Cisco C935-8P Full Product Description

1. Short Overview

Suffix Breakdown

• C935: Top-tier maximum fixed-WAN wired router platform of Cisco 900 Series with built-in internal power supply, five standalone GE WAN uplinks and 8-port PoE LAN
• 8: Integrated 8-port full Gigabit LAN switch (max PoE port density of all wired C93x ISR models)
• P: All eight LAN ports support IEEE 802.3af PoE with total shared 120W PoE power budget (max 15.4W per port for high-resolution IP cameras, multi-line VoIP handsets and external wireless access points)

Core Differentiators

1. vs four-WAN flagship C934-8P: C934-8P only provides four copper GE WAN ports; C935-8P upgrades to five independent Gigabit WAN uplinks for five-layer circuit redundancy without cellular backup, the highest fixed-line WAN port count in the C93x router lineup.
2. vs triple-WAN C933-8P: C933-8P carries three GE WANs and 8 PoE ports with 120W PoE budget; C935-8P adds an extra dedicated fifth GE WAN uplink for additional isolated circuit segmentation and emergency failover.
3. vs mid-range C932-6P / C931 series: Those deliver only 2/3 GE WAN ports and lower PoE port density/power budgets; C935-8P offers maximum fixed-line WAN redundancy and full 8-port PoE capacity for massive IoT/surveillance device deployments.
4. vs LTE variants C931-4PLTE / C931-4PATT: Those integrate carrier-locked CAT4 LTE cellular modems for off-grid sites; C935-8P is pure all-Ethernet fixed-line architecture without wireless cellular hardware, optimized for multi-circuit Metro Ethernet carrier networks with abundant wired uplink resources.
5. vs DSL series C926 / C927: Those integrate VDSL2/ADSL2+ xDSL modems for POTS/ISDN loops; C935-8P adopts full copper Ethernet WAN design without DSL hardware, targeting fiber/copper Metro Ethernet access deployments.
6. vs legacy ISR G2 C890 series: C890 routers run outdated IOS without native SD-WAN, require external power bricks and offer limited PoE/WAN port density; C935-8P adopts modern IOS XE, integrated internal PSU, compact slim form factor and enhanced multi-path SD-WAN intelligent traffic steering.
7. vs industrial ruggedized routers: C935-8P is commercial indoor desktop hardware with standard temperature operating range, not ruggedized for vehicle, railway or extreme outdoor shock/vibration environments.

2. Hardware Interface & Performance Specifications

Five Independent Gigabit Ethernet WAN Ports (Five-Tier Automatic Failover Supported)

8-Port Full Gigabit Managed PoE LAN Switch

• 802.1Q VLAN tagging, port isolation, static MAC port security, dedicated DMZ port assignment
• Broadcast storm suppression, SPAN traffic mirroring, LACP link aggregation, Smartport auto-config macros
• Per-port CoS traffic marking, port bandwidth policing, private VLAN segmentation, unicast/multicast storm control

Management & Auxiliary Ports

1. Separate dedicated RJ45 Console port: Independent local CLI out-of-band access via rollover cable for offline device configuration and troubleshooting
2. Single USB 2.0 Type-A host port: External flash storage for offline configuration backups, system log archiving, EEM automation scripts and Zero-Touch Provisioning (ZTP) image files
3. Fully integrated internal universal AC power supply unit (100–240V 50/60Hz mains input, no external power brick required)
4. Hardware reset button, Kensington anti-theft lock slot for physical equipment protection
5. Embedded RTC real-time clock for accurate timestamping of security logs, digital certificates and network fault events

Memory & Storage

• DRAM: 1 GB fixed system memory, capable of processing up to 50 concurrent IPsec/DMVPN tunnels, multi-path SD-WAN forwarding, inline NGIPS inspection and full 8-port PoE LAN traffic processing under maximum full load
• Flash storage: 256 MB onboard flash; factory preloadedc900-universalk9-mzIOS XE Universal Advanced Security image, minimum supported firmware release 15.8(3)Mb

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Slim compact metal desktop chassis, optional wall-mount and 19-inch rack-mount bracket (ACS-900-RM-19) available
• Dimensions (H × W × D): 43.2 mm × 228.6 mm × 241.3 mm (1.7 × 9.0 × 9.5 inches) with anti-slip rubber feet
• Weight: ~1.35 kg (3.0 lbs) with integrated internal power supply
• Built-in internal universal AC power supply, no separate external power adapter needed
• Typical maximum power consumption: 26 W under full five GE WAN + all 8 Gigabit PoE LAN ports full load
• Ingress protection: IP20, only suitable for dry indoor commercial office environments

Environmental Operating Specifications

• Operating temperature: 0°C ~ +50°C (32°F ~ 122°F); performance degrades 1.5°C per 1000 m altitude above 3000 m
• Storage temperature: -20°C ~ +65°C (-4°F ~ 149°F)
• Relative humidity: 5%–95% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor fully offloads IPsec, IKEv2 and SSL VPN encryption traffic, eliminating CPU bottlenecks under heavy concurrent remote access and site-to-site tunnel loads
• Permanent integrated universal security license enables full enterprise encryption stack: AES-128/192/256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 static tunnels, Easy VPN remote access and DMVPN dynamic hub-spoke tunnels
• Native traffic isolation filters to segregate corporate staff LAN, PoE camera/VoIP subnet and untrusted internet via independent VLAN zoning to prevent lateral threat movement inside the branch network.

4. Cisco IOS XE Advanced Security & SD-WAN Feature Suite

Five-Tier WAN Redundancy & Metro Ethernet Routing

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, complete IPv4/IPv6 dual-stack routing support
• Automatic policy-based multi-path failover logic across five independent copper GE WAN links via HSRP/VRRP/MHSRP for five-layer primary/secondary/tertiary/backup/emergency circuit redundancy
• Metro Ethernet OAM, E-LMI, 802.3ah link fault monitoring for end-to-end carrier circuit SLA tracking and performance reporting
• Policy-Based Routing (PBR), multi-NAT pools, PAT overload for logical segmentation of high-density PoE-powered IoT devices and standard wired endpoints
• DHCP server/relay/client, DNS proxy, dynamic DNS, IP SLA active link performance monitoring for continuous circuit health validation across all five uplinks

Unified Enterprise Security Suite

• Zone-Based Stateful Inspection Firewall (ZBFW) to isolate internal corporate LAN, PoE device subnet, DMZ and untrusted internet traffic zones with granular inter-zone access control policies
• Next-Generation Intrusion Prevention System (NGIPS), Cisco cloud URL filtering, deep NBAR2 advanced application control for HTTP, FTP, IM, video conferencing and mainstream business applications
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on all 8 Gigabit PoE LAN ports
• Secure management only: SSHv2, HTTPS, SNMPv3; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), static MAC address port lockdown on Gigabit switch ports, anti-spoofing and DDoS mitigation filters for inbound WAN traffic

SD-WAN & Multi-Layer QoS Bandwidth Optimization

• Native Cisco SD-WAN integrated functionality for intelligent application-aware traffic steering across five independent GE fixed-line paths, with application-based SLA policy enforcement for critical business workloads
• WFQ, CBWFQ, LLQ low-latency queuing mechanisms for priority forwarding of voice, multi-stream video surveillance, industrial SCADA and POS payment real-time traffic
• NBAR2 deep packet inspection to classify and prioritize bandwidth-heavy bidirectional workloads (inter-site data replication, bulk video backhaul, enterprise cloud synchronization) over metered Metro Ethernet circuits
• RTP/TCP header compression, traffic shaping and policing to control leased-line bandwidth consumption and avoid carrier overage charges
• PoE QoS scheduling to guarantee stable power and bandwidth priority for mission-critical IP cameras and VoIP handsets across all eight PoE ports

Remote Management & Automation

• Cisco Zero-Touch Provisioning (ZTP) for mass standardized deployment of enterprise branches and service provider Metro Ethernet managed CPE
• Cisco IOS Embedded Event Manager (EEM): Scriptable triggers for any GE WAN circuit failure, PoE power faults and USB storage events with email/SNMP alert notifications for remote IT staff
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance telemetry, dedicated MIB extensions for five copper Ethernet circuit status and PoE power consumption monitoring
• Compatible with Cisco Configuration Professional (CCP), Cisco DNA Center Lite and vManage SD-WAN controller for unified single-pane-of-glass remote monitoring of routing, security, PoE and multi-WAN subsystems
• GOLD non-disruptive onboard diagnostics for continuous remote hardware health checks of all five copper Ethernet and PoE subsystems without service interruption

5. Typical Deployment Scenarios

1. Multi-Circuit Large Enterprise Five-Redundant PoE Secure Gateway
   Five independent copper GE WAN ports deliver five-layer fixed-line redundancy for large headquarters satellite sites with heavy inter-site data replication and multi-camera video backhaul traffic; expanded 8-port full PoE LAN switch powers multiple POS payment terminals, office VoIP phones and high-resolution IP camera arrays without external power injectors. VLAN segmentation isolates sensitive payment infrastructure from staff corporate LAN and public internet threats. Persistent IPsec DMVPN/SD-WAN tunnels transmit massive volumes of bidirectional enterprise data securely back to central corporate headquarters, while zone firewall + NGIPS block external network intrusion risks.
2. Service Provider Managed High-Redundancy Business CPE
   Uniform compact hardware platform enables ISPs to deliver five independent Gigabit Ethernet Metro Ethernet managed broadband circuits to enterprise subscribers requiring maximum fault tolerance and fully isolated uplink segmentation. Centralized ZTP mass deployment and remote SNMP/vManage monitoring support bundled managed security, multi-PoE and SD-WAN networking service packages for premium enterprise customers.
3. Mission-Critical Industrial Remote Office
   Five-layer WAN redundancy (GE primary, GE secondary, GE tertiary, GE backup, GE emergency uplink) meets the strictest enterprise business continuity requirements for industrial monitoring sites reliant on uninterrupted bidirectional SCADA and video data transmission. Full Gigabit PoE switching eliminates separate power injectors for cameras and VoIP devices, with full EIGRP/BGP support for seamless intelligent multi-path traffic steering to the corporate core network.
4. Multi-Building Campus Remote PoE IoT & Surveillance Edge Router
   Eight PoE ports connect dozens of high-density IP cameras, access control hardware and environmental monitoring sensors requiring continuous bidirectional video and sensor data transmission; five independent GE WAN links provide multiple isolated backhaul paths to the campus core network, automatic failover ensures uninterrupted sensor and video data transmission during single, dual, triple or quadruple circuit outages.
5. Multi-Circuit Enterprise Small Office Secure VPN Concentrator
   Deployed at remote enterprise sites with multiple independent Metro Ethernet circuits, quintuple GE redundant transport delivers stable encrypted Easy VPN/SD-WAN connectivity to corporate headquarters under any single uplink failure scenario. Multiple PoE ports power home IP cameras, VoIP equipment and smart office IoT devices, integrated unified security services defend all wired Gigabit endpoints against malware and unauthorized internet access.

6. Standard Package Contents of C935-8P

Separately Sold Optional Accessories

• RJ45 rollover console cable for local CLI configuration
• ACS-900-RM-19 19-inch rack mount kit
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for LAN and five copper GE WAN connections

Software Licensing Information

• Permanent integrated security & crypto license included; no additional purchase required for IPsec, AES encryption, zone firewall and NGIPS threat defense features
• All core routing, five-GE multi-path WAN failover, native SD-WAN intelligent traffic steering, PoE power management, QoS, ZTP and 8-port Gigabit managed switch features are fully included in the base IOS XE universal image; no extra paid feature licenses needed
• No wireless AP or cellular modem license applicable (corresponding hardware is omitted from this pure wired Metro Ethernet high-redundancy multi-PoE SKU)

Short Commercial Catalog Summary for Quotation