ISR4461/K9 – 2x10G SFP+ + 4x1G RJ45/SFP – 3 NIM + 3 SM-X Slots – ISR 4461 Branch Router
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
ISR4461/K9 Description
The ISR4461/K9 is a Cisco ISR 4461 router from the Cisco 4000 Family Integrated Services Routers for large branch and regional WAN edges that terminate 10G circuits. Two onboard 10G SFP+ ports sit beside four 1G ports that each run as RJ-45 or SFP, and the chassis adds three NIM slots, three SM-X slots and 1.5 Gbps of aggregate throughput that a performance license raises to 3 Gbps. Encrypted traffic is held to 1,000 secure tunnels and 250 Mbps until an HSEC license is installed.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Onboard WAN or LAN ports |
2 x 10G SFP+ and 4 x 10/100/1000; each 1G port runs as RJ-45 or SFP, one at a time |
|
Management port |
1 dedicated Gigabit Ethernet port |
|
Module slots |
3 NIM, 3 SM-X (or 2 double-wide SM-X) and 1 onboard ISC slot |
|
Aggregate throughput |
1.5 Gbps default; 3 Gbps with FL-4460-PERF-K9 |
|
DRAM |
4 GB data plane; control plane up to 32 GB |
|
Flash |
8 GB default, upgradable to 32 GB |
|
Power supply configuration |
PWR-4460-650-AC 650W AC; PWR-4460-650-AC2 650W AC as the redundant second supply |
|
Default PoE budget |
None; endpoint PoE needs the optional PoE power supply |
|
Maximum PoE budget (PoE supply) |
500W with PoE redundancy; 950W with PoE boost and no redundancy |
|
Encryption without HSEC |
1,000 secure tunnels and 250 Mbps |
|
Software modes |
Autonomous or Catalyst SD-WAN controller mode on one universalk9 image from Cisco IOS XE 17.2.1 |
|
NEBS |
NEBS certified; NEBS kit with dual 650W DC reverse-airflow supplies |
|
Form factor |
3RU rack mount; 19-inch rack-mount kit included |
Product Performance
Key Features
Ports TE 0/0/4 and TE 0/0/5 take 10G SFP+ optics, so a 10G handoff lands on the router without a module. The four 1G ports stay dual-media: each one runs as RJ-45 or SFP, and the media-type command picks which.
Each SM-X slot connects to the system at up to 10 Gbps, and two of the three can hold double-wide modules. The slots accept Cisco UCS E-Series server modules for local compute, and a carrier card turns an SM-X slot into an extra NIM slot.
The router forwards 1.5 Gbps of aggregate traffic as shipped. FL-4460-PERF-K9, delivered remotely, raises that to 3 Gbps with no hardware change, while FL-4460-BOOST-K9 covers CEF-only forwarding.
Without HSEC, IPsec stops at 1,000 secure tunnels and 250 Mbps of crypto bandwidth. The HSEC license lifts both limits, requires the securityk9 package and has no evaluation period. WAN MACsec on NIM-2GE-CU-SFP needs the Security and HSEC licenses together.
Two internal bays take AC, DC or PoE supplies, with PWR-4460-650-AC2 as the redundant 650W AC unit. A PoE supply delivers 500W to endpoints when PoE is redundant, or 950W in PoE boost mode without redundancy.
The ISR 4461 is NEBS certified. The NEBS kit fits dual 650W DC reverse-airflow supplies and a reverse-airflow fan assembly, and ACS-4460-NEBSKIT2 keeps the third SM slot usable from Cisco IOS XE 17.9.
Application Scenarios
A regional office lands its 10G internet or MPLS circuit on an onboard SFP+ port, keeps a 1G copper or fiber backup on the dual-media ports and routes traffic for the floors behind it.
At a site that gathers SD-WAN tunnels from smaller branches, the router joins the overlay in controller mode, running the same universalk9 image it uses for autonomous routing.
Telecom central offices that run on DC power can install the router in its NEBS-certified build, with reverse-airflow DC supplies and a matching fan assembly.
Product Comparison
|
Parameter |
ISR4461/K9 | |||
|---|---|---|---|---|
|
Onboard WAN or LAN ports |
2 x 10G SFP+, 4 x 1G (RJ-45 or SFP) |
4 x 1G (RJ-45 or SFP) |
2 x 10G SFP+, 4 x 1G RJ-45 |
2 x 10G, 4 x 1G |
|
SD-WAN IPsec throughput (1400 bytes) |
Not published |
Not published |
Up to 18.8 Gbps |
Up to 17 Gbps |
|
Aggregate throughput (default) |
1.5 Gbps |
1 Gbps |
Not published |
Not published |
|
Aggregate throughput (performance license) |
3 Gbps |
2 Gbps |
Not published |
Not published |
|
Module slots |
3 NIM, 3 SM-X, 1 ISC |
3 NIM, 2 SM-X, 1 ISC |
2 NIM, 2 SM, 1 PIM |
1 NIM, 1 SM, 1 PIM |
|
DRAM |
4 GB data plane; control plane up to 32 GB |
2 GB data plane; 4 GB control plane, 16 GB maximum |
8 GB, up to 32 GB |
8 GB, up to 32 GB |
|
Power supply configuration |
PWR-4460-650-AC 650W AC; redundant PWR-4460-650-AC2 |
PWR-4450-AC 450W AC; second bay for redundancy |
2 x PWR-CC1-650WAC 650W AC |
2 x PWR-CC1-250WAC 250W AC |
|
Default PoE budget |
0W |
0W (PWR-4450-AC) |
0W (PWR-CC1-650WAC) |
0W (PWR-CC1-250WAC) |
|
Maximum PoE budget |
500W redundant; 950W with PoE boost |
500W redundant; 950W with PoE boost |
500W with PWR-CC1-1000WAC |
250W with PWR-CC1-500WAC |
ISR4461/K9 and ISR4451-X/K9 share four dual-media 1G ports, three NIM slots and the same 950W endpoint PoE ceiling, but ISR4461/K9 adds two 10G SFP+ ports and a third SM-X slot. ISR4461/K9 also forwards 1.5 Gbps by default and 3 Gbps licensed, against 1 Gbps and 2 Gbps. A branch on 1G circuits that stays under 2 Gbps and runs no more than two service modules fits ISR4451-X/K9. Where SD-WAN encryption is the main load, C8300-2N2S-4T2X keeps the two 10G ports and publishes up to 18.8 Gbps of SD-WAN IPsec at 1400 bytes, with two SM, two NIM and one PIM slot. C8300-1N1S-4T2X carries the same port mix and up to 17 Gbps in 1RU, at one SM and one NIM slot.
Ordering Checklist
- Software mode: With a Cisco DNA subscription, choose autonomous mode, which is perpetual, or controller mode for Catalyst SD-WAN, which is term-based. ISR4461-DNA is the router ordered with DNA support.
- Technology package: The base ISR4461/K9 activates only ipbasek9; security, voice and application features need licenses or a bundle such as ISR4461-SEC/K9, ISR4461-V/K9 or ISR4461-AX/K9.
- HSEC license: Add an HSEC license when encryption must exceed 250 Mbps or 1,000 secure tunnels. It requires the securityk9 package and has no evaluation license.
- Performance license: Order FL-4460-PERF-K9 when the site needs 3 Gbps of aggregate throughput. Without it the router stays at 1.5 Gbps.
- Memory and flash: Control-plane DRAM takes single DIMMs such as MEM-4460-16G or MEM-4460-32G up to 32 GB. MEM-FLSH-8GU16G or MEM-FLSH-8GU32G takes flash from 8 GB to 16 GB or 32 GB.
- Second power supply: Add PWR-4460-650-AC2 for redundant AC or PWR-4460-650-DC2 for redundant DC. An empty bay takes PWR-COVER-4450 and an empty PoE slot takes POE-COVER-4450.
Optional Add-ons
|
Model |
Description |
|---|---|
|
PWR-4460-650-AC2 |
Redundant 650W AC power supply for the ISR 4461 |
|
PWR-4460-650-DC |
650W DC power supply for the ISR 4461 |
|
PWR-4460-650-DC2 |
Redundant 650W DC power supply for the ISR 4461 |
|
PWR-COVER-4450 |
Cover for an empty second power supply bay |
|
POE-COVER-4450 |
Cover for an empty PoE slot |
|
MEM-4460-8G |
8 GB DRAM, single DIMM |
|
MEM-4460-16G |
16 GB DRAM, single DIMM |
|
MEM-4460-32G |
32 GB DRAM, single DIMM |
|
MEM-FLSH-8GU16G |
Flash upgrade from 8 GB to 16 GB |
|
MEM-FLSH-8GU32G |
Flash upgrade from 8 GB to 32 GB |
|
FL-4460-PERF-K9 |
Performance license raising aggregate throughput from 1.5 Gbps to 3 Gbps |
|
FL-4460-BOOST-K9 |
Booster performance license for CEF-only forwarding |
|
ACS-4460-NEBS-KIT |
NEBS kit with dual 650W DC reverse-airflow supplies and reverse-airflow fan |
|
ACS-4460-NEBSKIT2 |
NEBS kit 2.0, third SM slot supported with Cisco IOS XE 17.9 or later |
|
ACS-4460-FANASSY= |
Spare fan assembly |
|
Six-port dual-mode GE/SFP service module for an SM-X slot | |
|
One-port dual-mode GE/SFP NIM | |
|
128-channel voice DSP module for a NIM slot | |
|
NIM-SSD |
NIM carrier card for two hot-swappable SATA SSDs |
Front View
|
1 |
LED |
2 |
Router power On/Off switch |
|---|---|---|---|
|
3 |
Power supply unit (PSU1) |
4 |
Router fan tray (hidden) behind removable bezel |
|
5 |
Optional power supply unit (PSU0) |
|
|
|
1 |
PSU0: Power supply unit 0 |
2 |
PSU1: Power supply unit 1 |
|---|---|---|---|
|
3 |
GE POE: Internal PoE daughter card status |
4 |
FLASH: Compact flash status |
|
5 |
TEMP: Temperature status |
6 |
PWR: Power |
|
7 |
STAT: System status |
8 |
FAN: Fan status |
|
9 |
M.2 SSD status |
10 |
POE BOOST: Power over Ethernet boost mode |
|
11 |
POE 1: Power over Ethernet 1status |
12 |
POE 0: Power over Ethernet 0 status |
Rear View
|
1 |
GE 0 management port |
2 |
Auxiliary port |
|---|---|---|---|
|
3 |
RJ-45 Gigabit Ethernet port (GE 0/0/0) |
4 |
SFP/Gigabit Ethernet port (GE 0/0/0) |
|
5 |
RJ-45 Gigabit Ethernet port (GE 0/0/2) |
6 |
SFP+/10 Gigabit Ethernet port (TE 0/0/4) |
|
7 |
NIM slot 1 (shown with slot divider removed). |
8 |
NIM slot 2 (shown with slot divider removed). |
|
9 |
NIM slot 3 (shown with slot divider removed). |
10 |
Ground Connection |
|
11 |
Slot for label |
12 |
Enhanced Service Module (SM-X) with double wide |
|
13 |
Enhanced Service Module (SM-X) 3 |
14 |
SFP+/10 Gigabit Ethernet port (TE0/0/5) |
|
15 |
RJ-45 Gigabit Ethernet port (GE 0/0/3) |
16 |
SFP/Gigabit Ethernet port (GE 0/0/1) |
|
17 |
RJ-45 Gigabit Ethernet GE 0/01 |
18 |
Console Port |
|
19 |
USB Console Port |
20 |
USB Port |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | ISR4461/K9 | Rack height | 3RU |
| Total onboard WAN or LAN 10/100/1000 ports | 4 | RJ-45-based ports | 4 |
| SFP-based ports | 4, each sharing a physical port with the same-numbered RJ-45 port | Total onboard WAN or LAN 10Gbps ports | 2 SFP+ (TE 0/0/4 and TE 0/0/5) |
| RJ-45 port standards | 10BASE-T, 100BASE-TX, 1000BASE-T | SFP port modules | 1000BASE-LX/LH, SX, ZX, CWDM and 100 Mbps SFP modules |
| Management port | 1 dedicated Gigabit Ethernet port (GE0) | NIM slots | 3 |
| Enhanced service-module (SM-X) slots | 3 | Double-wide service-module slots | 2 |
| Onboard ISC slot | 1 | UCS E-Series server modules | Supported |
| OIR (all I/O modules) | Yes | Aggregate throughput (default) | 1.5 Gbps |
| Aggregate throughput (performance license) | 3 Gbps with FL-4460-PERF-K9 | WAN performance | Up to 7 Gbps |
| Default memory DRAM (data plane) | 4 GB | Maximum memory DRAM (data plane) | 4 GB |
| Maximum memory DRAM (control/services plane) | 32 GB | Flash | 8 GB |
| Maximum flash memory | 32 GB | Flash upgrade type | eUSB; no CompactFlash slot |
| Internal M.2 SSD | Optional, 800 GB | External USB 2.0 slots (type A) | 2 |
| USB console port (type B mini) | 1 | Serial console port (RJ-45) | 1 |
| Serial auxiliary port (RJ-45) | 1 | Power supply configuration | PWR-4460-650-AC 650W AC; PWR-4460-650-AC2 650W AC redundant second supply |
| DC power supply | PWR-4460-650-DC 650W DC | Power-supply options | Internal AC, DC and PoE |
| Redundant power supply | Internal AC, DC or PoE second supply | AC input voltage | 100 to 240 VAC autoranging |
| AC input frequency | 47 to 63 Hz | AC input current range | 7.1 to 3.0 A |
| Maximum power with AC power supply | 1000W (no PoE) | Maximum power with DC power supply | 437W (no PoE) |
| Maximum PoE platform power | 1000W with PoE redundancy; 1450W with PoE boost and no redundancy | Maximum PoE budget (endpoint) | 500W with PoE redundancy; 950W with PoE boost and no redundancy |
| Default PoE budget | None; endpoint PoE needs the optional PoE power supply | ||
| NEBS | Certified; NEBS kit with dual 650W DC reverse-airflow supplies and reverse-airflow fan assembly | Airflow | I/O side to bezel side |
| Dimensions (H x W x D) | 3.5 x 17.25 x 18.5 in (88.9 x 438.15 x 469.9 mm) | Rack-mount 19 in. EIA | Included |
| Rack-mount 23 in. | Optional | Wall-mount | Not supported |
| MTBF | 480,770 hours | Operating temperature | 0°C to 40°C (32°F to 104°F) |
| Storage temperature | -40°C to 70°C (-40°F to 158°F) | Relative humidity | 5% to 85% operating; 5% to 95% nonoperating |
| Operating altitude | 0 to 3,050 m (10,000 ft); 0 to 2,000 m (6,560 ft) in China | Sound pressure (typical/maximum) | 50.6/73.1 dBA |
| Safety certifications | UL 60950-1, CAN/CSA C22.2 No. 60950-1, EN 60950-1, AS/NZS 60950-1, IEC 60950-1 | EMC certifications | ICES-003 Class A, EN55032 Class A, CISPR32 Class A, AS/NZS CISPR 32 Class A, VCCI V-3, CNS 13438, EN 300-386, EN 55024, CISPR 24 |
| Software image | universalk9; autonomous and Catalyst SD-WAN controller mode from Cisco IOS XE 17.2.1 | Minimum ROMMON | 16.9(1r); IOS XE 16.9.x is the earliest supported train |
| Technology packages | ipbasek9 by default; securityk9, uck9 and appxk9 by license | Crypto limits without HSEC | 1,000 secure tunnels and 250 Mbps of crypto bandwidth |
Quality Certifications
Customer Reviews
Questions & Answers
-
What aggregate throughput does ISR4461/K9 provide?
-
Which licenses does ISR4461/K9 need beyond IP Base?
-
Which ROMMON release does ISR4461/K9 need for IOS XE 16.9 and for IOS XE 17.6?
-
From which IOS XE release does ISR4461/K9 support a third SM slot with the NEBS kit?
-
Which cover PIDs fill empty slots on ISR4461/K9?
-
Can ISR4461/K9 use NIM-PVDM-X voice DSP modules?
-
Which bundle PIDs exist for ISR4461/K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Layer23 has earned my reorder business through years of consistent quality.
Layer23’s pricing power comes through without sacrificing service quality.
Received in two business days. Our timeline stayed on track.
Heavy duty. Gets the job done. No questions asked.
Coordination is key. This router connects our fleets. Excellent service.