C1121X-8PLTEP – 2x1G WAN incl. RJ45/SFP Combo – 8x1G LAN Ports – Pluggable LTE/5G Slot
Shop Expert-Recommended Accessories for the C1121X-8PLTEP
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
C1121X-8PLTEP Description
The C1121X-8PLTEP is a Cisco 1000 Series Integrated Services Router for branch sites that run LTE or 5G beside their wired WAN circuits. The router pairs a pluggable cellular slot for CAT4 to CAT18 LTE or 5G modules with two Gigabit WAN ports (one RJ-45/SFP combo), eight Gigabit LAN ports, 700 Mbps of SD-WAN IPsec at 512 bytes and 8 GB of DRAM. The 5G modules need Cisco IOS XE 17.9.2a for NSA or 17.12.1a for SA, and LAN PoE requires the optional 150W supply.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
WAN interfaces |
2 x 1G: 1 RJ-45/SFP combo port and 1 RJ-45 port |
|
LAN switch ports |
8 x 1G RJ-45 |
|
Cellular option |
Pluggable module slot: CAT4, CAT6, CAT7 or CAT18 LTE, 5G NSA or 5G SA |
|
SD-WAN IPsec throughput (512B) |
Up to 700 Mbps |
|
IPsec throughput (512B, autonomous mode) |
Up to 600 Mbps |
|
IPv4 forwarding throughput (512B) |
Up to 1,600 Mbps |
|
SD-WAN overlay tunnels |
200 |
|
DRAM and flash |
8 GB DRAM, 8 GB flash |
|
Default technology package |
IP Base (SL-1K-8P-IPB) |
|
Default power supply |
External AC adapter, 66W maximum output, 12 VDC |
|
Default PoE budget |
None; the standard 66W adapter carries no PoE |
|
PoE with ISR-1100-POE4 |
150W power supply: 4 x 802.3af PoE or 2 x 802.3at PoE+ |
|
Minimum software release |
Cisco IOS XE 16.11.1; XE SD-WAN 17.2.1; 5G NSA 17.9.2a; 5G SA 17.12.1a |
Product Performance
Key Features
The cellular slot is not tied to one radio. A CAT4 module is rated at 150 Mbps down and 50 Mbps up in theory, CAT18 at 1200/200 Mbps, and the 5G SA module at 4900/660 Mbps, so a site on a supported release can move from LTE to 5G by swapping the module rather than the router.
The pluggable cellular modules carry two micro (3FF) SIM sockets with Fast SIM failover, except the single-SIM Verizon CAT4 module, and the router switches between the primary and backup link on its own. All modules except the CAT18 and 5G NSA versions also send a dying-gasp message when power is lost.
The X in the model name means 8 GB of DRAM and 8 GB of flash instead of 4 GB. That memory tier supports SD-WAN Advanced Security and hosted applications on the router.
Two wired WAN ports and the cellular module give the router three separate uplinks. The first wired port accepts an RJ-45 cable or an SFP, from 1000BASE-SX on multimode fiber to ZX on single-mode, and the second stays copper for another carrier.
IPsec reaches 600 Mbps with 512-byte packets in autonomous mode, but the SEC license alone allows 50 Mbps. The VPERF license lifts that to 250 Mbps on this eight-port model, and only the HSEC license removes the limit.
One Universal Cisco IOS XE image runs either as an SD-WAN edge under Catalyst SD-WAN Manager, with 200 overlay tunnels, or as a traditional router managed by CLI, WebUI or Cisco DNA Center. With QoS, deep packet inspection and Flexible NetFlow added to IPsec, SD-WAN throughput is 250 Mbps.
Application Scenarios
A construction office or event site with no wired circuit runs its whole WAN over a 5G or CAT18 module, while laptops, printers and cameras connect to the eight LAN ports.
In a retail store, the fiber circuit lands on the combo WAN port and the cellular module stays idle until that circuit fails, keeping card terminals and the store network online.
Small clinics that join a company SD-WAN fabric use the router as their edge, with the 8 GB memory tier supporting SD-WAN Advanced Security for the traffic leaving the site.
Product Comparison
|
Parameter |
C1121X-8PLTEP | |||
|---|---|---|---|---|
|
WAN interfaces |
2 x 1G: RJ-45/SFP combo + RJ-45 |
2 x 1G: RJ-45/SFP combo + RJ-45 |
2 x 1G: RJ-45/SFP combo + RJ-45 |
2 x 1G: RJ-45/SFP combo + RJ-45 |
|
SD-WAN IPsec throughput (512B) |
Up to 700 Mbps |
Up to 700 Mbps |
Up to 450 Mbps |
Up to 650 Mbps |
|
IPsec throughput (512B) |
Up to 600 Mbps |
Up to 600 Mbps |
Up to 500 Mbps |
Up to 600 Mbps |
|
IPv4 forwarding throughput (512B) |
Up to 1,600 Mbps |
Up to 1,600 Mbps |
Up to 1,600 Mbps |
Up to 1,800 Mbps |
|
SD-WAN overlay tunnels scale |
200 |
200 |
200 |
200 |
|
Pluggable |
Pluggable slot: CAT4, CAT6, CAT7, CAT18 LTE and 5G |
CAT4 LTE USB dongle |
Pluggable slot: CAT4, CAT6, CAT7, CAT18 LTE and 5G |
Not applicable |
|
DRAM/flash |
8 GB/8 GB |
8 GB/8 GB |
4 GB/4 GB |
4 GB/4 GB |
|
Default PoE budget |
None; the standard 66W adapter carries no PoE |
None; the standard 66W adapter carries no PoE |
None; the standard 66W adapter carries no PoE |
None; the standard 66W adapter carries no PoE |
|
PoE with optional PoE supply |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
115W supply: 2 PoE or 1 PoE+ on 4 x 1G LAN ports |
150W supply: 4 PoE or 2 PoE+ on 8 x 1G LAN ports |
C1121X-8PLTEP differs from C1121X-8P only in cellular: it adds a pluggable slot for CAT4 to CAT18 LTE and 5G modules on the same eight LAN ports, 700 Mbps of SD-WAN IPsec and 8 GB of DRAM, while the dongle-only model takes a CAT4 LTE USB dongle and suits sites where wired circuits carry the traffic. Sites with four or fewer LAN devices that still need a pluggable LTE or 5G module can use C1121-4PLTEP, which drops to 450 Mbps of SD-WAN IPsec, 4 GB of DRAM and two PoE or one PoE+ port. C1111-8P has no cellular option and 4 GB of DRAM but forwards up to 1800 Mbps of IPv4, which fits wired-only branches standardized on the 111x range.
PoE Power Planning
|
Planning Item |
Value or Check |
|---|---|
|
Standard power adapter |
66W maximum output at 12 VDC; supplies no PoE |
|
PoE option |
ISR-1100-POE4: internal PoE adapter with a 150W power supply, orderable with the router or later as a field-replaceable unit |
|
PoE ports with ISR-1100-POE4 |
4 ports at 802.3af PoE, or 2 ports at 802.3at PoE+ |
|
PoE budget |
Set by port count; no wattage budget is published beyond the 150W supply rating |
|
PoE output voltage |
-53.5 VDC |
|
Endpoint count |
Four 802.3af phones or cameras, or two 802.3at PoE+ access points; the other LAN ports carry data only |
Ordering Checklist
- Technology license: IP Base (SL-1K-8P-IPB) is the default; add SL-1K-8P-SEC-SV for zone-based firewall and IPsec VPN, or SL-1K-8P-APP-SV for MPLS and NBAR2. SL-1100-8P licenses apply only to 110x and 111x models.
- IPsec performance license: The SEC license alone allows 50 Mbps of IPsec; FL-VPERF-8P-200-SV raises the limit to 250 Mbps and FL-1100-8P-HSEC removes it. Without HSEC the router cannot reach its 600 Mbps IPsec rating.
- Cellular module: The pluggable is an optional line, so add the module for the carrier region, such as P-LTEA-EA for North America and Europe or P-LTEAP18-GL for CAT18. P-LTEA-EA and P-LTEA-LA also need a firmware selection.
- Antennas: Match the antenna to the module: LTE-ANTM-SMA-D for CAT4 and CAT6, LTE-ANTM2-SMA-D for CAT18, and 5G-ANTM2-SMA-D for CAT7 and 5G modules. Spare P-LTE-VZ, P-LTE-US and P-LTE-GB modules need the antenna selection option.
- Software type: The IOS software version and type is a required selection. A 5G NSA module needs Cisco IOS XE 17.9.2a or later, and a 5G SA module needs 17.12.1a or later.
- PoE supply: Add ISR-1100-POE4 when LAN ports must power phones or access points; it replaces the standard 66W adapter with a 150W supply. Without it no LAN port supplies power.
- Rack kit and power cord: Order ACS-1100-RM2-19 for rack mounting, because ACS-1100-RM-19 fits only 111x models. The power cord is a required line on every order.
Optional Add-ons
|
Model |
Description |
|---|---|
|
P-5GS6-R16-SA= |
5G Sub-6 GHz SA pluggable module, Cisco IOS XE 17.12.1a or later |
|
P-5GS6-GL= |
5G Sub-6 GHz NSA pluggable module, Cisco IOS XE 17.9.2a or later |
|
P-LTEAP18-GL= |
CAT18 LTE Advanced Pro pluggable module |
|
P-LTEA7-NA |
CAT7 LTE pluggable module |
|
P-LTEA-EA= |
CAT6 LTE Advanced pluggable module for North America and Europe |
|
P-LTEA-LA= |
CAT6 LTE Advanced pluggable module for APAC, ANZ and LATAM |
|
P-LTE-MNA= |
CAT4 LTE pluggable module for North America |
|
P-BLANK= |
Blank pluggable |
|
ISR-1100-POE4= |
Internal PoE adapter with 150W power supply for 4 PoE or 2 PoE+ LAN ports |
|
FL-1100-8P-HSEC= |
HSEC license that removes the encrypted throughput limit on ISR 1100 8P models |
|
FL-VPERF-8P-200-SV= |
VPERF license that adds 200 Mbps of IPsec performance on C112x 8P models |
|
SL-1K-8P-SEC-SV= |
Security technology license: zone-based firewall, IPsec VPN, DMVPN, FlexVPN, GETVPN |
|
SL-1K-8P-SECN-SV= |
Security license with no payload encryption |
|
SL-1K-8P-APP-SV= |
Application Experience license: MPLS, L2TPv3, NBAR2, AVC, PfRv3 |
|
ACS-1100-RM2-19= |
Rack-mount kit for 112x models |
|
CAB-CON-USBRJ45= |
Micro USB to RJ-45 console adapter |
|
1000BASE-LX/LH SFP for the combo WAN port, single-mode, DOM | |
|
1000BASE-SX SFP for the combo WAN port, multimode, DOM | |
|
1000BASE-EX SFP for the combo WAN port, single-mode, DOM | |
|
1000BASE-ZX SFP for the combo WAN port, DOM |
C1121X-8PLTEP Rear Panel
|
1 4120_df52d7-e0> |
Reset button 4120_e6e3d0-4a> |
2 4120_b10ed1-2c> |
Power switch 4120_9e667b-bd> |
|
3 4120_4d0ea5-a6> |
4-pin power connector 4120_00e5d4-ee> |
4 4120_0f101d-17> |
Ethernet switch 4120_385119-f9> |
|
5 4120_e9a929-16> |
Wi-Fi status 4120_248daa-6c> |
6 4120_945387-9b> |
GE 0/0/1 4120_2e34d4-a7> |
|
7 4120_4e2974-c1> |
GE WAN 0/0/0 -RJ45 4120_082b6f-33> |
8 4120_a55b48-aa> |
GE WAN 0/0/0 -SFP 4120_72d5b6-c8> |
|
9 4120_b2a498-51> |
Micro-USB console 4120_ecffdb-00> |
10 4120_53c0bb-28> |
USB 3.0 4120_133bcf-7e> |
|
11 4120_de9bd9-67> |
Pluggable 4120_40abab-95> |
12 4120_75a935-09> |
Kensington lock slot 4120_73c73a-d9> |
|
13 4120_0206cd-c2> |
Grounding 4120_5c6c48-53> | 4120_b1424f-27> | 4120_761eca-80> |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | C1121X-8PLTEP | WAN interfaces | 2 x Gigabit Ethernet: 1 copper/SFP combo port and 1 copper port |
| LAN switch ports | 8 x Gigabit Ethernet (copper) | Console port | 1 x Micro-USB |
| USB port | 1 x Type A USB 3.0 | Cellular option | Pluggable module slot: CAT4, CAT6, CAT7, CAT18 LTE; 5G NSA; 5G SA |
| Cellular theoretical DL/UL speeds | CAT4 150/50 Mbps; CAT6 300/50 Mbps; CAT7 300/150 Mbps; CAT18 1200/200 Mbps; 5G NSA 3300/400 Mbps; 5G SA 4900/660 Mbps | Cellular module features | Dual micro (3FF) SIM sockets with Fast SIM failover (P-LTE-VZ single SIM); automatic primary/backup failover; dying gasp except CAT18 and 5G NSA modules |
| Antennas | LTE-ANTM-SMA-D (CAT4, CAT6); LTE-ANTM2-SMA-D (CAT18); 5G-ANTM2-SMA-D (CAT7, 5G) | DSL interface | Not supported |
| Embedded access point | Not supported | DRAM | 8 GB |
| Flash | 8 GB | SD-WAN IPsec throughput (512B) | Up to 700 Mbps |
| SD-WAN Profile: IPsec + QoS + deep packet inspection + Flexible NetFlow (512B) | Up to 250 Mbps | SD-WAN overlay tunnels scale | 200 |
| IPv4 forwarding throughput (512B) | Up to 1,600 Mbps | IPsec throughput (512B) | Up to 600 Mbps |
| Number of IPsec SVTI tunnels | 100 | Number of ACLs per system | 4K |
| Number of IPv4 ACEs per system | 10K | Number of IPv4 routes | 280K |
| Number of IPv6 routes | 260K | Number of NAT sessions | 100K |
| Number of VRFs | 1K | Default technology package | IP Base (SL-1K-8P-IPB): routing protocols, ACL, NAT, QoS, BFD, VRF Lite, IPSLA responder and initiator |
| Optional technology licenses | APP (SL-1K-8P-APP-SV), SEC (SL-1K-8P-SEC-SV), SEC-NPE (SL-1K-8P-SECN-SV) | SEC license IPsec performance | Up to 50 Mbps |
| VPERF license | FL-VPERF-8P-200-SV; adds 200 Mbps, IPsec limit 250 Mbps on 8 LAN port models | HSEC license | FL-1100-8P-HSEC; removes the encrypted performance limit; Cisco IOS XE 16.8.1 or later |
| Software image | Single Universal Cisco IOS XE image; features enabled by right-to-use licenses | Management | WebUI without a license; Catalyst SD-WAN Manager (controller mode) or Cisco DNA Center (autonomous mode) |
| Minimum software release | Cisco IOS XE 16.11.1; 5G NSA module 17.9.2a; 5G SA module 17.12.1a | Minimum supported version (XE SD-WAN) | 17.2.1 |
| Default power supply | External AC adapter, 66W maximum output | AC input voltage | Universal 100 to 240 VAC, 50 to 60 Hz |
| Output voltage | 12 VDC | Default PoE budget | None; the standard 66W adapter carries no PoE |
| PoE with ISR-1100-POE4 | 150W power supply: 4 PoE ports or 2 PoE+ ports | Inline PoE | 802.3af-compliant PoE, 802.3at-compliant PoE+ |
| PoE output voltage | -53.5 VDC | Maximum power consumption (excluding external PS loss) | 24.6W |
| Operating temperature | 0 to 40°C at sea level; 1°C per 1000 ft derating from 40°C | Operating altitude | 0 to 10,000 ft (0 to 3048 m) |
| Operating humidity | 10% to 85% relative humidity, noncondensing | Storage temperature | -40°C to +70°C (-40°F to +158°F) |
| Nonoperating altitude | 0 to 15,000 ft (0 to 4572 m) | Nonoperating humidity | 5% to 95% relative humidity, noncondensing |
| Dimensions (H x W x D) | 1.65 x 10.80 x 7.85 in. | Weight | 1.70 kg (3.74 lb) |
| Rack-mount kit | ACS-1100-RM2-19 | Console adapter | CAB-CON-USBRJ45, Micro USB to RJ-45 |
| Compatible SFPs | GLC-EX-SMD, GLC-LH-SM, GLC-LH-SMD, GLC-SX-MM, GLC-SX-MMD, GLC-ZX-SM, GLC-ZX-SMD | Standard safety certifications | UL 60950-1, CSA 60950-1, EN 60950-1, IEC 60950-1, UL 62368-1, CSA 62368-1, EN 62368-1, IEC 62368-1 |
| EMC emissions | EN55022/CISPR22, CFR 47 Part 15, ICES003, VCCI-V-3, AS/NZS CISPR22, CNS13438, EN300-386, EN61000-3-2, EN61000-3-3, EN61000-6-1 | EMC immunity | EN55024/CISPR24, EN61000-4-2, EN61000-4-3, EN61000-4-4, EN61000-4-5, EN61000-4-6, EN61000-4-11, EN300-386 |
| Radio immunity | EN 301 489-1, EN 301 489-7, EN 301 489-24 | Cellular radio | EN 301 908-1, EN 301 908-2, EN 301 511, 47 CFR Part 22, 47 CFR Part 24, EN 301 908-13 |
Quality Certifications
Customer Reviews
Questions & Answers
-
What IPsec throughput is C1121X-8PLTEP rated for?
-
Which technology license package is the default on C1121X-8PLTEP?
-
Does C1121X-8PLTEP include DSL or Wi-Fi?
-
What are the weight and dimensions of C1121X-8PLTEP?
-
Which EMC emission and immunity standards is C1121X-8PLTEP listed against?
-
What is the maximum power consumption of C1121X-8PLTEP, excluding external power supply loss?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:












Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.

We’ve ordered from many vendors. Layer23 shipping process stands out.
Replaced our old hardware without service interruption.
We got volume pricing without needing to push for it.
Clean shot… I mean clean transaction. Product is good.
Ready for action. Router is tough. Good shipping.