Cisco C936-12P Full Product Description

1. Short Overview

Suffix Breakdown

• C936: Top-of-line high-port-density wired ISR platform of Cisco 900 Series with built-in internal power supply, six standalone GE WAN uplinks and maximum 12-port PoE LAN
• 12: Integrated 12-port full Gigabit LAN switch (highest PoE port count among all wired C93x ISR models)
• P: All twelve LAN ports support IEEE 802.3af PoE with total shared 180W PoE power budget (max 15.4W per port for high-resolution IP cameras, multi-line VoIP handsets, wireless access points and IoT sensors)

Core Differentiators

1. vs five-WAN flagship C935-8P: C935-8P provides only 5 copper GE WAN ports and 8 PoE LAN ports with 120W PoE budget; C936-12P upgrades to six independent Gigabit WAN uplinks and expands to 12 PoE-capable Gigabit ports with higher total 180W PoE power capacity for massive multi-IoT and multi-surveillance device deployments.
2. vs four-WAN C934-8P: C934-8P has four GE WANs and 8 PoE LAN ports with limited 120W PoE budget; C936-12P adds two extra dedicated GE WAN uplinks and doubles PoE port density to support twice as many powered endpoints.
3. vs mid-range triple/dual-WAN C933-8P / C932-6P / C931 series: Those deliver fewer WAN uplinks and lower PoE port density/power budgets; C936-12P delivers six-layer fixed-line circuit redundancy and maximum PoE port count for high-device-count branch deployments.
4. vs LTE variants C931-4PLTE / C931-4PATT: Those integrate carrier-locked CAT4 LTE cellular modems for off-grid sites without wired infrastructure; C936-12P is pure all-Ethernet architecture without wireless cellular hardware, optimized for multi-circuit Metro Ethernet carrier networks with abundant wired uplink resources.
5. vs DSL series C926 / C927: Those integrate VDSL2/ADSL2+ xDSL modems for POTS/ISDN loops; C936-12P adopts full copper Ethernet WAN design without DSL hardware, targeting fiber/copper Metro Ethernet access deployments.
6. vs legacy ISR G2 C890 series: C890 routers run outdated IOS without native SD-WAN, require external power bricks and offer limited PoE/WAN port density and power budgets; C936-12P adopts modern IOS XE, integrated internal PSU, compact slim fanless form factor and enterprise-grade multi-path SD-WAN intelligent traffic steering.
7. vs industrial ruggedized routers: C936-12P is commercial indoor desktop hardware with standard temperature operating range, not ruggedized for vehicle, railway or extreme outdoor shock/vibration environments.

2. Hardware Interface & Performance Specifications

Six Independent Gigabit Ethernet WAN Ports (Six-Tier Automatic Failover Supported)

12-Port Full Gigabit PoE Managed LAN Switch

• 802.1Q VLAN tagging, port isolation, static MAC port security, dedicated DMZ port assignment
• Broadcast storm suppression, SPAN traffic mirroring, LACP link aggregation, Smartport auto-config macros
• Per-port CoS traffic marking, port bandwidth policing, private VLAN segmentation, unicast/multicast storm control

Management & Auxiliary Ports

1. Separate dedicated RJ45 Console port: Independent local CLI out-of-band access via rollover cable for offline device configuration and troubleshooting
2. Single USB 2.0 Type-A host port: External flash storage for offline configuration backups, system log archiving, EEM automation scripts and Zero-Touch Provisioning (ZTP) image files
3. Fully integrated internal universal AC power supply unit (100–240V 50/60Hz mains input, no external power brick required)
4. Hardware reset button, Kensington anti-theft lock slot for physical equipment protection
5. Embedded RTC real-time clock for accurate timestamping of security logs, digital certificates and network fault events

Memory & Storage

• DRAM: 1 GB fixed system memory, capable of processing up to 50 concurrent IPsec/DMVPN tunnels, multi-path SD-WAN forwarding, inline NGIPS inspection and full 12-port PoE LAN traffic processing under maximum full load
• Flash storage: 2 GB onboard flash; factory preloadedc900-universalk9-mzIOS XE Universal Advanced Security image, minimum supported firmware release 15.8(3)Mb

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Slim compact fanless metal desktop chassis, optional wall-mount and 19-inch rack-mount bracket (ACS-900-RM-19) available
• Dimensions (H × W × D): 43.2 mm × 228.6 mm × 241.3 mm (1.7 × 9.0 × 9.5 inches) with anti-slip rubber feet
• Weight: ~1.4 kg (3.1 lbs) with integrated internal power supply
• Built-in internal universal AC power supply, no separate external power adapter needed
• Typical maximum power consumption: 28 W under full six GE WAN + all 12 Gigabit PoE LAN ports full load
• Ingress protection: IP20, only suitable for dry indoor commercial office environments

Environmental Operating Specifications

• Operating temperature: 0°C ~ +50°C (32°F ~ 122°F); performance degrades 1.5°C per 1000 m altitude above 3000 m
• Storage temperature: -20°C ~ +65°C (-4°F ~ 149°F)
• Relative humidity: 5%–95% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor fully offloads IPsec, IKEv2 and SSL VPN encryption traffic, eliminating CPU bottlenecks under heavy concurrent remote access and site-to-site tunnel loads
• Permanent integrated universal security license enables full enterprise encryption stack: AES-128/192/256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 static tunnels, Easy VPN remote access and DMVPN dynamic hub-spoke tunnels
• Native traffic isolation filters to segregate corporate staff LAN, PoE camera/VoIP subnet and untrusted internet via independent VLAN zoning to prevent lateral threat movement inside the branch network.

4. Cisco IOS XE Advanced Security & SD-WAN Feature Suite

Six-Tier WAN Redundancy & Metro Ethernet Routing

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, complete IPv4/IPv6 dual-stack routing support
• Automatic policy-based multi-path failover logic across six independent copper GE WAN links via HSRP/VRRP/MHSRP for six-layer primary/secondary/tertiary/backup/standby/emergency circuit redundancy
• Metro Ethernet OAM, E-LMI, 802.3ah link fault monitoring for end-to-end carrier circuit SLA tracking and performance reporting
• Policy-Based Routing (PBR), multi-NAT pools, PAT overload for logical segmentation of high-density PoE-powered IoT devices and standard wired endpoints
• DHCP server/relay/client, DNS proxy, dynamic DNS, IP SLA active link performance monitoring for continuous circuit health validation across all six uplinks

Unified Enterprise Threat Security Suite

• Zone-Based Stateful Inspection Firewall (ZBFW) to isolate internal corporate LAN, PoE device subnet, DMZ and untrusted internet traffic zones with granular inter-zone access control policies
• Next-Generation Intrusion Prevention System (NGIPS), Cisco cloud URL filtering, deep NBAR2 advanced application control for HTTP, FTP, IM, video conferencing and mainstream business applications
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on all 12 Gigabit PoE LAN ports
• Secure management only: SSHv2, HTTPS, SNMPv3; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), static MAC address port lockdown on Gigabit switch ports, anti-spoofing and DDoS mitigation filters for inbound WAN traffic

SD-WAN & Multi-Layer QoS Bandwidth Optimization

• Native Cisco SD-WAN integrated functionality for intelligent application-aware traffic steering across six independent GE fixed-line paths, with application-based SLA policy enforcement for critical business workloads
• WFQ, CBWFQ, LLQ low-latency queuing mechanisms for priority forwarding of voice, multi-stream video surveillance, industrial SCADA and POS payment real-time traffic
• NBAR2 deep packet inspection to classify and prioritize bandwidth-heavy bidirectional workloads (inter-site data replication, bulk video backhaul, enterprise cloud synchronization) over metered Metro Ethernet circuits
• RTP/TCP header compression, traffic shaping and policing to control leased-line bandwidth consumption and avoid carrier overage charges
• PoE QoS scheduling to guarantee stable power and bandwidth priority for mission-critical IP cameras and VoIP handsets across all twelve PoE ports

Remote Management & Automation

• Cisco Zero-Touch Provisioning (ZTP) for mass standardized deployment of enterprise branches and service provider Metro Ethernet managed CPE
• Cisco IOS Embedded Event Manager (EEM): Scriptable triggers for any GE WAN circuit failure, PoE power faults and USB storage events with email/SNMP alert notifications for remote IT staff
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance telemetry, dedicated MIBs for six copper Ethernet circuit status and PoE power consumption monitoring
• Compatible with Cisco Configuration Professional (CCP), Cisco DNA Center Lite and vManage SD-WAN controller for unified single-pane-of-glass remote monitoring of routing, security, PoE and multi-WAN subsystems
• GOLD non-disruptive onboard diagnostics for continuous remote hardware health checks of all six copper Ethernet and PoE subsystems without service interruption

5. Typical Deployment Scenarios

1. Multi-Circuit Large Retail Six-Redundant High-Density PoE Secure Gateway
   Six independent copper GE WAN ports deliver six-layer fixed-line redundancy for large retail hubs with heavy POS transaction processing and multi-camera video backhaul traffic; expanded 12-port full PoE LAN switch powers dozens of POS payment terminals, office VoIP phones and high-resolution IP camera arrays without external power injectors. VLAN segmentation isolates sensitive payment infrastructure from staff corporate LAN and public internet threats. Persistent IPsec DMVPN/SD-WAN tunnels transmit massive volumes of bidirectional retail data securely back to central corporate headquarters, while zone firewall + NGIPS block external network intrusion risks.
2. Premium Service Provider Managed Multi-Circuit Business CPE
   Uniform compact hardware platform enables ISPs to deliver six independent Gigabit Ethernet Metro Ethernet managed broadband circuits to enterprise subscribers requiring maximum fault tolerance, fully isolated uplink segmentation and large numbers of PoE IoT endpoints. Centralized ZTP mass deployment and remote SNMP/vManage monitoring support bundled managed security, multi-PoE and SD-WAN networking service packages for premium enterprise customers.
3. Mission-Critical Headquarters Satellite Office
   Six-layer WAN redundancy (GE primary, GE secondary, GE tertiary, GE backup, GE standby, GE emergency uplink) meets the strictest enterprise business continuity requirements for core satellite offices reliant on inter-site data replication, industrial SCADA control and uninterrupted video conferencing. Full Gigabit PoE switching eliminates separate power injectors for cameras and VoIP devices, with full EIGRP/BGP support for seamless intelligent multi-path traffic steering to the corporate core network.
4. Multi-Building Campus High-Density PoE IoT & Surveillance Edge Router
   Twelve PoE ports connect dozens of high-resolution IP cameras, access control hardware and environmental monitoring sensors requiring continuous bidirectional video and sensor data transmission; six independent GE WAN links provide multiple isolated backhaul paths to the campus core network, automatic failover ensures uninterrupted sensor and video data transmission during single, dual, triple, quadruple or five-circuit outages.
5. Multi-Circuit Enterprise Small Office Secure VPN Concentrator
   Deployed at remote enterprise sites with multiple independent Metro Ethernet circuits, six-way GE redundant transport delivers stable encrypted Easy VPN/SD-WAN connectivity to corporate headquarters under any multi-uplink failure scenario. Multiple PoE ports power home IP cameras, VoIP equipment and smart office IoT devices, integrated unified security services defend all wired Gigabit endpoints against malware and unauthorized internet access.

6. Standard Package Contents of C936-12P

Separately Sold Optional Accessories

• RJ45 rollover console cable for local CLI configuration
• ACS-900-RM-19 19-inch rack mount kit
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for LAN and six copper GE WAN connections

Software Licensing Information

• Permanent integrated security & crypto license included; no additional purchase required for IPsec, AES encryption, zone firewall and NGIPS threat defense features
• All core routing, six-GE multi-path WAN failover, native SD-WAN intelligent traffic steering, PoE power management, QoS, ZTP and 12-port Gigabit managed switch features are fully included in the base IOS XE universal image; no extra paid feature licenses needed
• No wireless AP or cellular modem license applicable (corresponding hardware is omitted from this pure wired Metro Ethernet high-density multi-PoE SKU)

Short Commercial Catalog Summary for Quotation