4.8 4
4 Review(s)
Model: C3945E-VSEC-CUBEK9 Cisco 3945E Secure Voice & Unified Border Element
Detail: C3945E VSEC CUBE Bundle, PVDM3-64, UC SEC Lic, FL-CUBEE-25
List Price: US$20,795.00
Price: $10,748.00
You save: US$10,047.00 (48% OFF)
Condition: Brand New Sealed
Availability: In stock
Express Shipping to Ashburn, VA, United States
2-6 Days, via DHL, FedEx, EMS, etc. ?
If you finish the payment today,
your order will arrive within the
estimated delivery time.
US$ 10,748.00 In stock Brand New Sealed

C3945E-VSEC-CUBEK9 SMARTnet Service Tool

Order Cisco SMARTnet Warranty? Fast Quote Now

Ask Our Experts

Live Chat | Email

  • +1-626-239-8066 (USA)
  • +852-3174-6166 (HK)
  • +852-3050-1066 (Fax)
Get Quotes up to
2x Faster
Project Inquiry

Overview (C3945E-VSEC-CUBEK9)

C3945E-VSEC-CUBEK9 is the Cisco 3945E router with Voice Sec and CUBE Bundle, including PVDM3-64, UC and SEC License PAK, and FL-CUBEE-25.

Quick Specs

Table 1 shows the Quick Specs of the C3945E-VSEC-CUBEK9.

Product Code




Services Performance Engine module

w/SPE 250

Rack Units



4 integrated 10/100/1000 Ethernet ports with 2 SFP ports

Expansion Slot(s)

4 service module slots

3 Enhanced High-Speed WAN Interface Card slots

3 onboard digital signal processor (DSP) slots


1 GB (installed) / 2 GB (max)

Flash Memory

256 MB (installed) / 8 GB (max)


18.7 x 17.2 x 5.7 in

Product Details

Figure 1 shows the front panel of the Cisco 3945E router. C3945E-VSEC-CUBEK9 is similar with it.

cisco3945e front panel


On/Off switch

Power connector

LEDs area

Figure 2 shows the back panel of the Cisco 3945E router with slots and ports. C3945E-VSEC-CUBEK9 is similar with it.

cisco3945e back panel


EHWIC 0,1, and 2 (0, far right)

SFP 1 and SFP 2 (1, Top)

USB serial port

USB 0 and USB 1 (1, Left)

AUX port


RJ-45 serial console port

Service module slots

10/100/1000 Ethernet ports (GE 0/3, Top; GE 0/2, Bottom)

Compact flash 0 and 1 (0, right)

10/100/1000 Ethernet ports (GE 0/1, Top; GE 0/0, Bottom)


Table 2. Voice Security Bundle Features Table

Authentication and
Encryption Features

• Media encryption of voice RTP streams using SRTP

• Exchange of RTP Control Protocol (RTCP) information using secure RTCP

• SRTP to RTP fallback for calls between secure and insecure endpoints

• Secure calls supported in Cisco Unified Survivable Remote Site Telephony (SRST) mode during WAN failover

• Compressed RTP (CRTP) supported with media encrypted calls using SRTP

Authentication and
Encryption Algorithm

• Supports AES-128 encryption algorithm

• Supports the HMAC secure hash authentication algorithm (SHA 1)

Signaling Authentication and Encryption Features

• Gateway to Cisco Unified Communications Manager signaling and encryption uses IPSec for Media Gateway Control Protocol (MGCP), H.323 and SIP gateways

• IP phone to Cisco Unified Survivable Remote Site Telephony router signaling and encryption uses TLS 
 (Transport Layer Security)

Protocol Support

• MGCP 0.1 (supports MGCP gateways with Cisco Unified Communications Manager)

• H.323 (supported on H.323 gateways and CUBE; Cisco Unified Communications Manager interoperability is optional)

• Session Initiation Protocol (SIP)

• SCCP (Cisco Unified IP Phone) in SRST mode

Module Support

• Any module that has PVDM2, PVDM3 and/or built-in DSP

Codec Support

• G.711, G.729A, and G.729

Table 3 shows the Cisco Unified Border Element Features (CUBE Versions Include 9.5.1 or Later).


Support Details


●  H.323 and SIP

Protocol and signal interworking

●  H.323 to H.323 (including Cisco Unified Communications Manager)

●  H.323 to SIP (including Cisco Unified Communications Manager)

●  SIP to SIP (including Cisco Unified Communications Manager)

●  SIP to SIP (including Cisco TelePresence calls)

Media support

●  RTP, RTCP, and Binary Floor Control Protocol (BFCP)

●  Sub-RTCP for media statistics

Media interworking

●  SIP delayed-offer to SIP early-offer interworking for audio or video calls

●  H.323 Slow Start to H.323 Fast Start for audio calls

Media modes

●  Media flow-through

●  Media flow-around

Signaling transport mode

●  TCP

●  User Datagram Protocol (UDP)

●  TCP-to-UDP interworking

Fax support

●  T.38 fax relay

●  Fax pass-through

●  Fax over G711

Modem support

●  Modem pass-through

●  Modem over G711

Dual-tone multifrequency (DTMF)

●  H.245 alphanumeric

●  H.245 signal

●  RFC 2833

●  SIP notify

●  Key Press Markup Language (KPML)

●  Interworking capabilities include:

◦   H.323 to SIP

◦   RFC 2833 to G.711 in-band DTMF *

◦   Various SIP-to-H.323 DTMF interworking options

◦   RFC 2833 to KPML

Supplementary services

●  Call hold, call transfer, and call forwarding for H.323 networks using H.450 and transparent passing of Empty Capability Set (ECS)

●  SIP-to-SIP supplementary services (holds and transfers) support using REFER

●  SIP-to-SIP supplementary services (holds and transfers) support using REINVITE

●  H.323-to-SIP supplementary services for Cisco Unified Communications Manager with media termination point (MTP) on the H.323 trunk


●  Configurable SIP profiles to manipulate SIP message content, including header fields andSession Descriptor Protocol (SDP) attributes

●  P-Asserted-Identity (PAI), P-Preferred-Identity (PPI), and Remote-Part-ID (RPID) internetworking**

●  Unsupported Multipurpose Internet Mail Extensions (MIME)-type attachment pass-through**

●  Unsupported SIP header pass-through**

●  Dial-peer bind (allows Cisco Unified Border Element to connect to multiple different service providers)

●  Incoming dial-peer match based on remote IP address

●  Assisted RTCP for Microsoft Lync Interoperability

Call routing and dialing options

●  E164-based dialing

●  Uniform Resource Identifier (URI)-based dialing

●  Routing based on nonsequential lists (either E164 or URI or both)

●  Dial Peer Groups (Trunk Groups) (outbound routing determined by inbound dial pattern)

●  Server Groups to define order of selection of alternative or backup routing paths for outbound routing

Cisco Call Admission Control (CAC)

●  Maximum number of calls per trunk (maximum number of calls)

●  CAC based on IP circuits

●  CAC based on total calls, CPU use, or memory use threshold

●  CAC based on bandwidth availability and call-spike detection

●  Resource Reservation Protocol (RSVP)

OPTIONS SIP message support

●  Support for response to OPTIONS-PING messages with OPTION- PING groups based on session target

●  Support for generation of in-dialog OPTIONS-PING messages

●  Support for generation of out-of-dialog OPTIONS-PING messages to control dial-peer status**

Media recording

●  Media forking features for both voice and video to integrate with Cisco TelePresence Media Recording Servers

●  Active (SIP-based) and passive (application programming interface [API]-based) mechanisms for invoking media forking

IP Routing feature

●  Support for Cisco IOS Software-based routing features, including Border Gateway Protocol (BGP), Enhanced IGRP (EIGRP), and Multiprotocol Label Switching (MPLS)

●  Support for Cisco IOS Software-based policy routing features

●  Support for Cisco IOS Software-based access-control-list (ACL) features

Voice-quality statistics

●  Packet loss, jitter, and round-trip time (RTT)

●  Per-call leg call-quality statistics

●  Flexible NetFlow call-quality statistics and information

●  Sub-RTCP statistics collection


●  IP Precedence and differentiated-services-code-point (DSCP) marking

●  Per-call QoS packet marking

Network Address Translation (NAT) traversal

●  NAT traversal support for SIP phones deployed behind non-Application Line Gateway (ALG) data routers

●  Stateful NAT traversal

●  IPv4-to-IPv6 translation

Network hiding

●  IP network privacy and topology hiding

●  IP network security boundary

●  Intelligent IP address translation for call media and signaling

●  Back-to-back user agent, replacing all SIP-embedded IP addressing

●  History information-based topology hiding and call routing

Number translation

●  Number translation rules for voice-over-IP (VoIP) numbers

●  URI-based dialing translations


●  G.711 mu-law and a-law

●  G.722 and G.722.2

●  G.723ar53, G.723ar63, G.723r53, and G.723r63

●  G.726r16, G.726r24, and G.726r32

●  G.728

●  G.729, G.729A, G.729B, and G.729AB

●  Internet Low Bitrate Codec (iLBC)

●  Midcall codec renegotiation

●  Adaptive Multirate (AMR) wideband



●  Transcoding between any two different families of codecs from the following list:

◦   G.711 a-law and mu-law

◦   G.729, G.729A, G.729B, and G.729AB

◦   iLBC

◦   G.722

●  Midcall transcoder insert and drop


●  Rogue SIP invite and rogue RTP packet detection

●  Alerts for rogue packet activity

●  IP Security (IPsec)

●  Secure RTP (SRTP)

●  Transport Layer Security (TLS)

●  SRTP-to-RTP interworking

Authentication, authorization, and accounting (AAA)

●  AAA with RADIUS

Voice media applications

●  Tool Command Language (Tcl) scripts support for application customization

●  VoiceXML 2.0 script support for application customization

●  Web-based API to monitor and control signaling and media traffic


●  Web-based API compatible with Web Service Description Language (WSDL) development tools to support call monitoring and control, call-detail records (CDRs), and serviceability attribute interaction with external application; specifically designed for voice-policy applications


●  Standard CDRs for accurate billing available through:

◦   AAA records

◦   Syslog

◦   Simple Network Management Protocol (SNMP)

Lawful intercept

●  Provision of replicated packets to third-party mediation device

Remote phone proxy sessions

●  Termination of SIP-TLS and SRTP with registration pass-through to allow SIP-based endpoints, including Cisco Unified IP Phone 7900, 8900, and 9900 models and Jabber® Voice Client, to connect from remote sites through the Internet without requiring IPsec VPN to Cisco Unified Communications Manager, Cisco Business Edition, or Cisco HCS (not included with NANOCUBE license)

Line-side back-to-back user agent NANOCUBE sessions

●  Termination of Cisco Shared Port Adapter (SPA) and other third-party SIP endpoints with registration pass‑through and survivability for use with third-party hosted call-control service provider services

Inter-Cluster Lookup Service (ILS) routing

●  Support for ILS routing to complement ILS dial-plan exchange between Cisco Unified Communications Manager clusters or to simplify call-routing complexity between multiple clusters



●  H.323 and SIP

Cisco endpoints supported

●  Cisco Unified Video Advantage (UVA) and Cisco TelePresence endpoints

Rich media

●  Simultaneous support for data, audio, and video

Signaling interworking

●  SIP delayed-offer to SIP early-offer calls


●  Support for multiplex RTP calls (for Cisco TelePresence solution)

●  Simple Traversal of UDP through NAT (STUN)/Datagram TLS (DTLS) pass-through for telepresence

H.323-enhanced features

●  H.235 pass-through for secure calls

●  H.239 pass-through for picture-in-picture feature


●  DSCP markings to prioritize video streams as they traverse the network

Data support

●  T.120 data collaboration flow-around only

Camera control

●  Far-end camera control (FECC)

Video codecs

●  H.261

●  H.263

●  H.264

Network Management

Manageability and serviceability

●  Resource usage monitoring over SIP trunk

●  SNMP per-call quality traps

●  SNMP and syslog SIP trunk status messages

High Availability

High availability

●  Inbox redundancy on Cisco ASR 1006

●  Box-to-box redundancy on Cisco ASR 1000 (based on RG Infrastructure)

●  Box-to-box redundancy on Cisco ISRs (Hot Standby Router Protocol [HSRP]-based)

Note: Media is preserved for active calls at time of failover in each redundancy configuration listed.

Compare to Similar Routers

Table 4 shows the comparison between CISCO3945E/k9 and C3945E-VSEC-CUBEK9.






C3945E VSEC CUBE Bundle, PVDM3-64, UC SEC Lic, FL-CUBEE-25


w/SPE 250

w/SPE 250




EHWIC slots



SM slots



ISM slots









Rack Unit



Get More Information

Do you have any question about the C3945E-VSEC-CUBEK9 router?

Contact us now via Live Chat or cisco@router-switch.com.


Specification (C3945E-VSEC-CUBEK9)

C3945E-VSEC-CUBEK9 Specifications


Cisco Systems, Inc

Manufacturer Part Number



C3945E VSEC CUBE Bundle, PVDM3-64, UC SEC Lic, FL-CUBEE-25

Product Type


Form Factor

Desktop - modular - 3U

Connectivity Technology


Data Link Protocol

Ethernet, Fast Ethernet, Gigabit Ethernet


Cisco Unified Communications Manager Express sessions : 250 
Cisco Unified SRST sessions : 1500

Network / Transport Protocol


Routing Protocol

OSPF, IS-IS, BGP, EIGRP, DVMRP, PIM-SM, IGMPv3, GRE, PIM-SSM, static IPv4 routing, static IPv6 routing, policy-based routing (PBR)

Remote Management Protocol


Encryption Algorithm


Authentication Method



Firewall protection, NAT support, VPN support, MPLS support, Syslog support, content filtering, IPv6 support, Class-Based Weighted Fair Queuing (CBWFQ), Weighted Random Early Detection (WRED), Quality of Service (QoS), Dynamic Multipoint VPN (DMVPN)

Compliant Standards

IEEE 802.3, IEEE 802.1Q, IEEE 802.1ah, IEEE 802.1ag

DRAM Memory

1 GB (installed) / 2 GB (max)

Flash Memory

256 MB (installed) / 8 GB (max)

LED Status Lights Indicators

Link activity, power



Voice / fax module

Digital Ports Qty


Protocols & Specifications

ITU T.38

IP Telephony

VoIP Protocols

H.323, SIP

Voice Codecs

G.711, G.722, G.723, G.728, G.729, G.729a, G.729ab, G.711u, G.711a, G.726, iLBC

IP Telephony Features

Call forwarding, automatic fax/modem detection and pass-through, call hold, call transfer, DTMF generation/detection

Connectivity Slots

Router Interfaces

4 x 10Base-T/100Base-TX/1000Base-T - RJ-45 
Management : 1 x console - RJ-45 
Management : 1 x console - mini-USB Type B 
Serial : 1 x auxiliary - RJ-45 
USB : 2 x 4 pin USB Type A 
2 x SFP (mini-GBIC)

Expansion Slot(s)

3 (total) / 3 (free) x EHWIC 
3 (total) / 2 (free) x PVDM 
2 (total) / 1 (free) x CompactFlash Card

Power Supply

Power Device

Power supply - internal

Voltage Required

AC 120/230 V ( 50/60 Hz )

Dimensions / Weight / Miscellaneous

Approximate Width

18.7 in


17.2 in


5.2 in


39 lbs

Compliant Standards

CISPR 22 Class A, CISPR 24, EN55024, EN55022 Class A, EN50082-1, AS/NZS 60950-1, AS/NZ 3548 Class A, CAN/CSA-E60065-00, ICES-003 Class A, FCC CFR47 Part 15, EN300-386, UL 60950-1, IEC 60950-1, EN 60950-1, CSA C22.2 No. 60065, BSMI CNS 13438

System software

Software Included

Cisco IOS Unified Communications, Cisco IOS Security, Cisco Unified Border Element Enterprise Edition (25 sessions)

Shipping & Payment


Cargo will be delivered within 1 day after payment arrived. Tracking Number will be offered once delivery done.

Delivery OptionsEstimated Delivery Time
DHL 2-4 business days
Fedex 2-4 business days
Hong Kong EMS 5-10 business days
Hong Kong Air Parcel 10-20 business days
By Sea 10-20 business days


Above mentioned information are just for your reference only,we will keep you posted for the tracking delivery schedule.There are two delivery options available for by air and by sea:

Deliver to port:

Router-switch.com is responsible for transporting goods to port. All subsequent customs and transportation fees are the
responsibility of the buyer. Router-switch will recommend trustworthy local freight forwarders to you.Router-switch.com can facilitate the progress under buyer's permission and at buyer's expense.

Deliver to door:

Router-switch.com will quote all destination charge prior once we have confirmed order.
Router-switch.com is responsible for transporting goods to door after you have made the payment.

Payment Methods

Paypal Master Card Visa
Discover American
Wire Transfer eCheck WestUnion


100% Low Price Guarantee:

Router-switch.com provides high-quality products at low wholesale prices

100% Quality Assurance:

All items are ORIGINAL and GENUINE only.
Item conditions are "New Sealed" or "Used / Refurbished".
Used & refurbished items are fully tested with good conditions by Cisco-certified Engineers.

Free CCIE Technical Support:

Our FREE Cisco CCIE Expert Consultancy Support is over the phone, by chat, by email or by login remotely.

100% Money Back Guarantee:

You can contact our customer service team to exchange or return any product that you bought from us.

Flexible Secure Payment & Shipment:

Verified authorization: Mcafee Secure, VeriSign Secured

Return Material Authorization (RMA) Process

Standard Hardware Warranty Policy:

Original new sealed Cisco product: 1 Year
Used Cisco product: 3 Month

The Support Contacts:

If your Cisco products failed, you must contact your sales representative to verify product failure. If the problem still can't correct by remote support methods i.e. email or phone support, the RMA procedure will issue.


Customer Reviews

4.8 5
4.8 (4 reviews)
5 Stars
4 Stars
3 Stars
2 Stars
1 Stars

Share your thoughts with other customers?

Posted on 12/7/2016
Verified Buyer

C3945E-VSEC-CUBEK9 with VSEC CUBE Bundle, support 1500 IP Phone

Posted on 8/17/2016
Verified Buyer
Fast shipment

We make order on Wednesday, received on Saturdays

Posted on 6/19/2016
Verified Buyer
Smooth procurement

I just need to confirm model and quality, everything they can help me finish, nice.

Posted on 1/2/2016
Verified Buyer
Good packaging

We received C3945E-VSEC-CUBEK9 , very good packaging, sealed and safe

You may also be interested in the following product(s)

Product Tags

Register now to get updates on promotions and coupons

We’ll never share your email address with a third-party.

Router-switch.com is neither a partner of nor an affiliate of Cisco Systems. Logos remain the property of the corresponding company.
Copyright @ 2002-2017 Router-switch Ltd. | HongKong Yejian Technologies Co., Ltd | All Rights Reserved.