4.7 14
14 Review(s)
| 10 answered questions
Model: Cisco C891F-K9 router SFP
Detail: CISCO C891F-K9 small business branch router, 1 SFP, 4 POE, security, wireless controller, AVC, WAN optimization, multimedia collaboration
List Price: US$1,395.00
Price: $513.00
You save: US$882.00 (63% OFF)
Condition: Brand New Sealed
Availability: In stock
Express Shipping to Worldwide
2-6 Days, via DHL, FedEx, EMS, etc. ?
If you finish the payment today,
your order will arrive within the
estimated delivery time.
US$ 513.00 In stock Brand New Sealed

C891F-K9 SMARTnet Service Tool

Order Cisco SMARTnet Warranty? Fast Quote Now

Ask Our Experts

Live Chat | Email

  • +1-626-239-8066 (USA)
  • +852-3174-6166 (HK)
  • +852-3050-1066 (Fax)
Get Quotes up to
2x Faster
Project Inquiry

Overview (C891F-K9)

Cisco C891F-K9 is ideal for managed services small branch or virtual office deployments and comes with fixed configurations. It offers a platform that is cost optimized to fit your business needs starting with 2 WAN connectivity options - Gigabit Ethernet and Fiber. This router is loaded with the practical stuff needed for the branch office.

Quick Specs

Table 1 shows the Quick Specs.

Product Code


Rack Units


WAN Ports

1-port GE or 1‑port SFP

1-port FE

LAN Ports

8-port 10-/100-/1000-Mbps managed switch (4‑ports PoE capable with 125W power supply adapter)

802.11a/g/n Option


Cisco CleanAir technology

Integrated USB 2.0/AUX/Console




Flash Memory



4.62 x 32.28 x 24.84 cm (includes rubber feet)

4.45 x 32.28 x 24.84 cm (without rubber feet)

Package Weight

4.49 Kg

Product Details

Figure 1 shows the front panel of C891F-K9.

 C891F-K9 Front Panel

Figure 2 shows the back panel of C891F-K9.

 C891F-K9 Back Panel


Back up WAN port—FE WAN

Console/Auxiliary port


Power connector

Primary WAN port—GE WAN

On/Off switch


Reset button

USB port

Earth ground connection

V.92 backup

Kensington security slot

8 x port 10/100/1000 Ethernet Ports with 4 x PoE Ports

The Configuration

Table 2 shows the recommended configuration of C891F-K9 router.




CAB-AC= AC Power Cord (North America), C13, NEMA 5-15P, 2.1m


Cisco 890 Series IOS UNIVERSAL


DRAM Upgrade


Cisco Config Pro Express on Router Flash


Cisco Router Cable CAB-ETH-S-RJ45


Power Supply 60 Watt AC


Cisco 890 Advanced IP Services License


GE SFP, LC connector LX/LH transceiver


GE SFP, LC connector SX transceiver



Compare to Similar Items

Table 3 shows the comparison between C881-K9 and C891F-K9.





- LAN: 4 x 10Base-T/100Base-TX 

- Management: 1 x console

- WAN : 1 x 10Base-T/100Base-TX

- USB : 1 x 4 PIN USB Type A

- LAN: 8 x Gigabit ports;

1 x Fast Ethernet ports

- Uplink: 1 x SFP ports

- Management: 1 x console - USB : 1 x 4 PIN USB Type A


2 port integrated PoE

4 POE ports


Fanless chassis

Fanless chassis

Get More Information

Do you have any question about the C891F-K9 router?

Contact us now via Live Chat or sales@router-switch.com.


Specification (C891F-K9)

C891F-K9 Specifications

WAN Interfaces

1-port GE or 1‑port SFP

1-port FE

LAN Interfaces

8-port 10-/100-/1000-Mbps managed switch (4‑ports PoE capable with 125W power supply adapter)

802.11a/g/n Option


Cisco CleanAir technology

Integrated USB 2.0/AUX/Console


Integrated Dial Backup

V.92 analog modem


Cisco IOS Software: Advanced IP Features Set (Default)

IP and IP services

●  Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2)

●  Generic routing encapsulation (GRE) and multipoint GRE (MGRE)

●  Cisco Express Forwarding

●  Standard 802.1d Spanning Tree Protocol

●  Layer 2 Tunneling Protocol (L2TP)

●  Layer 2 Tunneling Protocol Version 3 (L2TPv3)

●  Network Address Translation (NAT)

●  Dynamic Host Configuration Protocol (DHCP) server, relay, and client

●  Dynamic Domain Name System (DNS)

●  DNS Proxy

●  DNS Spoofing

●  Access control lists (ACLs)

●  IPv4 and IPv6 Multicast

●  Open Shortest Path First (OSPF)

●  Border Gateway Protocol (BGP)

●  Performance Routing (PfR)

●  Enhanced Interior Gateway Routing Protocol (EIGRP)

●  Virtual Route Forwarding (VRF) Lite

●  Next Hop Resolution Protocol (NHRP)

●  Bidirectional Forwarding Detection (BFD)

●  Web Cache Communication Protocol (WCCP)


●  True Multimode VDSL2 and ADSL2+ over Annex A, B, J, and M including traditional G.DMT and T1.413

●  World-class interoperability with industry-standard DSL access multiplexer (DSLAM) chipsets

●  Highest field reliability with Impulse Noise Protection over REIN/SHINE, Extended INP-Delay, G.INP, Physical Layer Retransmission, SRA, and Bitswap

●  VDSL2 Persistent Storage Device (PSD) profiles up to 17a/b with support for Spectral Shaping

●  VDSL2 Vectoring to offer blazing fiber speeds over copper

●  Support for 4-pair multimode G.SHDSL; that is, ATM and EFM

●  Remote management with TR069 and CWMP

●  Investment protection with GE and SFP for future fiber that could replace xDSL deployment

Switch features

●  Auto Media Device In/Media Device Cross Over (MDI-MDX)

●  25 802.1QVLANs

●  MAC filtering

●  Four-port 802.3af and Cisco compliant PoE

●  Switched Port Analyzer (SPAN)

●  Storm Control

●  Smart ports

●  Secure MAC address

●  Internet Group Management Protocol Version 3 (IGMPv3) snooping

●  802.1x

Security features

Secure connectivity:

●  Secure Sockets Layer (SSL) VPN for secure remote access

●  Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256

●  Public-key-infrastructure (PKI) support

●  Fifty IPsec tunnels

●  Cisco Easy VPN Client and Server

●  NAT transparency

●  Dynamic Multipoint VPN (DMVPN)

●  Tunnel-less Group Encrypted Transport VPN

●  VRF-aware IPsec

●  IPsec over IPv6

●  Adaptive control technology

●  Session Initiation Protocol (SIP) application-layer gateway

●  Cisco IOS Firewall:

◦   Zone-Based Policy Firewall

◦   VRF-aware stateful inspection routing firewall

◦   Stateful inspection transparent firewall

●  Advanced application inspection and control

●  Secure HTTP (HTTPS), FTP, and Telnet Authentication Proxy

●  Dynamic and static port security

●  Firewall stateful failover

●  VRF-aware firewall

●  Cisco ScanSafe Connector

●  Cisco IOS Software black and white lists

●  Integrated threat control:

◦   Intrusion Prevention System (IPS)

●  Control Plane Policing

●  Flexible Packet Matching

●  Network foundation protection

Quality of Service (QoS)

●  Low-Latency Queuing (LLQ)

●  Weighted Fair Queuing (WFQ)

●  Class-Based WFQ (CBWFQ)

●  Class-Based Traffic Shaping (CBTS)

●  Class-Based Traffic Policing (CBTP)

●  Policy-Based Routing (PBR)

●  Class-Based QoS MIB

●  Class of service (CoS)-to-differentiated services code point (DSCP) mapping

●  Class-Based Weighted Random Early Detection (CBWRED)

●  Network-Based Application Recognition (NBAR)

●  Link fragmentation and interleaving (LFI)

●  Resource Reservation Protocol (RSVP)

●  Real-Time Transport Protocol (RTP) header compression (cRTP)

●  Differentiated Services (DiffServ)

●  QoS preclassify and prefragmentation

●  Hierarchical QoS (HQoS)


●  Cisco Configuration Professional

●  Cisco Configuration Express

●  Cisco Configuration Engine support

●  Cisco AutoInstall

●  Cisco IP Service-Level Agreement (IP SLA)

●  Cisco IOS Embedded Event Manager (EEM)

●  CiscoWorks

●  Cisco Security Manager

●  Telnet, Simple Network Management Protocol Version 3 (SNMPv3), Secure Shell (SSH) Protocol, command-line interface (CLI), and HTTP management


●  Out-of-band management with ISDN S/T port or external modem through a virtual auxiliary port on models supporting those interfaces; refer to Table 2 for details

●  Cisco Wireless Control System (WCS) for management of unified access points in models supporting WLAN; on models supporting WLAN, refer to Table 2 for details

High availability

●  Virtual Router Redundancy Protocol (VRRP) (RFC 2338)



●  Dial backup with external modem through virtual auxiliary port

●  Dial backup with ISDN S/T or V.92 Analog modem port

Metro Ethernet

●  Ethernet OA&M

●  Ethernet Local Management Interface (E-LMI)

●  IP SLA for Ethernet


●  IPv6 addressing architecture

●  IPv6 name resolution

●  IPv6 statistics

●  IPv6 translation: Transport packets between IPv6-only and IPv4-only endpoints (NAT-Protocol Translation)

●  Internet Control Message Protocol Version 6 (ICMPv6)

●  IPv6 DHCP

●  OSPFv3

●  BGP4+

●  IPv6 path maximum transmission unit (PMTU)

●  IPv6 Neighbor Discovery

●  IPv6 stateless address autoconfiguration (SLAAC)

●  IPv6 Multicast Routing

Unified WLAN management

●  Unified access-point features:

◦        Supported by wireless LAN controller and Cisco WCS

●  Configurable local or central switching for Hybrid Remote Edge Access Point (HREAP) mode

●  Radio management through Cisco WCS

●  Transparent roaming with mobility groups

Application visibility and control

●  Cisco Wide Area Application Services (WAASx)

●  NBAR2

●  Flexible NetFlow (FNF)

●  Performance Agent

Number of recommended users


WLAN Features (Available with Wireless Option)

Standard 802.11 a/g/n access point

●  Optional on Cisco 890 Series models

WLAN hardware

●  Support for Cisco CleanAir technology on Cisco 897 and 891F

●  Automatic rate selection for 802.11a/g/n

●  Noncaptive RPTNC omnidirectional dipole antennae; 2-dBi gain @ 2.4 GHz, 5-dBi gain @ 5 GHz

●  2 x 3 multiple input, multiple output (MIMO) radio operation

●  Wi-Fi 802.11n Draft v2.0 certified

WLAN software features

●  Autonomous or unified access point

●  Cisco WCS support for monitoring of autonomous-mode access points

●  Option to maximize throughput or maximize range

●  Software-configurable transmit power

●  Radio roles, including access point, root bridge, nonroot bridge, and workgroup bridge

●  Wi-Fi Multimedia (WMM) certification

●  Traffic specifications (TSPEC) Call Admission Control (CAC) to ensure voice quality is maintained

●  Unscheduled Automatic Power Save Delivery (UPSD) to reduce latency

WLAN security features

●  Standard 802.11i

●  Wi-Fi Protected Access (WPA) and AES (WPA2)

●  EAP authentication: Cisco Light Extensible Authentication Protocol (LEAP), Protected Extensible Authentication Protocol (PEAP), Extensible Authentication Protocol Transport Layer Security (EAP TLS), Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST), Extensible Authentication Protocol-Subscriber Information Module (EAP-SIM), Extensible Authentication Protocol-Message Digest Algorithm 5 (EAP-MD5), and Extensible Authentication Protocol‑Tunneled TLS (EAP-TTLS)

●  Static and dynamic Wired Equivalent Privacy (WEP)

●  Temporal Key Integrity Protocol/Simple Security Network (TKIP/SSN) encryption

●  MAC authentication and filter

●  User database for survivable local authentication using LEAP and EAP-FAST

●  Configurable limit to the number of wireless clients

●  Configurable RADIUS accounting for wireless clients

●  Preshared keys (PSKs) (WPA-small office or home office [WPA-SOHO])


Note: Due to new FCC WiFi June 2016 regulation (FCC rules for part 15.409), the WLAN radio used in the ISR's (specifically C819 –A WiFi Domain with AP802 dual 802.11 radio) Cisco will be issuing a new grant for the 5GHz dual 802.11n radio.


The specific reason for the change is due to the inability of the radio to detect the various radar pulses (DFS function) over the entire bandwidth of the channels in the 5250-5350 and the 5500-5700 A radio channel bands (which will be disabled). As a consequence the radio will now operate from 5150-5250 and 5745-5850 A radio bands. This will provide a total of nine channels in the 5GHz range.


Service Set Identifiers (SSIDs) and Multiple Broadcast SSIDs

●  16

Wireless VLANs

●  14 (encrypted and nonencrypted VLANs)

Default and maximum DRAM

●  Default 512MB

●  Up to 1 GB on Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, 891F, and 891-24X data models; upgrade option available

Default and maximum flash memory

●  256 on all Cisco 890 ISR models; not upgradable


●  Refer to Table 2 for details

LAN switch

●  Refer to Table 2 for details

Separate console and auxiliary ports

●  RJ-45

USB 2.0

●  One USB 2.0 port available on Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, 891F, and 891-24X

●  USB devices supported:

◦   USB flash memory


●  Refer to Table 2 for details

Inline PoE

●  Optional internal adapter for inline PoE on 4 switch ports for IP phones or external wireless access points; 802.3af-compliant and Cisco PoE-compliant

●  No PoE support on Cisco 892FSP

Wireless specifications

●  2.4 and 5 GHz

Data rates supported

●  802.11a: 6, 9, 12, 18, 24, 36, 48, and 54 Mbps

●  802.11b: 1, 2, 5.5, 6, 9, and 11 Mbps

●  802.11g: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, and 54 Mbps

●  802.11n: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54, and m0-m15

Maximum transmit power (2‑channel aggregate)

●  802.11a: 15dBm

●  802.11b: 20 dBm

●  802.11g: 17 dBm

●  802.11n: 16 dBm

Note: Maximum power setting is subject to change by channel and by region, depending on regulations.

Physical dimensions and weight

Weight: 5.5 lb (2.5 kg) maximum

Product dimensions:

◦   H x W x D =1.82 x 12.71 x 9.78 in. (4.62 x 32.28 x 24.84 cm) (includes rubber feet)

◦   H x W x D = 1.75 x 12.71 x 9.78 in. (4.45 x 32.28 x 24.84 cm) (without rubber feet)

External power supply

Product power specifications:

●  AC input voltage: Universal 100 to 240 VAC

●  Frequency: 50 to 60 Hz

●  Maximum output power: 60W

●  Output voltages: 12 VDC

●  Optional PoE:

◦   Separate 80W PoE power supply for Cisco 891 and 892 ISRs

◦   Single 125W power supply required for Cisco 896, 897, 898, and 891F for router and PoE

◦   The Cisco 891-24X uses the internal power supply for PoE

●  External output voltage: 48 VDC

Approvals and compliance

●  Emission

●  47 CFR Part 15: 2006

◦   CISPR22: 2005

◦   EN300386: V1.3.3: 2005

◦   EN55022: 2006

◦   EN61000-3-2: 2000 [Inc amd 1 & 2]

◦   EN61000-3-3: 1995 [+ amd 1: 2001]

◦   ICES-003 Issue 4: 2004

◦   KN 22: 2005

◦   VCCI: V-3/2006.04

●  Immunity

●  CISPR24: 1997 [+ amd 1 & 2]

◦   EN300386: V1.3.3: 2005

◦   EN50082-1: 1992

◦   EN50082-1: 1997

◦   EN55024: 1998 [+ amd 1 & 2]

◦   EN61000-6-1: 2001

Environmental operating range

●  Nonoperating temperature: -4 to 149°F (-0 to 65°C)

●  Nonoperating humidity: 5 to 95% relative humidity (noncondensing)

●  Nonoperating altitude: 0 to 15,000 ft (0 to 4570m)

●  Operating temperature: 32 to 104°F (0 to 40°C)

●  Operating humidity: 10 to 85% relative humidity (noncondensing)

●  Operating altitude: 0 to 10,000 ft (0 to 3000m)


Faq (C891F-K9)

What is different between routers:C891F-K9 and C891-K9?

Almost the same, except that Cisco 891F Gigabit Ethernet security router supports SFP.

How many LAN Interfaces does C891F-K9 support?

8-port 10-/100-/1000-Mbps managed switch (4‑ports PoE capable with 125W power supply adapter)

What is the Cisco ONE™ Software?

Cisco ONE™ Software offers a valuable and flexible way to buy software for the WAN, access, and data center domains. At each stage in the product lifecycle, Cisco ONE Software helps make buying, managing, and upgrading your network and infrastructure software easier.

Which Cisco IOS Software does the C891F-K9 support?

Cisco 891F is supported only on Cisco IOS Software Release 15.3(3)M2, 15.4(1)T and later

What are the Supported SFP Types of C891F-K9?


Does the C891F-K9 support USB 2.0 port?

One USB 2.0 port available on Cisco 891F.

How many Wireless VLANs does it support?

14 (encrypted and nonencrypted VLANs)

What is the Cisco IOS Software Activation feature?

Software activation authorizes and enables use of a Cisco software feature or feature sets. A special file contained in the device, called a license file, is examined by Cisco software when the device is powered on. Based on the license file installed, Cisco software enables the appropriate feature sets.

What is the purpose of the Reset button?

The Reset button is used to restore the router to the default factory settings if pressed within 5 seconds of router power up. Here is how it works: - The router will not react to the Reset button if it is pressed 5 seconds or more after power up. - When the Reset button is pressed within 5 seconds of bootup and there is no valid xxx.cfg file in the flash memory, the router boots up with the factory defaults stored in nonvolatile RAM (NVRAM). - When the Reset button is pressed within 5 seconds of boot up and there is a valid xxx.cfg file in the flash memory, the router boots up with the xxx.cfg file and avoids the startup-config file in NVRAM. The xxx.cfg default configuration file in flash memory also replaces the startup-config file in NVRAM.

How many WAN Interfaces does C891F-K9 support?

1-port GE or 1‑port SFP 1-port FE

Shipping & Payment


Cargo will be delivered within 1 day after payment arrived. Tracking Number will be offered once delivery done.

Delivery OptionsEstimated Delivery Time
DHL 2-4 business days
Fedex 2-4 business days
Hong Kong EMS 5-10 business days
Hong Kong Air Parcel 10-20 business days
By Sea 10-20 business days


Above mentioned information are just for your reference only,we will keep you posted for the tracking delivery schedule.There are two delivery options available for by air and by sea:

Deliver to port:

Router-switch.com is responsible for transporting goods to port. All subsequent customs and transportation fees are the
responsibility of the buyer. Router-switch will recommend trustworthy local freight forwarders to you.Router-switch.com can facilitate the progress under buyer's permission and at buyer's expense.

Deliver to door:

Router-switch.com will quote all destination charge prior once we have confirmed order.
Router-switch.com is responsible for transporting goods to door after you have made the payment.

Payment Methods

Paypal Master Card Visa
Discover American
Wire Transfer eCheck WestUnion


100% Low Price Guarantee:

Router-switch.com provides high-quality products at low wholesale prices

100% Quality Assurance:

All items are ORIGINAL and GENUINE only.
Item conditions are "New Sealed" or "Used / Refurbished".
Used & refurbished items are fully tested with good conditions by Cisco-certified Engineers.

Free CCIE Technical Support:

Our FREE Cisco CCIE Expert Consultancy Support is over the phone, by chat, by email or by login remotely.

100% Money Back Guarantee:

You can contact our customer service team to exchange or return any product that you bought from us.

Flexible Secure Payment & Shipment:

Verified authorization: Mcafee Secure, VeriSign Secured

Return Material Authorization (RMA) Process

Standard Hardware Warranty Policy:

Original new sealed Cisco product: 1 Year
Used Cisco product: 3 Month

The Support Contacts:

If your Cisco products failed, you must contact your sales representative to verify product failure. If the problem still can't correct by remote support methods i.e. email or phone support, the RMA procedure will issue.


Customer Reviews

4.6 5
4.6 (14 reviews)
5 Stars
4 Stars
3 Stars
2 Stars
1 Stars

Share your thoughts with other customers?

Posted on 3/25/2017
Verified Buyer

It's very suitable for my studio, it offers a platform that is cost optimized to fit our business needs starting with 2 WAN connectivity options - Gigabit Ethernet and Fiber. This router is loaded with the practical stuff needed for the branch office.

Posted on 3/24/2017
Verified Buyer

The model is perfect, and the package is intack, but I was in urgent use and I waited for a long time.

Posted on 2/15/2017
Verified Buyer
Easy to pay

They accept credit card, more easy to me to make payment.

Posted on 11/23/2016
Verified Buyer
Fast shipment

OK, I receive my router this morning, only days, fast shipment.

Posted on 11/2/2016
Verified Buyer
Five Star

This router is loaded with the practical stuff needed for the branch office.

Posted on 10/13/2016
Verified Buyer
High tech for low price!

Surprisingly sophisticated router for the price. Very easy to configure and customize. Not for a novice, but fine for someone with some router experience.

Posted on 8/10/2016
Verified Buyer
Small business branch router

Perfect, the small router is very good for my small office!

Posted on 5/22/2016
Verified Buyer
Simply Amazing

this has been running for long months. the only issue has been we lose power in the house / we update the firmware... it is simply amazing

Posted on 3/27/2016
Verified Buyer
Hot sale small router

C891F-K9 is hot sale small router, we bought 18units from them as our invertory.

Posted on 1/18/2016
Verified Buyer
Works great!!

Be sure to update to the latest firmware right away and save yourself a headache!! Works great!!! This is what you need!!!

Posted on 9/6/2015
Verified Buyer
C891F-K9-CleanAir & 802.11a/g/n

802.11a/g/n Option and Cisco CleanAir technology. Simple but cool one.

Posted on 8/7/2015
Verified Buyer
C891F-K9 for remote offices

wow, it is said that it is ideal for remote offices with up to 50 users. That fits us.

Posted on 7/8/2014
Verified Buyer

Just so so.

Posted on 1/12/2014
Verified Buyer
4?ports PoE capable C891F-K9

the very right small Cisco router for us. The 4?ports PoE capable with 125W power supply adapter is bright.

You may also be interested in the following product(s)

Register now to get updates on promotions and coupons

We’ll never share your email address with a third-party.

Router-switch.com is neither a partner of nor an affiliate of Cisco Systems. Logos remain the property of the corresponding company.
Copyright @ 2002-2017 Router-switch Ltd. | HongKong Yejian Technologies Co., Ltd | All Rights Reserved.