C8570-G2 – 12x 1/10GE SFP+ – 2x40GE QSFP+ – 2×40/100GE QSFP28 – 240GE Cap
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
C8570-G2 Description
The C8570-G2 is the high-speed member of the Cisco 8500 Series Secure Routers, a 1RU platform whose sixteen WAN ports span three speed classes: 12x 1/10GE SFP+, 2x 40GE QSFP+ and 2x 40/100GE QSFP28. Cisco organises them into three bays and attaches a constraint that matters at design time, since a maximum of 240GE of ports can be enabled simultaneously rather than the full faceplate total. Forwarding reaches up to 190 Gbps with 63 Gbps of IPsec, and the route and tunnel figures match the twelve-port model at 8M routes and 10,000 IPsec tunnels. WAN MACsec is supported in all built-in ports, and power comes from a 750 W AC or 950 W DC supply.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
C8570-G2 |
|
Platform type |
1 RU fixed form factor |
|
WAN Ports |
12x 1/10GE (SFP+), 2x 40GE (QSFP+), 2x 40/100GE (QSFP28) |
|
Simultaneous port cap |
240GE of ports can be enabled simultaneously |
|
WAN MACsec |
Supported in all built-in ports |
|
Power Supply |
750 W AC or 950 W DC |
|
Forwarding throughput |
Up to 190 Gbps at 512 bytes |
|
IPsec throughput |
Up to 63 Gbps at 512 bytes |
|
IPv4/IPv6 routes |
8M |
|
IPsec tunnels |
10,000 |
|
Chassis weight |
21 lbs with two AC power supplies and the fan tray |
|
Minimum software release |
Cisco IOS XE 17.15.4 |
Product Performance
Key Features
Adding every cage gives more capacity than the 240GE Cisco allows enabled simultaneously, so port planning here is a budget exercise rather than a count: two 100GE ports plus four 10GE ports already reaches the ceiling, and the remaining cages stay dark.
Bay 0 holds 8x 1/10G SFP+, Bay 1 holds 1x 40/100G QSFP28 alongside 4x 1/10G SFP+, and Bay 2 holds 1x 40/100G QSFP28 with 2x 40G QSFP+, so a circuit needing 100GE has two possible landing points rather than any free cage.
Two QSFP28 ports at 40/100GE sit in the same 1RU body as the twelve-port model, which is what lets an aggregation layer add 100GE uplinks without moving to the 3RU platform in the 8600 Series.
Route capacity, tunnel count, NAT sessions and VRF instances are identical to C8550-G2 at 8M, 10,000, 16M and 8K, so choosing this model buys speed and costs nothing in scale.
WAN MACsec is supported in all built-in ports, which covers the 40GE and 100GE cages as well as the SFP+ ones rather than being limited to the lower speeds.
The chassis is 21 lbs against 20.6 lbs for the twelve-port model and takes the same 750 W AC or 950 W DC supply, so the higher forwarding tier arrives without a power or rack planning change.
Application Scenarios
Deployed where an aggregation layer hands off to a core at 100GE while still terminating branch and campus circuits on 10GE in the same rack unit.
Installed at regional sites whose circuit inventory spans 10GE access links, 40GE inter-site trunks and 100GE core handoff on a single chassis.
Placed on links where MACsec has to run at 40GE or 100GE rather than only on the SFP+ ports, using the all-port MACsec support the series carries.
Product Comparison
|
Parameter |
C8570-G2 | ||
|---|---|---|---|
|
Series |
Cisco 8500 Series Secure Routers |
Cisco 8500 Series Secure Routers |
Cisco 8600 Series Secure Routers |
|
WAN Ports |
12x 1/10GE (SFP+), 2x 40GE (QSFP+), 2x 40/100GE (QSFP28) |
12x 1/10GE (SFP+) |
20x 1/10GE (SFP+), 6x 40/100GE (QSFP28) |
|
100 GE port count |
2 |
None on this platform |
6 |
|
Simultaneous port cap |
240GE enabled simultaneously |
All twelve ports |
All twenty-six ports |
|
Power Supply |
750 W AC or 950 W DC |
750 W AC or 950 W DC |
1100W AC or 950W DC at N+2 redundancy |
|
Forwarding throughput |
Up to 190 Gbps |
Up to 115 Gbps |
Up to 540 Gbps |
|
IPsec throughput |
Up to 63 Gbps |
Up to 48 Gbps |
Up to 225 Gbps |
|
SD-WAN throughput |
Up to 21 Gbps |
Up to 19 Gbps |
Up to 80 Gbps |
|
IPv4/IPv6 routes |
8M |
8M |
16M |
|
IPsec tunnels |
10,000 |
10,000 |
12,000 |
|
Rack units |
1 RU |
1 RU |
3 RU |
|
Chassis weight |
21 lbs |
20.6 lbs |
77.5 lb with four AC supplies |
|
Minimum software release |
Cisco IOS XE 17.15.4 |
Cisco IOS XE 17.15.4 |
Cisco IOS XE 26.1.2 |
- C8570-G2 and C8550-G2 are the same router in every respect except speed. Identical scale, identical power supplies, identical software floor and 0.4 lbs apart; what the extra money buys is two 40GE and two 40/100GE cages plus 75 Gbps of forwarding, and what it costs is the 240GE simultaneous-enable ceiling that C8550-G2 does not carry.
- That ceiling is the reason the comparison is not simply more ports. C8550-G2 runs all twelve of its cages at once, whereas on C8570-G2 a design using both 100GE ports has only 40GE of budget left for everything else, so a port-dense 10GE aggregation role is better served by the twelve-port model despite its lower headline throughput.
- Stepping to C8650-G2 removes the ceiling and triples forwarding to 540 Gbps with six 100GE cages, but it moves from 1 RU to 3 RU, from 21 lbs to 77.5 lbs, and onto Cisco IOS XE 26.1.2 rather than the 17.15.4 train the 8500 Series runs. Route capacity doubles to 16M while tunnels rise only from 10,000 to 12,000.
- For deciding which SKU to order, add up the port speeds that must run concurrently and compare that number against 240GE, because a design that fits under it and needs 100GE lands on C8570-G2, one that exceeds it moves to C8650-G2 and a different software train, and one with no port above 10 GE should stay on C8550-G2.
Selection Guide
1. Budgeting Against Two Hundred Forty Gigabits
Enabling both 100GE cages consumes 200GE of the simultaneous budget and leaves 40GE for the twelve SFP+ ports, so a design wanting 100GE uplinks and dense 10GE access at the same time does not fit; C8650-G2 carries six 100GE cages with no published simultaneous cap and is the alternative when the arithmetic fails.
2. Where The Twelve-Port Model Is The Better Buy
C8550-G2 matches this router on 8M routes, 10,000 tunnels, power supply options and software floor, and runs all twelve cages without a budget constraint; a role whose circuits are entirely 10 GE gains nothing from the QSFP cages and gives up the unconstrained faceplate by taking them.
3. Two Landing Points For A Hundred-Gig Circuit
The 40/100GE cages sit one each in Bay 1 and Bay 2 rather than adjacent, so a redundant 100GE pair naturally splits across bays; a design assuming any free cage can take 100GE will not map onto this faceplate.
4. Staying On The Seventeen Train
C8570-G2 runs Cisco IOS XE 17.15.4 while C8650-G2 requires 26.1.2, a different release family entirely; an estate standardised on 17.15 maintenance releases reaches 190 Gbps here without a software programme, and reaching 540 Gbps means qualifying a new train alongside the hardware.
5. One Rack Unit Against Three
Moving to C8650-G2 for more speed also means three rack units and 77.5 lbs against one unit and 21 lbs; in a colocation cage priced by rack unit, the 8500 chassis delivers 100GE at a third of the footprint even though its ceiling is lower.
Ordering Checklist
|
Check Item |
What to Confirm |
Why It Matters |
|---|---|---|
|
Simultaneous port budget |
Confirm the total speed of all ports intended to run at once stays within 240GE. |
Cisco caps simultaneous enablement at that figure, so a faceplate count that ignores it produces ports that cannot be brought up. |
|
Optics by cage type |
Confirm SFP+ optics for the twelve 1/10GE cages and QSFP+ or QSFP28 optics for the four high-speed cages. |
The two cage families take different optics and a single-type optics order leaves half the faceplate unusable. |
|
Bay assignment for 100GE |
Confirm the 100GE circuits map to the QSFP28 cage in Bay 1 and the one in Bay 2. |
Only those two cages accept 100GE, so a patch plan built on cage position rather than bay will not connect. |
|
Power supply type |
Confirm whether the site feeds AC or DC, and order the 750 W AC or 950 W DC supply accordingly. |
The supply is selected at order time and cannot be changed by reconfiguration. |
|
Software image floor |
Confirm the image is Cisco IOS XE 17.15.4 or later and the manager is Cisco Catalyst SD-WAN Manager 20.15.4 or later. |
Staging below the floor leaves the router unsupported after installation. |
|
Rack depth |
Confirm the rack clears 18.46 in. of chassis depth plus cabling for QSFP breakouts. |
QSFP cabling has a larger bend radius than SFP+ and a depth plan sized for copper will not close. |
Optional Add-ons
|
Add-on |
Description |
|---|---|
|
950 W DC power supply |
DC input option in place of the 750 W AC supply. |
|
64 GB DRAM |
Memory option above the 32 GB default. |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | C8570-G2 | Series | Cisco 8500 Series Secure Routers |
| Platform type | 1 RU fixed form factor | WAN Ports | 12x 1/10GE (SFP+), 2x 40GE (QSFP+), 2x 40/100GE (QSFP28) |
| Simultaneous port cap | 240GE of ports can be enabled simultaneously | Bay 0 | 8x 1/10G SFP+ |
| Bay 1 | 1x 40/100G QSFP28 and 4x 1/10G SFP+ | Bay 2 | 1x 40/100G QSFP28 and 2x 40G QSFP+ |
| WAN MACsec | Supported in all built-in ports | Management Port | 1x RJ-45 out-of-band management |
| Console port | 1x RJ-45 and 1x Micro-USB | Storage interface | USB 3.0 Type C |
| Asset tag | RFID | DRAM | 32 GB default, 64 GB option |
| Storage | 480 GB default | Power Supply | 750 W AC or 950 W DC |
| Forwarding (512B) | Up to 190 Gbps | IPsec (512B) | Up to 63 Gbps |
| SD-WAN (512B) | Up to 21 Gbps | SD-WAN measurement basis | IPsec, QoS, Deep Packet Inspection and Flexible NetFlow enabled |
| IPv4/IPv6 routes | 8M | IPsec tunnels | 10,000 |
| IPv4 ACLs | 4K | IPv4 ACEs | 380K |
| NAT Sessions | 16M | VRFs | 8K |
| Dimensions (H x W x D) | 1.73 in. x 17.50 in. x 18.46 in. | Rack Units (RU) | 1 RU |
| Chassis weight | 21 lbs with two AC power supplies and the fan tray | Operating temperature | 32 to 104 degrees F |
| Storage temperature | -40 to 150 degrees F | Relative humidity | 10 to 85 percent operating; 5 to 95 percent non-operating and storage |
| NEBS criteria levels | GR-1089 and GR-63 | Altitude | -500 to 10,000 feet (-152 to 3048 meters) |
| Minimum device OS | Cisco IOS XE 17.15.4 | Minimum SD-WAN Manager release | Cisco Catalyst SD-WAN Manager 20.15.4 |
Get More Information
Need pricing, stock, or shipping details for the C8570-G2 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Can every C8570-G2 port run at its maximum speed at the same time?
-
How are the C8570-G2 100G and 40G ports arranged across its bays?
-
Does C8570-G2 increase VPN tunnel scale over C8550-G2?
-
Can C8570-G2 encrypt a 100G link at full line rate?
-
Can I enable threat protection and malware inspection on C8570-G2?
-
Is MACsec available on the C8570-G2 high-speed ports?
-
What memory and storage are included with C8570-G2?
-
Will the C8455-G2 starting software release support C8570-G2?
-
How much cabinet space should I allow for C8570-G2?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.