Cisco C1111-4P Full Product Description

1. Short Overview

Suffix Breakdown

• C1111: Mid-tier dual-WAN combo SFP fixed ISR platform of Cisco 1000 Series with extended PoE power capacity
• 4: Integrated 4-port full Gigabit copper LAN switch
• P: LAN ports support mixed PoE / PoE+ power delivery with total shared 60W PoE power budget

Core Differentiators

1. vs entry-level C1101-4P: C1101-4P only provides a single copper-only GE WAN without SFP fiber slot; C1111-4P adds a combo SFP/RJ45 dual-media WAN plus a second independent copper GE WAN for dual-path redundancy.
2. vs rugged industrial C1109 M2M series: C1109 models feature extended industrial temperature range and pluggable cellular PIM slots; C1111-4P targets standard commercial office environments with higher PoE capacity and dual-media fiber-ready WAN.
3. vs wireless variant C1111-4PW / C1111-4PWB: Those integrate internal 802.11ac Wave2 Wi-Fi AP modules; C1111-4P is pure wired architecture without wireless hardware.
4. vs high-port-density C93x ISR lineup: C93x routers offer numerous independent GE WAN uplinks and up to 12 PoE ports for large branches; C1111-4P is cost-optimized for small-scale retail and micro-office use cases.
5. vs legacy ISR G2 C800 series: Older C800 platforms run classic IOS without native SD-WAN, lack crypto acceleration and SFP fiber WAN flexibility; C1111-4P utilizes modern IOS XE, built-in hardware encryption and fiber-ready combo uplink design.

2. Hardware Interface & Performance Specifications

Dual Redundant Multi-Media WAN Ports (Automatic Multi-Path Failover Supported)

1. Combo Gigabit Ethernet WAN Port (GE0/0/0)
   10/100/1000BASE-T RJ45 copper interface paired with a shared SFP slot supporting 1G fiber transceivers (LX/SX/T). Auto MDI/MDI-X speed negotiation, enables flexible fiber or copper primary broadband access.
2. Dedicated Copper Gigabit Ethernet WAN Port (GE0/0/1)
   Independent 10/100/1000BASE-T RJ45 secondary uplink for redundant fixed-line backup, fully compatible with VRRP, HSRP, MHSRP and IP SLA link health monitoring for automated failover across dual WAN paths.

4-Port Full Gigabit Managed PoE LAN Switch

• Ports 1–2: IEEE 802.3af PoE (max 15.4W per port)
• Port 3: IEEE 802.3at PoE+ (max 30W per port)
• Port 4: Standard non-PoE Gigabit copper
  Total shared PoE power budget: 60W, designed to power high-resolution IP cameras, multi-line VoIP phones, enterprise wireless access points and low-power IoT sensors.
  Full enterprise Layer 2 switching feature set:
• 802.1Q VLAN tagging, port isolation, static MAC address security, dedicated DMZ port assignment
• Broadcast/multicast storm suppression, SPAN traffic mirroring, LACP link aggregation, Cisco Auto Smartport auto-provisioning macros
• Per-port CoS traffic marking, bandwidth policing, private VLAN segmentation, CDP device discovery

Management & Auxiliary Ports

1. Micro-USB Console port: Dedicated out-of-band local CLI access via Micro-USB cable for offline configuration and troubleshooting
2. Single USB 3.0 Type-A host port: Compatible with external flash drives for offline configuration backups, system log archiving, EEM automation scripts and Zero-Touch Provisioning (ZTP) image deployment; also supports optional USB LTE dongles for auxiliary cellular backup WAN
3. External DC power input jack (requires separate 12V DC 66W universal AC power adapter; no internal built-in PSU)
4. Hardware reset button, Kensington anti-theft lock slot for physical equipment protection
5. Embedded RTC real-time clock for precise timestamping of security logs, digital certificates and network fault events

Memory, Storage & Performance Benchmarks

• DRAM: 4 GB fixed system memory, supports up to 50 concurrent IPsec/DMVPN tunnels, multi-path SD-WAN forwarding, inline NGIPS inspection and full 4-port PoE LAN + dual WAN traffic processing under maximum load
• Flash storage: 4 GB onboard flash; factory preloadedc900-universalk9-mzIOS XE Universal Advanced Security image, minimum supported firmware release 16.8.1
• Maximum IPsec encrypted IMIX throughput: 475 Mbps
• Unencrypted raw routing throughput: Up to 1 Gbps
• Concurrent site-to-site IPsec/DMVPN tunnels: Up to 50
• Concurrent remote SSL VPN users: Up to 100

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Slim fanless metal desktop chassis, optional wall-mount bracket and ACS-1100-RM 19-inch rack-mount kit available
• Dimensions (H × W × D): 42 mm × 323 mm × 230 mm (1.75 × 12.7 × 9.0 inches) with anti-slip rubber feet
• Weight: ~1.25 kg (2.75 lbs) without external power adapter and SFP transceivers
• Power supply requirement: Separate external 12V DC 66W universal AC adapter (100–240V AC mains input, 50/60Hz)
• Typical maximum power consumption: 22 W under dual GE WAN + full PoE load across all powered LAN ports
• Ingress protection: IP20, intended exclusively for dry indoor commercial office environments

Standard Commercial Environmental Specifications

• Operating temperature: 0°C ~ +40°C (32°F ~ 104°F); linear performance derating of 1.5°C per 1000 m altitude above 3000 m
• Storage temperature: -40°C ~ +70°C (-40°F ~ 158°F)
• Relative humidity: 10%–85% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor fully offloads IPsec, IKEv2 and SSL VPN encryption traffic, eliminating CPU bottlenecks under heavy concurrent site-to-site and remote access tunnel workloads
• Permanent integrated universal security license enables complete enterprise encryption suite: AES-128/192/256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 static tunnels, Easy VPN remote access and DMVPN dynamic hub-spoke tunnels
• Native traffic isolation filters to segregate corporate staff LAN, PoE camera/VoIP IoT subnet and untrusted internet via independent VLAN zoning to block lateral threat movement within branch networks

4. Cisco IOS XE Advanced Security & SD-WAN Feature Suite

Dual Media WAN Redundancy (Combo SFP/RJ45 + Dedicated Copper GE Routing)

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, full IPv4/IPv6 dual-stack routing support
• Automatic policy-based multi-path failover logic across combo fiber/copper WAN and secondary copper GE uplink via VRRP/IP SLA continuous circuit health validation
• Metro Ethernet 802.3ah E-LMI link fault monitoring for carrier circuit SLA tracking and performance reporting
• Policy-Based Routing (PBR), multi-NAT pools, PAT overload for logical segmentation of mixed PoE-powered surveillance/voice endpoints
• DHCP server/relay/client, DNS proxy, dynamic DNS, IP SLA active link performance monitoring across both WAN paths

Unified Enterprise Threat Security Suite

• Zone-Based Stateful Inspection Firewall (ZBFW) to isolate internal corporate LAN, PoE device subnet, DMZ and untrusted internet traffic zones with granular inter-zone access control policies
• Next-Generation Intrusion Prevention System (NGIPS), Cisco Umbrella cloud URL filtering, deep NBAR2 advanced application control for HTTP, FTP, IM, video conferencing and mainstream business workloads
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication supported on all four Gigabit LAN ports
• Secure management only: SSHv2, HTTPS, SNMPv3; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), static MAC address port lockdown on Gigabit switch ports, anti-spoofing and DDoS mitigation filters for inbound WAN traffic

SD-WAN & Multi-Layer QoS Bandwidth Optimization

• Native Cisco SD-WAN integrated functionality for intelligent application-aware traffic steering across combo fiber/copper and secondary copper GE fixed-line paths, with application-defined SLA policy enforcement for critical voice, video surveillance and POS payment workloads
• WFQ, CBWFQ, LLQ low-latency queuing mechanisms for priority forwarding of real-time industrial SCADA, voice and multi-stream camera traffic over metered broadband circuits
• NBAR2 deep packet inspection to classify and prioritize bandwidth-heavy business workloads (inter-site data replication, bulk video backhaul, enterprise cloud synchronization)
• RTP/TCP header compression, traffic shaping and policing to control leased-line bandwidth consumption and avoid carrier overage charges
• PoE QoS scheduling to guarantee consistent power and bandwidth priority for mission-critical PoE+ cameras and multi-line VoIP handsets

Remote Management & Automation

• Cisco Zero-Touch Provisioning (ZTP) for mass standardized deployment of small retail branches and service provider Metro Ethernet managed CPE
• Cisco IOS Embedded Event Manager (EEM): Scriptable triggers for combo/secondary WAN link loss, PoE power faults and USB storage events with email/SNMP alert notifications for remote IT operations staff
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance telemetry, dedicated MIB extensions for dual WAN circuit status and PoE power consumption monitoring
• Compatible with Cisco Configuration Professional (CCP), Cisco DNA Center Lite and vManage SD-WAN controller for unified single-pane-of-glass remote monitoring of routing, security, PoE and multi-WAN subsystems
• GOLD non-disruptive onboard diagnostics for continuous remote hardware health checks of combo SFP and copper Ethernet interfaces without service interruption

5. Typical Deployment Scenarios

1. Small Retail Dual-Media PoE Secure Gateway
   Combo SFP/RJ45 WAN port supports fiber broadband primary uplink for retail transaction and multi-camera surveillance traffic; dedicated secondary copper GE WAN provides automatic wired backup during fiber outages. Integrated 4-port mixed PoE/PoE+ LAN switch powers multiple POS payment terminals, high-resolution PoE+ security cameras and VoIP desk phones without external power injectors. VLAN segmentation isolates sensitive payment infrastructure from staff LAN and public internet threats. Persistent encrypted IPsec DMVPN/SD-WAN tunnels transmit retail video and transaction data securely back to central corporate data centers, with zone firewall + NGIPS mitigating external cyber intrusion risks.
2. Entry-Level Service Provider Hybrid Fiber-Copper Business CPE
   Cost-effective compact hardware platform enables ISPs to deliver dual redundant fiber/copper Metro Ethernet managed broadband services to micro enterprise subscribers requiring PoE surveillance and voice endpoints. Centralized ZTP mass deployment and remote SNMP/vManage monitoring support bundled managed security, multi-PoE and SD-WAN networking service packages for small business market segments.
3. Remote Teleworker Small Office SD-WAN Branch Router
   Dual-media WAN design allows fiber primary broadband for stable encrypted Easy VPN/SD-WAN connectivity to corporate headquarters; mixed PoE/PoE+ LAN ports power home high-power surveillance cameras and multi-line VoIP equipment, full EIGRP/BGP routing support enables seamless intelligent multi-path traffic steering to core enterprise networks.
4. Campus Remote Low-Density Surveillance PoE Edge Router
   Four PoE-capable LAN ports connect high-resolution PoE+ cameras and building access control sensors; combo fiber WAN delivers high-bandwidth primary backhaul to campus core network, secondary copper GE uplink acts as emergency wired backup during fiber cut events, automatic SD-WAN failover maintains uninterrupted video data transmission.
5. Distributed Small Office Converged Voice & Security Router
   Fanless low-noise design fits compact office wiring closets; dual redundant WAN paths eliminate single points of failure for mission-critical voice and video workloads, built-in hardware encryption secures all inter-branch VPN communications over public fiber and copper broadband circuits.

6. Standard Package Contents of C1111-4P

Separately Sold Optional Accessories

• Micro-USB rollover console cable for local CLI configuration
• 12V 66W external universal AC power supply (mandatory operating accessory)
• 1G SFP fiber transceivers (SX/LX/T) for combo WAN fiber connectivity
• CAT4/CAT6 USB LTE cellular dongles for auxiliary wireless backup WAN
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for four Gigabit LAN and dual GE WAN connections
• ACS-1100-RM 19-inch rack mount kit for wiring cabinet deployment

Software Licensing Information

• Permanent integrated security & crypto license included; no additional purchase required for IPsec, AES encryption, zone firewall and NGIPS threat defense features
• All core routing, dual-media combo/copper WAN multi-path failover, PoE/PoE+ power management, QoS, native Cisco SD-WAN intelligent traffic steering, ZTP and 4-port Gigabit managed switch features are fully included in the base IOS XE universal image; no extra paid feature licenses needed
• No wireless AP or embedded cellular license applicable (WLAN radio and internal LTE hardware are omitted from this pure wired fiber-ready PoE SKU)

Short Commercial Catalog Summary for Quotation