C8650-G2 – 20x 1/10GE SFP+ – 6x 40/100GE QSFP28 – 3RU N+2 Redundant Power
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
C8650-G2 Description
The C8650-G2 is a Cisco 8600 Series Secure Router for high-scale data center and colocation edges. The router has 20 1/10GE SFP+ and 6 40/100GE QSFP28 ports, 225 Gbps of IPsec throughput, 12,000 SD-WAN IPsec tunnels and 64 GB of DRAM by default. The 26 ports have no published simultaneous-enablement limit, and the platform requires Cisco IOS XE Release 26.1.2 or later.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
C8650-G2 |
|
Platform type |
3 RU fixed form factor |
|
WAN ports |
20x 1/10GE (SFP+) and 6x 40/100GE (QSFP28) |
|
WAN/LAN MACsec |
Supported on all built-in ports |
|
Power supply |
1100W AC or 950W DC, N+2 redundancy |
|
Forwarding throughput |
Up to 540 Gbps at 512 bytes |
|
IPsec throughput |
Up to 225 Gbps at 512 bytes |
|
DRAM |
64 GB default |
|
IPv4/IPv6 routes |
16M |
|
SD-WAN IPsec tunnels |
12,000 |
|
Weight |
35.15 kg (77.5 lb) with four AC supplies |
|
Minimum software release |
Cisco IOS XE Release 26.1.2 |
Product Performance
Key Features
Six QSFP28 ports run at 40GE or 100GE, and no simultaneous-enablement limit is published for the platform, so port planning follows the faceplate count.
The 1100W AC or 950W DC supplies are arranged for N+2 redundancy, which keeps two supplies beyond the load requirement installed in the 3 RU chassis.
WAN/LAN MACsec is supported on every built-in port, so links between data centers can encrypt at 100GE without reserving particular cages.
The router holds 16M IPv4/IPv6 routes, 32M NAT sessions, 12,000 SD-WAN IPsec tunnels and 8000 VRF instances, enough headroom for multi-tenant translation and routing.
SD-WAN throughput reaches 80 Gbps at 512 bytes with IPsec, QoS, Deep Packet Inspection and Flexible NetFlow enabled, so an encrypted overlay can terminate on one chassis.
The platform starts at Cisco IOS XE Release 26.1.2, with Cisco Catalyst SD-WAN Release 26.1.2 for management, so software planning begins on the 26.x train.
Application Scenarios
Between two data centers, the router carries encrypted traffic on its 40/100GE QSFP28 ports, with WAN/LAN MACsec supported on all built-in ports.
At a colocation facility, the router aggregates tenant circuits on its 20 1/10GE SFP+ ports and presents 40/100GE links toward upstream providers.
In a design where NAT session count and route table size set the limit, the router supports 32M NAT sessions and 16M IPv4/IPv6 routes.
Product Comparison
|
Parameter |
C8650-G2 | ||
|---|---|---|---|
|
WAN ports |
20x 1/10GE (SFP+), 6x 40/100GE (QSFP28) |
12x 1/10GE (SFP+), 2x 40GE (QSFP+), 2x 40/100GE (QSFP28); max 240GE enabled simultaneously |
12x 1/10GE (SFP+) |
|
Forwarding (512B) |
Up to 540 Gbps |
Up to 190 Gbps |
Up to 115 Gbps |
|
IPsec (512B) |
Up to 225 Gbps |
Up to 63 Gbps |
Up to 48 Gbps |
|
IPsec tunnels |
12,000 |
10,000 |
10,000 |
|
DRAM |
64 GB default |
32 GB default, 64 GB option |
32 GB default, 64 GB option |
|
Storage |
480 GB default |
480 GB default |
480 GB default |
|
Power supply |
1100W AC or 950W DC, N+2 redundancy |
750 W AC or 950 W DC |
750 W AC or 950 W DC |
C8650-G2 and C8570-G2 are separated by scale and size: C8650-G2 forwards up to 540 Gbps against 190 Gbps, carries 16M routes against 8M and six 40/100GE ports against two, and has no published simultaneous port cap, but it occupies 3 RU at 77.5 lb instead of 1 RU at 21 lbs. Sites that need more than two 100GE ports, more than 190 Gbps of forwarding, or all 26 ports active at once need C8650-G2. Where 100GE is limited to two ports and the total stays within 240GE, C8570-G2 delivers it in 1 RU. A role with only 1/10GE circuits and up to 115 Gbps fits C8550-G2. C8650-G2 also needs Cisco IOS XE 26.1.2, while C8570-G2 and C8550-G2 run 17.15.4.
Ordering Checklist
- Power supply: Choose 1100W AC or 950W DC supplies, matched to the site feed, in the N+2 arrangement. The AC and DC supplies are separate options, and the wrong one cannot be used on the site feed.
Optional Add-ons
|
Add-on |
Description |
|---|---|
|
950W DC power supply |
DC input option in place of the 1100W AC supply. |
|
Additional 1100W AC power supply |
Extra supply to complete the N+2 redundancy arrangement. |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | C8650-G2 | Series | Cisco 8600 Series Secure Routers |
| Product type | 3 RU fixed form factor | WAN ports | 20x 1/10GE (SFP+) and 6x 40/100GE (QSFP28) |
| WAN/LAN MACsec | Supported on all built-in ports | Management port | 1x RJ-45 out-of-band management |
| Console port | 1x RJ-45 and 1x Micro-USB | Storage interface | USB 3.0 |
| Asset tag | RFID | DRAM | 64 GB default |
| SSD storage | 480 GB default | Power supply | 1100W AC or 950W DC, N+2 redundancy |
| Forwarding (512B) | Up to 540 Gbps | IPsec (512B) | Up to 225 Gbps |
| SD-WAN (512B) | Up to 80 Gbps | SD-WAN measurement basis | IPsec, QoS, Deep Packet Inspection and Flexible NetFlow enabled |
| IPv4/IPv6 routes | 16M | SD-WAN IPsec tunnels | 12,000 |
| IPv4 ACLs | 4000 | IPv4 ACEs | 380,000 |
| NAT sessions | 32M | VRF instances | 8000 |
| Dimensions (H x W x D) | 5.22 x 17.25 x 26.85 in. (13.26 x 43.81 x 68.20 cm) | Rack units | 3 RU |
| Weight | 35.15 kg (77.5 lb) with four AC supplies; 34.02 kg (75 lb) with three | Operating temperature | 0°C to 40°C (32°F to 104°F) |
| Storage temperature | -40°C to 65.5°C (-40°F to 150°F) | Relative humidity | 10 to 85 percent operating; 5 to 95 percent non-operating and storage |
| NEBS criteria levels | GR-1089 and GR-63 | Operating altitude | -500 to 10,000 feet (-152 to 3048 meters) |
| Minimum software release | Cisco IOS XE Release 26.1.2 and later | Minimum SD-WAN manager release | Cisco Catalyst SD-WAN Release 26.1.2 and later |
Quality Certifications
Customer Reviews
Questions & Answers
-
What forwarding and IPsec throughput does C8650-G2 reach?
-
Which power supplies does the Cisco configurator select by default for C8650-G2?
-
Which license tags does C8650-G2 use in SD-WAN controller mode?
-
Which software image PIDs can be selected for C8650-G2?
-
Which mounting kit and RFID option does C8650-G2 default to?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
met the brief.
Fine.
the price is what brought us here.