Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

4221

4321

4331

4351

4431

4451

4461

Expand all

Features

Form factor1 RU Desktop1 RU Desktop1 RU2 RU1 RU2 RU3 RU
Integrated WAN PortsGE / SFPGE / SFPGE / SFP2 PoE GE / SFP2 PoE GE / SFP2 PoE GE / SFP2 x PoE GE/SFP; 2 x GE/SFP; 2 x 10 GE SFP+
GEGEGE / SFPGE / SFP2 GE / SFP2 GE / SFP
Performance 35 Mbps50 Mbps100 Mbps200 Mbps500 Mbps1 Gbps1.5 Gbps
Performance with Performance license75 Mbps100 Mbps300 Mbps400 Mbps1 Gbps2 Gbps3 Gbps
Performance with Boost license1.2 Gbps2+ Gbps2+ Gbps2+ Gbps4+ Gbps4+ Gbps10+ Gbps
Encrypted throughput (AES 256)75 Mbps100 Mbps500 Mbps500 Mbps900 Mbps1.6 Gbps7 Gbps
Management port1 GE RJ-45 (Integrated out of band)1 GE RJ-45 (Integrated out of band)1 GE RJ-45 (Integrated out of band)1 GE RJ-45 (Integrated out of band)1 GE RJ-45 (Integrated out of band)1 GE RJ-45 (Integrated out of band)1 GE RJ-45 (Integrated out of band)
Network Interface Modules (NIM)22233 3
Enhanced Services Modules (SM-X)--1 x single wide2 x single wide or 1 x double wide-2 x single wide or 1 x double wide3 x single wide; 2 x double wide; or 2 x singlewide plus 1 x doublewide
Integrated Services Card (ISC) slots-1 x PVDM 41 x PVDM 41 x PVDM 41 x PVDM 41 x PVDM 4-
USB ports (type A)1 x USB 2.0 1 x USB 2.0 1 x USB 2.0 2 x USB 2.0 2 x USB 2.0 2 x USB 2.0 2 x USB 3.0
Default/maximum Flash8 GB4 GB/8 GB4 GB/16 GB4 GB/16 GB8 GB/32 GB8 GB/32 GB8 GB/32 GB
Default/maximum DRAM4 GB fixed DRAM4 GB/8 GB4 GB/16 GB4 GB/16 GB4 GB/16 GB4 GB/16 GB8 GB/32 GB
Power supply typeExternal: ACExternal: AC, PoEExternal: AC, PoEExternal: AC, PoE, or DCInternal AC, AC-PoE, or DCInternal AC, AC-PoE, or DCInternal AC, AC-PoE, or DC
Redundant power supply----Yes, internal RPSYes, internal RPSYes, internal RPS
Module online insertion and removal (OIR)-YesYesYesYesYesYes
Module online insertion and removel (OIR)No YesYesYesYesYes
Server virtualization platform (UCS E-Series) and Network Compute Engine (NCE)N/A4-core NCE2-core single-wide, 2-core NCE2-core single-wide, 2-core NCE4-core NCE2-core single-wide, 2-core NCE2-core single wide, 2-core NCE
4-core single-wide, 4-core NCE4-core single-wide, 4-core NCE 4-core single-wide, 4-core NCE4-core single wide, 4-core NCE
4-core double-wide 4-core double-wide4-core double wide
6-core double-wide 6-core double-wide6-core double wide
8-core double-wide 8-core double-wide8-core double wide
12-core double-wide 12-core double-wide12-core double wide
Full IOS XE SD-WAN support YesYesYesYes---

Advanced Security

Cyberthreat protection through Trustworthy Systems frameworkYesYesYesYesYesYesYes
Zone-based firewall and NAT servicesVRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)
Hardware VPN acceleration (DES, 3DES, AES)YesYesYesYesYesYesYes
IPsec VPN servicesFlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN) Group Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNFlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN) Group Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNFlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN) Group Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNFlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN) Group Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNFlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN) Group Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNFlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN) Group Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNFlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN) Group Encrypted Transport VPN (GET VPN), V3PN, MPLS VPN
SSL VPN-------
Intrusion preventionYes (Snort for signature-based and Firepower as NGIPS)Yes (Snort for signature-based and Firepower as NGIPS)Yes (Snort for signature-based and Firepower as NGIPS)Yes (Snort for signature-based and Firepower as NGIPS)Yes (Snort for signature-based and Firepower as NGIPS)Yes (Snort for signature-based and Firepower as NGIPS)Yes (Snort for signature-based and Firepower as NGIPS)
Anomaly detection and machine learning Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)
Network foundation protectionACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2
Cisco Umbrella Branch SupportYesYesYesYesYesYesYes
Cisco Cloud Web SecurityYesYesYesYesYesYesYes
Identity-based networking-------
Cisco TrustSecSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPN
SGT over IpsecSGT over IpsecSGT over IpsecSGT over IpsecSGT over IPSECSGT over IPSEC
SGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPN
SGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFW
Port/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mapping
SGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlow

Unified Communications

Local conferencing-YesYesYesYesYesWith PVDM4 on NIM module installed
Digital signal processor support-PVDM4PVDM4PVDM4PVDM4PVDM4With PVDM4 on NIM module installed
Cisco Unified Survivable Remote Site Telephony support-Up to 50Up to 100Up to 750Up to 1200Up to 1500Up to 1500
Cisco Unified Communications Manager Express support-Up to 50Up to 100Up to 250Up to 350Up to 450Up to 450
Cisco Unity Express (NM, SM, or ISM)-Use Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSE
Cisco Unified Border Element (CUBE) SIP/H.323 sessions-100400100030006000-
Nano Cisco Unified Border Element (Nano CUBE) sessions-------
Digital voice and video-Up to 8 T1/E1 portsUp to 12 T1/ E1 portsUp to 24 T1/ E1 portsUp to 24 T1/ E1 portsUp to 40 T1/ E1 portsUp to 48 T1/ E1 ports
Analog/BRI voice-Up to 8 ports (FXS, FXO, E/M, BRI)Up to 12 ports (FXS, FXO, E/M, BRI) using NIM; or 8 ports using NIM and up to 24 FXS and 4 FXO using SM-X slotUp to 20 ports (FXS, FXO, E/M, BRI); or 12 using NIM and up to 48 FXS and 8 FXO in SM-X slot; or 12 using NIM and up to 72 FXS in SM-X slotUp to 12 ports (FXS, FXO, E/M, BRI)Up to 20 ports (FXS, FXO, E/M, BRI); or 12 using NIM and up to 48 FXS and 8 FXO in SM-X slot; or 12 using NIM and up to 72 FXS in SM-X slotUp to 24 ports (FXS, FXO, E/M, BRI); or 12 using NIM and up to 24 FXS and 36 FXO in SM-X slot; or 12 using NIM and up to 144 FXS in SM-X slot

Routing and Multicast

IPv4 routing protocolsRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfR
Multicast routing protocolsPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLD
IPv6 routing protocolsEIGRP, RIP, OSPFv3, IS-IS, BGP, PBREIGRP, RIP, OSPFv3, IS-IS, BGP, PBREIGRP, RIP, OSPFv3, IS-IS, BGP, PBREIGRP, RIP, OSPFv3, IS-IS, BGP, PBREIGRP, RIP, OSPFv3, IS-IS, BGP, PBREIGRP, RIP, OSPFv3, IS-IS, BGP, PBREIGRP, RIP, OSPFv3, IS-IS, BGP, PBR

Wireless LAN

Integrated 802.11 b/g/n access point-------
Integrated 802.11 a/b/g/n access point-------
Unified and autonomous mode-------
RP-TNC connectors for field-replaceable-------
Optional high-gain antennas-------
Diversity (dual antennas)-------
Wireless LAN controller module-Available on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-Series

Wireless WAN

3G/4G LTE cellularYesYesYesYesYesYesYes
Cat 6 LTE AdvancedYesYesYesYesYesYesYes
GPS supportYesYesYesYesYesYesYes
Indoor antennaYes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (various antennas using 2 x TNC connectors supporting MIMO)Yes (various antennas using 2 x TNC connectors supporting MIMO)Yes (various antennas using 2 x TNC connectors supporting MIMO)Yes (various antennas using 2 x TNC connectors supporting MIMO)Yes (various antennas using 2 x TNC connectors supporting MIMO)Yes (various antennas using 2 x TNC connectors supporting MIMO)
Outdoor antennas-------

Integrated Switching

Maximum switched Ethernet ports2 x 81640722472120
Maximum switched Ethernet LAN ports with PoE-1640722472120
Maximum PoE power without PoE boost-120W250W500W250W500W360W
Maximum PoE power with PoE boost-260W500W950W530W990W720W
EtherSwitch Service Module type (width)--1 x single wide 2 x single wide or 1 x double wide-2 x single wide or 1 x double wide3 x single wide; 2 x double wide; or 2 x single wide plus 1 x double wide

Application Services

Intelligent Path ControlPfRPfRPfRPfRPfRPfRPfR
SD-AccessYesYesYesYesYesYesYes
Network Contention ControlQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoS
Application VisibilityNBAR v2NBAR v2NBAR v2NBAR v2NBAR v2NBAR v2NBAR v2
WAN Optimization-ISR-WAASISR-WAAS; vWAAS on UCS E-SeriesISR-WAAS; vWAAS on UCS E-SeriesISR-WAASISR-WAAS; vWAAS on UCS E-SeriesISR-WAAS; vWAAS on UCS E-Series
Akamai Connect-YesYesYesYesYesYes
Cisco Application Centric InfrastructureApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise Module
Cisco Application Centric InfrastructureApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise Module

† With CAT6 LTE Advanced theoretical DL speed of 300 Mbps, with 2 NIM slots ISR4221 and ISR4321, customer may need the performance license to maximize CAT6 LTE Advanced theoretical full potential capability with 2 NIM CAT6 LTE Advanced slots depending on specific carrier SP provisioning capability & capacity.