Cisco C1166-12P Full Product Description

1. Short Overview

Suffix Breakdown

• C1166: Premium triple-media hybrid DSL-fiber fixed ISR chassis of Cisco 116x series, integrated VDSL2/ADSL2+/G.FAST Annex B/J ISDN DSL modem + dual independent combo fiber-copper Ethernet WANs + USB LTE dongle tertiary backup capability, flagship crypto throughput across 116x portfolio
• NoX: Base memory variant equipped with 4 GB DRAM + 8 GB flash (X-suffix C1166X-12P upgrades to 8GB DRAM/16GB flash with native IOx edge application hosting for local IoT analytics and M2M workloads)
• 12: Integrated 12-port full Gigabit copper LAN switch (high-density variant vs 4-port / 8-port 116x models)
• P: Full PoE power distribution on all 12 LAN ports: 8× IEEE 802.3af PoE (15.4W) + 4× IEEE 802.3at PoE+ (30W), total shared PoE power budget of 240W

Core Differentiators

1. vs 8-port ISDN DSL model C1164-8P: C1164-8P provides 8 LAN ports with 120W PoE budget for medium branches; C1166-12P expands to 12 full PoE-capable LAN ports with 240W PoE capacity to support large-scale multi-camera, multi-VoIP phone, and multi-AP unified communications deployments.
2. vs pure dual-combo Ethernet C1161-12P: C1161-12P has no built-in DSL chipset for ISDN copper telephone line broadband; C1166-12P integrates full ITU multi-profile Annex B/J ISDN DSL modem for global ISDN carrier access networks.
3. vs analog POTS Annex A/M DSL C1163-12P: C1163-12P adopts Annex A/M DSL for analog POTS telephone lines; C1166-12P uses Annex B/J DSL optimized for digital ISDN circuits, dedicated for EMEA and APAC ISDN telco deployments.
4. vs cellular modular variant C1166-12PLTEP: LTE variants add front swappable cellular PIM expansion slots; base C1166-12P relies solely on USB LTE dongles for auxiliary wireless backup without dedicated PIM slots.
5. vs wireless variant C1166-12PWE: Wireless variants integrate internal dual-band 802.11ax Wi-Fi 6 WLAN AP hardware; C1166-12P omits built-in wireless access point functionality.
6. vs legacy ISR G2 C880 ISDN DSL routers: Older DSL ISRs run classic IOS without native SD-WAN, limited crypto acceleration, lack dual combo SFP fiber uplinks, and have low PoE port density; C1166-12P adopts modern multi-core IOS XE architecture with dedicated hardware VPN offloading delivering up to 825 Mbps IPsec encrypted throughput.

2. Hardware Interface & Performance Specifications

Triple Hybrid WAN Architecture (Automatic Three-Path Failover Supported)

1. Primary Combo Gigabit Ethernet WAN Port 0 (GE0/0/0)
   10/100/1000BASE-T RJ45 copper interface paired with a shared SFP slot supporting industry-standard 1G fiber transceivers (SX/LX/T). Auto MDI/MDI-X speed negotiation enables flexible fiber or copper high-bandwidth primary Metro Ethernet broadband access for large branch voice, video, and data workloads.
2. Secondary Independent Combo Gigabit Ethernet WAN Port 1 (GE0/0/1)
   Separate dedicated 10/100/1000BASE-T RJ45 copper interface paired with a second standalone SFP slot for redundant fiber/copper backup uplink. Fully compatible with VRRP, HSRP, MHSRP, and continuous IP SLA link health monitoring to trigger automatic SD-WAN policy-based traffic steering and failover across two independent multi-media Ethernet WAN paths.
3. Integrated Multi-Standard DSL WAN Port
   Built-in ITU-compliant DSL modem supporting complete G.FAST, VDSL2, and ADSL2/2+ profiles optimized for Annex B/J ISDN digital telephone circuits:

• G.FAST: 106a / 106b full spectrum
• VDSL2: 8a/8b/12a/17a/35b with vectoring support
• ADSL2/2+ Annex B / Annex J ISDN circuits
  Includes dying gasp power detection and comprehensive onboard DSL diagnostic toolkit for signal attenuation, noise margin, crosstalk, and error rate monitoring, acting as tertiary wired backup broadband uplink over existing ISDN copper telephone lines.

1. USB 3.0 Type-A Port for Optional USB LTE Dongle Quaternary Cellular Backup
   Compatible with CAT4/CAT6 USB LTE cellular dongles sold separately as independent emergency wireless WAN, enabling four-layer primary/secondary/tertiary/fallback multi-media failover across dual fiber/copper Ethernet, ISDN DSL, and cellular networks via IP SLA link health detection and SD-WAN policy-based traffic steering.

12-Port Full Gigabit Managed LAN Switch

• Ports 1–8: IEEE 802.3af PoE (max 15.4W per port for standard IP cameras, single-line VoIP phones, low-power indoor Wi-Fi access points)
• Ports 9–12: IEEE 802.3at PoE+ (max 30W per port for high-power 4K PTZ surveillance cameras, multi-line enterprise Wi-Fi 6 APs, and video intercom endpoints)
  All 12 ports support simultaneous PoE delivery with total shared PoE power budget of 240W, eliminating dozens of separate external PoE injectors for large-scale unified communications and campus-wide multi-camera surveillance deployments.
  Full enterprise Layer 2 switching feature set:
• 802.1Q VLAN tagging, port isolation, static MAC address security, dedicated DMZ port assignment
• Broadcast/multicast storm suppression, SPAN traffic mirroring, LACP link aggregation, Cisco Auto Smartport auto-provisioning macros
• Per-port CoS traffic marking, bandwidth policing, private VLAN segmentation, CDP device discovery

Management & Auxiliary Ports

1. Micro-USB Console port: Dedicated out-of-band local CLI access via Micro-USB cable for offline factory provisioning and on-site troubleshooting
2. Single USB 3.0 Type-A dual-purpose host port: Supports external flash drives for offline configuration backups, system log archiving, EEM automation scripts, and Zero-Touch Provisioning (ZTP) image deployment; also compatible with optional CAT4/CAT6 USB LTE dongles for auxiliary quaternary cellular backup WAN
3. External DC power input jack (requires separate 12V DC 240W universal AC power adapter to sustain full 240W PoE load; no internal integrated PSU)
4. Hardware reset button, Kensington anti-theft lock slot for physical equipment protection
5. Embedded RTC real-time clock for precise timestamping of security audit logs, digital certificate validity, and network fault events

Memory, Storage & Performance Benchmarks

• DRAM: 4 GB fixed non-upgradeable system memory, supports up to 100 concurrent IPsec/DMVPN tunnels, triple-path SD-WAN multi-path forwarding, inline NGIPS inspection, and full 12-port PoE LAN + triple hybrid WAN traffic processing under maximum full load
• Flash storage: 8 GB onboard non-upgradeable flash; factory preloadedc900-universalk9-mzIOS XE Universal Advanced Security image, minimum supported firmware release 16.11.1
• Maximum IPsec encrypted IMIX throughput (multi-tunnel): 825 Mbps (flagship performance of 116x series)
• Unencrypted raw IPv4 IMIX routing throughput: Up to 1 Gbps
• Concurrent site-to-site IPsec/DMVPN tunnels: Up to 100
• Concurrent remote SSL VPN users: Up to 100

Front Panel LED Status Indicators

Physical & Power Parameters

• Form factor: Slim fanless metal desktop chassis, optional wall-mount bracket and ACS-1100-RM2 19-inch rack-mount kit available
• Dimensions (H × W × D): 41.9 mm × 322 mm × 226 mm (1.65 × 12.7 × 8.9 inches) with anti-slip rubber feet
• Weight: ~1.72 kg (3.79 lbs) without external power adapter, SFP transceivers, and USB LTE dongles
• Power supply requirement: Separate external 12V DC 240W universal AC adapter (100–240V AC mains input, 50/60Hz)
• Typical maximum power consumption: 34 W under dual combo Ethernet WAN + DSL WAN + USB LTE dongle + full 240W PoE LAN load
• Ingress protection: IP20, designed exclusively for dry indoor commercial office and central telco wiring closet environments

Standard Commercial Environmental Specifications

• Operating temperature: 0°C ~ +40°C (32°F ~ 104°F); linear performance derating of 1.5°C per 1000 m altitude above 3000 m
• Storage temperature: -40°C ~ +70°C (-40°F ~ 158°F)
• Relative humidity: 10%–85% RH non-condensing
• Maximum operating altitude: 3,000 m (10,000 ft)

3. Hardware Acceleration & Security Engine

• Dedicated onboard crypto co-processor fully offloads IPsec, IKEv2, and SSL VPN encryption traffic, eliminating CPU bottlenecks under heavy concurrent site-to-site and remote access tunnel workloads
• Permanent integrated universal security license enables complete enterprise encryption suite: AES-128/192/256, 3DES, DES, SHA-1/SHA-2, IKEv1/IKEv2 static tunnels, Easy VPN remote access, and DMVPN dynamic hub-spoke tunnels
• Native traffic isolation filters to segregate corporate staff LAN, PoE camera/VoIP IoT subnet, and untrusted public internet via independent VLAN zoning to block lateral threat movement across dual Ethernet, DSL, and cellular uplink paths
• Embedded Cisco Umbrella cloud security and Encrypted Traffic Analytics (ETA) for advanced threat detection over public DSL, fiber, and cellular wireless broadband networks

4. Cisco IOS XE Advanced Security & SD-WAN Feature Suite

Triple Hybrid WAN Redundancy Routing (Dual Combo Fiber-Copper Ethernet + Integrated DSL Annex B/J ISDN + Optional USB LTE Cellular)

• Cisco Express Forwarding (CEF), static routing, RIPv1/v2, OSPF, EIGRP, BGP, GRE/MGRE tunnel encapsulation, complete IPv4/IPv6 dual-stack routing support
• Automatic policy-based three-path failover logic across dual independent combo fiber/copper Ethernet WAN ports, integrated ISDN DSL secondary uplink, and USB LTE tertiary wireless backup via VRRP and continuous IP SLA circuit health validation
• Metro Ethernet 802.3ah E-LMI link fault monitoring for fiber/copper carrier SLA tracking; complete built-in DSL line diagnostic toolkit for signal attenuation, noise margin, vectoring, and error rate monitoring
• Policy-Based Routing (PBR), multi-NAT pools, PAT overload for logical segmentation of mixed PoE-powered surveillance and voice endpoints
• DHCP server/relay/client, DNS proxy, dynamic DNS, IP SLA active link performance monitoring across all three independent WAN media

Unified Enterprise Threat Security Suite

• Zone-Based Stateful Inspection Firewall (ZBFW) to isolate internal corporate LAN, PoE device subnet, DMZ, and untrusted public internet traffic zones with granular inter-zone access control policies
• Next-Generation Intrusion Prevention System (NGIPS), Cisco Umbrella cloud URL filtering, deep NBAR2 advanced application control for HTTP, FTP, IM, video conferencing, and mainstream business workloads
• AAA authentication via TACACS+ / RADIUS, 802.1X port authentication supported on all twelve Gigabit LAN ports
• Secure management only: SSHv2, HTTPS, SNMPv3; plaintext Telnet disabled by factory default
• Granular access control lists (ACLs), static MAC address port lockdown on Gigabit switch ports, anti-spoofing and DDoS mitigation filters for inbound WAN traffic over dual Ethernet, DSL, and cellular uplinks

SD-WAN & Multi-Layer QoS Bandwidth Optimization

• Native Cisco SD-WAN integrated functionality for intelligent application-aware traffic steering across three independent fiber/DSL/cellular hybrid paths, with application-defined SLA policy enforcement for critical voice, multi-stream video surveillance, and POS payment workloads
• WFQ, CBWFQ, LLQ low-latency queuing mechanisms for priority forwarding of real-time industrial SCADA, voice, and multi-camera video traffic over metered DSL and cellular data plans
• NBAR2 deep packet inspection to classify and prioritize bandwidth-heavy business workloads (inter-site data replication, bulk video backhaul, enterprise cloud synchronization)
• RTP/TCP header compression, traffic shaping, and policing to strictly control M2M, retail, and enterprise bandwidth consumption and avoid carrier billing overage charges
• PoE QoS scheduling to guarantee consistent power and bandwidth priority for mission-critical PoE+ 4K cameras and multi-line VoIP handsets across all twelve powered LAN ports

Remote Management & Automation

• Cisco Zero-Touch Provisioning (ZTP) for mass standardized deployment of large retail branches, regional SME offices, and ISDN DSL/G.FAST telco-managed high-port hybrid access CPE
• Cisco IOS Embedded Event Manager (EEM): Scriptable triggers for dual combo Ethernet/DSL/USB LTE WAN link loss, DSL sync failure, PoE power faults, and USB storage events with email/SNMP alert notifications for remote IT and telco operations staff
• SNMP v2c/v3, remote syslog logging, IP SLA end-to-end link performance telemetry, dedicated MIB extensions for triple hybrid WAN circuit status, DSL line quality, and PoE power consumption monitoring
• Compatible with Cisco Configuration Professional (CCP), Cisco DNA Center Lite, and vManage SD-WAN controller for unified single-pane-of-glass remote monitoring of routing, security, PoE, and multi-media triple-WAN subsystems
• GOLD non-disruptive onboard diagnostics for continuous remote hardware health checks of dual combo SFP Ethernet, integrated DSL modem, and PoE switching interfaces without service interruption

5. Typical Deployment Scenarios

1. Large Retail Multi-Camera Triple-Redundant Hybrid Fiber-DSL PoE Secure Gateway
   Two independent combo SFP/RJ45 WAN ports deliver dual redundant fiber/copper Metro Ethernet primary and secondary uplinks for large retail POS transaction, multi-floor 4K surveillance video, and multi-phone voice traffic backhaul. Integrated 12-port full PoE/PoE+ LAN switch powers dozens of POS payment terminals, high-power PoE+ PTZ security cameras, multi-line VoIP desk phones, and multi-floor Wi-Fi 6 APs without dozens of separate external PoE injectors. VLAN segmentation isolates sensitive payment infrastructure from staff LAN and public internet threats. Persistent encrypted IPsec DMVPN/SD-WAN tunnels transmit retail video and transaction data securely back to central corporate data centers, with zone firewall + NGIPS mitigating external cyber intrusion risks over fiber, DSL, and cellular public networks.
2. ISDN DSL/G.FAST Service Provider Premium High-Density Hybrid Enterprise CPE
   Uniform flagship high-performance compact hardware platform enables ISDN DSL carriers to deliver three-layer redundant dual-fiber-DSL-cellular managed broadband services to large enterprise subscribers requiring high-density 12-port PoE surveillance and multi-phone voice endpoints plus flexible wireless emergency backup. Centralized ZTP mass deployment and remote SNMP/vManage monitoring support bundled security, full PoE, and SD-WAN networking service packages for premium large SME market segments relying on legacy ISDN copper infrastructure.
3. Regional Medium Enterprise Office Triple-Redundant SD-WAN Branch Router
   Triple hybrid WAN design allows dual fiber combo Ethernet primary/secondary broadband for stable encrypted Easy VPN/SD-WAN connectivity to corporate headquarters; ISDN DSL copper line provides low-cost tertiary backup, and USB LTE dongle delivers emergency wireless quaternary failover for suburban/rural regional locations prone to frequent fixed-line circuit outages. Full 12-port PoE/PoE+ LAN powers office high-power surveillance cameras, dozens of multi-line VoIP phones, and multiple wireless access points, full EIGRP/BGP routing support enables seamless intelligent multi-path traffic steering to core enterprise networks.
4. Multi-Building Campus Central High-Density IoT Surveillance PoE Edge Router
   Twelve LAN ports connect dozens of high-resolution PoE/PoE+ cameras, building access control sensors, and environmental monitoring equipment across multiple campus buildings; dual combo fiber WAN delivers high-bandwidth primary/secondary backhaul to campus core network, integrated ISDN DSL port acts as wired tertiary backup, and USB LTE dongle provides emergency wireless fourth-path connectivity during simultaneous dual fiber and copper circuit failures, automatic SD-WAN multi-path steering maintains uninterrupted multi-stream video and sensor data transmission.
5. Distributed Remote Industrial M2M Converged Voice & Video Hybrid Router
   Fanless low-noise compact design fits semi-indoor central wiring closets at large remote industrial sites; three independent media WAN paths eliminate single/double points of failure for mission-critical industrial SCADA control and multi-campus multi-camera surveillance workloads, built-in dedicated hardware encryption secures all inter-branch VPN communications over public fiber, DSL, and cellular broadband circuits.

6. Standard Package Contents of C1166-12P

Separately Sold Optional Accessories

• Micro-USB rollover console cable for local CLI configuration
• 12V DC 240W external universal AC power supply (mandatory operating accessory for full 240W PoE functionality)
• 1G SFP fiber transceivers (SX/LX/T) for dual combo WAN fiber connectivity
• CAT4/CAT6 USB LTE cellular dongles for tertiary wireless backup WAN
• USB flash storage drives for log archiving and offline configuration backup
• CAT5e/CAT6 Ethernet patch cords for twelve Gigabit LAN and dual combo GE WAN connections
• RJ11 DSL telephone line cable for DSL WAN copper line connection
• ACS-1100-RM2 19-inch rack mount kit for wiring cabinet deployment

Software Licensing Information

• Permanent integrated security & crypto license included; no additional purchase required for IPsec, AES encryption, zone firewall, and NGIPS threat defense features
• All core routing, triple-path dual-fiber/ISDN DSL/USB-LTE multi-media WAN failover, DSL line diagnostic management, full 12-port PoE/PoE+ power management, QoS, native Cisco SD-WAN intelligent traffic steering, ZTP, and 12-port Gigabit managed switch features are fully included in the base IOS XE universal image; no extra paid feature licenses needed
• No wireless AP or embedded cellular license applicable (WLAN radio and internal pluggable LTE PIM hardware are omitted from this triple-media hybrid ISDN DSL-fiber high-density 12-port PoE base SKU; cellular connectivity requires separately purchased USB LTE dongles)

Short Commercial Catalog Summary for Quotation