C8111-G2-MX and C8121-G2-MX Data Sheet

Overview

The Cisco C8111-G2 and C8121-G2 are enterprise security appliances running MX OS which are designed for distributed deployments requiring remote administration across small to medium branch environments. It is ideal for network administrators who demand both ease of deployment and a state-of-the-art feature set.

The Cisco C8111-G2 and C8121-G2 are designed to securely extend the power of cloud managed networking to almost any location by providing two dedicated WAN ports with one of those WAN ports able to provide PoE to power a cellular gateway. These devices offer up to 10 LAN Gigabit ethernet ports, including up to 3 built-in LAN PoE-enabled ports for access points, cameras, VoIP phones, and other PoE powered devices.

Features

Software Features

Managed via Cisco Meraki Dashboard

Automatic Firmware upgrades

WAN Link Balancing

Automatic WAN Failover

SD-WAN over Meraki AutoVPN

L3/L7 Stateful Firewall

Geo-based firewall rules

1:1 and 1:Many NAT

Configurable VLANs / DHCP support

Static Routing

Client VPN endpoint

Meraki AutoVPN and IPSec VPN endpoint

Active Directory integration

Content Filtering

Malware Protection (AMP) w/ optional Threat Grid integration

IPS/IDS protection

Custom Traffic Shaping

Historical Client Usage statistics

Netflow support

Syslog integration

Remote Packet Capture tools

IPv6 Support

802.1X wired and wireless support

Hardware Features

2 x 2.5 mGig RJ45 Ethernet ports dedicated for WAN uplinks

1 x 2.5 mGig RJ45 Ethernet port

1 x 2.5 mGig RJ45 Ethernet port with PoE+ capabilities

4 x 1 Gigabit RJ45 Ethernet LAN ports (C8111-G2-MX)

1 x 1 Gigabit RJ45 Ethernet LAN ports with UPoE (45W) capabilities

3 x 1 Gigabit RJ45 Ethernet LAN ports

10 x 1 Gigabit RJ45 Ethernet LAN ports (C8121-G2-MX)

3 x 1 Gigabit RJ45 Ethernet LAN ports with UPoE (45W) capabilities

7 x 1 Gigabit RJ45 Ethernet LAN ports

Context and Comparisons

	C8111-G2	C8121-G2
# of WAN Uplinks	2	2
Stateful Firewall Throughput	2 Gbps	2 Gbps
Maximum VPN Throughput	1200 Mbps	1200 Mbps
Advanced Security Throughput	1200 Mbps	1200 Mbps
PoE Capabilities	Yes, 2.5 x MGig RJ45 WAN Ports (802.3at) 1x GbE RJ45 LAN Ports (802.3bt, 45W)	Yes, 2.5 x MGig RJ45 WAN Ports (802.3at) 3x GbE RJ45 LAN Ports (802.3bt, 45W)
Recommended use case	Up to 200 devices	Up to 200 devices

Technical Breakdown

WAN Interfaces

C8111-G2	C8121-G2
2x Dedicated MGig RJ45	2x Dedicated MGig RJ45

LAN Interface

C8111-G2	C8121-G2
4x Dedicated GbE RJ45	10x Dedicated GbE RJ45

Throughput and Capabilities

	C8111-G2	C8121-G2
Recommended Use Case	Up to 200 devices	Up to 200 devices
Max Stateful Firewall Throughput in NAT mode	2 Gbps	2 Gbps
Max VPN Throughput	1200 Mbps	1200 Mbps

Physical

	C8111-G2	C8121-G2
Mount Type	Desktop / Wall Mount	Desktop / Wall Mount
Dimensions (h x d x w)	1.3 x 5.6 x 10.8 in / 34 x 143 x 273 mm	1.3 x 6.9 x 12.4 in / 34 x 176 x 316 mm
Weight	1.9 lbs / 0.87 kg	2.5 lbs / 1.15 kg
Power Supply	150W DC	250W DC
System Power (idle/max)	16 / 22 W	18 / 26 W
System + PoE Power load (idle/max)	16 / 97 W	18 / 176 W
Operating Temperature	32°F - 113°F 0°C - 45°C	32°F - 113°F 0°C - 45°C
Storage and Transportation Temperature	-4°F - 158°F -20°C - 70° C	-4°F - 158°F -20°C - 70° C
Humidity	5% to 95%	5% to 95%

Ordering Guide

Model SKU	Description
C8111-G2-MX	Cisco C8111-G2 Cloud Managed Secure Router
C8121-G2-MX	Cisco C8121-G2 Cloud Managed Secure Router

Accessories

Accessory	Description
MA-PWR-150WAC-ADP	C8111-G2 Replacement Power Adapter (C8111-G2) (150 Watts AC)
MA-PWR-250WAC-ADP	C8121-G2 Replacement Power Adapter (C8121-G2) (250 Watts AC)
MA-PWR-CORD-US	1x AC Power Cable, US plug
MA-PWR-CORD-EU	1x AC Power Cable, EU plug
MA-PWR-CORD-UK	1x AC Power Cable, UK plug
MA-PWR-CORD-AU	1x AC Power Cable, AU plug
MA-PWR-CORD-JP	1x AC Power Cable, JP plug
MA-WMNTBR-PWR-ADP	1x Power adapter holder for external power adapter

Configure your Dashboard Network

The following is a brief overview only of the steps required to add an C8111-G2 or C8121-G2 to your network. For detailed instructions about creating, configuring and managing Meraki networks, refer to our Managing Dashboard Networks document. Additional resources can also be found via: documentation.meraki.com.

Login to http://dashboard.meraki.com. If this is your ﬁrst time, create a new account.

Find the network to which you plan to add your C8111-G2 or C8121-G2 or create a new network.

Add your C8111-G2 or C8121-G2 to your network. You will need your Meraki order number (found on your invoice) or the serial number of each C8111-G2 or C8121-G2 which looks like Qxxx-xxxx-xxxx, and is found on the bottom of the unit. If a license key was purchased at the same time then you should have received it via email.

Go to the map / ﬂoor plan view and place each C8111-G2, or C8121-G2 on the map by clicking and dragging it to the location where you plan to mount it.

Troubleshooting

Common Event Log Messages

Common event logs exist for wired events. As such, no specific C8111-G2 or C8121-G2 event log entries are required at this time.

For more general information about navigating the Event Log and the types of Events that could be expected please check out our Event Log documentation.

Warranty

Cisco Secure Router warranty coverage periods are as follows:

Product

Warranty Period

Warranty Information

C8111-G2 and C8121-G2

2 Years

C8111-G2 and C8121-G2 Accessories

1 Year

The following are considered accessories:

SFP Modules, all mounting kits and stands, interface modules, additional power cords

Additional warranty information can be found on the Return Policy and Requesting a RMA page of the Cisco website.

If your Cisco Meraki device fails and the problem cannot be resolved by troubleshooting, contact support to address the issue. Once support determines that the device is in a failed state, they can process an RMA and send out a replacement device free of charge. In most circumstances, the RMA will include a pre-paid shipping label so the faulty equipment can be returned.

In order to initiate a hardware replacement for non-functioning hardware that is under warranty, you must have access to the original packaging the hardware was shipped in. The original hardware packaging includes device serial number and order information, and may be required for return shipping.

Cisco Secure Routers C8111-G2 and C8121-G2 devices have been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation.