoS traffic marking, port bandwidth policing, private VLAN segmentation, storm control

Management & Auxiliary Ports

1. Separate dedicated RJ45 Console port: Independent local CLI out-of-band access via rollover cable
2. Single USB 2.0 Type-A host port: External flash storage for offline configuration backups, system log archiving, EEM automation scripts and Zero-Touch Provisioning files
3. Fully integrated internal universal AC power supply unit (100–240V 50/60Hz mains input, no external power brick required)
4. Hardware reset button, Kensington anti-theft lock slot for physical equipment protection
5. Embedded RTC real-time clock for accurate timestamping of security logs, digital certificates and network fault events

Memory & Storage

• DRAM: 1 GB fixed system memory, supports up to 50 concurrent IPsec/DMVPN tunnels, SD-WAN multi-path forwarding, inline NGIPS inspection and full 6-port PoE LAN traffic processing
• Flash storage: 256 MB onboard flash; factory preloadedc900-universalk9-mzIOS XE Universal Advanced Security image, minimum supported firmware release 15.8(3)Mb.

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Slim compact metal desktop chassis, optional wall-mount and 19-inch rack-mount bracket (ACS-900-RM-19) available
• Dimensions (H × W × D): 43.2 mm × 228.6 mm × 241.3 mm
• Weight: ~1.3 kg (2.9 lbs) with integrated internal power supply
• Built-in internal universal AC power supply, no separate external power adapter needed
• Typical maximum power consumption: 24 W under dual GE WAN + all 6 Gigabit PoE LAN ports full load
• Ingress protection: IP20, only suitable for dry indoor commercial office environments

Environmental Operating Specifications

• Operating temperature: 0°C ~ +50°C (32°F ~ 122°F); performance degrades 1.5°C per 1000 m altitude above 3000 m
• Storage temperature: -20°C ~ +65°C (-4°F ~ 149°F)
• Relative humidity: 5%–95% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor fully offloads IPsec, IKEv2 and SSL VPN encryption traffic, eliminating CPU bottlenecks under heavy concurrent remote access and site-to-site tunnel loads
• Permanent integrated universal security license enables full enterprise encryption stack: AES-128/192/256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 static tunnels, Easy VPN remote access and DMVPN dynamic hub-spoke tunnels
• Native traffic isolation filters to segregate corporate staff LAN, PoE camera/VoIP subnet and untrusted internet via independent VLAN zoning.

4. Cisco IOS XE Advanced Security & SD-WAN Feature Suite

Dual GE WAN Redundancy & Metro Ethernet Routing

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, complete IPv4/IPv6 dual-stack routing support
• Automatic policy-based multi-path failover logic between primary and secondary copper GE WAN links via HSRP/VRRP/MHSRP
• Metro Ethernet OAM, E-LMI, 802.3ah link fault monitoring for end-to-end carrier circuit SLA tracking
• Policy-Based Routing (PBR), multi-NAT pools, PAT overload for logical segmentation of multiple PoE-powered IoT devices and standard wired endpoints
• DHCP server/relay/client, DNS proxy, dynamic DNS, IP SLA active link performance monitoring

Unified Enterprise Threat Security Suite

• Zone-Based Stateful Inspection Firewall (ZBFW) to isolate internal corporate LAN, PoE device subnet, DMZ and untrusted internet traffic zones
• Next-Generation Intrusion Prevention System (NGIPS), Cisco cloud URL filtering, deep NBAR2 advanced application control for HTTP, FTP, IM, video conferencing and mainstream business applications
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on all 6 Gigabit PoE LAN ports
• Secure management only: SSHv2, HTTPS, SNMPv3; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), static MAC address port lockdown on Gigabit switch ports, anti-spoofing and DDoS protection filters

SD-WAN & Multi-Layer QoS Bandwidth Optimization

• Native Cisco SD-WAN Viptela integrated functionality for intelligent multi-path application-aware traffic steering over dual GE WAN links
• WFQ, CBWFQ, LLQ low-latency queuing mechanisms for priority forwarding of voice, multi-stream video surveillance, POS payment and industrial SCADA real-time traffic
• NBAR2 deep packet inspection to classify and prioritize bandwidth-heavy business workloads over metered Metro Ethernet circuits
• RTP/TCP header compression, traffic shaping and policing to control leased-line bandwidth consumption and avoid overage charges
• PoE QoS scheduling to guarantee stable power and bandwidth priority for mission-critical IP cameras and VoIP handsets across six PoE ports

Remote Management & Automation

• Cisco Zero-Touch Provisioning (ZTP) for mass standardized deployment of enterprise branches and service provider Metro Ethernet CPE
• Cisco IOS Embedded Event Manager (EEM): Scriptable triggers for WAN link loss, PoE power faults and USB storage events with email/SNMP alert notifications
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance telemetry, dedicated MIB extensions for dual GE circuit status and PoE power consumption monitoring
• Compatible with Cisco Configuration Professional (CCP), Cisco DNA Center Lite and vManage SD-WAN controller for unified single-pane-of-glass remote monitoring of routing, security, PoE and dual WAN subsystems
• GOLD non-disruptive onboard diagnostics for continuous remote hardware health checks of dual copper Ethernet and PoE subsystems

5. Typical Deployment Scenarios

1. Multi-Camera Retail Dual-Gigabit PoE Secure Gateway
   Dual copper GE WAN ports deliver redundant Metro Ethernet broadband for retail transaction and surveillance traffic; expanded 6-port full PoE LAN switch powers multiple POS payment terminals, VoIP phones and high-density IP camera arrays without external power injectors. VLAN segmentation isolates sensitive payment infrastructure from staff corporate LAN and public internet threats. Persistent IPsec DMVPN/SD-WAN tunnels transmit large volumes of video and transaction data securely back to central corporate data centers, zone firewall + NGIPS block external network intrusion risks.
2. Service Provider Managed Metro Ethernet Multi-Port Business CPE
   Uniform compact hardware platform enables ISPs to deliver dual redundant Gigabit Ethernet managed broadband services to enterprise subscribers requiring more PoE endpoints. Centralized ZTP mass deployment and remote SNMP/vManage monitoring support bundled managed security, multi-PoE and SD-WAN networking service packages.
3. Mission-Critical Small Office SD-WAN Branch Router
   Dual GE WAN redundancy meets enterprise business continuity requirements, 6-port PoE switching supports higher density of wired IoT and voice devices, full EIGRP/BGP and native SD-WAN enable seamless intelligent multi-path traffic steering to corporate headquarters.
4. Campus Remote Building Multi-IoT PoE Edge Router
   Six PoE ports connect dozens of IP cameras, access control hardware and environmental monitoring sensors; dual GE WAN links provide primary and backup backhaul to campus core network, automatic failover ensures uninterrupted sensor and video data transmission during circuit outages.
5. Multi-Device Teleworker Small Office Secure VPN Concentrator
   Deployed at remote enterprise sites with dual Metro Ethernet circuits, dual GE redundant transport delivers stable encrypted Easy VPN/SD-WAN connectivity to corporate headquarters. Multiple PoE ports power home IP cameras, VoIP equipment and smart office devices, integrated unified security services defend all wired Gigabit endpoints against malware and unauthorized internet access.

6. Standard Package Contents of C931-6P

Separately Sold Optional Accessories

• RJ45 rollover console cable for local CLI configuration
• ACS-900-RM-19 19-inch rack mount kit
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for LAN and dual GE WAN connections

Software Licensing Information

• Permanent integrated security & crypto license included; no additional purchase required for IPsec, AES encryption, zone firewall and NGIPS threat defense features
• All core routing, dual-GE WAN failover, native SD-WAN intelligent traffic steering, PoE power management, QoS, ZTP and 6-port Gigabit managed switch features are fully included in the base IOS XE universal image; no extra paid feature licenses needed
• No wireless AP or cellular modem license applicable (corresponding hardware is omitted from this pure wired Ethernet multi-PoE SKU)

Short Commercial Catalog Summary for Quotation