Guest

4221

4321

4331

4351

4431

4451

Expand all

Features

Form factor1 RU Desktop1 RU Desktop1 RU2 RU1 RU2 RU
Integrated WAN PortsGE / SFPGE / SFPGE / SFP2 PoE GE / SFP2 PoE GE / SFP2 PoE GE / SFP
GEGEGEGE / SFP2 GE / SFP2 GE / SFP
SFP
Performance35Mbps50 Mbps100 Mbps200 Mbps500 Mbps1 Gbps
Upgradable to 75 MbpsUpgradable to 100 MbpsUpgradable to 300 MbpsUpgradable to 400 MbpsUpgradable to 1 GbpsUpgradable to 2 Gbps
Management port 1 GE (Integrated out of Band)2 GE (Integrated out of Band)3 GE (Integrated out of Band)4 GE (Integrated out of Band)5 GE (Integrated out of Band)
Network Interface Modules (NIM)222333
Enhanced Services Modules (SM-X)N/AN/Asingle-wide2 single- or 1 double-wideN/A2 single- or 1 double-wide
Integrated Services Card (ISC) slotsN/A1 (PVDM 4)2 (PVDM 4)3 (PVDM 4)4 (PVDM 4)5 (PVDM 4)
USB Ports (type A)111222
Default/max Flash8 GB4 GB / 8 GB4 GB / 16 GB4 GB / 16 GB8 GB / 32 GB8 GB / 32 GB
Default/max DRAM4 GB4 GB / 8 GB4 GB / 16 GB4 GB / 16 GB4 GB / 16 GB4 GB / 16 GB
Power supply typeExternal: ACExternal: AC, PoEExternal: AC, PoEExternal: AC, PoE or DCExternal: AC, PoE or DCExternal: AC, PoE or DC
Redundant power supplyNoNoNoNoYesYes
Internal RPSInternal RPS
Module online insertion and removel (OIR)NoYesYesYesYesYes
Server virtualization platform (UCS E-Series) and Network Compute Engine (NCE)N/A 2-core single-wide, 2-core NCE2-core single-wide, 2-core NCE 2-core single-wide, 2-core NCE
4-core NCE4-core single-wide, 4-core NCE4-core single-wide, 4-core NCE4-core NCE4-core single-wide, 4-core NCE
4-core double-wide 4-core double-wide
6-core double-wide 6-core double-wide
8-core double-wide 8-core double-wide

Advanced Security

Zone-based firewall and NAT servicesVRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)
Hardware VPN acceleration(DES, 3DES, AES)YesYesYesYesYesYes
IPSEC VPN servicesFlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)
Group Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPN
SSL VPNNoNoNoNoNoNo
Intrusion preventionYes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)
Anomaly Detection and Machine LearningCisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)
Network foundation protectionACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2
Cisco Umbrella Branch SupportYesYesYesYesYesYes
Cisco Cloud Web SecurityYesYesYesYesYesYes
Identity-based networkingNoNoNoNoNoNo
Cisco TrustSecSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPN
SGT over IPSECSGT over IPSECSGT over IPSECSGT over IPSECSGT over IPSECSGT over IPSEC
SGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPN
SGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFW
Port/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mapping
SGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlow

Unified Communications

Local conferencingN/AYesYesYesYesYes
Digital signal processor supportN/APVDM4PVDM4PVDM4PVDM4PVDM4
Cisco Unified Survivable Remote SiteN/AUp to 50Up to 100Up to 750Up to 1200Up to 2000
Telephony supportN/AUp to 50Up to 100Up to 750Up to 1200Up to 2000
Cisco Unified CommunicationsN/AUp to 50Up to 100Up to 250Up to 350Up to 450
Manager Express supportN/AUp to 50Up to 100Up to 250Up to 350Up to 450
Cisco Unity ExpressN/AUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSE
(NM, SM, or ISM)N/AUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSE
Cisco Unified Border Element (CUBE)N/A100400100030006000
(SIP/H.323 sessions)N/A100400100030006000
nano Cisco Unified Border Element (nanoCUBE)N/AN/AN/AN/AN/AN/A
(sessions)N/AN/AN/AN/AN/AN/A
Digital voice and video (T1/E1 channels)N/AUp to 240Up to 360Up to 720Up to 720Up to 1200
Analog/BRI voiceN/AUp to 8 ports (FXS, FXO, E/M, BRi)Up to 12 ports (FXS, FXO, E/M, BRi)Up to 20 ports (FXS, FXO, E/M, BRi)Up to 12 ports (FXS, FXO, E/M, BRi)Up to 20 ports (FXS, FXO, E/M, BRi)

Routing and Multicast

IPv4 routing protocolsRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfR
Multicast routing protocolsPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLD
IPv6 routing protocolsEIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,
BGP and PBRBGP and PBRBGP and PBRBGP and PBRBGP and PBRBGP and PBR

Wireless LAN

Integrated 802.11 b/g/n access pointN/AN/AN/AN/AN/AN/A
Integrated 802.11 a/b/g/n access pointN/AN/AN/AN/AN/AN/A
Unified and autonomous modeN/AN/AN/AN/AN/AN/A
RP-TNC connectors for field-replaceableN/AN/AN/AN/AN/AN/A
optional high-gain antennasN/AN/AN/AN/AN/AN/A
Diversity (dual antennas)N/AN/AN/AN/AN/AN/A
Wireless LAN controller moduleN/AAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-Series

Wireless WAN

3G /4G LTE cellularYesYesYesYesYesYes
Cat 6 LTE AdvancedYes†Yes†Yes†Yes†Yes†Yes†
GPS SupportYesYesYesYesYesYes
Indoor AntennaYes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)
Outdoor antennasN/AN/AN/AN/AN/AN/A

Integrated Switching

Maximum switched Ethernet ports2 x 81640722472
Maximum switched Ethernet LAN ports with PoE01640722472
PoE support (wattage)N/A120 W250 W500 W250 W500 W
without PoE boost (with optional power supply redundancy)
PoE support (wattage)N/A260 W500 W950 W530 W990 W
with PoE boost (no power supply redundancy)
EtherSwitch Service Module type (width)N/AN/Asingle2 single or 1 doubleN/A2 single or 1 double

Application Services

Intelligent Path ControlPfRPfRPfRPfRPfRPfR
Network Contention ControlQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoS
Application VisibilityNBAR v2NBAR v2NBAR v2NBAR v2NBAR v2NBAR v2
WAN OptimizationN/AISR-WAASISR-WAAS,ISR-WAAS,ISR-WAASISR-WAAS,
vWAAS on UCS E-SeriesvWAAS on UCS E-Series vWAAS on UCS E-Series
Akamai ConnectN/AYesYesYesYesYes
Cisco Application Centric InfrastructureApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise Module

† With CAT6 LTE Advanced theoretical DL speed of 300 Mbps, with 2 NIM slots ISR4221 and ISR4321, customer may need the performance license to maximize CAT6 LTE Advanced theoretical full potential capability with 2 NIM CAT6 LTE Advanced slots depending on specific carrier SP provisioning capability & capacity.