Cisco 900J Series Integrated Services Routers Data Sheet

Data Sheet

Available Languages

Download Options

  • PDF
    (456.1 KB)
    View with Adobe Reader on a variety of devices
Updated:December 11, 2019

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Available Languages

Download Options

  • PDF
    (456.1 KB)
    View with Adobe Reader on a variety of devices
Updated:December 11, 2019


The Cisco® 900J Series Integrated Services Routers (ISRs) combine Internet access, comprehensive security, and wireless services in a single high-performance device that is easy to deploy and manage. They are well suited for deployment as Customer Premises Equipment (CPE) in enterprise small branch offices and in service provider managed-service environments.

Product Overview

The Cisco 900J Series ISRs deliver integrated security and threat defense, protecting networks from both known and new Internet vulnerabilities and attacks. These powerful, fixed-configuration routers provide secure broadband and Metro Ethernet connectivity. Service providers offering managed Ethernet WAN services can deploy them in customer locations as CPE. You get centralized and remote management capabilities through web-based tools and Cisco IOS® Software for full visibility and control of network configurations at the remote site.

The 900J Series routers simplify the deployment of Ethernet WAN services, with end-to-end Operations, Administration, and Maintenance (OA&M), Service-Level Agreement (SLA) monitoring and verification, and configuration management.

The 900J Series ISRs come with a 4-port managed switch, providing LAN ports to connect multiple devices. Figure 1 shows the C921J-4P model.

Related image, diagram or screenshot

Figure 1.       

C921J-4P ISR Top and Back Views

Features and Benefits

Table 1 describes some of the business needs enterprises have in branch offices and other edge networking locations and how the Cisco 900J Series ISRs fulfill those requirements.

Table 1.        How the Cisco 900J Series ISRs Address Edge Networking Challenges

Business need

Features and descriptions

High availability and business continuity

  Redundant WAN connections for failover protection and load balancing
  Dynamic failover protocols such as Virtual Router Redundancy Protocol (VRRP; RFC 2338), Hot Standby Router Protocol (HSRP), and Multigroup HSRP (MHSRP)

Consistent, high application performance levels

  Can run multiple services simultaneously with no performance degradation
  High-performance Intel ® x86 2.2-GHz CPU

Risk mitigation with multilevel security

  Network perimeter security with integrated application inspection firewall
  Data privacy through high-speed IP Security (IPsec) Triple Data Encryption Standard (3DES) and Advanced Encryption Standard (AES) encryption
  Enforced security policy with intrusion prevention
  Security hardware acceleration
  Next-generation encryption for secure network communications systems, reliable for the next decade

Feature consolidation for real estate, Capital Expenditures (CapEx), and management savings

  Supports LAN connections

Remote configuration and management to keep local IT staff lean

  Supports separate console port

Platform Support

Table 2 describes the interface and integrated capabilities supported by each of the Cisco 900J Series ISR models.

Table 2.        Platform Support


WAN interfaces

LAN interfaces

Integrated USB 2.0


2 ports Gigabit Ethernet (GE)

4-port 10/100/1000-Mbps managed switch


Product Specifications

Table 3 shows Cisco IOS Software features and general system specifications for the 900J Series ISRs.

Table 3.        Cisco IOS Software Features and System Specifications




Cisco IOS Software

IP and IP services

  Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2)
  Generic Routing Encapsulation (GRE) and multipoint GRE (MGRE)
  Cisco Express Forwarding
  Standard 802.1d Spanning Tree Protocol
  Layer 2 Tunneling Protocol (L2TP)
  L2TP Version 3 (L2TPv3)
  Network Address Translation (NAT)
  Dynamic Host Configuration Protocol (DHCP) server, relay, and client
  Dynamic DNS
  DNS Proxy
  DNS Spoofing
  Access Control Lists (ACLs)
  IPv4 and IPv6 multicast
  Open Shortest Path First (OSPF)
  Border Gateway Protocol (BGP)
  Performance Routing (PfR)
  Enhanced Interior Gateway Routing Protocol (EIGRP)
  Virtual Route Forwarding (VRF) Lite
  Next Hop Resolution Protocol (NHRP)
  Bidirectional Forwarding Detection (BFD)
  Web Cache Communication Protocol (WCCP)


Switch features

  Auto Media Device In/Media Device Cross Over (MDI-MDX)
  25 802.1Q VLANs
  MAC filtering
  Four-port 802.3af
  Switched Port Analyzer (SPAN)
  Storm control
  Smart ports
  Secure MAC address
  Internet Group Management Protocol Version 3 (IGMPv3) snooping


Security features

Secure connectivity:

  Secure Sockets Layer (SSL) VPN for secure remote access
  Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256
  Public-Key-Infrastructure (PKI) support
  50 IPsec tunnels
  Cisco Easy VPN client and server
  NAT transparency
  Dynamic Multipoint VPN (DMVPN)
  Tunnel-less Group Encrypted Transport VPN (GET VPN)
  VRF-aware IPsec
  IPsec over IPv6
  Adaptive control technology
  Session Initiation Protocol (SIP) application-layer gateway
  Cisco IOS Firewall:
  Zone-based policy firewall
  VRF-aware stateful inspection routing firewall
  Stateful inspection transparent firewall
  Advanced application inspection and control
  Secure HTTP (HTTPS), FTP, and Telnet Authentication Proxy
  Dynamic and static port security
  Firewall stateful failover
  VRF-aware firewall
  Cisco IOS Software blocked and allowed lists
  Control plane policing
  Flexible packet matching
  Network foundation protection


Quality of Service (QoS)

  Low-Latency Queuing (LLQ)
  Weighted Fair Queuing (WFQ)
  Class-Based WFQ (CBWFQ)
  Class-Based Traffic Shaping (CBTS)
  Class-Based Traffic Policing (CBTP)
  Policy-Based Routing (PBR)
  Class-Based QoS MIB
  Class of service (CoS)-to-differentiated services code point (DSCP) mapping
  Class-Based Weighted Random Early Detection (CBWRED)
  Network-Based Application Recognition (NBAR)
  Link fragmentation and interleaving (LFI)
  Resource Reservation Protocol (RSVP)
  Real-Time Transport Protocol (RTP) header compression (cRTP)
  Differentiated Services (DiffServ)
  QoS preclassify and prefragmentation
  Hierarchical QoS (HQoS)



  Cisco Configuration Professional
  Cisco Configuration Express
  Cisco Configuration Engine support
  Cisco AutoInstall
  Cisco IP Service-Level Agreement (IP SLA)
  Cisco IOS Embedded Event Manager (EEM)
  Cisco Security Manager
  Telnet, Simple Network Management Protocol Version 3 (SNMPv3), Secure Shell (SSH) Protocol, command-line interface (CLI), and HTTP management
  Cisco Next Generation Plug-and-Play (NG PnP) Protocol


High availability

  Virtual Router Redundancy Protocol (VRRP) (RFC 2338)


Metro Ethernet

  Ethernet OA&M
  Ethernet Local Management Interface (E-LMI)
  IP SLA for Ethernet



  IPv6 addressing architecture
  IPv6 name resolution
  IPv6 statistics
  IPv6 translation: Transport packets between IPv6-only and IPv4-only endpoints (NAT-Protocol Translation)
  Internet Control Message Protocol Version 6 (ICMPv6)
  IPv6 path maximum transmission unit (PMTU)
  IPv6 neighbor discovery
  IPv6 stateless address autoconfiguration (SLAAC)
  IPv6 multicast routing


Application visibility and control

  Flexible NetFlow (FNF)
  Performance Agent


Number of recommended users



Default and maximum DRAM

  Default 1 GB


Default and maximum flash memory

  2 GB on all Cisco 900J Series ISR models; not upgradable



  Refer to Table 2 for details


LAN switch

  Refer to Table 2 for details


Separate console ports



USB 2.0

  One USB 2.0 Type A port available

Note: USB 2.0 ports cannot be used for connecting external devices other than those specified at:


Physical dimensions and weight

Weight: 2.04 lb (0.924 kg) maximum

Product dimensions:

  H x W x D = 1.10 x 8.50 x 6.50 in. (2.80 x 21.59 x 16.51 cm) (includes rubber feet)


External power supply

Power specifications:

  External power supply
  AC input voltage: Universal 100 to 240 VAC
  Frequency: 50 to 60 Hz
  Maximum output power: 18W
  Output voltages: 12 VDC


Approvals and compliance


  IEC 60950-1, 2nd Edition with Amendment 1 and Amendment 2 with Japan national deviations


  47 CFR Part 15: 2006
  CISPR22: 2005
  EN300386: V1.3.3: 2005
  EN55022: 2006
  EN61000-3-2: 2000 [+ amd 1 & 2]
  EN61000-3-3: 1995 [+ amd 1: 2001]
  ICES-003 Issue 4: 2004
  KN 22: 2005
  VCCI: V-3/2006.04


  CISPR24: 1997 [+ amd 1 & 2]
  EN300386: V1.3.3: 2005
  EN50082-1: 1992
  EN50082-1: 1997
  EN55024: 1998 [+ amd 1 & 2]
  EN61000-6-1: 2001


Environmental operating range

  Nonoperating temperature: -40° to 158°F (-40° to 70°C)
  Nonoperating humidity: 5% to 95% relative humidity (noncondensing)
  Nonoperating altitude: 0 to 15,000 ft (0 to 4570 m)
  Operating temperature: 0° to 45°C (de-rate 1°C per 1000-ft increase in altitude)
  Operating humidity: 5% to 95% relative humidity (noncondensing)
  Operating altitude: 0 to 10,000 ft (0 to 3000 m)


Cisco IOS Software Licensing and Packaging

Cisco IOS Universal Image

A single Cisco IOS Universal image encompassing all functions is delivered with the platform. Advanced features can be enabled simply by activating a software license on the Universal image. Technology packages and feature licenses, enabled through right-to-use licenses, simplify software delivery and decrease the operational costs of deploying new features.

Three major technology licenses are available on the Cisco 900J Series; these licenses can be activated through the Cisco software activation process identified at The following licenses are available:

      IP Base: This technology package is the default.

      Application Experience (APP): This license includes data and application performance features.

      Security (SEC) or Security with No Payload Encryption (SEC-NPE): This license includes features for securing network infrastructure.

Table 4 lists the part numbers and features for each of the licenses. Table 5 lists the part numbers for the software images.

Table 4.        Licenses

Part number




IP Base (default)

Routing protocols, ACL, NAT, QoS, BFD, VRF Lite, IP SLA Responder


Application Experience (APP)

IP Base + advanced networking protocols: L2TPv3, MPLS

Application Experience: PfRv3, NBAR2, AVC, IP SLA Initiator

Hybrid Cloud Connectivity: LISP, Virtual Private LAN Services (VPLS), Ethernet over MPLS



Security (SEC)

IP Base + Advanced Security: Zone-based firewall, IPsec VPN, DMVPN, FlexVPN, GET VPN, SSL VPN

Provides up to 250-Mbps IPsec performance(SKU based)

Table 5.        Software Images

Part number


Router software images



Cisco 900 ISR Universal image and non-payload encryption image

Ordering Information

Table 6 lists the part numbers and Cisco IOS Software image details for each of the 900J Series ISR models.

To place an order, visit the Cisco Ordering Home Page. To download software, visit the Cisco Software Center.

Table 6.        Product Part Numbers and Software Images

Part number

Product description

Integrated services routers


Cisco 921J Gigabit Ethernet security router with external power supply for Japan only

* The C921J-4P supported only on Cisco IOS Software Release 15.8(3)Mb and later

Router software images


C900-universalk9-mz: Universal image for 921J

For additional information and details about Cisco IOS Software licensing and packaging on the 900J Series, please visit:

For the Cisco 900 ISR Hardware and Software Installation Guide, Go to:

Cisco and Partner Services

Services from Cisco and our certified partners can help you reduce the cost and complexity of branch-office deployments. We have the depth and breadth of experience across technologies to architect a blueprint for a branch-office solution to meet your company's needs. Planning and design services align technology with business goals and can increase the accuracy, speed, and efficiency of deployment. Technical services help maintain operational health, strengthen software application functions, solve performance problems, and lower expenses. Optimization services are designed to continually improve performance and help your team succeed with new technologies. For more information, visit

Cisco Smart Net Total Care® technical support for the 900J Series ISRs is available on a one-time or annual contract basis. Support options range from help-desk assistance to proactive, onsite consultation. All support contracts include:

      Major Cisco IOS Software updates in protocol, security, bandwidth, and feature improvements

      Full access rights to technical libraries for technical assistance, electronic commerce, and product information

      24-hour access to the industry’s largest dedicated technical support staff

For More Information

For more information about the Cisco 900J Series ISRs, visit or contact your local Cisco account representative.

Cisco Capital

Flexible payment solutions to help you achieve your objectives

Cisco Capital makes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more.

Learn more