C1121X-8P – 2x1G WAN incl. RJ45/SFP Combo – 8x1G LAN Ports – 8GB DRAM Branch Router
Shop Expert-Recommended Accessories for the C1121X-8P
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
C1121X-8P Description
The C1121X-8P is a Cisco 1000 Series Integrated Services Router for SD-WAN branch offices with up to eight wired LAN devices and on-box SD-WAN Advanced Security. Two Gigabit WAN ports, one an RJ-45/SFP combo, carry up to 700 Mbps of SD-WAN IPsec across 200 overlay tunnels on 8 GB of DRAM and flash, with LTE from a CAT4 USB dongle rather than a pluggable module. The LAN ports supply PoE only when the optional 150W supply replaces the standard 66W adapter.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
WAN interfaces |
2 x 1G: 1 RJ-45/SFP combo port and 1 RJ-45 port |
|
LAN switch ports |
8 x 1G RJ-45 |
|
SD-WAN IPsec throughput (512B) |
Up to 700 Mbps |
|
IPsec throughput (512B, autonomous mode) |
Up to 600 Mbps |
|
IPv4 forwarding throughput (512B) |
Up to 1,600 Mbps |
|
SD-WAN overlay tunnels |
200 |
|
DRAM and flash |
8 GB DRAM, 8 GB flash |
|
Cellular option |
CAT4 LTE USB dongle; no pluggable module slot |
|
Default technology package |
IP Base (SL-1K-8P-IPB) |
|
Default power supply |
External AC adapter, 66W maximum output, 12 VDC |
|
Default PoE budget |
None; the standard 66W adapter carries no PoE |
|
PoE with ISR-1100-POE4 |
150W power supply: 4 x 802.3af PoE or 2 x 802.3at PoE+ |
|
Minimum software release |
Cisco IOS XE 16.11.1; XE SD-WAN 17.2.1 |
Product Performance
Key Features
The X in the model name stands for 8 GB of DRAM and 8 GB of flash, the configuration specified for SD-WAN Advanced Security and app hosting. Routing scale does not grow with it: the table still tops out at 280K IPv4 and 260K IPv6 routes, as on the 4 GB models.
With the SEC license alone, encrypted traffic stops at 50 Mbps. FL-VPERF-8P-200-SV lifts that ceiling to 250 Mbps, and the HSEC license removes it, letting autonomous IPsec reach 600 Mbps at 512 bytes.
The first WAN port accepts either an RJ-45 cable or an SFP, from 1000BASE-SX multimode to LX/LH, EX and ZX single-mode optics, as well as 100BASE-FX and BX modules. The second WAN port is copper, which leaves room for a second carrier.
One Universal IOS XE image runs either way. Under Catalyst SD-WAN Manager the router builds up to 200 overlay tunnels from release 17.2.1; with QoS, deep packet inspection and Flexible NetFlow applied, SD-WAN IPsec drops to 250 Mbps. In autonomous mode the router is managed through WebUI or Cisco DNA Center.
A CAT4 USB dongle adds cellular at 75 Mbps down and 50 Mbps up in theory, and traffic moves to it automatically when the wired WAN fails. Dongle support in SD-WAN mode starts at IOS XE 17.10.
The default IP Base package covers routing protocols, ACLs, NAT, QoS, BFD, VRF Lite and IP SLA. Sites that carry MPLS, L2TPv3, VPLS or Ethernet over MPLS, or steer traffic with NBAR2, AVC and PfRv3, need the APP license on top.
Application Scenarios
A regional sales office joins the corporate SD-WAN fabric through the router and runs its security services on the branch device itself, using the 8 GB of memory that SD-WAN Advanced Security calls for.
In a small office, desktops, printers and IP phones plug straight into the eight Gigabit LAN ports. With the 150W PoE supply fitted, the router also powers up to four phones.
Where one provider hands off fiber and another delivers copper, the optic goes into the combo WAN port and the second circuit lands on the RJ-45 WAN port of the same router.
Product Comparison
|
Parameter |
C1121X-8P |
C1121-8P | ||
|---|---|---|---|---|
|
WAN interfaces |
2 x 1G: RJ-45/SFP combo + RJ-45 |
2 x 1G: RJ-45/SFP combo + RJ-45 |
2 x 1G: RJ-45/SFP combo + RJ-45 |
2 x 1G: RJ-45/SFP combo + RJ-45 |
|
SD-WAN IPsec throughput (512B) |
Up to 700 Mbps |
Up to 700 Mbps |
Up to 700 Mbps |
Up to 650 Mbps |
|
IPsec throughput (512B) |
Up to 600 Mbps |
Up to 600 Mbps |
Up to 600 Mbps |
Up to 600 Mbps |
|
IPv4 forwarding throughput (512B) |
Up to 1,600 Mbps |
Up to 1,600 Mbps |
Up to 1,600 Mbps |
Up to 1,800 Mbps |
|
SD-WAN overlay tunnels scale |
200 |
200 |
200 |
200 |
|
Pluggable |
CAT4 LTE USB dongle |
CAT4 LTE USB dongle |
Pluggable slot: CAT4, CAT6, CAT7, CAT18 LTE and 5G |
Not applicable |
|
DRAM/flash |
8 GB/8 GB |
4 GB/4 GB |
8 GB/8 GB |
4 GB/4 GB |
|
Default PoE budget |
None; the standard 66W adapter carries no PoE |
None; the standard 66W adapter carries no PoE |
None; the standard 66W adapter carries no PoE |
None; the standard 66W adapter carries no PoE |
|
PoE with optional PoE supply |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
C1121X-8P and C1121-8P differ in memory: C1121X-8P carries 8 GB of DRAM and flash for SD-WAN Advanced Security, against 4 GB on the non-X model. Ports, 700 Mbps of SD-WAN IPsec and the PoE option are the same, so C1121-8P suits branches that run routing and IPsec without on-box security services. Sites that need CAT6 to CAT18 LTE or 5G rather than a CAT4 USB dongle move to C1121X-8PLTEP, which adds a pluggable cellular slot on the same 8 GB platform. C1111-8P, the 111x model, forwards IPv4 at up to 1800 Mbps but stops at 650 Mbps of SD-WAN IPsec, with 4 GB of memory and no cellular option; it suits wired-only sites already standardized on the 111x range.
PoE Power Planning
|
Planning Item |
Value or Check |
|---|---|
|
Standard power adapter |
66W maximum output at 12 VDC; supplies no PoE |
|
PoE option |
ISR-1100-POE4: internal PoE adapter with a 150W power supply, orderable with the router or later as a field-replaceable unit |
|
PoE ports with ISR-1100-POE4 |
4 ports at 802.3af PoE, or 2 ports at 802.3at PoE+ |
|
PoE budget |
Set by port count; no wattage budget is published beyond the 150W supply rating |
|
PoE output voltage |
-53.5 VDC |
|
Endpoint count |
Four 802.3af phones or cameras, or two 802.3at PoE+ access points; the other LAN ports carry data only |
Ordering Checklist
- Technology license: IP Base (SL-1K-8P-IPB) ships by default; add SL-1K-8P-SEC-SV for zone-based firewall and IPsec VPN, or SL-1K-8P-APP-SV for MPLS and NBAR2. SL-1100-8P licenses fit only 110x and 111x models.
- IPsec performance license: With SEC alone IPsec stops at 50 Mbps. Add FL-VPERF-8P-200-SV for up to 250 Mbps, or FL-1100-8P-HSEC to remove the limit and reach the 600 Mbps rating.
- Software type: The IOS software version and type is a required order selection; XE SD-WAN needs release 17.2.1 or later, and autonomous Cisco IOS XE needs 16.11.1 or later.
- PoE supply: Add ISR-1100-POE4 when LAN ports must power phones or access points; it replaces the standard 66W adapter with a 150W supply. Without it no LAN port supplies power.
- LTE dongle: For cellular backup add D-LTE-NA for North America, D-LTE-GB for EMEAR or D-LTE-AS for India, China and other listed markets, plus D-MHLD as the magnetic holder.
- Rack kit and power cord: Rack mounting needs ACS-1100-RM2-19; ACS-1100-RM-19 fits only 111x models. The power cord is a required line on every order.
Optional Add-ons
|
Model |
Description |
|---|---|
|
ISR-1100-POE4= |
Internal PoE adapter with 150W power supply for 4 PoE or 2 PoE+ LAN ports |
|
FL-1100-8P-HSEC= |
HSEC license that removes the encrypted throughput limit on ISR 1100 8P models |
|
FL-VPERF-8P-200-SV= |
IPsec performance license adding 200 Mbps on 112x 8P models |
|
SL-1K-8P-SEC-SV= |
Security technology license: zone-based firewall, IPsec VPN, DMVPN, FlexVPN, GETVPN |
|
SL-1K-8P-SECN-SV= |
Security license with no payload encryption |
|
SL-1K-8P-APP-SV= |
Application Experience license: MPLS, L2TPv3, NBAR2, AVC, PfRv3 |
|
D-LTE-NA= |
CAT4 LTE USB dongle for North America |
|
D-LTE-GB= |
CAT4 LTE USB dongle for EMEAR |
|
D-LTE-AS= |
CAT4 LTE USB dongle for India, China, Hong Kong, Indonesia, Malaysia, the Philippines and South Africa |
|
D-MHLD= |
Magnetic holder for the USB LTE dongle |
|
ACS-1100-RM2-19= |
Rack-mount kit for 112x models |
|
CAB-CON-USBRJ45= |
Micro USB to RJ-45 console adapter |
|
1000BASE-LX/LH SFP for the combo WAN port, single-mode, DOM | |
|
1000BASE-SX SFP for the combo WAN port, multimode, DOM | |
|
1000BASE-EX SFP for the combo WAN port, single-mode, DOM | |
|
1000BASE-ZX SFP for the combo WAN port, DOM | |
|
10/100/1000BASE-T copper SFP |
C1121X-8P Rear Panel
|
1 |
Reset button |
2 |
Power switch |
|
3 |
4-pin power connector |
4 |
Ethernet switch |
|
5 |
RJ-45 |
6 |
GE WAN 0/0/0 -RJ45 |
|
7 |
GE WAN 0/0/0 -SFP |
8 |
Micro-USB console |
|
9 |
USB 3.0 |
10 |
Kensington lock slot |
|
11 |
Grounding |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | C1121X-8P | WAN interfaces | 2 x Gigabit Ethernet: 1 copper/SFP combo port and 1 copper port |
| LAN switch ports | 8 x Gigabit Ethernet (copper) | Console port | 1 x Micro-USB |
| USB port | 1 x Type A USB 3.0 | Cellular option | CAT4 LTE USB dongle (D-LTE-NA, D-LTE-GB, D-LTE-AS); no pluggable module slot |
| DSL interface | Not supported | Embedded access point | Not supported |
| DRAM | 8 GB | Flash | 8 GB |
| SD-WAN IPsec throughput (512B) | Up to 700 Mbps | SD-WAN Profile: IPsec + QoS + deep packet inspection + Flexible NetFlow (512B) | Up to 250 Mbps |
| SD-WAN overlay tunnels scale | 200 | IPv4 forwarding throughput (512B) | Up to 1,600 Mbps |
| IPsec throughput (512B) | Up to 600 Mbps | Number of IPsec SVTI tunnels | 100 |
| Number of ACLs per system | 4K | Number of IPv4 ACEs per system | 10K |
| Number of IPv4 routes | 280K | Number of IPv6 routes | 260K |
| Number of NAT sessions | 100K | Number of VRFs | 1K |
| Default technology package | IP Base (SL-1K-8P-IPB): routing protocols, ACL, NAT, QoS, BFD, VRF Lite, IPSLA responder and initiator | Optional technology licenses | APP (SL-1K-8P-APP-SV), SEC (SL-1K-8P-SEC-SV), SEC-NPE (SL-1K-8P-SECN-SV) |
| SEC license IPsec performance | Up to 50 Mbps | VPERF license | FL-VPERF-8P-200-SV; adds 200 Mbps, limiting IPsec to 250 Mbps |
| HSEC license | FL-1100-8P-HSEC; removes the encrypted performance limit; Cisco IOS XE 16.8.1 or later | Software image | Single Universal Cisco IOS XE image; features enabled by right-to-use licenses |
| Management | WebUI without a license; Catalyst SD-WAN Manager (controller mode) or Cisco DNA Center (autonomous mode) | Minimum software release | Cisco IOS XE 16.11.1 |
| Minimum supported version (XE SD-WAN) | 17.2.1 | Default power supply | External AC adapter, 66W maximum output |
| AC input voltage | Universal 100 to 240 VAC, 50 to 60 Hz | Output voltage | 12 VDC |
| Default PoE budget | None; the standard 66W adapter carries no PoE | PoE with ISR-1100-POE4 | 150W power supply: 4 PoE ports or 2 PoE+ ports |
| Inline PoE | 802.3af-compliant PoE, 802.3at-compliant PoE+ | PoE output voltage | -53.5 VDC |
| Maximum power consumption (excluding external PS loss) | 19.9W | Operating temperature | 0 to 40°C at sea level; 1°C per 1000 ft derating from 40°C |
| Operating altitude | 0 to 10,000 ft (0 to 3048 m) | Operating humidity | 10% to 85% relative humidity, noncondensing |
| Storage temperature | -40°C to +70°C (-40°F to +158°F) | Nonoperating altitude | 0 to 15,000 ft (0 to 4572 m) |
| Nonoperating humidity | 5% to 95% relative humidity, noncondensing | Dimensions (H x W x D) | 1.65 x 10.80 x 7.85 in. |
| Weight | 1.58 kg (3.48 lb) | Rack-mount kit | ACS-1100-RM2-19 |
| Console adapter | CAB-CON-USBRJ45, Micro USB to RJ-45 | Compatible SFPs | GLC-EX-SMD, GLC-LH-SM, GLC-LH-SMD, GLC-SX-MM, GLC-SX-MMD, GLC-ZX-SM, GLC-ZX-SMD, GLC-T, GLC-TE, SFP-GE-S, SFP-GE-T, 100BASE-FX/LX/ZX/EX and BX SFPs |
| Standard safety certifications | UL 60950-1, CSA 60950-1, EN 60950-1, IEC 60950-1, UL 62368-1, CSA 62368-1, EN 62368-1, IEC 62368-1 | EMC emissions | EN55022/CISPR22, CFR 47 Part 15, ICES003, VCCI-V-3, AS/NZS CISPR22, CNS13438, EN300-386, EN61000-3-2, EN61000-3-3, EN61000-6-1 |
| EMC immunity | EN55024/CISPR24, EN61000-4-2, EN61000-4-3, EN61000-4-4, EN61000-4-5, EN61000-4-6, EN61000-4-11, EN300-386 |
Quality Certifications
Customer Reviews
Questions & Answers
-
What IPsec throughput is C1121X-8P rated for?
-
Which technology license package is the default on C1121X-8P?
-
What operating temperature range applies to C1121X-8P at sea level?
-
What is the maximum power consumption of C1121X-8P, excluding external power supply loss?
-
Which EMC emission and immunity standards is C1121X-8P listed against?
-
What are the weight and dimensions of C1121X-8P?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Got a tailored quote for our specific quantity and configuration needs.
Glad I found Layer23. They’re now in my regular vendor rotation.
Vendor management often gets complicated. Layer23 keeps it simple. Shipping took a couple extra days, but product itself is perfect.
Heavy box, well packed. No transit damage. Trustworthy seller.
Tech verified. System efficient. Delivery optimal.