ISR 1117 vs 4321

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-16-2018 03:48 AM - edited 03-08-2019 03:41 PM
Hi Folks,
We seem to have a new ISR with higher throughput available (up to 350 Mbps, 250Mbps for 4P version) - the C1117 also seems to have integrated FTTC DSL similar to the 887VA/K9 so it ticks a lot of boxes.
Questions:-
1. There does not seem to be a "Security bundle" for this model. Is there? Or do I have to use
1 x C1117-4PLTEEA (for UK use)
1 x SL-1100-4P-SEC=
2. Price point seems to be WAY better than a 4321 with WAY better throughput with the same feature set (minus the expansion capability in the chassis). Am I missing something?
3. Has anyone used one in the wild yet?
I'd like a 'standard' box we can deploy that would cope with 350Mpbs Fibre and FTTC, and this looks like a good option, so be interested to hear opinions on this?
- Labels:
-
Other Switching
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-16-2018 05:18 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-17-2018 07:42 AM
500 Mbps max, CIR is 350Mbps.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-17-2018 03:37 PM - edited 07-17-2018 06:39 PM
I am very sure Cisco will never allow a dirt-cheap ISR 1K push >75 Mbps of traffic.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-17-2018 06:00 PM - edited 07-17-2018 06:06 PM
There are licenses for the 1100s to allow an additional 200Mbit of IPSec traffic:
FL-VPERF-4P-100 - IPsec Performance: Additional 100 Mbps for ISR 1100-4P and 200 Mbps for ISR 1100-8P.
I doubt very much Cisco would sell a license for additional crypto throughput if the box itself couldn't do at least the same performance in terms of non-crypto traffic.
I will have one in a few weeks to do some real world benchmarking with :-)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-24-2018 04:14 AM

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-13-2025 02:57 AM
showstopper for a fast migration from my c89xx the c11xx is
- additional licenses plus smart licensing, the features i use need APP+SEC (+HSEC)
- several crypto algs are no longer supported ("too weak") , so the IPSec Tunnels must be reconfigured on the partner's end
- reflexive ACLs are not supported, so you must migrate that to the IOS-Firewall .
