ISR4221/K9 – 2x1G RJ45 (1 SFP Shared) – 2 NIM Slots – ISR 4221 Branch Router
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
ISR4221/K9 Description
The ISR4221/K9 is a Cisco 4000 Family Integrated Services Router, the ISR 4221, for small branch offices on modest WAN circuits. The router has two onboard Gigabit Ethernet ports, one of which can run as SFP, two NIM slots, 4 GB of fixed DRAM, 8 GB of fixed flash and 35 Mbps of aggregate throughput that a performance license raises to 75 Mbps. The ISR 4221 supports no PoE, no voice modules and no dedicated management port, and it runs from a 90W external AC supply.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Onboard WAN or LAN ports |
2 x 10/100/1000 RJ-45; 1 SFP shares a port with its RJ-45 pair |
|
Module slots |
2 NIM slots; no SM-X slot |
|
Aggregate throughput |
35 Mbps default; 75 Mbps with FL-4220-PERF-K9 |
|
CEF-only throughput with boost license |
Up to 1.2 Gbps with FL-4220-BOOST-K9 |
|
DRAM |
4 GB, fixed |
|
Flash |
8 GB, fixed |
|
Default power supply model |
PWR-4220-AC external AC adapter; no redundant supply |
|
Default power supply wattage |
90W maximum power with the AC supply |
|
Default PoE budget |
None; no PoE on any ISR 4221 power option |
|
Console and management |
1 shared RJ-45 console/auxiliary port; no dedicated management port |
|
Voice support |
Not supported; no UC license or UC-based NIMs |
|
Software modes |
Autonomous or Catalyst SD-WAN controller mode on one universalk9 image from Cisco IOS XE 17.2.1 |
|
Form factor |
1RU, 1.72 x 12.7 x 10 in; wall mount or optional 19-inch rack mount |
Product Performance
Key Features
The router ships at 35 Mbps of aggregate throughput. A performance license delivered remotely moves it to 75 Mbps with no hardware change, and a separate boost license lifts plain CEF forwarding over the onboard ports to as much as 1.2 Gbps.
Each NIM slot connects to the route processor over a single 1 Gbps link. The slots take routed Ethernet, LTE Advanced and asynchronous serial NIMs. Modules are not hot-swappable on this chassis, so a module change means powering the router down.
Both onboard ports run 10/100/1000 over RJ-45, and one of them can switch to SFP for 1000BASE-SX, LX/LH, ZX or CWDM optics. Only one medium works at a time on that port, chosen with the media-type command or left on auto-select.
DRAM is fixed at 4 GB and flash at 8 GB, and neither can be upgraded on this chassis. The capacity bought on day one is the capacity the router keeps for its service life.
IP Base is active out of the box. The Security package adds zone-based firewall, IPsec, DMVPN and FlexVPN, and the AppX package adds MPLS, L2 and L3 VPN and AVC. Both run from the same universalk9 image, which also supports Catalyst SD-WAN controller mode from Cisco IOS XE 17.2.1.
The 1RU chassis is 12.7 in wide and 10 in deep and weighs 7.1 lb with its AC supply and no modules. Typical sound pressure is 28.5 dBA, and wall mounting is supported.
Application Scenarios
A small branch office connects its LAN to a broadband or MPLS circuit through the onboard Gigabit ports, and the router runs the site’s firewall and IPsec tunnels back to headquarters once the Security package is licensed.
Where a remote site has only one wired circuit, an LTE Advanced NIM in one of the two NIM slots gives the router a second WAN path, with dual SIM slots for carrier failover.
In a network room or lab, NIM-16A or NIM-24A asynchronous modules turn the router into a console server that reaches the serial ports of up to 48 switches, routers and firewalls across both slots.
Product Comparison
|
Parameter |
ISR4221/K9 |
ISR4221X/K9 |
ISR4321/K9 | |
|---|---|---|---|---|
|
Total onboard WAN or LAN 1G ports |
2 (2 RJ-45, 1 SFP) |
2 (2 RJ-45, 1 SFP) |
2 (2 RJ-45, 1 SFP) |
4 (2 RJ-45, 2 SFP) |
|
Aggregate throughput (default) |
35 Mbps |
35 Mbps |
50 Mbps |
Not published |
|
Aggregate throughput (performance license) |
75 Mbps |
75 Mbps |
100 Mbps |
Not published |
|
IPsec throughput (1400 bytes) |
Not published |
Not published |
Not published |
Up to 500 Mbps |
|
Module slots |
2 NIM |
2 NIM |
2 NIM, 1 ISC |
1 NIM, 1 PIM |
|
DRAM |
4 GB fixed |
8 GB fixed |
4 GB (8 GB maximum) |
4 GB (32 GB maximum) |
|
Flash |
8 GB fixed |
8 GB fixed |
4 GB (8 GB maximum) |
8 GB onboard, optional M.2 storage |
|
Power supply |
External AC, 90W maximum |
External AC, 90W maximum |
External AC, 125W maximum |
Internal fixed 100W AC |
|
Default PoE budget |
No PoE |
No PoE |
120W with PWR-4320-POE-AC |
150W with PWR-CC1-150WAC |
ISR4221/K9 and ISR4221X/K9 share the same two onboard ports, two NIM slots and 35 Mbps to 75 Mbps throughput range, but ISR4221X/K9 has 8 GB of fixed DRAM against 4 GB, and neither model accepts a memory upgrade after purchase. A branch that needs more than 75 Mbps, endpoint PoE or a voice DSP moves to ISR4321/K9, which licenses up to 100 Mbps, adds an ISC slot and takes PWR-4320-POE-AC for 120W of PoE. Where encrypted traffic runs at hundreds of megabits, C8200L-1N-4T offers four 1G ports, up to 500 Mbps of IPsec at 1400 bytes and DRAM upgradable to 32 GB. On ISR4221/K9 itself, FL-4220-PERF-K9 lifts throughput from 35 Mbps to 75 Mbps.
Ordering Checklist
- Technology package: The router runs IP Base by default; add SL-4220-SEC-K9 for IPsec and firewall, SL-4220-SECNPE-K9 where payload encryption is not permitted, or SL-4220-APP-K9 for MPLS and AVC. The ISR4221-SEC/K9 bundle already carries the Security license.
- Performance license: Add FL-4220-PERF-K9 when the site needs 75 Mbps of aggregate throughput. Without it the router stays at 35 Mbps.
- Cellular NIM: Order NIM-LTEA-EA for the United States, Canada, Europe and the Middle East, or NIM-LTEA-LA for Asia Pacific and Latin America. Higher LTE Advanced throughput on the ISR 4221 also needs the higher performance license.
- Rack mount kit: The 19-inch rack mount is optional on this chassis, so add ACS-4220-RM-19 when the router goes into a rack. Otherwise the router has no rack brackets.
Optional Add-ons
|
Model |
Description |
|---|---|
|
PWR-4220-AC= |
Spare external AC power supply for the Cisco ISR 4220 series |
|
ACS-4220-RM-19= |
19-inch rack mount kit for the Cisco ISR 4220 and VG400 |
|
FL-4220-PERF-K9 |
Performance license raising aggregate throughput from 35 Mbps to 75 Mbps |
|
FL-4220-BOOST-K9 |
Boost license for CEF-only forwarding up to 1.2 Gbps on the ISR 4220 series |
|
SL-4220-SEC-K9 |
Security technology package license for the ISR 4220 series |
|
SL-4220-SECNPE-K9 |
Security license without payload encryption for the ISR 4220 series |
|
SL-4220-APP-K9 |
AppX technology package license for the ISR 4220 series |
|
1-port dual-mode Gigabit Ethernet RJ-45 or SFP routed WAN NIM | |
|
NIM-LTEA-EA |
LTE Advanced Cat 6 NIM for the Americas, Europe and the Middle East |
|
LTE Advanced Cat 6 NIM for Asia Pacific, Australia and Latin America | |
|
16-port asynchronous serial NIM for console access | |
|
24-port asynchronous serial NIM for console access |
Front View
|
1 4827_236e22-7e> |
Grounding 4827_0dfb33-7f> |
2 4827_c2b926-87> |
Power input connector 4827_ab6652-61> |
|
3 4827_adfb98-71> |
Power switch 4827_24f6ce-dc> |
4 4827_eca55a-78> |
USB 4827_8174e5-3c> |
|
5 4827_3aa3e8-fc> |
Console port 4827_bc8290-94> |
6 4827_4b5cee-2c> |
GE 0/0/0 RJ-45 (copper cable) port 4827_4783c7-41> |
|
7 4827_f11601-08> |
GE 0/0/0 SFP (fiber-optic) port 4827_56def5-83> |
8 4827_9763c0-9e> |
GE 0/0/1 (copper cable) port 4827_08b38e-1c> |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | ISR4221/K9 | Rack height | 1RU |
| Total onboard WAN or LAN 10/100/1000 ports | 2 | RJ-45-based ports | 2 |
| SFP-based ports | 1, sharing a physical port with the same-numbered RJ-45 port | Total onboard WAN or LAN 10Gbps ports | 0 |
| RJ-45 port standards | 10BASE-T, 100BASE-TX, 1000BASE-T | SFP port modules | 1000BASE-LX/LH, SX, ZX, CWDM and 100 Mbps SFP modules |
| Dedicated management port | Not supported | NIM slots | 2 |
| NIM connection to route processor | One 1 Gbps link per slot | Enhanced service-module slots | 0 |
| Doublewide service-module slots | 0 | OIR (all I/O modules) | No |
| Aggregate throughput (default) | 35 Mbps | Aggregate throughput (performance license) | 75 Mbps with FL-4220-PERF-K9 |
| Aggregate CEF-only throughput (boost license) | 1.2 Gbps with FL-4220-BOOST-K9 | Default memory DRAM | 4 GB |
| Maximum memory DRAM | 4 GB (fixed) | Flash | 8 GB |
| Maximum flash memory | 8 GB (fixed) | External USB 2.0 slots (type A) | 1 |
| USB console port | 0 | RJ-45 CON/AUX combo port | 1, shared between console and auxiliary use |
| Power-supply options | External AC only (PWR-4220-AC) | Redundant power supply | Not available |
| Default PoE budget | None; no PoE support | Front-panel PoE+ on onboard ports | No PoE+ on either onboard port |
| AC input voltage | 100 to 240 VAC autoranging | AC input frequency | 47 to 63 Hz |
| AC input current range | 1.5 to 0.6 A | Maximum power with AC power supply | 90W |
| Typical power (no modules) | 24W | External power supply dimensions | 37 x 73 x 152 mm or 36.5 x 67 x 155 mm, depending on supply manufacturer |
| Dimensions (H x W x D) | 1.72 x 12.7 x 10 in (43.7 x 322.6 x 254 mm) | Rack-mount 19 in. EIA | Optional |
| Wall-mount | Yes | Weight with AC PS (no modules) | 3.22 kg (7.1 lb) |
| Typical weight (fully loaded with modules) | 3.68 kg (8.11 lb) | Airflow | I/O side to bezel side |
| MTBF | 593,270 hours | Operating temperature | 0°C to 40°C (32°F to 104°F) |
| Storage temperature | -40°C to 70°C (-40°F to 158°F) | Relative humidity | 5% to 85% operating; 5% to 95% nonoperating |
| Operating altitude | 0 to 3,050 m (10,000 ft); 0 to 2,000 m (6,560 ft) in China | Sound pressure (typical/maximum) | 28.5/53 dBA |
| Sound power (typical/maximum) | 41/68 dBA | Safety certifications | UL 60950-1, CAN/CSA C22.2 No. 60950-1, EN 60950-1, AS/NZS 60950-1, IEC 60950-1 |
| EMC certifications | ICES-003 Class A, EN55032 Class A, CISPR32 Class A, AS/NZS CISPR 32 Class A, VCCI V-3, CNS 13438, EN 300-386, EN 55024, CISPR 24 | Software image | universalk9; autonomous and Catalyst SD-WAN controller mode from Cisco IOS XE 17.2.1 |
| Technology packages | IP Base by default; Security and Application Experience (AppX) by license | Unified communications | Not supported, including UC-based NIMs |
| WAAS | AppNav with an external WAAS device |
Get More Information
Need pricing, stock, or shipping details for the ISR4221/K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Which ROMMON release does ISR4221/K9 need for IOS XE 16.12 and for IOS XE 17.6?
-
Does ISR4221/K9 have a USB console port?
-
What size is the external power supply used with ISR4221/K9?
-
What AC input range and typical power draw does ISR4221/K9 have?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:












Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.

Quality of every unit was uniform. No variation across the order. Wish the lead time was a bit shorter, but product quality made up for it.
Working with Layer23 is what every vendor relationship should feel like.
Our procurement team was impressed that the pricing came in under our estimate.
The odds of this router failing are 3,720 to 1. It is functioning perfectly.
Very basic, very reliable. Perfect for simple MPLS endpoints.