C1111-8P – 2x1G WAN incl. RJ45/SFP Combo – 8x1G LAN Ports – Optional 4 PoE or 2 PoE+
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
C1111-8P Description
The C1111-8P is a Cisco 1000 Series Integrated Services Router for branch offices that terminate two wired WAN circuits and connect up to eight local devices. The router has two Gigabit WAN ports, one RJ-45/SFP combo and one copper, eight Gigabit LAN ports, 4 GB of DRAM and flash, and up to 1800 Mbps of IPv4 forwarding and 600 Mbps of IPsec at 512 bytes. The router has no DSL, LTE or Wi-Fi option, so every WAN circuit reaches it over Ethernet or fiber.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
WAN interfaces |
2 x 1G: 1 RJ-45/SFP combo port and 1 RJ-45 port |
|
LAN switch ports |
8 x 1G RJ-45 |
|
IPv4 forwarding throughput (512B) |
Up to 1,800 Mbps |
|
IPsec throughput (512B, autonomous mode) |
Up to 600 Mbps |
|
SD-WAN IPsec throughput (512B) |
Up to 650 Mbps |
|
DRAM and flash |
4 GB DRAM, 4 GB flash |
|
Cellular option |
None; no LTE, DSL or pluggable cellular module |
|
Default technology package |
IP Base (SL-1100-8P-IPB) |
|
Default power supply |
External AC adapter, 66W maximum output, 12 VDC |
|
Default PoE budget |
None; the standard 66W adapter carries no PoE |
|
PoE with ISR-1100-POE4 |
150W power supply: 4 x 802.3af PoE or 2 x 802.3at PoE+ |
|
Minimum software release |
Cisco IOS XE 16.6.1 |
Product Performance
Key Features
The combo WAN port takes either an RJ-45 cable or an SFP, while the second WAN port is copper only. A fiber handoff from one carrier and an Ethernet handoff from another can therefore end on the same router, using optics such as GLC-SX-MMD for SX, GLC-LH-SMD for LX/LH or the 1000BASE-BX pair GLC-BX-D and GLC-BX-U.
The SEC license brings zone-based firewall, IPsec VPN, DMVPN, FlexVPN and GETVPN, but holds encrypted traffic to 50 Mbps. On an eight-port model the FL-VPERF-8P-200 license raises that ceiling to 250 Mbps. The HSEC license removes the limit altogether, which is what the 600 Mbps IPsec rating assumes.
Managed from Catalyst SD-WAN Manager, the router holds up to 200 overlay tunnels and encrypts up to 650 Mbps of 512-byte traffic. With QoS, deep packet inspection and Flexible NetFlow all applied to the same traffic, the published rate is 250 Mbps.
Out of the box the LAN switch supplies no power, because the standard adapter tops out at 66W. Fitting the internal ISR-1100-POE4 adapter swaps in a 150W supply, after which four ports can power 802.3af devices or two can power 802.3at devices. The adapter can be part of the first order or added later as a field-replaceable unit.
Autonomous mode on 4 GB of DRAM supports 280K IPv4 routes, 260K IPv6 routes and 100K NAT sessions. Segmentation reaches 1K VRFs, and as many as 100 IPsec static virtual tunnel interfaces can terminate locally.
The Application Experience license layers MPLS, L2TPv3, VPLS and Ethernet over MPLS onto IP Base for carrier-style transport. It also adds NBAR2 and AVC to identify application traffic, and PfRv3 for performance routing across the WAN.
Application Scenarios
A branch whose main circuit is delivered on fiber terminates it through an SFP in the combo WAN port, and a copper Ethernet circuit from a second provider lands on the other WAN port.
Stores in a retail chain join the corporate SD-WAN fabric through the router. Point-of-sale terminals and back-office PCs on the eight LAN ports reach the data center through encrypted overlay tunnels.
In a small sales or professional office fitted with the optional PoE supply, the LAN ports power desk phones or a pair of PoE+ access points. SEC-licensed DMVPN or FlexVPN tunnels connect the office to headquarters.
Product Comparison
|
Parameter |
C1111-8P |
C1111X-8P | ||
|---|---|---|---|---|
|
WAN interfaces |
2 x 1G: RJ-45/SFP combo + RJ-45 |
2 x 1G: RJ-45/SFP combo + RJ-45 |
1 x 1G RJ-45/SFP combo + 1 x G.FAST DSL (Annex B) |
2 x 1G: RJ-45/SFP combo + RJ-45 |
|
IPsec throughput (512B) |
Up to 600 Mbps |
Not published |
Up to 600 Mbps |
Up to 600 Mbps |
|
SD-WAN IPsec throughput (512B) |
Up to 650 Mbps |
Not published |
Up to 650 Mbps |
Up to 700 Mbps |
|
IPv4 forwarding throughput (512B) |
Up to 1,800 Mbps |
Not published |
Up to 1,800 Mbps |
Up to 1,600 Mbps |
|
Pluggable |
Not applicable |
Not applicable |
Not applicable |
CAT4 LTE USB dongle |
|
DRAM/flash |
4 GB/4 GB |
8 GB/8 GB |
4 GB/4 GB |
8 GB/8 GB |
|
Default PoE budget |
None; the standard 66W adapter carries no PoE |
None; the standard 66W adapter carries no PoE |
None; the standard 66W adapter carries no PoE |
None; the standard 66W adapter carries no PoE |
|
PoE with optional PoE supply |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
C1111-8P and C1111X-8P share the same WAN ports, eight LAN ports and PoE option, but C1111-8P carries 4 GB of DRAM and flash while C1111X-8P has 8 GB for hosted applications. A branch served by a G.FAST line provisioned as Annex B needs C1112-8P, which replaces the second copper Gigabit WAN port with a G.FAST DSL port and keeps the same 600 Mbps IPsec and 1800 Mbps forwarding ratings. Sites that want LTE backup through a CAT4 USB dongle, 8 GB of memory or SD-WAN IPsec up to 700 Mbps move to C1121X-8P, which forwards IPv4 at up to 1600 Mbps against 1800 Mbps on C1111-8P.
PoE Power Planning
|
Planning Item |
Value or Check |
|---|---|
|
Standard power adapter |
External, 66W maximum output at 12 VDC; supplies no PoE |
|
PoE option |
ISR-1100-POE4: internal PoE adapter with a 150W power supply, fitted at first order or later as a field-replaceable unit |
|
PoE ports with ISR-1100-POE4 |
4 ports at 802.3af PoE, or 2 ports at 802.3at PoE+ |
|
PoE budget |
Defined by powered port count; no wattage budget is published beyond the 150W supply rating |
|
PoE output voltage |
-53.5 VDC |
|
Endpoint check |
Up to four 802.3af phones or cameras, or two 802.3at access points; a fifth PoE device or a third PoE+ device needs its own power source |
|
Mixed loads |
Limits are published only as 4 PoE or 2 PoE+ ports; mixed PoE and PoE+ combinations are not documented |
Ordering Checklist
- Technology license: The router ships with IP Base (SL-1100-8P-IPB); firewall and VPN need SL-1100-8P-SEC, or SL-1100-8P-SECNPE where strong payload encryption is restricted, and MPLS with NBAR2 needs SL-1100-8P-APP. SL-1K-8P licenses belong to C112x, C1131 and C1161 models.
- IPsec performance license: Put FL-VPERF-8P-200 on the order for tunnels up to 250 Mbps, or FL-1100-8P-HSEC to lift the cap entirely. A router left on SEC alone encrypts no more than 50 Mbps.
- Software type: CCW requires an IOS software version and type on every order; choose Cisco IOS XE 16.6.1 or later, and 16.8.1 or later whenever the HSEC license is included.
- PoE supply: Include ISR-1100-POE4 if any LAN port must power a phone, camera or access point. The order otherwise ships with the 66W adapter, and the LAN ports supply no power.
- Rack kit and power cord: ACS-1100-RM-19 is the rack kit for 111x routers; ACS-1100-RM2-19 is for 112x, 1131 and 1161 models. Every order also needs a power cord selection.
Optional Add-ons
|
Model |
Description |
|---|---|
|
ISR-1100-POE4= |
Internal PoE adapter with 150W power supply for 4 PoE or 2 PoE+ LAN ports on ISR 1100 8P models |
|
FL-1100-8P-HSEC= |
HSEC license that removes the encrypted throughput limit on ISR 1100 8P models |
|
FL-VPERF-8P-200= |
IPsec performance license adding 200 Mbps on ISR 1100 8P models, for a 250 Mbps ceiling |
|
SL-1100-8P-SEC= |
Security technology license: zone-based firewall, IPsec VPN, DMVPN, FlexVPN, GETVPN |
|
SL-1100-8P-SECNPE= |
Security license without strong payload encryption |
|
SL-1100-8P-APP= |
Application Experience license: MPLS, L2TPv3, VPLS, NBAR2, AVC, PfRv3 |
|
ACS-1100-RM-19= |
Rack-mount kit for 111x models |
|
GE SFP, LC connector, LX/LH, with DOM | |
|
GE SFP, LC connector, SX, with DOM | |
|
1000BASE-EX SFP, SMF, 1310 nm, with DOM | |
|
1000BASE-ZX SFP with DOM | |
|
GLC-BX-D |
1000BASE-BX SFP, 1490 nm |
|
GLC-BX-U |
1000BASE-BX SFP, 1310 nm |
|
10/100/1000BASE-T copper SFP |
C1111-8P Rear Panel
|
① |
LAN |
⑦ |
GE 0/0/0 – SFP |
|
② |
CLEI Label |
⑧ |
GE 0/0/0 – RJ45 |
|
③ |
Serial Number |
⑨ |
GE 0/0/1 |
|
④ |
Kensington Lock Slot |
⑩ |
4-pin Power Connector |
|
⑤ |
RJ45 / Micro USB Console |
⑪ |
Power Switch |
|
⑥ |
USB3.0 |
⑫ |
Reset Button |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | C1111-8P | WAN interfaces | 2 x Gigabit Ethernet: 1 copper/SFP combo port and 1 copper port |
| LAN switch ports | 8 x Gigabit Ethernet (copper) | Console port | 1 x integrated Micro-USB/RJ-45 |
| USB port | 1 x Type A USB 3.0 | LTE | Not supported |
| DSL interface | Not supported | Embedded access point | Not supported |
| DRAM | 4 GB | Flash | 4 GB |
| IPv4 forwarding throughput (512B) | Up to 1,800 Mbps | IPsec throughput (512B) | Up to 600 Mbps |
| SD-WAN IPsec throughput (512B) | Up to 650 Mbps | SD-WAN Profile: IPsec + QoS + deep packet inspection + Flexible NetFlow (512B) | Up to 250 Mbps |
| SD-WAN overlay tunnels scale | 200 | Number of IPsec SVTI tunnels | 100 |
| Number of ACLs per system | 4K | Number of IPv4 ACEs per system | 10K |
| Number of IPv4 routes | 280K | Number of IPv6 routes | 260K |
| Number of NAT sessions | 100K | Number of VRFs | 1K |
| Default technology package | IP Base: routing protocols, ACL, NAT, QoS, BFD, VRF Lite, IPSLA responder and initiator | Optional technology licenses | APP (SL-1100-8P-APP), SEC (SL-1100-8P-SEC), SEC-NPE (SL-1100-8P-SECNPE) |
| SEC license IPsec performance | Up to 50 Mbps | VPERF license | FL-VPERF-8P-200; IPsec performance limited to 250 Mbps |
| HSEC license | FL-1100-8P-HSEC; removes the encrypted performance limit; Cisco IOS XE 16.8.1 or later | Software image | Single Universal Cisco IOS XE image; features enabled by right-to-use licenses |
| Management | WebUI without a license; Catalyst SD-WAN Manager (controller mode) or Cisco DNA Center (autonomous mode) | Minimum software release | Cisco IOS XE 16.6.1 |
| Default power supply | External AC adapter, 66W maximum output | AC input voltage | Universal 100 to 240 VAC, 50 to 60 Hz |
| Output voltage | 12 VDC | Default PoE budget | None; the standard 66W adapter carries no PoE |
| PoE with ISR-1100-POE4 | 150W power supply: 4 PoE ports or 2 PoE+ ports | Inline PoE | 802.3af-compliant PoE, 802.3at-compliant PoE+ |
| PoE output voltage | -53.5 VDC | Maximum power consumption (excluding external PS loss) | 19.2W |
| Operating temperature | 0 to 40°C at sea level; 1°C per 1000 ft derating from 40°C | Operating altitude | 0 to 10,000 ft (0 to 3048 m) |
| Operating humidity | 10% to 85% relative humidity, noncondensing | Storage temperature | -40°C to +70°C (-40°F to +158°F) |
| Nonoperating altitude | 0 to 15,000 ft (0 to 4572 m) | Nonoperating humidity | 5% to 95% relative humidity, noncondensing |
| Dimensions (H x W x D) | 1.75 x 12.70 x 9.015 in. | Weight | 1.98 kg (4.37 lb) |
| Rack-mount kit | ACS-1100-RM-19 | Compatible SFPs | GLC-EX-SMD, GLC-LH-SM, GLC-LH-SMD, GLC-SX-MM, GLC-SX-MMD, GLC-ZX-SM, GLC-ZX-SMD, GLC-BX-D, GLC-BX-U, GLC-BX40-D-I, GLC-BX40-U-I, GLC-GE-100FX, GLC-T, GLC-TE, SFP-GE-S, SFP-GE-T |
| Standard safety certifications | UL 60950-1, CSA 60950-1, EN 60950-1, IEC 60950-1, UL 62368-1, CSA 62368-1, EN 62368-1, IEC 62368-1 | EMC emissions | EN55022/CISPR22, CFR 47 Part 15, ICES003, VCCI-V-3, AS/NZS CISPR22, CNS13438, EN300-386, EN61000-3-2, EN61000-3-3, EN61000-6-1 |
| EMC immunity | EN55024/CISPR24, EN61000-4-2, EN61000-4-3, EN61000-4-4, EN61000-4-5, EN61000-4-6, EN61000-4-11, EN300-386 |
Quality Certifications
Customer Reviews
Questions & Answers
-
What throughput does C1111-8P with 512-byte packets?
-
Which license does C1111-8P need for firewall and VPN?
-
What is the maximum power consumption of C1111-8P, excluding external power supply loss?
-
Which EMC emission and immunity standards is C1111-8P listed against?
-
What operating temperature range applies to C1111-8P at sea level?
-
What are the weight and dimensions of C1111-8P?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
We now order all our hardware through Layer23. Consistent quality and service.
Don’t hesitate. Layer23 is exactly what you’re hoping to find.
Their team treats every customer like they want repeat business — because they do.
We ordered 20 units for a rollout. Logistics coordination was excellent.
Perfect small branch router. PoE ports save us needing a separate switch. Arrived new in box.