Cisco C2911-VSEC/K9
Cisco 2911 UC Sec. Bundle, PVDM3-16
Product Highlights
What's Included
256MB Flash (1x MEM-CF-256MB)
(1) PWR-2911-AC
(1) AC Power Cord
(1) Rackmount Kit (ACS-2900-RM-19)
(1) PVDM3-16
Branch offices need a single platform that delivers routing, voice, and security without the cost and complexity of managing separate appliances. The Cisco C2911-VSEC/K9 is a Cisco 2911 Integrated Services Router (ISR G2) shipped as a Voice Security Bundle, combining unified communications and advanced threat protection in one chassis.
This bundle arrives with the PVDM3-16 digital signal processor module pre-installed, along with Cisco UC and SEC license packs, enabling IP telephony features such as Cisco Unified SRST and CCME (up to 50 sessions each via licensing) as well as Cisco IOS Zone-Based Firewall, IPS, content filtering, and hardware-accelerated VPN encryption. Three integrated Gigabit Ethernet ports provide high-speed WAN and LAN connectivity, while four EHWIC slots, a service module slot, an ISM slot, and two onboard DSP slots offer extensive room for future expansion with WAN interface cards, EtherSwitch modules, or additional DSP resources.
Ideal for medium-sized branch offices that require converged voice and data services over a secure WAN connection, the C2911-VSEC/K9 reduces equipment sprawl, simplifies management through a single Cisco IOS Universal image, and protects your investment with a modular architecture that scales as your network grows.
Features & Benefits
Integrated Voice & UC Services
The included PVDM3-16 module and UC License PAK enable on-box voice and video processing. Deploy Cisco Unified SRST for survivable telephony or CCME for local call control — up to 50 sessions each through licensing — without purchasing separate voice gateways.
Comprehensive Security Suite
The SEC License PAK activates Cisco IOS Zone-Based Firewall, Intrusion Prevention System (IPS), and content filtering directly on the router. Combined with embedded hardware-accelerated VPN encryption, the C2911-VSEC/K9 secures both data and voice traffic at the branch edge.
Modular, Scalable Architecture
Four EHWIC slots, one service module slot, one Internal Services Module (ISM) slot, and two onboard DSP (PVDM) slots provide extensive expansion options. Add T1/E1 WAN cards, EtherSwitch modules for Layer 2/3 switching, or additional DSPs as your branch requirements evolve.
High-Speed Gigabit Connectivity
Three integrated 10/100/1000 Ethernet ports deliver Gigabit-speed WAN and LAN connectivity. The platform also supports a wide range of wired and wireless connectivity options including T1/E1, xDSL, and 3G/4G via expansion modules.
Simplified Software Licensing
A single Cisco IOS Universal image ships on every ISR G2 platform. Advanced feature sets are unlocked by activating license keys — no separate image downloads required. This simplifies upgrades and reduces operational overhead for IT teams managing multiple branches.
Deployment Scenarios
Medium-Sized Branch Office — Converged Voice & Data
Deploy the C2911-VSEC/K9 as the primary branch router to consolidate routing, IP telephony (SRST/CCME), and WAN security into a single managed device. The PVDM3-16 handles local voice/video DSP processing while the SEC license secures all traffic with firewall, IPS, and VPN.
Secure Remote Site with VPN Connectivity
Use the hardware-accelerated crypto engine to establish IPsec or DMVPN tunnels back to headquarters. The integrated firewall and IPS inspect traffic at the branch edge, reducing the need for a standalone security appliance at each remote location.
Retail or Multi-Site WAN Aggregation
Leverage the modular EHWIC and service module slots to tailor WAN connectivity (T1/E1, xDSL, 4G) per site. The Cisco IOS Universal image and license-based feature activation let you standardize on a single hardware platform across dozens of locations while enabling only the services each site requires.
General
Interfaces & Expansion
Memory
Voice & DSP
Security
Physical
Power
Environmental
Compliance & Standards
Compatibility Notes
Platform: Cisco 2911 (ISR G2, C2900 Series)
Included DSP Module: PVDM3-16 — occupies one of two onboard DSP slots; a second PVDM3 module can be added for additional voice/video capacity.
Memory: Ships with 512 MB DRAM (MEM-2900-512MB) and 256 MB Compact Flash (MEM-CF-256MB). Expandable to 2 GB DRAM and up to 4 GB per CF slot (two slots available).
Power Supply: Ships with PWR-2911-AC. Optional PoE and DC power supplies available separately. External RPS supported via Cisco RPS 2300.
Expansion Compatibility: Supports EHWIC, SM, ISM, and PVDM3-series modules. Enhanced EtherSwitch Service Modules (e.g., SM-ES2-16-P, SM-ES2-24-P) are also supported for integrated Layer 2/3 switching with PoE.
Downloads & Resources
Frequently Asked Questions
| Part Number | Product | Key Difference |
|---|---|---|
| CISCO2911/K9 | Cisco 2911 Base Router | Base IP router without PVDM3, UC license, or SEC license — choose this if you only need data routing. |
| C2911-VSEC-CUBE/K9 | Cisco 2911 VSEC CUBE Bundle | Adds CUBE (Cisco Unified Border Element) license for SIP trunking on top of the VSEC bundle. |
| C2921-VSEC/K9 | Cisco 2921 Voice Security Bundle | Higher-capacity 2921 chassis with 3 PVDM slots and support for up to 100 SRST/CCME sessions — for larger branches. |
| C2911-CME-SRST/K9 | Cisco 2911 CME-SRST Bundle | Voice-focused bundle with CME/SRST licenses but without the SEC security license pack. |