Cisco C1116-4P Full Product Description

1. Short Overview

Suffix Breakdown

• C1116: DSL-integrated compact ISR platform of Cisco 111x sub-series, with built-in VDSL2/ADSL2+ Annex B/J DSL modem and combo fiber-copper WAN
• 4: Integrated 4-port full Gigabit copper LAN switch
• P: Supports 1× IEEE 802.3af PoE (15.4W) + 1× IEEE 802.3at PoE+ (30W) simultaneously, total shared PoE power budget of 45W

Core Differentiators

1. vs triple-media C1113-8P: C1113-8P offers 8 PoE LAN ports and USB LTE third-path cellular backup; C1116-4P is a smaller 4-port compact DSL router without native cellular support, targeted at micro-branch cost-sensitive DSL access use cases.
2. vs dual-DSL/Ethernet C1112-8P: C1112-8P provides 8 high-density PoE LAN ports with 120W PoE budget; C1116-4P is a compact low-port variant for small-scale 2–3 PoE endpoint deployments.
3. vs pure Ethernet C1111-4P: C1111-4P lacks integrated DSL modem for copper telephone line broadband; C1116-4P integrates full ITU-compliant VDSL2/ADSL2+ chipset for telco copper access networks.
4. vs wireless variant C1116-4PWE: Wireless models integrate internal 802.11ac Wave2 dual-band WLAN AP hardware; base C1116-4P is wired-only without built-in Wi-Fi access point.
5. vs legacy ISR G2 C880 DSL routers: Older DSL ISRs run classic IOS without native SD-WAN, limited crypto acceleration and lower PoE capacity; C1116-4P uses modern IOS XE, dedicated hardware VPN acceleration and flexible fiber SFP combo uplink design.

2. Hardware Interface & Performance Specifications

Dual Hybrid WAN Architecture (Automatic Dual-Path Failover Supported)

1. Combo Gigabit Ethernet WAN Port (GE0/0/0)
   10/100/1000BASE-T RJ45 copper interface paired with a shared SFP slot supporting 1G fiber transceivers (SX/LX/T). Auto MDI/MDI-X speed negotiation, delivering flexible fiber or copper primary Metro Ethernet broadband access for small branch workloads.
2. Integrated Multi-Standard DSL WAN Port
   Built-in ITU-compliant DSL modem supporting full VDSL2 and ADSL2/2+ profiles (VDSL2 8a/8b/12a/17a; ADSL2/2+ Annex A/B/M) with vectoring support, dying gasp power detection and comprehensive line diagnostic tools for telco-grade copper line connectivity, acting as secondary backup broadband uplink over existing telephone linesCisco.
   Supports IP SLA, VRRP and policy-based SD-WAN traffic steering to enable automatic failover between fiber/copper Ethernet and DSL WAN paths.

4-Port Full Gigabit Managed LAN Switch

• Port 1: IEEE 802.3af PoE (max 15.4W for standard IP cameras, single-line VoIP phones)
• Port 2: IEEE 802.3at PoE+ (max 30W for high-power compact PTZ cameras, low-power Wi-Fi APs)
• Ports 3–4: Standard non-PoE Gigabit copper for desktop PCs, local servers and low-power wired IoT sensors
  Total shared PoE power budget: 45W, designed for small-scale surveillance and voice deployments without bulky external PoE injectorsCisco.
  Full enterprise Layer 2 switching feature set:
• 802.1Q VLAN tagging, port isolation, static MAC address security, dedicated DMZ port assignment
• Broadcast/multicast storm suppression, SPAN traffic mirroring, LACP link aggregation, Cisco Auto Smartport auto-provisioning macros
• Per-port CoS traffic marking, bandwidth policing, private VLAN segmentation, CDP device discovery

Management & Auxiliary Ports

1. Micro-USB Console port: Dedicated out-of-band local CLI access via Micro-USB cable for offline configuration and on-site troubleshooting
2. Single USB 3.0 Type-A host port: Compatible with external flash drives for offline configuration backups, system log archiving, EEM automation scripts and Zero-Touch Provisioning (ZTP) image deployment; also supports optional USB LTE dongles for auxiliary tertiary cellular backup WAN
3. External DC power input jack (requires separate 12V DC 115W universal AC power adapter to support full PoE load; no internal integrated PSU)
4. Hardware reset button, Kensington anti-theft lock slot for physical equipment protection
5. Embedded RTC real-time clock for precise timestamping of security audit logs, digital certificates and network fault events

Memory, Storage & Performance Benchmarks

• DRAM: 4 GB fixed system memory, supports up to 50 concurrent IPsec/DMVPN tunnels, dual-path SD-WAN forwarding, inline NGIPS inspection and full 4-port PoE LAN + hybrid WAN traffic processing under maximum load
• Flash storage: 4 GB onboard flash; factory preloadedc900-universalk9-mzIOS XE Universal Advanced Security image, minimum supported firmware release 16.8.1
• Maximum IPsec encrypted IMIX throughput: 475 Mbps
• Unencrypted raw routing throughput: Up to 1 Gbps
• Concurrent site-to-site IPsec/DMVPN tunnels: Up to 50
• Concurrent remote SSL VPN users: Up to 100

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Slim fanless metal desktop chassis, optional wall-mount bracket and ACS-1100-RM 19-inch rack-mount kit available
• Dimensions (H × W × D): 42 mm × 323 mm × 230 mm (1.75 × 12.7 × 9.0 inches) with anti-slip rubber feet
• Weight: ~1.2 kg (2.64 lbs) without external power adapter and SFP transceivers
• Power supply requirement: Separate external 12V DC 115W universal AC adapter (100–240V AC mains input, 50/60Hz)
• Typical maximum power consumption: 18 W under combo Ethernet + DSL WAN + full PoE load across all powered LAN ports
• Ingress protection: IP20, intended exclusively for dry indoor commercial office and telco wiring closet environments

Standard Commercial Environmental Specifications

• Operating temperature: 0°C ~ +40°C (32°F ~ 104°F); linear performance derating of 1.5°C per 1000 m altitude above 3000 m
• Storage temperature: -40°C ~ +70°C (-40°F ~ 158°F)
• Relative humidity: 10%–85% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor fully offloads IPsec, IKEv2 and SSL VPN encryption traffic, eliminating CPU bottlenecks under heavy concurrent site-to-site and remote access tunnel workloads
• Permanent integrated universal security license enables complete enterprise encryption suite: AES-128/192/256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 static tunnels, Easy VPN remote access and DMVPN dynamic hub-spoke tunnels
• Native traffic isolation filters to segregate corporate staff LAN, PoE camera/VoIP IoT subnet and untrusted internet via independent VLAN zoning to block lateral threat movement within small branch networks

4. Cisco IOS XE Advanced Security & SD-WAN Feature Suite

Dual Hybrid WAN Redundancy Routing (Combo Fiber-Copper Ethernet + Integrated DSL)

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, full IPv4/IPv6 dual-stack routing support
• Automatic policy-based dual-path failover logic across combo fiber/copper Ethernet primary WAN and integrated DSL backup uplink via VRRP and continuous IP SLA circuit health validation
• Metro Ethernet 802.3ah E-LMI link fault monitoring for fiber/copper carrier SLA tracking; complete built-in DSL line diagnostic toolkit for signal attenuation, noise margin, vectoring and error rate monitoring
• Policy-Based Routing (PBR), multi-NAT pools, PAT overload for logical segmentation of mixed PoE-powered surveillance and voice endpoints
• DHCP server/relay/client, DNS proxy, dynamic DNS, IP SLA active link performance monitoring across both WAN paths

Unified Enterprise Threat Security Suite

• Zone-Based Stateful Inspection Firewall (ZBFW) to isolate internal corporate LAN, PoE device subnet, DMZ and untrusted public internet traffic zones with granular inter-zone access control policies
• Next-Generation Intrusion Prevention System (NGIPS), Cisco Umbrella cloud URL filtering, deep NBAR2 advanced application control for HTTP, FTP, IM, video conferencing and mainstream business workloads
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication supported on all four Gigabit LAN ports
• Secure management only: SSHv2, HTTPS, SNMPv3; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), static MAC address port lockdown on Gigabit switch ports, anti-spoofing and DDoS mitigation filters for inbound WAN traffic over both Ethernet and DSL uplinks

SD-WAN & Multi-Layer QoS Bandwidth Optimization

• Native Cisco SD-WAN integrated functionality for intelligent application-aware traffic steering across fiber/copper combo Ethernet and DSL hybrid paths, with application-defined SLA policy enforcement for critical voice, low-density video surveillance and POS payment workloads
• WFQ, CBWFQ, LLQ low-latency queuing mechanisms for priority forwarding of real-time voice and small-scale camera video traffic over metered DSL broadband circuits
• NBAR2 deep packet inspection to classify and prioritize bandwidth-heavy business workloads (cloud synchronization, small-scale video backhaul)
• RTP/TCP header compression, traffic shaping and policing to control DSL bandwidth consumption and avoid carrier overage charges
• PoE QoS scheduling to guarantee consistent power and bandwidth priority for mission-critical PoE+ cameras and VoIP handsets across the two powered LAN ports

Remote Management & Automation

• Cisco Zero-Touch Provisioning (ZTP) for mass standardized deployment of DSL ISP-managed hybrid access CPE and micro retail branches
• Cisco IOS Embedded Event Manager (EEM): Scriptable triggers for combo Ethernet/DSL WAN link loss, DSL sync failure, PoE power faults and USB storage events with email/SNMP alert notifications for remote IT and telco operations staff
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance telemetry, dedicated MIB extensions for dual hybrid WAN circuit status, DSL line quality and PoE power consumption monitoring
• Compatible with Cisco Configuration Professional (CCP), Cisco DNA Center Lite and vManage SD-WAN controller for unified single-pane-of-glass remote monitoring of routing, security, PoE and hybrid DSL/Ethernet dual-WAN subsystems
• GOLD non-disruptive onboard diagnostics for continuous remote hardware health checks of combo SFP Ethernet, integrated DSL modem and PoE switching interfaces without service interruption

5. Typical Deployment Scenarios

1. Small Retail Micro-Branch Hybrid Fiber-DSL PoE Secure Gateway
   Combo SFP/RJ45 WAN port delivers fiber Metro Ethernet primary uplink for small retail POS transaction and low-density single-camera surveillance traffic; integrated VDSL2/ADSL2+ DSL port acts as automatic backup uplink over existing copper telephone lines during fiber outages. Integrated 4-port mixed PoE/PoE+ LAN switch powers one POS terminal, one compact PoE+ security camera and two office desktop PCs without external PoE injectors. VLAN segmentation isolates sensitive payment infrastructure from staff LAN and public internet threats. Persistent encrypted IPsec DMVPN/SD-WAN tunnels transmit retail transaction data securely back to central corporate data centers, with zone firewall + NGIPS mitigating external cyber intrusion risks over fiber and DSL public networks.
2. DSL Service Provider Entry-Level Hybrid Fiber-Copper SME CPE
   Cost-effective compact hardware platform enables DSL ISPs to deliver dual redundant fiber-copper managed broadband services to micro enterprise subscribers requiring basic PoE surveillance and voice endpoints. Centralized ZTP mass deployment and remote SNMP/vManage monitoring support bundled managed security and PoE networking service packages for small business market segments.
3. Remote Teleworker Small Office Hybrid SD-WAN Branch Router
   Dual hybrid WAN design allows fiber primary broadband for stable encrypted Easy VPN/SD-WAN connectivity to corporate headquarters; DSL copper line provides low-cost backup for residential/rural locations. Mixed PoE/PoE+ LAN ports power home surveillance cameras and single-line VoIP equipment, full EIGRP/BGP routing support enables seamless multi-path traffic steering to core enterprise networks.
4. Campus Remote Low-Density IoT Surveillance PoE Edge Router
   Four LAN ports connect a small number of low-power IP cameras and building access control sensors; combo fiber WAN delivers primary backhaul to campus core network, integrated DSL port acts as emergency wired backup during fiber cut events, automatic SD-WAN failover maintains uninterrupted sensor data transmission.
5. Rural Small Office Converged Voice & Basic Security Router
   Fanless low-noise compact design fits tiny residential wiring closets; dual redundant fiber/DSL WAN paths eliminate single points of failure for basic unified communications and light surveillance workloads, built-in hardware encryption secures all inter-branch VPN communications over public fiber and DSL copper broadband circuits.

6. Standard Package Contents of C1116-4P

Separately Sold Optional Accessories

• Micro-USB rollover console cable for local CLI configuration
• 12V 115W external universal AC power supply (mandatory operating accessory for full PoE functionality)
• 1G SFP fiber transceivers (SX/LX/T) for combo WAN fiber connectivity
• CAT4/CAT6 USB LTE cellular dongles for auxiliary wireless backup WAN
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for four Gigabit LAN and combo GE WAN connections
• RJ11 DSL telephone line cable for DSL WAN copper line connection
• ACS-1100-RM 19-inch rack mount kit for wiring cabinet deployment

Software Licensing Information

• Permanent integrated security & crypto license included; no additional purchase required for IPsec, AES encryption, zone firewall and NGIPS threat defense features
• All core routing, hybrid DSL/combo Ethernet dual-path WAN failover, DSL line diagnostic management, PoE/PoE+ power management, QoS, native Cisco SD-WAN intelligent traffic steering, ZTP and 4-port Gigabit managed switch features are fully included in the base IOS XE universal image; no extra paid feature licenses needed
• No wireless AP or embedded cellular license applicable (WLAN radio and internal LTE hardware are omitted from this compact hybrid DSL fiber-ready low-port PoE SKU)

Short Commercial Catalog Summary for Quotation