The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
The Cisco® 900J Series Integrated Services Routers (ISRs) combine Internet access, comprehensive security, and wireless services in a single high-performance device that is easy to deploy and manage. They are well suited for deployment as Customer Premises Equipment (CPE) in enterprise small branch offices and in service provider managed-service environments.
The Cisco 900J Series ISRs deliver integrated security and threat defense, protecting networks from both known and new Internet vulnerabilities and attacks. These powerful, fixed-configuration routers provide secure broadband and Metro Ethernet connectivity. Service providers offering managed Ethernet WAN services can deploy them in customer locations as CPE. You get centralized and remote management capabilities through web-based tools and Cisco IOS® Software for full visibility and control of network configurations at the remote site.
The 900J Series routers simplify the deployment of Ethernet WAN services, with end-to-end Operations, Administration, and Maintenance (OA&M), Service-Level Agreement (SLA) monitoring and verification, and configuration management.
The 900J Series ISRs come with a 4-port managed switch, providing LAN ports to connect multiple devices. Figure 1 shows the C921J-4P model.
C921J-4P ISR Top and Back Views
Table 1 describes some of the business needs enterprises have in branch offices and other edge networking locations and how the Cisco 900J Series ISRs fulfill those requirements.
Table 1. How the Cisco 900J Series ISRs Address Edge Networking Challenges
Business need |
Features and descriptions |
High availability and business continuity |
● Redundant WAN connections for failover protection and load balancing
● Dynamic failover protocols such as Virtual Router Redundancy Protocol (VRRP; RFC 2338), Hot Standby Router Protocol (HSRP), and Multigroup HSRP (MHSRP)
|
Consistent, high application performance levels |
● Can run multiple services simultaneously with no performance degradation
● High-performance Intel
® x86 2.2-GHz CPU
|
Risk mitigation with multilevel security |
● Network perimeter security with integrated application inspection firewall
● Data privacy through high-speed IP Security (IPsec) Triple Data Encryption Standard (3DES) and Advanced Encryption Standard (AES) encryption
● Enforced security policy with intrusion prevention
● Security hardware acceleration
● FlexVPN
● Next-generation encryption for secure network communications systems, reliable for the next decade
|
Feature consolidation for real estate, Capital Expenditures (CapEx), and management savings |
● Supports LAN connections
|
Remote configuration and management to keep local IT staff lean |
● Supports separate console port
|
Platform Support
Table 2 describes the interface and integrated capabilities supported by each of the Cisco 900J Series ISR models.
Table 2. Platform Support
Model |
WAN interfaces |
||
C921J-4P |
2 ports Gigabit Ethernet (GE) |
4-port 10/100/1000-Mbps managed switch |
Yes |
Table 3 shows Cisco IOS Software features and general system specifications for the 900J Series ISRs.
Table 3. Cisco IOS Software Features and System Specifications
Feature |
Specification |
|
Cisco IOS Software |
||
IP and IP services |
● Generic Routing Encapsulation (GRE) and multipoint GRE (MGRE)
● Standard 802.1d Spanning Tree Protocol
● L2TP Version 3 (L2TPv3)
● Dynamic Host Configuration Protocol (DHCP) server, relay, and client
● DNS Proxy
● Access Control Lists (ACLs)
● IPv4 and IPv6 multicast
● Open Shortest Path First (OSPF)
● Border Gateway Protocol (BGP)
● Performance Routing (PfR)
● Enhanced Interior Gateway Routing Protocol (EIGRP)
● Virtual Route Forwarding (VRF) Lite
● Next Hop Resolution Protocol (NHRP)
● Bidirectional Forwarding Detection (BFD)
● Web Cache Communication Protocol (WCCP)
|
|
Switch features |
● 25 802.1Q VLANs
● Four-port 802.3af
● Storm control
● Secure MAC address
● Internet Group Management Protocol Version 3 (IGMPv3) snooping
● 802.1X
|
|
Security features |
● Secure Sockets Layer (SSL) VPN for secure remote access
● Public-Key-Infrastructure (PKI) support
● Cisco Easy VPN client and server
● Dynamic Multipoint VPN (DMVPN)
● Tunnel-less Group Encrypted Transport VPN (GET VPN)
● VRF-aware IPsec
● IPsec over IPv6
● Adaptive control technology
● Session Initiation Protocol (SIP) application-layer gateway
● Cisco IOS Firewall:
◦ Zone-based policy firewall
◦ Stateful inspection transparent firewall
● Secure HTTP (HTTPS), FTP, and Telnet Authentication Proxy
● Firewall stateful failover
● VRF-aware firewall
● Cisco IOS Software blocked and allowed lists
● Control plane policing
● Flexible packet matching
● Network foundation protection
|
|
Quality of Service (QoS) |
● Weighted Fair Queuing (WFQ)
● Class-Based Traffic Shaping (CBTS)
● Policy-Based Routing (PBR)
● Class-Based QoS MIB
● Class of service (CoS)-to-differentiated services code point (DSCP) mapping
● Class-Based Weighted Random Early Detection (CBWRED)
● Network-Based Application Recognition (NBAR)
● Link fragmentation and interleaving (LFI)
● Resource Reservation Protocol (RSVP)
● Real-Time Transport Protocol (RTP) header compression (cRTP)
● Differentiated Services (DiffServ)
● QoS preclassify and prefragmentation
● Hierarchical QoS (HQoS)
|
|
Management |
● Cisco Configuration Express
● Cisco AutoInstall
● Cisco IP Service-Level Agreement (IP SLA)
● Cisco IOS Embedded Event Manager (EEM)
● Telnet, Simple Network Management Protocol Version 3 (SNMPv3), Secure Shell (SSH) Protocol, command-line interface (CLI), and HTTP management
● RADIUS and TACACS+
● Cisco Next Generation Plug-and-Play (NG PnP) Protocol
|
|
High availability |
● Virtual Router Redundancy Protocol (VRRP) (RFC 2338)
|
|
Metro Ethernet |
● Ethernet OA&M
● Ethernet Local Management Interface (E-LMI)
● IP SLA for Ethernet
|
|
IPv6 |
● IPv6 addressing architecture
● IPv6 name resolution
● IPv6 statistics
● IPv6 translation: Transport packets between IPv6-only and IPv4-only endpoints (NAT-Protocol Translation)
● Internet Control Message Protocol Version 6 (ICMPv6)
● IPv6 DHCP
● OSPFv3
● BGP4+
● IPv6 path maximum transmission unit (PMTU)
● IPv6 neighbor discovery
● IPv6 stateless address autoconfiguration (SLAAC)
● IPv6 multicast routing
|
|
Application visibility and control |
● NBAR2
● Flexible NetFlow (FNF)
● Performance Agent
|
|
Number of recommended users |
● 50
|
|
Default and maximum DRAM |
● Default 1 GB
|
|
Default and maximum flash memory |
● 2 GB on all Cisco 900J Series ISR models; not upgradable
|
|
WAN |
● Refer to Table 2 for details
|
|
LAN switch |
● Refer to Table 2 for details
|
|
Separate console ports |
● RJ-45
|
|
USB 2.0 |
● One USB 2.0 Type A port available
Note: USB 2.0 ports cannot be used for connecting external devices other than those specified at: https://www.cisco.com/en/US/prod/collateral/modules/ps6247/product_data_sheet0900aecd80232473.html. |
|
Physical dimensions and weight |
Weight: 2.04 lb (0.924 kg) maximum Product dimensions:
● H x W x D = 1.10 x 8.50 x 6.50 in. (2.80 x 21.59 x 16.51 cm) (includes rubber feet)
|
|
External power supply |
Power specifications:
● External power supply
● AC input voltage: Universal 100 to 240 VAC
● Frequency: 50 to 60 Hz
● Maximum output power: 18W
● Output voltages: 12 VDC
|
|
Approvals and compliance |
Safety:
● IEC 60950-1, 2nd Edition with Amendment 1 and Amendment 2 with Japan national deviations
Emissions:
● 47 CFR Part 15: 2006
◦ CISPR22: 2005
◦ EN300386: V1.3.3: 2005
◦ EN55022: 2006
◦ EN61000-3-2: 2000 [+ amd 1 & 2]
◦ EN61000-3-3: 1995 [+ amd 1: 2001]
◦ ICES-003 Issue 4: 2004
◦ KN 22: 2005
● VCCI: V-3/2006.04
Immunity:
● CISPR24: 1997 [+ amd 1 & 2]
◦ EN300386: V1.3.3: 2005
◦ EN50082-1: 1992
◦ EN50082-1: 1997
◦ EN55024: 1998 [+ amd 1 & 2]
◦ EN61000-6-1: 2001
|
|
Environmental operating range |
● Nonoperating temperature: -40° to 158°F (-40° to 70°C)
● Nonoperating humidity: 5% to 95% relative humidity (noncondensing)
● Nonoperating altitude: 0 to 15,000 ft (0 to 4570 m)
● Operating temperature: 0° to 45°C (de-rate 1°C per 1000-ft increase in altitude)
● Operating humidity: 5% to 95% relative humidity (noncondensing)
● Operating altitude: 0 to 10,000 ft (0 to 3000 m)
|
|
Cisco IOS Software Licensing and Packaging
Cisco IOS Universal Image
A single Cisco IOS Universal image encompassing all functions is delivered with the platform. Advanced features can be enabled simply by activating a software license on the Universal image. Technology packages and feature licenses, enabled through right-to-use licenses, simplify software delivery and decrease the operational costs of deploying new features.
Three major technology licenses are available on the Cisco 900J Series; these licenses can be activated through the Cisco software activation process identified at https://www.cisco.com/go/sa. The following licenses are available:
● IP Base: This technology package is the default.
● Application Experience (APP): This license includes data and application performance features.
● Security (SEC) or Security with No Payload Encryption (SEC-NPE): This license includes features for securing network infrastructure.
Table 4 lists the part numbers and features for each of the licenses. Table 5 lists the part numbers for the software images.
Table 4. Licenses
Part number |
Bundle |
Features |
SL-900-IPB |
IP Base (default) |
Routing protocols, ACL, NAT, QoS, BFD, VRF Lite, IP SLA Responder |
SL-900-APP(=) |
Application Experience (APP) |
IP Base + advanced networking protocols: L2TPv3, MPLS Application Experience: PfRv3, NBAR2, AVC, IP SLA Initiator Hybrid Cloud Connectivity: LISP, Virtual Private LAN Services (VPLS), Ethernet over MPLS |
SL-900-SEC(=) SL-900-SECNPE(=) |
Security (SEC) |
IP Base + Advanced Security: Zone-based firewall, IPsec VPN, DMVPN, FlexVPN, GET VPN, SSL VPN Provides up to 250-Mbps IPsec performance(SKU based) |
Table 5. Software Images
Part number |
Description |
Router software images |
|
SISR900UK9-1583MB(=) SISR900NPEUK9-1583MB(=) |
Cisco 900 ISR Universal image and non-payload encryption image |
Table 6 lists the part numbers and Cisco IOS Software image details for each of the 900J Series ISR models.
To place an order, visit the Cisco Ordering Home Page. To download software, visit the Cisco Software Center.
Table 6. Product Part Numbers and Software Images
Part number |
|
Integrated services routers |
|
C921J-4P |
Cisco 921J Gigabit Ethernet security router with external power supply for Japan only |
* The C921J-4P supported only on Cisco IOS Software Release 15.8(3)Mb and later |
|
Router software images |
|
Image |
For additional information and details about Cisco IOS Software licensing and packaging on the 900J Series, please visit:
For the Cisco 900 ISR Hardware and Software Installation Guide, Go to:
Services from Cisco and our certified partners can help you reduce the cost and complexity of branch-office deployments. We have the depth and breadth of experience across technologies to architect a blueprint for a branch-office solution to meet your company's needs. Planning and design services align technology with business goals and can increase the accuracy, speed, and efficiency of deployment. Technical services help maintain operational health, strengthen software application functions, solve performance problems, and lower expenses. Optimization services are designed to continually improve performance and help your team succeed with new technologies. For more information, visit https://www.cisco.com/go/services.
Cisco Smart Net Total Care® technical support for the 900J Series ISRs is available on a one-time or annual contract basis. Support options range from help-desk assistance to proactive, onsite consultation. All support contracts include:
● Major Cisco IOS Software updates in protocol, security, bandwidth, and feature improvements
● Full access rights to Cisco.com technical libraries for technical assistance, electronic commerce, and product information
● 24-hour access to the industry’s largest dedicated technical support staff
For more information about the Cisco 900J Series ISRs, visit https://www.cisco.com/go/isr900 or contact your local Cisco account representative.
Flexible payment solutions to help you achieve your objectives
Cisco Capital makes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more.