ISR4431/K9 – 4x1G RJ45/SFP Ports – 3 NIM Slots – ISR 4431 Branch Router
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
ISR4431/K9 Description
The ISR4431/K9 is a Cisco ISR 4431 integrated services router from the Cisco 4000 Family for branch WAN edges that need redundant power in one rack unit. Four onboard 1G ports that each accept RJ-45 or SFP connect the circuits, three NIM slots and an internal PVDM4 slot hold modules, and aggregate throughput is 500 Mbps by default or 1 Gbps with a performance license. The ISR 4431 has no SM-X service-module slot, and its onboard ports carry no PoE+.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Onboard WAN or LAN ports |
4 x 10/100/1000; each port runs as RJ-45 or SFP, one medium at a time |
|
Management port |
1 dedicated Gigabit Ethernet port |
|
Module slots |
3 NIM slots and 1 onboard ISC slot; no SM-X slot |
|
Aggregate throughput |
500 Mbps default; 1 Gbps with FL-44-PERF-K9 |
|
DRAM |
2 GB data plane; 4 GB control plane, upgradable to 16 GB |
|
Flash |
8 GB eMMC, upgradable to 32 GB |
|
Default power supply |
PWR-4430-AC internal AC supply; 250W maximum system power |
|
Redundant power supply |
Second internal AC, DC or PoE supply, hot-swappable |
|
Default PoE budget |
None; the default AC supply carries no PoE |
|
PoE with PWR-4430-POE-AC |
250W for endpoints; 500W with PoE boost and no redundancy |
|
Encryption without HSEC |
1,000 secure tunnels and 250 Mbps |
|
Software modes |
Autonomous or Catalyst SD-WAN controller mode on one universalk9 image from Cisco IOS XE 17.2.1 |
|
Form factor |
1RU, 1.73 x 17.25 x 19.97 in |
Product Performance
Key Features
Each onboard port, GE 0/0/0 through GE 0/0/3, takes either a copper cable or an SFP, though only one medium works on a port at a time. The SFP side accepts 1000BASE-SX, LX/LH, ZX and CWDM optics as well as 100 Mbps SFPs. Management traffic stays off these ports on the dedicated GE0 port.
Interface modules go in three NIM slots, and every slot connects over two 2 Gbps paths: one to the route processor and one straight to the other modules. Voice DSP resources need no NIM slot, since PVDM4 modules mount in the internal ISC slot on their own 2 Gbps link.
Aggregate throughput is a licensed setting rather than a hardware limit: 500 Mbps as shipped and 1 Gbps once FL-44-PERF-K9 is installed. The license is delivered remotely, so the upgrade needs no visit to the rack.
The chassis has two internal power bays, and a failed supply can be pulled while the router keeps running on the other. Supplies come in AC, DC and PoE versions; the DC supply accepts 48 to 60 VDC and delivers up to 437W.
Endpoints draw PoE through integrated switch modules, not through the onboard ports. A PWR-4430-POE-AC supply gives the modules 250W of 802.3af or 802.3at power, and that figure holds when a second PoE supply is added for redundancy. Two PoE supplies running in boost mode raise the endpoint budget to 500W but give up redundancy.
From Cisco IOS XE 17.2.1, a single universalk9 image runs the router either as a standalone autonomous router or as a Catalyst SD-WAN edge in controller mode. With a Cisco DNA subscription, autonomous mode carries a perpetual license, while controller mode uses a term license that needs renewal.
Application Scenarios
At a branch office, the router terminates a fiber handoff on an SFP in one onboard port and a copper circuit on RJ-45 in another. Two supplies in the chassis keep the site online if one fails.
Sites that cannot rely on a single wired circuit add an LTE Advanced NIM in one of the NIM slots. Its two Micro-SIM slots let the cellular path fail over between carriers.
A branch with IP phones runs SRST and CUBE on the router, while a PVDM4 in the internal slot handles transcoding and conferencing. Voice interface NIMs connect analog lines or trunks in the remaining slots.
Product Comparison
|
Parameter |
ISR4431/K9 |
ISR4331/K9 | ||
|---|---|---|---|---|
|
Onboard WAN or LAN ports |
4 x 1G (RJ-45 or SFP) |
4 x 1G (RJ-45 or SFP) |
3 x 1G |
2 x 10G SFP+, 4 x 1G RJ-45 |
|
SD-WAN IPsec throughput (1400 bytes) |
Not published |
Not published |
Not published |
Up to 17 Gbps |
|
Aggregate throughput (default) |
500 Mbps |
1 Gbps |
100 Mbps |
Not published |
|
Aggregate throughput (performance license) |
1 Gbps |
2 Gbps |
300 Mbps |
Not published |
|
Module slots |
3 NIM, 1 ISC |
3 NIM, 2 SM-X, 1 ISC |
2 NIM, 1 SM-X, 1 ISC |
1 SM, 1 NIM, 1 PIM |
|
DRAM |
2 GB data plane; 4 GB control plane, 16 GB maximum |
2 GB data plane; 4 GB control plane, 16 GB maximum |
4 GB, 16 GB maximum |
8 GB |
|
Default power supply |
PWR-4430-AC, 250W maximum; second bay for redundancy |
PWR-4450-AC 450W AC; second bay for redundancy |
PWR-4330-AC, 250W maximum; no redundant supply |
2 x PWR-CC1-250WAC 250W AC |
|
Default PoE budget |
0W |
0W |
0W |
0W |
|
Maximum endpoint PoE |
250W redundant; 500W with PoE boost |
500W redundant; 950W with PoE boost |
250W |
250W with PWR-CC1-500WAC |
ISR4431/K9 has four onboard 1G ports, three NIM slots, a second power bay and 500 Mbps by default, while ISR4331/K9 has three ports, two NIM slots, a single supply and 100 Mbps. The smaller router does add one SM-X slot, so a site that needs a service module and stays at or below 300 Mbps can step down to it. Where two SM-X slots, 2 Gbps of licensed throughput or up to 950W of endpoint PoE are needed, ISR4451-X/K9 keeps the same four ports and three NIM slots. C8300-1N1S-4T2X adds two 10G SFP+ ports and up to 17 Gbps of SD-WAN IPsec, with one NIM, one SM and one PIM slot. Below 1 Gbps, FL-44-PERF-K9 covers growth without a chassis change.
Ordering Checklist
- Technology package: The base router activates IP Base only; add SL-44-SEC-K9 for IPsec and firewall, SL-44-UC-K9 for voice and CUBE, or SL-44-APP-K9 for MPLS and AVC. Bundles such as ISR4431-SEC/K9 already carry the security license.
- HSEC license: Add FL-44-HSEC-K9 when the design needs more than 1,000 secure tunnels or more than 250 Mbps of crypto bandwidth. It requires the security package and has no evaluation license.
- Performance license: Order FL-44-PERF-K9 when the branch needs 1 Gbps of aggregate throughput. Without it the router stays at 500 Mbps.
- Voice DSP: Voice designs need a PVDM4 for the ISC slot along with SL-44-UC-K9. The ISR4431-V/K9 bundle combines PVDM4-64 with the UC license on one line.
- Memory and flash: MEM-4400-4GU8G or MEM-4400-4GU16G takes control-plane DRAM from 4 GB to 8 GB or 16 GB. MEM-FLSH-8U16G or MEM-FLSH-8U32G adds eUSB flash, after which the onboard eMMC is no longer detected.
- Second power supply: Add PWR-4430-AC/2 or PWR-4430-DC/2 for redundancy, or PWR-4430-POE-AC with PWR-4430-POE-AC/2 when switch modules must power endpoints. The 500W boost mode needs both PoE supplies.
Optional Add-ons
|
Model |
Description |
|---|---|
|
PWR-4430-AC/2 |
Secondary AC power supply for the ISR 4430 |
|
PWR-4430-DC |
DC power supply for the ISR 4430 |
|
PWR-4430-DC/2 |
Secondary DC power supply for the ISR 4430 |
|
PWR-4430-POE-AC |
500W AC power supply with PoE for the ISR 4430 |
|
PWR-4430-POE-AC/2 |
Secondary 500W AC power supply with PoE |
|
MEM-4400-4GU8G |
Control-plane DRAM upgrade from 4 GB to 8 GB (4 GB + 4 GB) |
|
MEM-4400-4GU16G |
Control-plane DRAM upgrade from 4 GB to 16 GB (8 GB + 8 GB) |
|
MEM-FLSH-8U16G |
eUSB flash upgrade from 8 GB to 16 GB |
|
MEM-FLSH-8U32G |
eUSB flash upgrade from 8 GB to 32 GB |
|
FL-44-PERF-K9 |
Performance license raising aggregate throughput from 500 Mbps to 1 Gbps |
|
FL-4430-BOOST-K9 |
Booster performance license for CEF-only forwarding on the ISR 4430 series |
|
FL-44-HSEC-K9 |
HSEC export compliance license for the ISR 4400 series |
|
SL-44-SEC-K9 |
Security technology package license |
|
SL-44-UC-K9 |
Unified Communications technology package license |
|
SL-44-APP-K9 |
Application Experience technology package license |
|
64-channel voice DSP module for the onboard ISC slot | |
|
One-port dual-mode GE/SFP NIM | |
|
NIM-LTEA-EA |
LTE Advanced Cat 6 NIM for the Americas, Europe and the Middle East |
|
NIM-SSD |
NIM carrier card for two SATA SSDs |
|
ACS-4430-RM-23= |
23-inch rack-mount kit |
|
ACS-4430-WM= |
Wall-mount kit |
|
ACS-4430-FANASSY= |
Spare fan assembly |
Front View
|
1 |
Power supply unit (PSU1) |
2 |
LEDs |
|
3 |
On/Off switch |
4 |
Optional power supply unit (PSU0) |
Chassis View
|
1 |
USB ports |
2 |
GE ports |
|
3 |
Screws to open the NIM slot |
4 |
Router label tray |
|
5 |
NIM slot (with cover) |
6 |
Ground connection |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | ISR4431/K9 | Rack height | 1RU |
| Total onboard WAN or LAN 10/100/1000 ports | 4 | RJ-45-based ports | 4 |
| SFP-based ports | 4, each sharing a physical port with the same-numbered RJ-45 port | Total onboard WAN or LAN 10Gbps ports | 0 |
| RJ-45 port standards | 10BASE-T, 100BASE-TX, 1000BASE-T | SFP port modules | 1000BASE-LX/LH, SX, ZX, CWDM and 100 Mbps SFP modules |
| Management port | 1 dedicated Gigabit Ethernet port (GE0) | NIM slots | 3 |
| Enhanced service-module (SM-X) slots | 0 | Double-wide service-module slots | 0 |
| Onboard ISC slot | 1, for PVDM4 voice DSP modules | UCS E-Series server modules | Not supported |
| OIR (all I/O modules) | Yes | Aggregate throughput (default) | 500 Mbps |
| Aggregate throughput (performance license) | 1 Gbps with FL-44-PERF-K9 | Default memory DRAM (data plane) | 2 GB |
| Maximum memory DRAM (data plane) | 2 GB | Default memory DRAM (control/services plane) | 4 GB |
| Maximum memory DRAM (control/services plane) | 16 GB | Flash | 8 GB eMMC |
| Maximum flash memory | 32 GB | External USB 2.0 slots (type A) | 2 |
| USB console port (type B mini) | 1 | Serial console port (RJ-45) | 1 |
| Serial auxiliary port (RJ-45) | 1 | Default power supply | PWR-4430-AC internal AC supply |
| Power-supply options | Internal AC, DC and PoE | Redundant power supply | Internal AC, DC or PoE second supply, hot-swappable |
| AC input voltage | 100 to 240 VAC autoranging | AC input frequency | 47 to 63 Hz |
| AC input current range | 3 to 1.3 A | DC input voltage | 48 to 60 VDC, 12 A maximum |
| Maximum power with AC power supply | 250W (no PoE) | Maximum power with DC power supply | 437W (no PoE) |
| Maximum PoE platform power | 500W with PoE redundancy; 1000W with PoE boost and no redundancy | Maximum endpoint PoE | 250W with optional redundancy; 500W with PoE boost and no redundancy |
| Front-panel PoE+ ports | Not supported | Typical power (no modules) | 65W |
| Dimensions (H x W x D) | 1.73 x 17.25 x 19.97 in (43.9 x 438.15 x 507.2 mm) | Rack-mount 19 in. EIA | Included |
| Rack-mount 23 in. | Optional | Wall-mount | Supported |
| Weight with AC PS (no modules) | 8.4 kg (18.5 lb) | Weight with AC PS with PoE (no modules) | 8.4 kg (18.6 lb) |
| Typical weight (fully loaded with modules) | 10.2 kg (22.4 lb) | Airflow | I/O side to bezel side |
| MTBF | 512,970 hours | Operating temperature | 0°C to 40°C (32°F to 104°F) |
| Storage temperature | -40°C to 70°C (-40°F to 158°F) | Relative humidity | 5% to 85% operating; 5% to 95% nonoperating |
| Operating altitude | 0 to 3,050 m (10,000 ft); 0 to 2,000 m (6,560 ft) in China | Sound pressure (typical/maximum) | 54.3/79.1 dBA |
| Sound power (typical/maximum) | 57.2/80.8 dBA | Safety certifications | UL 60950-1, CAN/CSA C22.2 No. 60950-1, EN 60950-1, AS/NZS 60950-1, IEC 60950-1 |
| EMC certifications | ICES-003 Class A, EN55032 Class A, CISPR32 Class A, AS/NZS CISPR 32 Class A, VCCI V-3, CNS 13438, EN 300-386, EN 55024, CISPR 24 | Software image | universalk9; autonomous and Catalyst SD-WAN controller mode from Cisco IOS XE 17.2.1 |
| Technology packages | IP Base by default; Security, Unified Communications and Application Experience by license | Crypto limits without HSEC | 1,000 secure tunnels and 250 Mbps of crypto bandwidth |
Get More Information
Need pricing, stock, or shipping details for the ISR4431/K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Which ROMMON release does ISR4431/K9 need for IOS XE 16.12 and for IOS XE 17.6?
-
Can I upgrade the flash in ISR4431/K9 with a CompactFlash card?
-
Which memory upgrade PIDs does ISR4431/K9 take for its control plane?
-
Does ISR4431/K9 support PoE+ on its onboard GE ports?
-
Which spare part PIDs are listed for ISR4431/K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Pre-sales took the time to understand our use case before recommending products.
Worked perfectly out of the box. No issues at all.
We tell new team members about Layer23 as a trusted resource.
These are the routers you are looking for. Reliable and genuine.
Performance license applied. Throughput handles our branch encryption easily.