Cisco C1117-4P Full Product Description

1. Short Overview

Suffix Breakdown

• C1117: Top-tier compact triple-media DSL ISR platform of Cisco 111x sub-series, integrated full VDSL2/ADSL2+ Annex A/B/M modem + combo fiber-copper Ethernet WAN + USB cellular backup capability
• 4: Integrated 4-port full Gigabit copper LAN switch
• P: 2 of the 4 LAN ports support PoE power delivery: 1× IEEE 802.3af PoE (15.4W) + 1× IEEE 802.3at PoE+ (30W), total shared PoE power budget of 45WCisco

Core Differentiators

1. vs dual-WAN DSL model C1116-4P: C1116-4P only supports combo Ethernet + DSL dual fixed WAN without native USB cellular backup path; C1117-4P adds USB 3.0 port for optional LTE dongle tertiary wireless uplink, realizing three-layer media failover (fiber / DSL / cellular).
2. vs high-density 8-port DSL C1112-8P / C1113-8P: 8-port variants carry larger PoE budgets and more LAN interfaces for medium branches; C1117-4P is a cost-optimized compact 4-port model targeted at micro-branch and rural teleworker scenarios with minimal PoE endpoints.
3. vs pure Ethernet C1111-4P: C1111-4P lacks built-in DSL modem for copper telephone line broadband; C1117-4P integrates ITU-compliant multi-profile DSL chipset for legacy telco copper access networks.
4. vs wireless variant C1117-4PWE: Wireless models integrate internal dual-band 802.11ac Wave2 WLAN AP hardware; base C1117-4P is wired-only without built-in wireless access point functionality.
5. vs legacy ISR G2 C880 DSL routers: Older DSL ISRs run classic IOS without native SD-WAN, limited hardware crypto acceleration and lower PoE capacity; C1117-4P adopts modern IOS XE, dedicated VPN acceleration, flexible SFP fiber combo uplink and three-path hybrid media redundancy design.

2. Hardware Interface & Performance Specifications

Triple Hybrid WAN Architecture (Automatic Three-Path Failover Supported)

1. Combo Gigabit Ethernet WAN Port (GE0/0/0)
   10/100/1000BASE-T RJ45 copper interface paired with a shared SFP slot supporting 1G fiber transceivers (SX/LX/T). Auto MDI/MDI-X speed negotiation, providing flexible fiber or copper primary Metro Ethernet broadband access for small branch workloads.
2. Integrated Multi-Standard DSL WAN Port
   Built-in ITU-compliant DSL modem supporting complete VDSL2 and ADSL2/2+ profiles (VDSL2 8a/8b/12a/17a vectoring; ADSL2/2+ Annex A/B/M) with dying gasp power detection and comprehensive line diagnostic tools for telco-grade copper line connectivity, acting as secondary wired backup uplink over existing telephone copper lines.
3. USB 3.0 Type-A Port for Optional USB LTE Dongle Tertiary Cellular Backup
   Compatible with CAT4/CAT6 USB LTE cellular dongles as independent tertiary wireless WAN, enabling three-layer primary/secondary/emergency multi-media failover across fiber, DSL and cellular networks via IP SLA link health detection and SD-WAN policy-based traffic steering.

4-Port Full Gigabit Managed LAN Switch

• Port 1: IEEE 802.3af PoE (max 15.4W for standard IP cameras, single-line VoIP phones, low-power indoor wireless APs)
• Port 2: IEEE 802.3at PoE+ (max 30W for compact high-power PTZ surveillance cameras, Wi-Fi 6 low-density access points)
• Ports 3–4: Standard non-PoE Gigabit copper for desktop PCs, local file servers and low-power wired IoT sensors
  Total shared PoE power budget: 45W, eliminating bulky external PoE injectors for small-scale surveillance and unified voice deployments.
  Full enterprise Layer 2 switching feature set:
• 802.1Q VLAN tagging, port isolation, static MAC address security, dedicated DMZ port assignment
• Broadcast/multicast storm suppression, SPAN traffic mirroring, LACP link aggregation, Cisco Auto Smartport auto-provisioning macros
• Per-port CoS traffic marking, bandwidth policing, private VLAN segmentation, CDP device discovery

Management & Auxiliary Ports

1. Micro-USB Console port: Dedicated out-of-band local CLI access via Micro-USB cable for offline factory provisioning and on-site troubleshooting
2. Single USB 3.0 Type-A dual-purpose host port: Supports external flash drives for offline configuration backups, system log archiving, EEM automation scripts and Zero-Touch Provisioning (ZTP) image deployment; also compatible with USB LTE cellular dongles for tertiary wireless backup WAN
3. External DC power input jack (requires separate 12V DC 115W universal AC power adapter to sustain full 45W PoE load; no internal integrated PSU)Cisco
4. Hardware reset button, Kensington anti-theft lock slot for physical equipment protection
5. Embedded RTC real-time clock for precise timestamping of security audit logs, digital certificate validity and network fault events

Memory, Storage & Performance Benchmarks

• DRAM: 4 GB fixed system memory, supports up to 50 concurrent IPsec/DMVPN tunnels, three-path SD-WAN multi-path forwarding, inline NGIPS inspection and full 4-port PoE LAN + triple hybrid WAN traffic processing under maximum full load
• Flash storage: 4 GB onboard flash; factory preloadedc900-universalk9-mzIOS XE Universal Advanced Security image, minimum supported firmware release 16.6.1Cisco
• Maximum IPsec encrypted IMIX throughput: 475 Mbps
• Unencrypted raw routing throughput: Up to 1 Gbps
• Concurrent site-to-site IPsec/DMVPN tunnels: Up to 50
• Concurrent remote SSL VPN users: Up to 100

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Slim fanless metal desktop chassis, optional wall-mount bracket and ACS-1100-RM 19-inch rack-mount kit available
• Dimensions (H × W × D): 42 mm × 323 mm × 230 mm (1.75 × 12.7 × 9.03 inches) with anti-slip rubber feet
• Weight: ~1.2 kg (2.64 lbs) without external power adapter and SFP transceivers
• Power supply requirement: Separate external 12V DC 115W universal AC adapter (100–240V AC mains input, 50/60Hz)
• Typical maximum power consumption: 19 W under combo Ethernet + DSL WAN + USB LTE dongle + full PoE LAN load
• Ingress protection: IP20, designed exclusively for dry indoor commercial office and telco wiring closet environments

Standard Commercial Environmental Specifications

• Operating temperature: 0°C ~ +40°C (32°F ~ 104°F); linear performance derating of 1.5°C per 1000 m altitude above 3000 m
• Storage temperature: -40°C ~ +70°C (-40°F ~ 158°F)
• Relative humidity: 10%–85% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor fully offloads IPsec, IKEv2 and SSL VPN encryption traffic, eliminating CPU bottlenecks under heavy concurrent site-to-site and remote access tunnel workloads
• Permanent integrated universal security license enables complete enterprise encryption suite: AES-128/192/256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 static tunnels, Easy VPN remote access and DMVPN dynamic hub-spoke tunnels
• Native traffic isolation filters to segregate corporate staff LAN, PoE camera/VoIP IoT subnet and untrusted public internet via independent VLAN zoning to block lateral threat movement across fiber, DSL and cellular uplink paths

4. Cisco IOS XE Advanced Security & SD-WAN Feature Suite

Triple Hybrid WAN Redundancy Routing (Fiber Combo Ethernet + DSL + Optional USB Cellular)

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, full IPv4/IPv6 dual-stack routing support
• Automatic policy-based three-path failover logic across combo fiber/copper Ethernet primary WAN, integrated DSL secondary uplink and USB LTE tertiary wireless backup via VRRP and continuous IP SLA circuit health validation
• Metro Ethernet 802.3ah E-LMI link fault monitoring for fiber/copper carrier SLA tracking; complete built-in DSL line diagnostic toolkit for signal attenuation, noise margin, vectoring and error rate monitoring
• Policy-Based Routing (PBR), multi-NAT pools, PAT overload for logical segmentation of mixed PoE-powered surveillance and voice endpoints
• DHCP server/relay/client, DNS proxy, dynamic DNS, IP SLA active link performance monitoring across all three independent WAN media

Unified Enterprise Threat Security Suite

• Zone-Based Stateful Inspection Firewall (ZBFW) to isolate internal corporate LAN, PoE device subnet, DMZ and untrusted public internet traffic zones with granular inter-zone access control policies
• Next-Generation Intrusion Prevention System (NGIPS), Cisco Umbrella cloud URL filtering, deep NBAR2 advanced application control for HTTP, FTP, IM, video conferencing and mainstream business workloads
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication supported on all four Gigabit LAN ports
• Secure management only: SSHv2, HTTPS, SNMPv3; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), static MAC address port lockdown on Gigabit switch ports, anti-spoofing and DDoS mitigation filters for inbound traffic over Ethernet, DSL and cellular uplinks

SD-WAN & Multi-Layer QoS Bandwidth Optimization

• Native Cisco SD-WAN integrated functionality for intelligent application-aware traffic steering across three independent fiber/DSL/cellular hybrid paths, with application-defined SLA policy enforcement for critical voice, low-density video surveillance and POS payment workloads
• WFQ, CBWFQ, LLQ low-latency queuing mechanisms for priority forwarding of real-time voice and small-scale camera video traffic over metered DSL and cellular data plans
• NBAR2 deep packet inspection to classify and prioritize bandwidth-heavy business workloads (cloud synchronization, small-scale video backhaul)
• RTP/TCP header compression, traffic shaping and policing to strictly control DSL and cellular bandwidth consumption and avoid carrier billing overage charges
• PoE QoS scheduling to guarantee consistent power and bandwidth priority for mission-critical PoE+ cameras and VoIP handsets across the two powered LAN ports

Remote Management & Automation

• Cisco Zero-Touch Provisioning (ZTP) for mass standardized deployment of telco hybrid fiber-DSL business CPE and multi-media redundant micro retail branches
• Cisco IOS Embedded Event Manager (EEM): Scriptable triggers for combo Ethernet/DSL/USB LTE WAN link loss, DSL sync failure, PoE power faults and USB storage events with email/SNMP alert notifications for remote IT and telco operations staff
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance telemetry, dedicated MIB extensions for triple hybrid WAN circuit status, DSL line quality and PoE power consumption monitoring
• Compatible with Cisco Configuration Professional (CCP), Cisco DNA Center Lite and vManage SD-WAN controller for unified single-pane-of-glass remote monitoring of routing, security, PoE and multi-media triple-WAN subsystems
• GOLD non-disruptive onboard diagnostics for continuous remote hardware health checks of combo SFP Ethernet, integrated DSL modem and PoE switching interfaces without service interruption

5. Typical Deployment Scenarios

1. Rural Micro-Retail Triple-Redundant Hybrid PoE Secure Gateway
   Combo SFP/RJ45 WAN port delivers fiber Metro Ethernet primary uplink for small retail POS transaction and single-camera surveillance traffic; integrated VDSL2/ADSL2+ DSL port acts as automatic secondary backup over existing copper telephone lines; optional USB LTE dongle provides emergency tertiary wireless cellular connectivity during simultaneous fiber + DSL dual outages. Integrated 4-port mixed PoE/PoE+ LAN switch powers one POS terminal, one compact PoE+ security camera and two office desktop PCs without external PoE injectors. VLAN segmentation isolates sensitive payment infrastructure from staff LAN and public internet threats. Persistent encrypted IPsec DMVPN/SD-WAN tunnels transmit retail transaction data securely back to central corporate data centers, with zone firewall + NGIPS mitigating external cyber intrusion risks over fiber, DSL and cellular public networks.
2. Entry Premium DSL Service Provider Managed Triple-Media Hybrid SME CPE
   Cost-effective compact hardware platform enables DSL/G.FAST ISPs to deliver three-layer redundant fiber-copper-cellular managed broadband services to micro enterprise subscribers requiring basic PoE surveillance and voice endpoints plus emergency wireless backup. Centralized ZTP mass deployment and remote SNMP/vManage monitoring support bundled managed security and PoE networking service packages for rural SME market segments.
3. Remote Teleworker Small Office Triple-Redundant SD-WAN Branch Router
   Triple hybrid WAN design allows fiber primary broadband for stable encrypted Easy VPN/SD-WAN connectivity to corporate headquarters; DSL copper line provides low-cost secondary backup, and USB LTE dongle delivers emergency wireless tertiary failover for rural locations prone to frequent copper line outages. Mixed PoE/PoE+ LAN ports power home surveillance cameras and single-line VoIP equipment, full EIGRP/BGP routing support enables seamless intelligent multi-path traffic steering to core enterprise networks.
4. Campus Remote Low-Density IoT Surveillance PoE Edge Router
   Four LAN ports connect a small number of low-power IP cameras and building access control sensors; combo fiber WAN delivers primary backhaul to campus core network, integrated DSL port acts as secondary wired backup, and USB LTE cellular dongle provides emergency third-path wireless connectivity during simultaneous fiber and DSL circuit failures, automatic SD-WAN multi-path steering maintains uninterrupted sensor data transmission.
5. Distributed Rural Unmanned Monitoring Converged Voice & Video Router
   Fanless low-noise compact design fits tiny residential and field wiring closets; three independent media WAN paths eliminate single/double points of failure for basic unified communications and light surveillance workloads, built-in dedicated hardware encryption secures all inter-branch VPN communications over public fiber, DSL and cellular broadband circuits.

6. Standard Package Contents of C1117-4P

Separately Sold Optional Accessories

• Micro-USB rollover console cable for local CLI configuration
• 12V 115W external universal AC power supply (mandatory operating accessory for full PoE functionality)
• 1G SFP fiber transceivers (SX/LX/T) for combo WAN fiber connectivity
• CAT4/CAT6 USB LTE cellular dongles for tertiary wireless backup WAN
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for four Gigabit LAN and combo GE WAN connections
• RJ11 DSL telephone line cable for DSL WAN copper line connection
• ACS-1100-RM 19-inch rack mount kit for wiring cabinet deployment

Software Licensing Information

• Permanent integrated security & crypto license included; no additional purchase required for IPsec, AES encryption, zone firewall and NGIPS threat defense features
• All core routing, triple-path fiber/DSL/USB-LTE multi-media WAN failover, DSL line diagnostic management, PoE/PoE+ power management, QoS, native Cisco SD-WAN intelligent traffic steering, ZTP and 4-port Gigabit managed switch features are fully included in the base IOS XE universal image; no extra paid feature licenses needed
• No wireless AP or embedded cellular license applicable (WLAN radio and internal pluggable LTE PIM hardware are omitted from this triple-media hybrid DSL-fiber low-port PoE SKU)

Short Commercial Catalog Summary for Quotation