C1121X-8PLTEP – 2x1G WAN incl. RJ45/SFP Combo – 8x1G LAN Ports – Pluggable LTE/5G Slot

Cisco SN CheckSN verification before shipment.Verify authenticity3-Year WarrantyExtended, enterprise-gradeWarranty terms14-Day ReturnsStraightforward RMA processReturn policy
5.07 reviews6 Questions
List Price: $3,365.46 68% OFF
$1,076.00
Price Alert
Condition
Related
Quantity
Shipping Express Shipping 2-6 Business Days, via UPS, FedEx, DHL and more
Trusted & Secure Payments

Shop Expert-Recommended Accessories for the C1121X-8PLTEP

Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.
  • GLC-LH-SMD

    GLC-LH-SMD

    1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOM
    Original price was: $1,260.58.Current price is: $95.80.
  • GLC-SX-MMD

    GLC-SX-MMD

    1000BASE-SX SFP - MMF 850nm - DOM
    Original price was: $633.46.Current price is: $59.00.

Why Layer23-Switch

Stocked, Shipped and Supported by One Team

Founded
Customers
Units shipped
Countries

Inventory You Can See

Cisco stock on hand
Models ready to ship
Warehouse space

Ships in 1 Business Day

In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.

DHL FedEx UPS Duties included: US · CA · UK

LSCare Warranty

3years on enterprise equipment

  • Advance replacement for in-stock models
  • New unit for dead-on-arrival
  • 14-day returns on sealed items

Free CCIE Support

Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.

Part number check Configuration Troubleshooting

Verify Before You Pay

100%factory-sealed

Get label and serial photos before shipment, and check every serial number with Cisco.

C1121X-8PLTEP Description

The C1121X-8PLTEP is a Cisco 1000 Series Integrated Services Router for branch sites that run LTE or 5G beside their wired WAN circuits. The router pairs a pluggable cellular slot for CAT4 to CAT18 LTE or 5G modules with two Gigabit WAN ports (one RJ-45/SFP combo), eight Gigabit LAN ports, 700 Mbps of SD-WAN IPsec at 512 bytes and 8 GB of DRAM. The 5G modules need Cisco IOS XE 17.9.2a for NSA or 17.12.1a for SA, and LAN PoE requires the optional 150W supply.

Quick Specs

Parameter

Specification

WAN interfaces

2 x 1G: 1 RJ-45/SFP combo port and 1 RJ-45 port

LAN switch ports

8 x 1G RJ-45

Cellular option

Pluggable module slot: CAT4, CAT6, CAT7 or CAT18 LTE, 5G NSA or 5G SA

SD-WAN IPsec throughput (512B)

Up to 700 Mbps

IPsec throughput (512B, autonomous mode)

Up to 600 Mbps

IPv4 forwarding throughput (512B)

Up to 1,600 Mbps

SD-WAN overlay tunnels

200

DRAM and flash

8 GB DRAM, 8 GB flash

Default technology package

IP Base (SL-1K-8P-IPB)

Default power supply

External AC adapter, 66W maximum output, 12 VDC

Default PoE budget

None; the standard 66W adapter carries no PoE

PoE with ISR-1100-POE4

150W power supply: 4 x 802.3af PoE or 2 x 802.3at PoE+

Minimum software release

Cisco IOS XE 16.11.1; XE SD-WAN 17.2.1; 5G NSA 17.9.2a; 5G SA 17.12.1a

Product Performance

SD-WAN IPsec Throughput (512B)
IPv4 Forwarding Throughput (512B)
DRAM

Key Features

Cellular Speed Chosen By Module

The cellular slot is not tied to one radio. A CAT4 module is rated at 150 Mbps down and 50 Mbps up in theory, CAT18 at 1200/200 Mbps, and the 5G SA module at 4900/660 Mbps, so a site on a supported release can move from LTE to 5G by swapping the module rather than the router.

Dual SIM And Automatic Failover

The pluggable cellular modules carry two micro (3FF) SIM sockets with Fast SIM failover, except the single-SIM Verizon CAT4 module, and the router switches between the primary and backup link on its own. All modules except the CAT18 and 5G NSA versions also send a dying-gasp message when power is lost.

8 GB For Advanced Security And Hosting

The X in the model name means 8 GB of DRAM and 8 GB of flash instead of 4 GB. That memory tier supports SD-WAN Advanced Security and hosted applications on the router.

Three Paths Out Of The Branch

Two wired WAN ports and the cellular module give the router three separate uplinks. The first wired port accepts an RJ-45 cable or an SFP, from 1000BASE-SX on multimode fiber to ZX on single-mode, and the second stays copper for another carrier.

Encrypted Throughput Set By License

IPsec reaches 600 Mbps with 512-byte packets in autonomous mode, but the SEC license alone allows 50 Mbps. The VPERF license lifts that to 250 Mbps on this eight-port model, and only the HSEC license removes the limit.

SD-WAN Edge Or Autonomous Router

One Universal Cisco IOS XE image runs either as an SD-WAN edge under Catalyst SD-WAN Manager, with 200 overlay tunnels, or as a traditional router managed by CLI, WebUI or Cisco DNA Center. With QoS, deep packet inspection and Flexible NetFlow added to IPsec, SD-WAN throughput is 250 Mbps.

Application Scenarios

Pop-Up Site On Cellular Only

A construction office or event site with no wired circuit runs its whole WAN over a 5G or CAT18 module, while laptops, printers and cameras connect to the eight LAN ports.

Retail Branch With Wireless Backup

In a retail store, the fiber circuit lands on the combo WAN port and the cellular module stays idle until that circuit fails, keeping card terminals and the store network online.

SD-WAN Clinic With Local Security

Small clinics that join a company SD-WAN fabric use the router as their edge, with the 8 GB memory tier supporting SD-WAN Advanced Security for the traffic leaving the site.

Product Comparison

Parameter

C1121X-8PLTEP

C1121X-8P

C1121-4PLTEP

C1111-8P

WAN interfaces

2 x 1G: RJ-45/SFP combo + RJ-45

2 x 1G: RJ-45/SFP combo + RJ-45

2 x 1G: RJ-45/SFP combo + RJ-45

2 x 1G: RJ-45/SFP combo + RJ-45

SD-WAN IPsec throughput (512B)

Up to 700 Mbps

Up to 700 Mbps

Up to 450 Mbps

Up to 650 Mbps

IPsec throughput (512B)

Up to 600 Mbps

Up to 600 Mbps

Up to 500 Mbps

Up to 600 Mbps

IPv4 forwarding throughput (512B)

Up to 1,600 Mbps

Up to 1,600 Mbps

Up to 1,600 Mbps

Up to 1,800 Mbps

SD-WAN overlay tunnels scale

200

200

200

200

Pluggable

Pluggable slot: CAT4, CAT6, CAT7, CAT18 LTE and 5G

CAT4 LTE USB dongle

Pluggable slot: CAT4, CAT6, CAT7, CAT18 LTE and 5G

Not applicable

DRAM/flash

8 GB/8 GB

8 GB/8 GB

4 GB/4 GB

4 GB/4 GB

Default PoE budget

None; the standard 66W adapter carries no PoE

None; the standard 66W adapter carries no PoE

None; the standard 66W adapter carries no PoE

None; the standard 66W adapter carries no PoE

PoE with optional PoE supply

150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports

150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports

115W supply: 2 PoE or 1 PoE+ on 4 x 1G LAN ports

150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports

C1121X-8PLTEP differs from C1121X-8P only in cellular: it adds a pluggable slot for CAT4 to CAT18 LTE and 5G modules on the same eight LAN ports, 700 Mbps of SD-WAN IPsec and 8 GB of DRAM, while the dongle-only model takes a CAT4 LTE USB dongle and suits sites where wired circuits carry the traffic. Sites with four or fewer LAN devices that still need a pluggable LTE or 5G module can use C1121-4PLTEP, which drops to 450 Mbps of SD-WAN IPsec, 4 GB of DRAM and two PoE or one PoE+ port. C1111-8P has no cellular option and 4 GB of DRAM but forwards up to 1800 Mbps of IPv4, which fits wired-only branches standardized on the 111x range.

PoE Power Planning

Planning Item

Value or Check

Standard power adapter

66W maximum output at 12 VDC; supplies no PoE

PoE option

ISR-1100-POE4: internal PoE adapter with a 150W power supply, orderable with the router or later as a field-replaceable unit

PoE ports with ISR-1100-POE4

4 ports at 802.3af PoE, or 2 ports at 802.3at PoE+

PoE budget

Set by port count; no wattage budget is published beyond the 150W supply rating

PoE output voltage

-53.5 VDC

Endpoint count

Four 802.3af phones or cameras, or two 802.3at PoE+ access points; the other LAN ports carry data only

Ordering Checklist

  • Technology license: IP Base (SL-1K-8P-IPB) is the default; add SL-1K-8P-SEC-SV for zone-based firewall and IPsec VPN, or SL-1K-8P-APP-SV for MPLS and NBAR2. SL-1100-8P licenses apply only to 110x and 111x models.
  • IPsec performance license: The SEC license alone allows 50 Mbps of IPsec; FL-VPERF-8P-200-SV raises the limit to 250 Mbps and FL-1100-8P-HSEC removes it. Without HSEC the router cannot reach its 600 Mbps IPsec rating.
  • Cellular module: The pluggable is an optional line, so add the module for the carrier region, such as P-LTEA-EA for North America and Europe or P-LTEAP18-GL for CAT18. P-LTEA-EA and P-LTEA-LA also need a firmware selection.
  • Antennas: Match the antenna to the module: LTE-ANTM-SMA-D for CAT4 and CAT6, LTE-ANTM2-SMA-D for CAT18, and 5G-ANTM2-SMA-D for CAT7 and 5G modules. Spare P-LTE-VZ, P-LTE-US and P-LTE-GB modules need the antenna selection option.
  • Software type: The IOS software version and type is a required selection. A 5G NSA module needs Cisco IOS XE 17.9.2a or later, and a 5G SA module needs 17.12.1a or later.
  • PoE supply: Add ISR-1100-POE4 when LAN ports must power phones or access points; it replaces the standard 66W adapter with a 150W supply. Without it no LAN port supplies power.
  • Rack kit and power cord: Order ACS-1100-RM2-19 for rack mounting, because ACS-1100-RM-19 fits only 111x models. The power cord is a required line on every order.

Optional Add-ons

Model

Description

P-5GS6-R16-SA=

5G Sub-6 GHz SA pluggable module, Cisco IOS XE 17.12.1a or later

P-5GS6-GL=

5G Sub-6 GHz NSA pluggable module, Cisco IOS XE 17.9.2a or later

P-LTEAP18-GL=

CAT18 LTE Advanced Pro pluggable module

P-LTEA7-NA

CAT7 LTE pluggable module

P-LTEA-EA=

CAT6 LTE Advanced pluggable module for North America and Europe

P-LTEA-LA=

CAT6 LTE Advanced pluggable module for APAC, ANZ and LATAM

P-LTE-MNA=

CAT4 LTE pluggable module for North America

P-BLANK=

Blank pluggable

ISR-1100-POE4=

Internal PoE adapter with 150W power supply for 4 PoE or 2 PoE+ LAN ports

FL-1100-8P-HSEC=

HSEC license that removes the encrypted throughput limit on ISR 1100 8P models

FL-VPERF-8P-200-SV=

VPERF license that adds 200 Mbps of IPsec performance on C112x 8P models

SL-1K-8P-SEC-SV=

Security technology license: zone-based firewall, IPsec VPN, DMVPN, FlexVPN, GETVPN

SL-1K-8P-SECN-SV=

Security license with no payload encryption

SL-1K-8P-APP-SV=

Application Experience license: MPLS, L2TPv3, NBAR2, AVC, PfRv3

ACS-1100-RM2-19=

Rack-mount kit for 112x models

CAB-CON-USBRJ45=

Micro USB to RJ-45 console adapter

GLC-LH-SMD

1000BASE-LX/LH SFP for the combo WAN port, single-mode, DOM

GLC-SX-MMD

1000BASE-SX SFP for the combo WAN port, multimode, DOM

GLC-EX-SMD

1000BASE-EX SFP for the combo WAN port, single-mode, DOM

GLC-ZX-SMD

1000BASE-ZX SFP for the combo WAN port, DOM

C1121X-8PLTEP Rear Panel

C1121X-8PLTEP-front

1

Reset button

2

Power switch

3

4-pin power connector

4

Ethernet switch

5

Wi-Fi status

6

GE 0/0/1

7

GE WAN 0/0/0 -RJ45

8

GE WAN 0/0/0 -SFP

9

Micro-USB console

10

USB 3.0

11

Pluggable

12

Kensington lock slot

13

Grounding

Specifications

Parameter Specification Parameter Specification
Product ID C1121X-8PLTEP WAN interfaces 2 x Gigabit Ethernet: 1 copper/SFP combo port and 1 copper port
LAN switch ports 8 x Gigabit Ethernet (copper) Console port 1 x Micro-USB
USB port 1 x Type A USB 3.0 Cellular option Pluggable module slot: CAT4, CAT6, CAT7, CAT18 LTE; 5G NSA; 5G SA
Cellular theoretical DL/UL speeds CAT4 150/50 Mbps; CAT6 300/50 Mbps; CAT7 300/150 Mbps; CAT18 1200/200 Mbps; 5G NSA 3300/400 Mbps; 5G SA 4900/660 Mbps Cellular module features Dual micro (3FF) SIM sockets with Fast SIM failover (P-LTE-VZ single SIM); automatic primary/backup failover; dying gasp except CAT18 and 5G NSA modules
Antennas LTE-ANTM-SMA-D (CAT4, CAT6); LTE-ANTM2-SMA-D (CAT18); 5G-ANTM2-SMA-D (CAT7, 5G) DSL interface Not supported
Embedded access point Not supported DRAM 8 GB
Flash 8 GB SD-WAN IPsec throughput (512B) Up to 700 Mbps
SD-WAN Profile: IPsec + QoS + deep packet inspection + Flexible NetFlow (512B) Up to 250 Mbps SD-WAN overlay tunnels scale 200
IPv4 forwarding throughput (512B) Up to 1,600 Mbps IPsec throughput (512B) Up to 600 Mbps
Number of IPsec SVTI tunnels 100 Number of ACLs per system 4K
Number of IPv4 ACEs per system 10K Number of IPv4 routes 280K
Number of IPv6 routes 260K Number of NAT sessions 100K
Number of VRFs 1K Default technology package IP Base (SL-1K-8P-IPB): routing protocols, ACL, NAT, QoS, BFD, VRF Lite, IPSLA responder and initiator
Optional technology licenses APP (SL-1K-8P-APP-SV), SEC (SL-1K-8P-SEC-SV), SEC-NPE (SL-1K-8P-SECN-SV) SEC license IPsec performance Up to 50 Mbps
VPERF license FL-VPERF-8P-200-SV; adds 200 Mbps, IPsec limit 250 Mbps on 8 LAN port models HSEC license FL-1100-8P-HSEC; removes the encrypted performance limit; Cisco IOS XE 16.8.1 or later
Software image Single Universal Cisco IOS XE image; features enabled by right-to-use licenses Management WebUI without a license; Catalyst SD-WAN Manager (controller mode) or Cisco DNA Center (autonomous mode)
Minimum software release Cisco IOS XE 16.11.1; 5G NSA module 17.9.2a; 5G SA module 17.12.1a Minimum supported version (XE SD-WAN) 17.2.1
Default power supply External AC adapter, 66W maximum output AC input voltage Universal 100 to 240 VAC, 50 to 60 Hz
Output voltage 12 VDC Default PoE budget None; the standard 66W adapter carries no PoE
PoE with ISR-1100-POE4 150W power supply: 4 PoE ports or 2 PoE+ ports Inline PoE 802.3af-compliant PoE, 802.3at-compliant PoE+
PoE output voltage -53.5 VDC Maximum power consumption (excluding external PS loss) 24.6W
Operating temperature 0 to 40°C at sea level; 1°C per 1000 ft derating from 40°C Operating altitude 0 to 10,000 ft (0 to 3048 m)
Operating humidity 10% to 85% relative humidity, noncondensing Storage temperature -40°C to +70°C (-40°F to +158°F)
Nonoperating altitude 0 to 15,000 ft (0 to 4572 m) Nonoperating humidity 5% to 95% relative humidity, noncondensing
Dimensions (H x W x D) 1.65 x 10.80 x 7.85 in. Weight 1.70 kg (3.74 lb)
Rack-mount kit ACS-1100-RM2-19 Console adapter CAB-CON-USBRJ45, Micro USB to RJ-45
Compatible SFPs GLC-EX-SMD, GLC-LH-SM, GLC-LH-SMD, GLC-SX-MM, GLC-SX-MMD, GLC-ZX-SM, GLC-ZX-SMD Standard safety certifications UL 60950-1, CSA 60950-1, EN 60950-1, IEC 60950-1, UL 62368-1, CSA 62368-1, EN 62368-1, IEC 62368-1
EMC emissions EN55022/CISPR22, CFR 47 Part 15, ICES003, VCCI-V-3, AS/NZS CISPR22, CNS13438, EN300-386, EN61000-3-2, EN61000-3-3, EN61000-6-1 EMC immunity EN55024/CISPR24, EN61000-4-2, EN61000-4-3, EN61000-4-4, EN61000-4-5, EN61000-4-6, EN61000-4-11, EN300-386
Radio immunity EN 301 489-1, EN 301 489-7, EN 301 489-24 Cellular radio EN 301 908-1, EN 301 908-2, EN 301 511, 47 CFR Part 22, 47 CFR Part 24, EN 301 908-13

Quality Certifications

Customer Reviews

Write A Review
5.0
(7 reviews)
5 Stars
7
4 Stars
0
3 Stars
0
2 Stars
0
1 Stars
0
    Amy Davis
    Posted on 02/04/2026
    Verified Buyer
    5.0

    We’ve ordered from many vendors. Layer23 shipping process stands out.

    Joseph Fischer
    Posted on 01/03/2026
    Verified Buyer
    5.0

    Replaced our old hardware without service interruption.

    Barbara Cook
    Posted on 10/02/2026
    Verified Buyer
    5.0

    We got volume pricing without needing to push for it.

    Jun-A266
    Posted on 05/08/2024
    Verified Buyer
    5.0

    Clean shot… I mean clean transaction. Product is good.

    Emile-A239
    Posted on 18/05/2024
    Verified Buyer
    5.0

    Ready for action. Router is tough. Good shipping.

Questions & Answers

  • What IPsec throughput is C1121X-8PLTEP rated for?

    C1121X-8PLTEP provides up to 700 Mbps of SD-WAN IPsec throughput and up to 600 Mbps in autonomous mode, both measured with 512-byte packets. With QoS, deep packet inspection and Flexible NetFlow enabled, SD-WAN IPsec is up to 250 Mbps.
  • Which technology license package is the default on C1121X-8PLTEP?

    C1121X-8PLTEP comes with the IP Base technology package (SL-1K-8P-IPB), which covers routing protocols, ACLs, NAT, QoS, BFD, VRF Lite and IP SLA. APP (SL-1K-8P-APP-SV), SEC (SL-1K-8P-SEC-SV) and SEC-NPE (SL-1K-8P-SECN-SV) are optional, and the SEC license limits IPsec to 50 Mbps.
  • Does C1121X-8PLTEP include DSL or Wi-Fi?

    No. C1121X-8PLTEP has no DSL port and no 802.11ac access point, per Table 16 of the data sheet. The model with the embedded access point is C1121X-8PLTEPW, so order that PID when a site needs on-board Wi-Fi.
  • What are the weight and dimensions of C1121X-8PLTEP?

    C1121X-8PLTEP weighs 1.70 kg (3.74 lb) and measures 1.65 x 10.80 x 7.85 in., per the Cisco ISR 1000 Series data sheet. The chassis is a one rack unit high desktop or wall mount unit, so check shelf load and rack depth against these figures before ordering the rack-mount kit.
  • Which EMC emission and immunity standards is C1121X-8PLTEP listed against?

    C1121X-8PLTEP is listed against EN55022/CISPR22, CFR 47 Part 15, ICES003, VCCI-V-3, AS/NZS CISPR22 and CNS13438 for emissions, per the Cisco ISR 1000 Series data sheet. For immunity it lists EN55024/CISPR24 and EN61000-4-2 through -6 plus -11. Both lists also include EN300-386, so one test report covers compliance questions for either direction.
  • What is the maximum power consumption of C1121X-8PLTEP, excluding external power supply loss?

    C1121X-8PLTEP draws up to 24.6W at maximum, excluding loss in the external power supply, per the Cisco ISR 1000 Series data sheet. This is the draw of the router itself with the standard 66W adapter, so a UPS for a branch rack should be sized from the adapter input rather than from this figure alone.

Warranty

Visit How to Pay page for more information

FREE NETWORK TOOLS

Verify, plan, and comparewith confidence

Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.

DataSheet Downloads

  • C1121X-8PLTEP Datasheet