C926-4P - Cisco 926 Gigabit Ethernet security router with VDSL/ADSL2+ Annex B/J
Cisco 926 VDSL2/ADSL2+ over ISDN and 1GE Sec Router
Description
The Cisco® 900 Series Integrated Services Routers (ISRs) combine Internet access, comprehensive security, and wireless services in a single high-performance device that is easy to deploy and manage. They are well suited for deployment as Customer Premises Equipment (CPE) in enterprise small branch offices and in service provider managed-service environments.
Product Overview
The Cisco 900 Series ISRs deliver integrated security and threat defense, protecting networks from both known and new Internet vulnerabilities and attacks. These powerful, fixed-configuration routers provide secure broadband and Metro Ethernet and wireless LTE WAN connectivity. Service providers offering both managed Ethernet and wireless LTE WAN services can deploy them in customer locations as CPE. Centralized and remote management capabilities are available through web-based tools and Cisco IOS® Software for full visibility and control of network configurations at the remote site.
The 900 Series ISRs simplify the deployment of Ethernet WAN services, with end-to-end Operations, Administration, and Maintenance (OA&M), Service-Level Agreement (SLA) monitoring and verification, and configuration management.
The Cisco 900 Series ISRs come with a 4-port managed switch, providing LAN ports to connect multiple devices. Figures 1 and 2 show the C921-4P and C926-4P models.
Features and Benefits
- High availability and business continuity
- Redundant WAN connections for failover protection and load balancing
- Dynamic failover protocols such as Virtual Router Redundancy Protocol (VRRP, RFC 2338), Hot Standby Router Protocol (HSRP), and Multigroup HSRP (MHSRP)
- Consistent, high application performance levels
- Can run multiple services simultaneously with no performance degradation
- Risk mitigation with multilevel security
- Network perimeter security with integrated application inspection firewall
- Data privacy through high-speed IP Security (IPsec) Triple Data Encryption Standard (3DES) and Advanced Encryption Standard (AES) encryption
- Enforced security policy with intrusion prevention
- Security hardware acceleration
- FlexVPN
- Next-generation encryption for secure network communications systems, reliable for the next decade
- Feature consolidation for real estate, Capital Expenditures (CapEx), and management savings
- Supports LAN connections
- Unified control of wired and wireless networks from a common console for streamlined operations
- Simplifies and centralizes configuration and management of wireless and wireline devices
- Remote configuration and management to keep local IT staff lean
- Supports separate console ports
Cisco 900 Series ISRs Ethernet and DSL only SKUs
- WAN interfaces : 1 port GE and 1 VADSL (Annex B/J)
- LAN interfaces : 4-port GE managed switch
- Integrated USB 2.0 : Yes
Product Specifications
Cisco IOS Software
- IP and IP services
- Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2)
- Generic Routing Encapsulation (GRE) and Multipoint GRE (MGRE)
- Cisco Express Forwarding
- Standard 802.1d Spanning Tree Protocol
- Layer 2 Tunneling Protocol (L2TP)
- L2TP Version 3 (L2TPv3)
- Network Address Translation (NAT)
- Dynamic Host Configuration Protocol (DHCP) server, relay, and client
- Dynamic DNS
- DNS Proxy and DNS Spoofing
- Access Control Lists (ACLs)
- IPv4 and IPv6 multicast
- Open Shortest Path First (OSPF)
- Border Gateway Protocol (BGP)
- Performance Routing (PfR)
- Enhanced Interior Gateway Routing Protocol (EIGRP)
- Virtual Route Forwarding (VRF) Lite
- Next Hop Resolution Protocol (NHRP)
- Bidirectional Forwarding Detection (BFD)
- Web Cache Communication Protocol (WCCP)
- xDSL
- True Multimode VDSL2 and ADSL2+ over Annex A, B, J, and M, including traditional G.DMT and T1.413
- World-class interoperability with industry-standard DSL Access Multiplexer (DSLAM) chipsets
- Highest field reliability with Impulse Noise Protection (INP) over Repetitive Electrical Impulse Noise (REIN) and single isolated impulse noise (SHINE), extended INP delay, G.INP, physical layer retransmission, Seamless Rate Adaptation (SRA), and Bitswap
- VDSL2 Persistent Storage Device (PSD) profiles up to 17a/b with support for spectral shaping
- VDSL2 vectoring to offer blazing fiber speeds over copper
- Remote management with TR069 and CWMP
- Investment protection with Gigabit Ethernet
- Switch features
- Auto Media Device In/Media Device Cross Over (MDI-MDX)
- 25 802.1Q VLANs
- MAC filtering
- Switched Port Analyzer (SPAN)
- Storm control
- Smart ports
- Secure MAC address
- Internet Group Management Protocol Version 3 (IGMPv3) snooping
- 802.1X
- Security features
- Secure connectivity:
- Secure Sockets Layer (SSL) VPN for secure remote access
- Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256
- Public-Key-Infrastructure (PKI) support
- 50 IPsec tunnels
- Cisco Easy VPN client and server
- NAT transparency
- Dynamic Multipoint VPN (DMVPN)
- Tunnel-less Group Encrypted Transport VPN (GET VPN)
- VRF-aware IPsec
- IPsec over IPv6
- Adaptive control technology
- Session Initiation Protocol (SIP) application-layer gateway
- Cisco IOS Firewall:
- Zone-based policy firewall
- VRF-aware stateful inspection routing firewall
- Stateful inspection transparent firewall
- Advanced application inspection and control
- HTTPS, FTP, and Telnet Authentication Proxy
- Dynamic and static port security
- Firewall stateful failover
- VRF-aware firewall
- Cisco IOS Software blocked and allowed lists
- Control plane policing
- Flexible packet matching
- Network foundation protection
- Secure connectivity:
- Quality of Service (QoS)
- Low-Latency Queuing (LLQ)
- Weighted Fair Queuing (WFQ)
- Class-Based WFQ (CBWFQ), Class-Based Traffic Shaping (CBTS), Class-Based Traffic Policing (CBTP)
- Policy-Based Routing (PBR)
- Class-Based QoS MIB
- Class of Service (CoS)-to-Differentiated Services Code Point (DSCP) mapping
- Class-Based Weighted Random Early Detection (CBWRED)
- Network-Based Application Recognition (NBAR)
- Link Fragmentation and Interleaving (LFI)
- Resource Reservation Protocol (RSVP)
- Real-Time Transport Protocol (RTP) header compression (cRTP)
- Differentiated Services (DiffServ)
- QoS preclassify and prefragmentation
- Hierarchical QoS (HQoS)
- Management
- Cisco Configuration Professional
- Cisco Configuration Express
- Cisco Configuration Engine support
- Cisco AutoInstall
- Cisco IP Service-Level Agreement (IP SLA)
- Cisco IOS Embedded Event Manager (EEM)
- Cisco Security Manager
- Telnet, Simple Network Management Protocol Version 3 (SNMPv3), Secure Shell (SSH) Protocol, Command-Line Interface (CLI), and HTTP management
- RADIUS and TACACS+
- Cisco Next Generation Plug-and-Play (NG PnP) Protocol
- High availability
- Virtual Router Redundancy Protocol (VRRP) (RFC 2338)
- HSRP
- MHSRP
- Metro Ethernet
- Ethernet OA&M
- Ethernet Local Management Interface (E-LMI)
- IP SLA for Ethernet
- IPv6
- IPv6 addressing architecture
- IPv6 name resolution
- IPv6 statistics
- IPv6 translation: Transport packets between IPv6-only and IPv4-only endpoints (NAT-Protocol Translation)
- Internet Control Message Protocol Version 6 (ICMPv6)
- IPv6 DHCP
- OSPFv3
- BGP4+
- IPv6 Path Maximum Transmission Unit (PMTU)
- IPv6 neighbor discovery
- IPv6 stateless address autoconfiguration (SLAAC)
- IPv6 multicast routing
- Application visibility and control
- NBAR2
- Flexible NetFlow (FNF)
- Performance Agent
- Number of recommended users
- 50
- Default and maximum DRAM
- Default 1 GB
- Default and maximum flash memory
- 2 GB on all Cisco 900 Series ISR models; not upgradable
- WAN
- Refer to Table 2, 3 and 4 for details
- LAN switch
- Refer to Table 2 for details
- Separate console ports
- RJ-45
- USB 2.0
- One USB 2.0 Type A port
- Note: USB 2.0 ports cannot be used for connecting external devices other than those specified at: https://www.cisco.com/en/US/prod/collateral/modules/ps6247/product_data_sheet0900aecd80232473.html
- Physical dimensions, LEDs, and weight
- Dimensions:
- C921-4P, C931-4P, and C921-4PLTEXX
- H x W x D = 1.70 x 9.0 x 9.5 in. (4.32 x 22.86 x 24.13 cm) (includes rubber feet)
- C927-4P, C927-4PM, C926-4P, C927-4PLTEXX, C927-4PMLTEXX, and C926-4PLTEXX
- H x W x D = 1.10 x 10.20 x 7.00 in. (2.80 x 25.91 x 17.78 cm) (includes rubber feet)
- LEDs:
- 1x green per Ethernet
- 2x green DSL - CD+Data
- 1x bicolor LED LTE RSSI
- 1x green LED LTE SIM/Activity
- VPN
- System OK
- Weight: 2.65 lb (1.20 kg) maximum
- Dimensions:
- Power supply
- Power specifications:
- AC input voltage: Universal 100 to 240 VAC
- Frequency: 50 to 60 Hz
- Internal power supply (C921-4P, C931-4P, and C921-4PLTEXX only)
- External power adapter (C927-4P, C927-4PM, C926-4P, C927-4PLTEXX, C927-4PMLTEXX, and C926-4PLTEXX only): 12 VDC; 30 W
- Power specifications:
- Approvals and compliance
- Safety:
- IEC 60950-1
- UL 60950-1
- CAN/CSA C22.2 No. 60950-1
- EN 60950-1
- AS/NZS 60950.1
- Class I Equipment (C921-4P and C931-4P only)
- Class III Equipment (C927-4P, C927-4PM, and C926-4P only)
- Emissions:
- 47 CFR Part 15: 2006
- CISPR22: Edition 6.0: 2008
- CNS13438: 2006
- EN 300 386 V1.6.1
- EN 55032
- EN61000-3-2: 2006 [+ amd 1 & 2]
- EN61000-3-3: 2008
- ICES-003 Issue 5: 2012
- KN 22: 2009
- TCVN 7189: 2009
- VCCI: V-3/2012.04
- Immunity:
- CISPR24: 2010 [+ amd 1 & 2]
- EN300386: V1.6.1
- EN55024: 2010
- EN61000-6-1: 2007
- KN24: 2011
- TCVN 7317:2003
- Safety:
- Environmental operating range
- Nonoperating temperature: -40° to 158°F (-40° to 70°C)
- Nonoperating humidity: 5% to 95% relative humidity (noncondensing)
- Nonoperating altitude: 0 to 15,000 ft (0 to 4570 m)
- Operating temperature:
- C921-4P and C931-4P: 0° to 50°C (de-rate 1°C per 1000-ft increase in altitude)
- C927-4P, C926-4P, C927-4PM, C921-4PLTEXX,: 0° to 45°C (de-rate 1°C per 1000-ft increase in altitude)
- Operating humidity: 5% to 95% relative humidity (noncondensing)
- Operating altitude: 0 to 10,000 ft (0 to 3000 m)