Cisco C1109-4PLTE2P Full Product Description

1. Short Overview

Suffix Breakdown

• C1109: Rugged industrial M2M modular ISR chassis with extended temperature range and front PIM expansion slots
• 4: Integrated 4-port full Gigabit copper LAN switch (non-PoE)
• LTE: Platform supports pluggable CAT4/CAT6/CAT7/CAT18 4G LTE and NSA 5G cellular PIM modules
• 2P: Two independent front pluggable interface module (PIM) slots for dual active cellular, serial or auxiliary expansion modulesCisco

Core Differentiators

1. vs single-PIM C1109-2PLTEGB: C1109-2PLTEGB only includes one fixed embedded LTE modem and 2 LAN ports; C1109-4PLTE2P provides two swappable PIM slots for dual independent cellular carriers and 4 LAN ports for more wired IoT endpointsCisco.
2. vs wired-only C1101-4P: C1101-4P lacks rugged wide-temperature hardware and cellular expansion slots; C1109-4PLTE2P supports dual redundant cellular WAN for mission-critical off-grid sites and industrial-grade environmental tolerance.
3. vs consumer LTE gateways: Runs enterprise IOS XE with full SD-WAN orchestration, IPsec VPN, NGIPS security, industrial vibration/shock certification and Zero-Touch Provisioning for mass MSP/carrier deployments.
4. vs high-port-density C93x office ISRs: C93x models target large office multi-WAN PoE deployments; C1109-4PLTE2P is purpose-built for lightweight M2M edge workloads with ruggedized construction and dual cellular failover capability.
5. vs Wi-Fi variant C1109-4PLTE2PW: This base C1109-4PLTE2P excludes internal 802.11ac Wave2 WLAN plug-in modules, supporting only wired LAN and cellular PIM expansion.

2. Hardware Interface & Performance Specifications

Multi-Tier Redundant WAN Architecture (Automatic Multi-Path Failover Supported)

1. Dual Front PIM Expansion Slots (Slot 0 + Slot 1)
   Each slot accepts interchangeable pluggable modules: CAT4/CAT6 LTE Advanced, CAT18 LTE Pro, NSA 5G cellular modems, or P-1T serial RS232 modules for industrial SCADA equipment integrationCisco. Dual cellular PIM deployment enables multi-carrier active/standby or load-balanced wireless WAN for maximum uptime, each cellular module equipped with dual SMA antenna ports and dedicated SIM card slots with SIM lock security. Built-in LTE management features include multi-APN segmentation, cellular Multi-VRF, remote SMS fault alerts and real-time data usage metering.
2. 1 × 10/100/1000BASE-T Copper Gigabit Ethernet WAN Port
   Secondary fixed-line Metro Ethernet/cable broadband uplink, auto MDI/MDI-X speed & duplex negotiation. Supports VRRP, IP SLA circuit health monitoring and SD-WAN policy-based traffic steering to act as wired backup when both cellular links degrade or fail.

4-Port Full Gigabit Managed LAN Switch

• 802.1Q VLAN tagging, port isolation, static MAC address port security, dedicated DMZ port assignment
• Broadcast/multicast storm suppression, SPAN traffic mirroring, LACP link aggregation, Cisco Auto Smartport auto-configuration macros
• Per-port CoS traffic marking, port bandwidth policing, private VLAN segmentation, CDP device discovery

Management & Auxiliary Ports

1. Micro-USB Console port: Dedicated local CLI out-of-band access via Micro-USB cable for offline device provisioning and troubleshooting
2. Single USB 3.0 Type-A host port: Supports external flash storage for offline configuration backups, system log archiving, EEM automation scripts and Zero-Touch Provisioning (ZTP) image files
3. External DC power input jack (requires separate 12V DC 30W universal AC power adapter; no integrated internal PSU)
4. Hardware reset button, Kensington anti-theft lock slot for physical equipment protection
5. Embedded RTC real-time clock for accurate timestamping of security logs, digital certificates and network fault events

Memory, Storage & Performance Benchmarks

• DRAM: 4 GB fixed system memory, supports up to 50 concurrent IPsec/DMVPN tunnels, multi-path SD-WAN forwarding, inline NGIPS inspection and full 4-port LAN + dual cellular traffic processing under full load
• Flash storage: 4 GB onboard flash; factory preloadedc900-universalk9-mzIOS XE Universal Advanced Security image, minimum supported firmware release 16.9.1Cisco
• Maximum IPsec encrypted IMIX throughput: 350 Mbps
• Unencrypted raw routing throughput: Up to 1 Gbps
• Concurrent site-to-site IPsec/DMVPN tunnels: Up to 50
• Concurrent remote SSL VPN users: Up to 100

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Slim fanless IP30 dust-resistant rugged metal desktop chassis, optional wall-mount bracket and ACS-1100-RM 19-inch rack mount kit available
• Dimensions (H × W × D): 32.3 mm × 213.4 mm × 152.4 mm
• Weight: ~1.02 kg (2.25 lbs) without external power adapter and cellular antennas
• Power supply requirement: Separate external 12V DC 30W universal AC adapter (100–240V AC mains input, 50/60Hz)
• Typical maximum power consumption: 15 W under dual LTE PIM + GE WAN + all 4 LAN ports full load
• Ingress protection: IP30 dust-proof metal enclosure, silent fanless operation with no moving parts

Extended Industrial Environmental Specifications

• Operating temperature: -40°C ~ +75°C (-40°F ~ 167°F), far wider than commercial office ISRs for unheated industrial cabinet and semi-outdoor shelter deployments
• Storage temperature: -40°C ~ +85°C (-40°F ~ 185°F)
• Relative humidity: 5%–95% RH non-condensing
• Certified for light industrial vibration and shock resistance for cabinet mounting
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor fully offloads IPsec, IKEv2 and SSL VPN encryption traffic, eliminating CPU bottlenecks under heavy concurrent site-to-site and remote access tunnel loads
• Permanent integrated universal security license enables complete enterprise encryption suite: AES-128/192/256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 static tunnels, Easy VPN remote access and DMVPN dynamic hub-spoke tunnels
• Native traffic isolation filters to segregate corporate IoT LAN, DMZ and untrusted public cellular internet via independent VLAN zoning to block lateral threat movement across wireless cellular links.

4. Cisco IOS XE Advanced Security & SD-WAN Feature Suite

Multi-Path WAN Redundancy (Dual Cellular PIM + Copper GE Fixed-Line Routing)

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, complete IPv4/IPv6 dual-stack routing support
• Automatic policy-based multi-path failover logic across dual independent cellular wireless links and copper GE wired backup via VRRP and IP SLA continuous circuit health validation
• Dedicated cellular management tools: Multi-APN QoS, cellular Multi-VRF segmentation, SMS remote fault alerting, real-time cellular data usage metering and traffic shaping to avoid carrier bandwidth overage charges
• Metro Ethernet 802.3ah E-LMI link fault monitoring for fixed-line circuit SLA tracking and performance reporting
• Policy-Based Routing (PBR), multi-NAT pools, PAT overload for logical segmentation of multi-device M2M wired IoT endpoints
• DHCP server/relay/client, DNS proxy, dynamic DNS, IP SLA active link performance monitoring across all three WAN paths

Unified Enterprise Threat Security Suite

• Zone-Based Stateful Inspection Firewall (ZBFW) to isolate internal IoT/LAN subnet, DMZ and untrusted public cellular internet traffic zones with granular inter-zone access control policies
• Next-Generation Intrusion Prevention System (NGIPS), Cisco Umbrella cloud URL filtering, deep NBAR2 advanced application control for HTTP, FTP, IM, video conferencing and mainstream business workloads
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication supported on all four Gigabit LAN ports
• Secure management only: SSHv2, HTTPS, SNMPv3; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), static MAC address port lockdown on Gigabit switch ports, anti-spoofing and DDoS mitigation filters for inbound cellular public traffic

SD-WAN & Multi-Layer QoS Bandwidth Optimization

• Native Cisco SD-WAN integrated functionality for intelligent application-aware traffic steering across dual cellular wireless and copper GE fixed-line paths, with application-defined SLA policy enforcement for critical industrial SCADA and video surveillance workloads
• WFQ, CBWFQ, LLQ low-latency queuing mechanisms for priority forwarding of voice, multi-stream video surveillance and industrial real-time monitoring traffic over metered cellular plans
• NBAR2 deep packet inspection to classify and prioritize bandwidth-critical business workloads with limited cellular data capacity
• RTP/TCP header compression, cellular traffic shaping and policing to strictly control M2M data consumption and eliminate unexpected carrier billing overages
• QoS traffic scheduling to guarantee consistent bandwidth priority for mission-critical industrial IoT sensor data streams across all four LAN ports

Remote Management & Automation

• Cisco Zero-Touch Provisioning (ZTP) for mass standardized deployment of industrial M2M sites and carrier-managed dual-LTE CPE worldwide
• Cisco IOS Embedded Event Manager (EEM): Scriptable triggers for LTE signal loss, GE WAN circuit failure, SIM faults and USB storage events with email/SNMP/SMS alert notifications for remote industrial operations and IT staff
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance telemetry, dedicated MIB extensions for dual cellular signal strength, SIM status and data consumption monitoring
• Compatible with Cisco Configuration Professional (CCP), Cisco DNA Center Lite and vManage SD-WAN controller for unified single-pane-of-glass remote monitoring of routing, security, dual cellular WAN and wired LAN subsystems
• GOLD non-disruptive onboard diagnostics for continuous remote hardware health checks of dual PIM cellular modems and copper Ethernet interfaces without service interruption

5. Typical Deployment Scenarios

1. Mission-Critical Industrial Dual-Carrier M2M Rugged Edge Router
   Two swappable LTE PIM modules deploy separate cellular carriers for fully redundant wireless primary connectivity at remote utility substations, pipeline monitoring and unmanned factory sites without fiber/copper fixed-line infrastructure; single copper GE WAN port provides automatic wired backup when local Metro Ethernet circuits are available. Four Gigabit LAN ports connect environmental SCADA sensors, industrial HMI panels and multi-camera surveillance arrays, while the -40°C to +75°C extended temperature range supports installation in unheated outdoor metal cabinets. Persistent encrypted IPsec DMVPN/SD-WAN tunnels transmit industrial control data securely back to central corporate control centers, with zone firewall + NGIPS mitigating cyber threats over public cellular networks.
2. Global Service Provider Managed Dual-LTE M2M CPE
   Uniform rugged compact hardware platform enables global carriers to deliver dual redundant cellular wireless + copper GE fixed-line hybrid managed broadband services to industrial and retail M2M enterprise subscribers. Centralized ZTP mass deployment and remote SNMP/SMS/vManage monitoring support bundled managed security and SD-WAN networking service packages for cross-region industrial deployments.
3. Large Remote Retail Kiosk Multi-Device Secure Gateway
   Dual independent cellular PIM modules deliver multi-carrier failover broadband for rural retail vending and digital signage kiosks; copper GE WAN acts as temporary wired backup. Four Gigabit LAN ports power multiple POS payment terminals, security cameras and digital display controllers, SMS alerts notify field operations teams of WAN outages, and VLAN segmentation isolates sensitive payment transaction data from public internet access.
4. Multi-Building Campus IoT Monitoring Edge Router
   Four LAN ports connect building environmental sensors, access control hardware and low-density surveillance cameras; dual cellular PIM modules provide emergency redundant wireless backup to the campus core network when the primary copper GE uplink suffers complete failure, with SD-WAN intelligent multi-path steering maintaining uninterrupted sensor data transmission for extended wired outages.
5. Distributed Agricultural & Field Monitoring M2M Router
   Fanless rugged design withstands wide temperature swings in farm equipment cabinets and remote field monitoring shelters; dual LTE modules ensure continuous connectivity for soil sensors, weather stations and livestock surveillance cameras, with encrypted SD-WAN tunnels securely transmitting field data back to central agricultural management platforms.

6. Standard Package Contents of C1109-4PLTE2P

Separately Sold Optional Accessories

• Micro-USB rollover console cable for local CLI configuration
• 12V 30W external universal AC power supply (mandatory operating accessory)
• CAT4/CAT6/CAT18 LTE PIM modules with region-specific carrier bands
• NSA 5G pluggable PIM modules (IOS XE 17.x and above required)
• P-1T serial RS232 PIM modules for industrial SCADA serial device integration
• 2FF mini-SIM USIM cards activated on target cellular carriers
• Dual SMA LTE cellular antenna kits for each installed cellular PIM
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for four Gigabit LAN and copper GE WAN connections
• ACS-1100-RM 19-inch rack mount bracket for industrial cabinet deployment

Software Licensing Information

• Permanent integrated security & crypto license included; no additional purchase required for IPsec, AES encryption, zone firewall and NGIPS threat defense features
• All core routing, dual PIM cellular/GE multi-path WAN failover, cellular OAM/SMS remote alert management, native Cisco SD-WAN intelligent traffic steering, QoS, ZTP and 4-port Gigabit managed switch features are fully included in the base IOS XE universal image; no extra paid feature licenses needed
• No wireless AP license applicable (WLAN radio hardware is omitted from this base dual-PIM M2M SKU; Wi-Fi requires separate plug-in module upgrade)

Short Commercial Catalog Summary for Quotation