C8570-G2 – 12x 1/10GE SFP+ – 2x40GE QSFP+ – 2×40/100GE QSFP28 – 240GE Cap
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
C8570-G2 Description
The C8570-G2 is a Cisco 8500 Series Secure Router for 1 RU aggregation sites that need 40GE and 100GE ports beside 10GE circuits. The router has 12 1/10GE SFP+, 2 40GE QSFP+ and 2 40/100GE QSFP28 ports, 63 Gbps of IPsec throughput, 10,000 IPsec tunnels and 32 GB of DRAM by default, with a 64 GB option. A maximum of 240GE of ports can be enabled simultaneously, so not every cage can run at full speed at once.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
C8570-G2 |
|
Platform type |
1 RU fixed form factor |
|
WAN ports |
12x 1/10GE (SFP+), 2x 40GE (QSFP+), 2x 40/100GE (QSFP28) |
|
Simultaneous port cap |
240GE of ports can be enabled simultaneously |
|
WAN MACsec |
Supported in all built-in ports |
|
Power supply |
750 W AC or 950 W DC |
|
Forwarding throughput |
Up to 190 Gbps at 512 bytes |
|
IPsec throughput |
Up to 63 Gbps at 512 bytes |
|
IPv4/IPv6 routes |
8M |
|
IPsec tunnels |
10,000 |
|
Weight |
21 lbs with two AC power supplies and the fan tray |
|
Minimum software release |
Cisco IOS XE 17.15.4 |
Product Performance
Key Features
The 16 cages add up to more than the 240GE that can be enabled at once, so port planning works as a budget. Two 100GE ports plus four 10GE ports already reach the ceiling.
Bay 0 holds 8x 1/10G SFP+, Bay 1 holds 1x 40/100G QSFP28 with 4x 1/10G SFP+, and Bay 2 holds 1x 40/100G QSFP28 with 2x 40G QSFP+. A 100GE circuit therefore has two possible landing ports.
Two 40/100GE QSFP28 ports share a 21 lbs, 1 RU chassis with the SFP+ and QSFP+ ports, so 100GE uplinks need no larger platform.
The router holds 8M IPv4/IPv6 routes, 16M NAT sessions, 8K VRFs and 10,000 IPsec tunnels, which sizes it for an aggregation role that terminates many branch circuits.
WAN MACsec is supported in all built-in ports, so the 40GE and 100GE cages encrypt the same way the 1/10GE SFP+ ports do.
DRAM is 32 GB by default with a 64 GB option, and the supply is 750 W AC or 950 W DC. Sites with a DC feed and sites running large tables are both covered.
Application Scenarios
At an aggregation layer, the router terminates 10GE branch and campus circuits and hands traffic to the core over its 40/100GE QSFP28 ports in a single rack unit.
A regional site with 10GE access links, 40GE inter-site trunks and a 100GE core handoff can land all three speeds on the same router.
Where links between sites need WAN MACsec at 40GE or 100GE, the router supports it on all built-in ports, not only the SFP+ ones.
Product Comparison
|
Parameter |
C8570-G2 | ||
|---|---|---|---|
|
WAN ports |
12x 1/10GE (SFP+), 2x 40GE (QSFP+), 2x 40/100GE (QSFP28); max 240GE enabled simultaneously |
12x 1/10GE (SFP+) |
20x 1/10GE (SFP+), 6x 40/100GE (QSFP28) |
|
Forwarding (512B) |
Up to 190 Gbps |
Up to 115 Gbps |
Up to 540 Gbps |
|
IPsec (512B) |
Up to 63 Gbps |
Up to 48 Gbps |
Up to 225 Gbps |
|
IPsec tunnels |
10,000 |
10,000 |
12,000 |
|
DRAM |
32 GB default, 64 GB option |
32 GB default, 64 GB option |
64 GB default |
|
Storage |
480 GB default |
480 GB default |
480 GB default |
|
Power supply |
750 W AC or 950 W DC |
750 W AC or 950 W DC |
1100W AC or 950W DC, N+2 redundancy |
C8570-G2 and C8550-G2 share the same 1 RU chassis, 8M routes, 10,000 IPsec tunnels and 750 W AC or 950 W DC supplies, but C8570-G2 adds two 40GE QSFP+ and two 40/100GE QSFP28 ports and raises forwarding from 115 Gbps to 190 Gbps, at the cost of a 240GE limit on ports enabled at once. A design that needs 100GE uplinks next to dense 10GE access should count that limit, because both 100GE ports use 200GE of it, and a role made up only of 1/10GE circuits stays on C8550-G2, which runs all twelve ports together. More than two 100GE ports, or forwarding above 190 Gbps, moves to C8650-G2, which has six 40/100GE ports, no published port cap and 540 Gbps in a 3 RU chassis. C8650-G2 also needs Cisco IOS XE 26.1.2 instead of 17.15.4.
Ordering Checklist
- Power supply: Choose 750 W AC or 950 W DC, matched to the site feed. The AC and DC supplies are separate options, and the wrong one cannot be used on the site feed.
- Memory: Change the memory line if the site needs 64 GB; the default order ships 32 GB DRAM.
Optional Add-ons
|
Add-on |
Description |
|---|---|
|
950 W DC power supply |
DC input option in place of the 750 W AC supply. |
|
64 GB DRAM |
Memory option above the 32 GB default. |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | C8570-G2 | Series | Cisco 8500 Series Secure Routers |
| Product type | 1 RU fixed form factor | WAN ports | 12x 1/10GE (SFP+), 2x 40GE (QSFP+), 2x 40/100GE (QSFP28) |
| Simultaneous port cap | 240GE of ports can be enabled simultaneously | Bay 0 | 8x 1/10G SFP+ |
| Bay 1 | 1x 40/100G QSFP28 and 4x 1/10G SFP+ | Bay 2 | 1x 40/100G QSFP28 and 2x 40G QSFP+ |
| WAN MACsec | Supported in all built-in ports | Management port | 1x RJ-45 out-of-band management |
| Console port | 1x RJ-45 and 1x Micro-USB | Storage interface | USB 3.0 Type C |
| Asset tag | RFID | DRAM | 32 GB default, 64 GB option |
| SSD storage | 480 GB default | Power supply | 750 W AC or 950 W DC |
| Forwarding (512B) | Up to 190 Gbps | IPsec (512B) | Up to 63 Gbps |
| SD-WAN (512B) | Up to 21 Gbps | SD-WAN measurement basis | IPsec, QoS, Deep Packet Inspection and Flexible NetFlow enabled |
| IPv4/IPv6 routes | 8M | IPsec tunnels | 10,000 |
| IPv4 ACLs | 4K | IPv4 ACEs | 380K |
| NAT sessions | 16M | VRFs | 8K |
| Dimensions (H x W x D) | 1.73 in. x 17.50 in. x 18.46 in. | Rack units | 1 RU |
| Weight | 21 lbs with two AC power supplies and the fan tray | Operating temperature | 32 to 104°F |
| Storage temperature | -40 to 150°F | Relative humidity | 10 to 85 percent operating; 5 to 95 percent non-operating and storage |
| NEBS criteria levels | GR-1089 and GR-63 | Operating altitude | -500 to 10,000 feet (-152 to 3048 meters) |
| Minimum software release | Cisco IOS XE 17.15.4 | Minimum SD-WAN manager release | Cisco Catalyst SD-WAN Manager 20.15.4 |
Quality Certifications
Customer Reviews
Questions & Answers
-
What forwarding and IPsec throughput does C8570-G2 reach?
-
Which power supply PIDs can be ordered for C8570-G2?
-
Which PID upgrades C8570-G2 to 64 GB of DRAM?
-
Which rack mount kits can be ordered with C8570-G2?
-
Which IOS XE software image PIDs can be ordered with C8570-G2?
-
Which license tags apply to C8570-G2?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:












Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.

Nice to see this still available, quick service. one of the few places that still carries this.
Answered on a weekend, did not expect that. good communication throughout.
router works great. saved us a lot against the OEM quote