Cisco C1111-4P Product Data Sheet

Cisco 1000 Series Integrated

Data sheet

Cisco public

Services Routers

© 2019 Cisco and/or its affiliates. All rights reserved. Page 1 of 31

Contents

Primary features and benefits 3

Platform architecture and capabilities 5

Product specifications 8

System specifications 15

Cisco IOS Software licensing and packaging 23

For more information 29

Cisco and partner services 30

Ordering information 30

Cisco environmental sustainability 30

Cisco Capital 30

Document History 31

© 2019 Cisco and/or its affiliates. All rights reserved. Page 2 of 31

Cisco® 1000 Series Integrated Services Routers (ISRs) with Cisco IOS® XE Software combine Internet
access, comprehensive security, and wireless services (LTE Advanced 3.0 wireless WAN and 802.11ac
wireless LAN) in a single, high-performance device. The routers are easy to deploy and manage, with
separate data and control plane capabilities.

The Cisco 1000 Series ISRs are well suited for deployment as Customer Premises Equipment (CPE) in enterprise branch
offices, in service provider managed environments as well as smaller form factor and M2M use cases.

Note: Not all 1000 series SKU variants are available in every region with different technologies (check on CCW pricelist

for your region).

Figure 1.

Cisco 1000 Product Family Series

Figure 2.

Cisco 1100-8P ISR with LTE advanced, back and front view

Figure 3.

Cisco 1120 and 1160 with LTE pluggable and 802.11ac Wi-Fi options

Primary features and benefits

Table 1. Business benefits

© 2019 Cisco and/or its affiliates. All rights reserved. Page 3 of 31

Business need

Features/description

Lightweight, compact size with low power
consumption

● Can be deployed in many different environments where space, heat dissipation, and low power

consumption are critical factors (Including Cisco Pluggable smaller form factor technology).

High performance to run concurrent services

● High performance allows customers to take advantage of broadband network speeds while

running secure, concurrent data, voice, video, and wireless services. C1160 models will have
better overall performance.

High availability and business continuity

● Redundant WAN connections for failover protection and load balancing.

● Dynamic failover protocols such as Virtual Router Redundancy Protocol (VRRP; RFC 2338), Hot

Standby Router Protocol (HSRP), and Multigroup HSRP (MHSRP).

Consistent, high application performance
levels

● The router can run multiple services simultaneously with minimal performance degradation.

Risk mitigation with multilevel security

● Network perimeter security with integrated application inspection firewall.

● Data privacy through high-speed IP Security (IPsec) Triple Data Encryption Standard (3DES), and

Advanced Encryption Standard (AES) encryption.

● High-performance VPNs: DMVPN, FlexVPN, GETVPN.

● Encrypted Traffic Analytics (ETA) to identify malware communications in encrypted traffic using

passive monitoring, extraction of relevant data elements, and supervised machine learning with
cloud-based global visibility.

● Cisco Umbrella

™

is a cloud security platform that provides the first line of defense against threats

on the internet wherever users go.

● Security hardware acceleration.

● Trustworthy systems with Field-Programmable Gate Array (FPGA) and hardware anchor.

Unified control of wired and wireless networks
from a common console for streamlined
operations

● Simplifies and centralizes configuration and management of wireless and wireline devices.

Supports WLAN services without requiring a wireless LAN controller.

● Supports Mobility Express for WLAN-enabled routers.

Remote configuration and management to
keep local IT staff lean

● Supports separate console and USB ports. Can be configured to work with optional USB token.

● Supports TR-069.

Performance

● Throughput

● Service reliability

● ISR 1000 can provide encrypted traffic performance greater than 350 Mbps.

● A distributed multicore architecture with the dedicated control plane and service plane.

● Remote installation of application-aware services that run identically to their counterparts in

dedicated appliances (Future roadmap).

Lower WAN expenditures

● Cisco Software-Defined WAN (SD-WAN) support for optimized WAN connection.

● Smaller form factor and Cisco Pluggable technology provide additional protection investment

and flexibility.

Pay as you grow: IPsec performance upgrade
model

● Router IPsec capacity can be increased with a remote performance-on-demand license upgrade

(no hardware upgrade) for exceptional savings and CapEx budget management.

IT consolidation, space savings, and improved
Total Cost of Ownership (TCO)

● Single converged branch platform integrates routing, switching, security, and performance

management capabilities.

Business continuity and increased resiliency

● The entire 1000 Series supports Power over Ethernet (PoE) and PoE+ power to endpoints (Not

available on C1101 and C1109 smaller form factor series).

Table 2. Support for Software-Defined WAN on ISR 1000

Cisco SD-WAN offers an entirely new way to manage and operate your WAN infrastructure. Cisco SDWAN is a cloud
delivered architecture that offers secure, flexible and rich services with the following key benefits:

© 2019 Cisco and/or its affiliates. All rights reserved. Page 4 of 31

Cisco SD-WAN

Cisco SD-WAN capability can be enabled on ISR 1000 platform

Better user experience

● The ability to deploy applications in minutes, on any platform, with a consistent user experience. Deliver predictable

performance for applications residing in the data center or in the cloud.

Greater agility

● Faster, easier deployment and operation of your WAN, and get faster performance using less bandwidth. Add new

revenue generating services in minutes not months.

Advanced threat protection

● Securely connect your users to applications in minutes and protect your data from the WAN edge to the cloud. Secure

segmentation for critical assets and multi-layer, robust security that encrypts all data.

Architectural feature

Benefits/description

Multicore processors

● High-performance multicore processors support high-speed WAN connections. The data plane uses a flow processor

that delivers Application-Specific Integrated Circuit (ASIC)-like performance that does not degrade as services are
added.

Embedded IPsec VPN
hardware acceleration

● Increases scalability when combined with an optional Cisco IOS XE Software Security license, enables WAN link security

and VPN services.

Integrated Gigabit
Ethernet ports

● Provides up to 10 built-in 10/100/1000 Ethernet ports for WAN or LAN (1100-8P: 2 WAN and 8 LAN ports, 1100-4P: 2

WAN and 4 LAN ports, 1101-4P: 1WAN and 4 LAN ports, 1109-2P M2M: 1 WAN and 2 LAN ports, and 1109-4P M2M: 1
WAN and 4 LAN).

● All 1100-8P and 1100-4P platforms model have one 10/100/1000 Ethernet port that can support Small Form-Factor

Pluggable (SFP)-based connectivity in addition to RJ-45 connections, enabling fiber or copper connectivity.

● Depending on the platform, PoE/PoE+ can be enabled on Gigabit Ethernet interfaces (4 PoE or 2 PoE+ ports on the

1100-8P and 2 PoE or 1 PoE+ ports on the 1100-4P), to provide power to external devices such as video endpoints and

802.11ac access points (Not available on C1101 and C1109 M2M smaller form factor models).

● Smaller form factor 1101-4P and 1109-4P with Cisco WAN LTE Pluggable technology option. Additional WAN options

such as Cisco 12:1 High Speed Serial Pluggable.

USB-based console access

● A type B micro USB console port supports management connectivity when traditional serial ports are not available.

Traditional console port is also available on selected models.

Optional PoE upgrade

● An optional upgrade to enable PoE capabilities on the integrated ethernet switch modules is available.

● PoE is not supported on 1101 and 1109.

IOS XE SD-WAN software enables important steps towards Intent Based Networking for WAN, i.e.

●

Centralized management and operational simplicity

●

Secure connectivity on the hybrid WAN

●

Optimized access to SaaS and Public Cloud

●

Predictable Application Quality of Experience with policy-based automation

Platform architecture and capabilities

Table 3. Architectural highlights

© 2019 Cisco and/or its affiliates. All rights reserved. Page 5 of 31

Architectural feature

Benefits/description

Flash memory support

● The 1000 Series ship with a fixed 4GB or 8GB flash memory depending on the models selected.

● Type A USB 3.0 ports provide capabilities for convenient storage.

DRAM

● The 1000 Series comes with 4 GB or 8GB fixed DRAM depending on the models selected. The C1111, C1120, C1160

series have an option to include an 8 GB fixed DRAM for advanced SD-WAN security features.

Operational phase

Application

Description

Cloud management user
interface

vManage

● vManage provides a single cloud-based console to manage your network and

SD-WAN security for faster deployments with automated provisioning and
app assurance.

Device staging and
configuration

WebUI

● A GUI-based device-management tool for Cisco IOS and Cisco IOS XE

Software-based access routers. This tool simplifies routing, firewall, VPN,
unified communications, and WAN and LAN configuration through easy-to­use wizards.

Networkwide deployment,
configuration, monitoring, and
troubleshooting

Cisco Prime® Infrastructure

● Offers comprehensive lifecycle management of wired and wireless access,

campus, and branch-office networks; rich visibility into enduser connectivity;
and application performance assurance.

● Provides wired lifecycle functions such as inventory, configuration, and image

management; automated deployment; compliance reporting; integrated best
practices; and reporting.

Context-aware security
configuration and monitoring

Cisco Prime Security

Manager

● Management tool for configuring and managing context-aware security. The

application supports both single- and multidevice manager form factors.

● Provides the ability to write and enforce granular context-aware security

policies.

Digitalized applications to
become inherently network­aware and

Application Policy

Infrastructure Controller

Enterprise Module

Cisco Digital Network

Architecture (Cisco DNA
Center) with

APIC-EM

● Cisco DNA centers around a network infrastructure that is not only fully

programmable and open to third–party innovation, but can also fully and
seamlessly integrates the cloud as an infrastructure component.

● The Cisco DNA controller factilitatest simple, automated and programmatic

deployment of network services. It brings the notion of user–and application–
aware policies into the foreground of network operations.

● With Cisco DNA, the network can provide continuous feedback to simplify

and optimize network operations.

● Automate network configuration and setup APIC-EM is a central part of Cisco

Digital Network Architecture. It delivers software-defined networking to the
enterprise branch, campus, and WAN.

Feature

Description

Cisco IOS Embedded Event Manager
(EEM)

● A distributed and customized approach to event detection and recovery.

● Offers the ability to monitor events and take informational, corrective, or any desired EEM.

● Action when the monitored events occur or when a threshold is reached.

Cisco IOS XE IP Service-Level Agreements
(IP SLAs)

● Helps assure the performance of new business-critical IP applications as well as IP services that use

data and voice in an IP network.

Table 4. Network management solutions

Table 5. Embedded management capabilities

© 2019 Cisco and/or its affiliates. All rights reserved. Page 6 of 31

Feature

Description

Simple Network Management Protocol
(SNMP), Remote Monitoring (RMON),

syslog, NetFlow, IP Flow Information

Export (IPFix)

● Network monitoring and accounting tools. Enhanced 3G MIB with 4G MIB extension.

LTE network management and
diagnostics

● In-band and out-of-band management using Telnet (Cisco IOS XE Software Command Line Interface

[CLI]) and SNMP, including MIB II and other extensions. Industry-standard LTE diagnostics and
monitoring tools (Qualcomm CDMA Air Interface Tester [CAIT] and Spirent Universal Diagnostic
Monitor [UDM]).

Feature

Description

Protocols

IPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path
First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), Border Gateway Protocol (BGP), BGP
Router Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group
Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast Sparse Mode (PIM SM), PIM
Source-Specific Multicast (SSM), Resource Reservation Protocol (RSVP), Cisco Discovery Protocol,
Encapsulated Remote Switched Port Analyzer (ERSPAN), Cisco IOS IP Service-Level Agreements (IPSLA), Call
Home, Cisco IOS Embedded Event Manager (EEM), Internet Key Exchange (IKE), Access Control Lists (ACL),
Ethernet Virtual Connections (EVC), Dynamic Host Configuration Protocol (DHCP), Frame Relay (FR), DNS,
Locator ID Separation Protocol (LISP), Hot Standby Router Protocol (HSRP), RADIUS, Authentication,
Authorization, and Accounting (AAA), Application Visibility and Control (AVC), Distance Vector Multicast
Routing Protocol (DVMRP), IPv4-to-IPv6 Multicast, Multiprotocol Label Switching (MPLS), Layer 2 and Layer
3 VPN, IPsec, Layer 2 Tunneling Protocol Version 3 (L2TPv3), Bidirectional Forwarding Detection (BFD), IEEE

802.1ag, and IEEE 802.3ah.

Encapsulations

Generic Routing Encapsulation (GRE), Ethernet, 802.1q VLAN, Point-to-Point Protocol (PPP), Multilink Point­to-Point Protocol (MLPPP), Frame Relay, Multilink Frame Relay (MLFR) (FR.15 and FR.16), High-Level Data
Link Control (HDLC), Serial (RS-232, RS-449, X.21, V.35, and EIA-530), and PPP over Ethernet (PPPoE).

Traffic management

Quality of Service (QoS), Class-Based Weighted Fair Queuing (CBWFQ), Weighted Random Early Detection
(WRED), Hierarchical QoS, Policy-Based Routing (PBR), Performance Routing (PfR), and Network-Based
Application Recognition (NBAR).

Cryptographic algorithms

Encryption: DES, 3DES, AES-128 or AES-256 (in CBC and GCM modes).

Authentication: RSA (748/1024/2048 bit), ECDSA (256/384 bit); Integrity: MD5, SHA, SHA-256, SHA-384, SHA-

512.

Table 6. Software features and protocols

© 2019 Cisco and/or its affiliates. All rights reserved. Page 7 of 31

Model

WAN

Wi-Fi

LAN switch

Integrated
Micro USB
console

Pluggables

GE

GE/SFP
combo

ADSL2/VD
SL2 + or
G.FAST or
G.SHDSL

LTE
Advanced
(CAT6)

LTE Adv.
Pro
(CAT18)

802.11
ac

GE

PoE or
PoE+

C1101-4P

1

NA

NA

NA

NA

NA 4 NA

NA

Yes

CAT4 LTE
Dongle

C1109-2PLTEVZ

1

NA

NA

NA

NA

NA 2 NA

NA

Yes

Embedded
builtin same
CAT4 LTE
technology as P­LTE-VZ

C1109-2PLTEUS

1

NA

NA

NA

NA

NA 2 NA

NA

Yes

Embedded
builtin same
CAT4 LTE
technology as P­LTE-US

C1109-2PLTEGB

1

NA

NA

NA

NA

NA 2 NA

NA

Yes

Embedded
builtin same
CAT4 LTE
technology as P­LTE-GB

C1109-4PLTE2P

1

NA

NA

Yes with
Pluggable
Technology

NA

NA 4 NA

NA

Yes

Yes
(CAT4/CAT6),

Dual

Pluggables,
Single P-1T
Serial in Slot 0

C1111-8P (C1111X­8P with 8 GB
memory and flash
for SD-WAN
Advanced Security
support)

1 1 NA

NA

NA

NA 8 4 2 Yes

NA

C1111-4P

1 1 NA

NA

NA

NA 4 2 1 Yes

NA

C1112-8P

NA 1 1 G.FAST
(Annex B)

NA

NA

NA 8 4 2 Yes

NA

C1113-8P

NA 1 1 G.FAST
(Annex A)

NA

NA

NA 8 4 2 Yes

NA

C1113-8PM

NA 1 1 G.FAST
(Annex M)

NA

NA

NA 8 4 2 Yes

NA

Product specifications

Table 7. Cisco 1000 Series ISRs DSL and LTE SKUs

© 2019 Cisco and/or its affiliates. All rights reserved. Page 8 of 31

Model

WAN

Wi-Fi

LAN switch

Integrated
Micro USB
console

Pluggables

GE

GE/SFP
combo

ADSL2/VD
SL2 + or
G.FAST or
G.SHDSL

LTE
Advanced
(CAT6)

LTE Adv.
Pro
(CAT18)

802.11
ac

GE

PoE or
PoE+

C1116-4P

NA 1 1 VA-DSL
(Annex B/J)

NA

NA

NA 4 2 1 Yes

NA

C1117-4P

NA 1 1 VA-DSL
(Annex A)

NA

NA

NA 4 2 1 Yes

NA

C1117-4PM

NA 1 1 VA-DSL
(Annex M)

NA

NA

NA 4 2 1 Yes

NA

C1101-4PLTEP

1

NA

NA

Yes with
Pluggable
Technology

NA

NA 4 NA

NA

Yes

Yes
(CAT4/CAT6),

or Single P-1T
Serial

C1111-8PLTEEA

1 1 NA

1 EMEAR
and North
America

NA

NA 8 4 2 Yes

NA

C1111-8PLTELA

1 1 NA

1 LATAM
and APAC

NA

NA 8 4 2 Yes

NA

C1111-4PLTEEA

1 1 NA

1 EMEAR
and North
America

NA

NA 4 2 1 Yes

NA

C1111-4PLTELA

1 1 NA

1 LATAM
and APAC

NA

NA 4 2 1 Yes

NA

C1112-8PLTEEA

NA 1 1 G.FAST
(Annex B)

1 EMEAR
and North
America

NA

NA 8 4 2 Yes

NA

C1113-8PLTEEA

NA 1 1 G.FAST
(Annex A)

1 EMEAR
and North
America

NA

NA 8 4 2 Yes

NA

C1113-8PLTELA

NA 1 1 G.FAST
(Annex A)

1 LATAM
and APAC

NA

NA 8 4 2 Yes

NA

C1113-8PMLTEEA

NA 1 1 G.FAST
(Annex M)

1 EMEAR
and North
America

NA

NA 8 4 2 Yes

NA

C1116-4PLTEEA

NA 1 1
ADSL2/VDS
L2 + (Annex
B/J)

1 EMEAR
and North
America

NA

NA 4 2 1 Yes

NA

C1117-4PLTEEA

NA 1 1
ADSL2/VDS
L2 + (Annex
A)

1 EMEAR
and North
America

NA

NA 4 2 1 Yes

NA

C1117-4PLTELA

NA 1 1
ADSL2/VDS

1 LATAM
and APAC

NA

NA 4 2 1 Yes

NA

© 2019 Cisco and/or its affiliates. All rights reserved. Page 9 of 31

Model

WAN

Wi-Fi

LAN switch

Integrated
Micro USB
console

Pluggables

GE

GE/SFP
combo

ADSL2/VD
SL2 + or
G.FAST or
G.SHDSL

LTE
Advanced
(CAT6)

LTE Adv.
Pro
(CAT18)

802.11
ac

GE

PoE or
PoE+

L2 + (Annex
A)

C1117-4PMLTEEA

NA 1 1
ADSL2/VDS
L2 + (Annex
M)

1 EMEAR
and North
America

NA

NA 4 2 1 Yes

NA

C1118-8P

NA 1 1 G.SHDSL

NA

NA

NA 8 4 2 Yes

NA

C1121-4P

1 1 NA

NA

NA

NA 4 2 1 Yes

CAT4 LTE
Dongle

C1121-4PLTEP

1 1 NA

Yes with
Pluggable
Technology

Yes with
Pluggable
Technolog
y

NA 4 2 1 Yes

Yes (All)

C1121-8P

(C1121X-8P with 8
GB memory and
flash for SD-WAN
Advanced Security
support)

1 1 NA

NA

NA

NA 8 4 2 Yes

CAT4 LTE
Dongle

C1121-8PLTEP

(C1121X-8PLTEP
with 8 GB memory
and flash for SD­WAN Advanced
Security support)

1 1 NA

Yes with
Pluggable
Technology

Yes with
Pluggable
Technolog
y

NA 8 4 2 Yes

Yes (All)

C1126-8PLTEP

(C1126X-8PLTEP
with 8 GB memory
and flash for SD­WAN Advanced
Security support)

NA 1 1
ADSL2/VDS
L2 + (Annex
B/J)

Yes with
Pluggable
Technology

Yes with
Pluggable
Technolog
y

NA 8 4 2 Yes

Yes (All)

C1127-8PLTEP

(C1127X-8PLTEP
with 8 GB memory
and flash for SD­WAN Advanced
Security support)

NA 1 1
ADSL2/VDS
L2 + (Annex
A)

Yes with
Pluggable
Technology

Yes with
Pluggable
Technolog
y

NA 8 4 2 Yes

Yes (All)

C1127-8PMLTEP

(C1127X-8PMLTEP
with 8 GB memory
and flash for SD­WAN Advanced
Security support)

NA 1 ADSL2/VDS
L2 + (Annex
M)

Yes with
Pluggable
Technology

Yes with
Pluggable
Technolog
y

NA 8 4 2 Yes

Yes (All)

© 2019 Cisco and/or its affiliates. All rights reserved. Page 10 of 31