Cisco C1109-2PLTEGB Full Product Description

1. Short Overview

Suffix Breakdown

• C1109: Rugged modular M2M-focused ISR platform of Cisco 1000 Series with front PIM slot for cellular pluggable modules
• 2: Integrated 2-port full Gigabit copper LAN switch
• LTE: Equipped with embedded CAT4 4G LTE cellular modem
• GB: Global European LTE band variant, pre-certified for EMEA carrier LTE frequency bands (EU multi-operator compatible)

Core Differentiators

1. vs US carrier variant C1109-2PLTEUS: C1109-2PLTEUS is locked for North American LTE bands; C1109-2PLTEGB supports all mainstream European LTE frequencies for EMEA market deploymentsCisco.
2. vs wired-only C1101-4P: C1101-4P has no LTE cellular module and larger PoE port density; C1109-2PLTEGB features rugged wide-temperature hardware, dedicated PIM LTE slot and 2-port non-PoE LAN design for low-power IoT endpoints.
3. vs dual-PIM model C1109-4PLTE2P: C1109-4PLTE2P provides two front PIM slots and 4 LAN ports; C1109-2PLTEGB has one single LTE PIM slot and only two integrated GE LAN portsCisco.
4. vs high-port-density C93x ISR series: C93x models deliver multiple multi-GE WAN uplinks and high PoE power budgets for large offices; C1109-2PLTEGB targets lightweight M2M edge use cases with rugged extended temperature range and cellular wireless-first connectivity.
5. vs consumer LTE gateways: C1109-2PLTEGB runs enterprise-grade IOS XE with full SD-WAN, IPsec VPN and NGIPS security, industrial-grade vibration resistance and Zero-Touch Provisioning for managed service provider rollouts.

2. Hardware Interface & Performance Specifications

Primary/Backup WAN Interfaces (Multi-Path Automatic Failover Supported)

1. Embedded European CAT4 4G LTE Cellular PIM Module
   Hardened 2T2R MIMO CAT4 LTE modem, pre-tuned for EMEA LTE bands B1/B3/B7/B8/B20/B28. Supports FDD LTE, DC-HSPA+, UMTS, EDGE, GPRS, dual external SMA antenna ports, 2FF mini-SIM slot with SIM lock protection, remote SMS alerting and per-APN multi-VRF segmentation. Functions as primary wireless WAN for off-grid sites without fixed Metro Ethernet access.
2. 1 × 10/100/1000BASE-T Copper Gigabit Ethernet WAN Port
   Secondary fixed-line broadband RJ45 uplink, auto MDI/MDI-X speed & duplex negotiation, supports VRRP, IP SLA and policy-based SD-WAN traffic steering for automatic wired failover when cellular circuit degrades or fails.

2-Port Full Gigabit Managed LAN Switch

• 802.1Q VLAN tagging, port isolation, static MAC address port security, dedicated DMZ port assignment
• Broadcast storm suppression, SPAN traffic mirroring, LACP link aggregation, Cisco Auto Smartport auto-config macros
• Per-port CoS marking, port bandwidth policing, private VLAN segmentation, storm control for unicast/multicast traffic

Management & Auxiliary Ports

1. Micro-USB Console port: Dedicated local CLI out-of-band management via Micro-USB cable for offline device configuration and troubleshooting
2. Single USB 3.0 Type-A host port: External flash storage for offline configuration backups, system log archiving, EEM automation scripts and Zero-Touch Provisioning (ZTP) image files
3. External DC power input jack (requires separate 12V DC 30W universal AC power adapter, no internal built-in PSU)
4. Hardware reset button, Kensington anti-theft lock slot for physical equipment protection
5. Embedded RTC real-time clock for accurate timestamping of security logs, digital certificates and network fault events

Memory & Storage

• DRAM: 4 GB fixed system memory, supports up to 50 concurrent IPsec/DMVPN tunnels, SD-WAN multi-path forwarding, inline NGIPS inspection and full dual GE LAN + LTE cellular traffic processing under maximum load
• Flash storage: 4 GB onboard flash; factory preloadedc900-universalk9-mzIOS XE Universal Advanced Security image, minimum supported firmware release 16.9.1Cisco

Performance Benchmarks

• Maximum IPsec encrypted throughput (single IMIX tunnel): 350 Mbps
• Unencrypted raw routing throughput: Up to 1 Gbps
• Concurrent site-to-site IPsec/DMVPN tunnels: Up to 50
• Concurrent remote SSL VPN users: Up to 100

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Slim fanless rugged metal desktop chassis, optional wall-mount bracket available
• Dimensions (H × W × D): 32.3 mm × 213.4 mm × 152.4 mm
• Weight: ~0.98 kg (2.16 lbs) without external power adapter and LTE antennas
• Power supply requirement: Separate external 12V DC 30W universal AC adapter (100–240V AC mains input, 50/60Hz)
• Typical maximum power consumption: 13 W under LTE cellular + GE WAN + both LAN ports full load
• Ingress protection: IP30 dust-resistant metal enclosure, fanless silent operation

Environmental Operating Specifications (Rugged Extended Temperature)

• Operating temperature: -40°C ~ +75°C (-40°F ~ 167°F), far wider than standard commercial ISRs for industrial semi-outdoor cabinet deployments
• Storage temperature: -40°C ~ +85°C (-40°F ~ 185°F)
• Relative humidity: 5%–95% RH non-condensing
• Vibration & shock certified for light industrial cabinet mounting
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor fully offloads IPsec, IKEv2 and SSL VPN encryption traffic, eliminating CPU bottlenecks under heavy concurrent remote access and site-to-site tunnel loads
• Permanent integrated universal security license enables full enterprise encryption stack: AES-128/192/256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 static tunnels, Easy VPN remote access and DMVPN dynamic hub-spoke tunnels
• Native traffic isolation filters to segregate corporate LAN, IoT device subnet and untrusted public LTE internet via independent VLAN zoning to block lateral threat movement on cellular wireless links.

4. Cisco IOS XE Advanced Security & SD-WAN Feature Suite

Dual WAN Redundancy (LTE Cellular + Copper GE Fixed-Line Routing)

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, complete IPv4/IPv6 dual-stack routing support
• Automatic policy-based multi-path failover logic between primary European LTE cellular link and secondary copper GE WAN via VRRP/IP SLA for continuous connectivity during single uplink outages
• LTE cellular dedicated management features: Multi-APN QoS, cellular Multi-VRF, SMS remote fault alerting, real-time data usage metering and traffic shaping to avoid carrier bandwidth overage charges
• Metro Ethernet 802.3ah E-LMI link fault monitoring for fixed-line circuit SLA tracking
• Policy-Based Routing (PBR), multi-NAT pools, PAT overload for logical segmentation of low-power M2M IoT wired endpoints
• DHCP server/relay/client, DNS proxy, dynamic DNS, IP SLA active link performance monitoring for end-to-end WAN health validation

Unified Enterprise Threat Security Suite

• Zone-Based Stateful Inspection Firewall (ZBFW) to isolate internal IoT/LAN subnet, DMZ and untrusted public LTE internet traffic zones with granular inter-zone access control policies
• Next-Generation Intrusion Prevention System (NGIPS), Cisco Umbrella cloud URL filtering, deep NBAR2 advanced application control for HTTP, FTP, IM, video conferencing and mainstream business applications
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication available on both Gigabit LAN ports
• Secure management only: SSHv2, HTTPS, SNMPv3; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), static MAC address port lockdown on Gigabit switch ports, anti-spoofing and DDoS protection filters for cellular inbound public traffic

SD-WAN & Multi-Layer QoS Bandwidth Optimization

• Native Cisco SD-WAN integrated functionality for intelligent application-aware traffic steering across LTE wireless and copper GE fixed-line paths, with application-defined SLA policy enforcement for critical industrial SCADA and video workloads
• WFQ, CBWFQ, LLQ low-latency queuing mechanisms for priority forwarding of voice, multi-stream video surveillance and industrial real-time monitoring traffic over metered European LTE circuits
• NBAR2 deep packet inspection to classify and prioritize bandwidth-critical business workloads over limited cellular data plans
• RTP/TCP header compression, cellular traffic shaping and policing to strictly control M2M data consumption and avoid carrier billing overages
• QoS traffic scheduling to guarantee consistent bandwidth for mission-critical industrial IoT sensor data streams

Remote Management & Automation

• Cisco Zero-Touch Provisioning (ZTP) for mass standardized deployment of European M2M branches and EMEA carrier managed LTE CPE
• Cisco IOS Embedded Event Manager (EEM): Scriptable triggers for LTE signal loss, GE WAN circuit failure, USB storage events and SIM faults with email/SNMP/SMS alert notifications for remote IT and industrial operations staff
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance telemetry, dedicated LTE MIB extensions for cellular signal strength, SIM status and data consumption monitoring
• Compatible with Cisco Configuration Professional (CCP), Cisco DNA Center Lite and vManage SD-WAN controller for unified single-pane-of-glass remote monitoring of routing, security, LTE wireless WAN and wired LAN subsystems
• GOLD non-disruptive onboard diagnostics for continuous remote hardware health checks of CAT4 LTE modem and copper Ethernet interfaces without service interruption

5. Typical Deployment Scenarios

1. European Unattended Industrial M2M LTE Edge Router
   European multi-band CAT4 LTE cellular acts as primary wireless WAN for remote utility substations, pipeline monitoring and factory IoT edge sites without fiber/copper fixed-line infrastructure; single copper GE WAN port provides automatic wired backup when local Metro Ethernet circuits are installed. Dual Gigabit LAN ports connect environmental sensors and low-power IP surveillance cameras, wide rugged temperature range supports cabinet deployment in unheated industrial outbuildings. Persistent IPsec DMVPN/SD-WAN encrypted tunnels transmit industrial SCADA data securely back to central corporate control centers, zone firewall + NGIPS mitigate external cyber threats over public European cellular networks.
2. EMEA Service Provider Managed LTE M2M CPE
   Uniform rugged compact hardware platform enables European carriers to deliver LTE wireless + GE fixed-line redundant managed broadband services to industrial and retail M2M enterprise subscribers. Centralized ZTP mass deployment and remote SNMP/SMS/vManage monitoring support bundled managed security and SD-WAN networking service packages for EMEA regional markets.
3. Remote Retail Kiosk European LTE Secure Gateway
   CAT4 LTE cellular provides primary off-grid broadband for small retail vending kiosks in rural European locations; copper GE WAN serves as backup for temporary wired circuit installations. Two Gigabit LAN ports power POS payment terminals and low-resolution security cameras, SMS alerts notify IT teams of WAN outages, VLAN segmentation isolates sensitive payment transaction data from public internet access.
4. Campus Remote Monitoring IoT Edge Router
   Dual Gigabit LAN ports connect building environmental sensors and access control hardware; European LTE cellular link provides emergency wireless backup to campus core network when primary copper GE uplink fails, automatic SD-WAN multi-path steering ensures uninterrupted sensor data transmission during extended wired circuit outages.
5. Rural Teleworker Small Office Secure VPN Concentrator
   Deployed at remote European employee residences without fixed-line broadband, multi-band LTE cellular delivers stable encrypted Easy VPN/SD-WAN connectivity to corporate headquarters. Dual LAN ports power home VoIP equipment and low-power surveillance cameras, integrated unified security services defend all wired Gigabit endpoints against malware and unauthorized internet access over public cellular infrastructure.

6. Standard Package Contents of C1109-2PLTEGB

Separately Sold Optional Accessories

• RJ45 rollover Micro-USB console cable for local CLI configuration
• 12V 30W external universal AC power supply (mandatory operating accessory)
• 2FF mini-SIM USIM cards activated on European EMEA LTE carriers
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for dual Gigabit LAN and copper GE WAN connections
• ACS-1100-RM 19-inch rack mount bracket for industrial cabinet deployment

Software Licensing Information

• Permanent integrated security & crypto license included; no additional purchase required for IPsec, AES encryption, zone firewall and NGIPS threat defense features
• All core routing, LTE/GE multi-path WAN failover, European cellular LTE OAM/SMS alert management, native Cisco SD-WAN intelligent traffic steering, QoS, ZTP and 2-port Gigabit managed switch features are fully included in the base IOS XE universal image; no extra paid feature licenses needed
• No wireless AP license applicable (Wi-Fi WLAN radio hardware is omitted from this LTE M2M rugged industrial SKU)

Short Commercial Catalog Summary for Quotation