Cisco's enterprise WAN edge now spans two generations under the "8000" name: the Catalyst 8200, 8300, and 8500 Edge Platforms that power most SD-WAN branches and hubs today, and the newer Cisco 8000 Series Secure Routers (the -G2 models) built around a secure networking processor. Our Cisco 8000 Series Routers category lists both the new G2 secure routers and refurbished Catalyst Edge chassis side by side.
This guide maps those listings to Cisco's data sheets so you pick the right family for throughput, modules, and licensing. For fixed ISR branches, see the Cisco ISR Router Buying Guide; for compact ISR 1100 designs, see the Cisco 1100 Series Router Buying Guide.
Short answer: Choose a Cisco 8100 or 8200 Series Secure Router (-G2) for new small and medium branches that want the current secure-router platform and Cisco Networking Subscription WAN licensing. Pick a Catalyst 8200 or 8300 Edge Platform when you need NIM, PIM, or SM modularity on a proven IOS XE SD-WAN chassis, and a Catalyst 8500 when the site is an aggregation hub. On our listings, -RF means refurbished.
What sits in the Cisco 8000 Series Routers category?
This category holds Catalyst 8000 Edge Platforms and the newer Cisco 8000 Series Secure Routers, not the IOS XR Cisco 8000 service-provider routers. The table groups the eleven SKUs we list by role, ports, and what buyers usually decide first.
| Family | Role | Examples we list | Decide first |
|---|---|---|---|
| 8100 Series Secure Routers | Small branch, compact, often fanless | C8130-G2, C8140-G2 | Port count and SD-WAN software release |
| 8200 Series Secure Routers | Medium branch with 10G and Multigigabit | C8231-G2 | 10G WAN, PoE budget, threat-protection needs |
| Catalyst 8200 / 8200L Edge | Small branch with 1 NIM + 1 PIM | C8200-1N-4T-RF, C8200L-1N-4T-RF | DRAM, IPsec headroom, containerized security |
| Catalyst 8300 Edge | Medium/large branch, SM + NIM density | C8300-1N1S-4T2X-RF, C8300-1N1S-6T-RF, C8300-2N2S-4T2X-RF | 1RU vs 2RU, 10G vs 1G WAN, SM and NIM count |
| Catalyst 8500 / 8500L Edge | Aggregation / hub | C8500-12X4QC-RF, C8500-12X-RF, C8500L-8S4X-RF | 10G/40G port mix and hub throughput |
Cisco's IOS XR Cisco 8000 Series routers (for example 8101-32FH-O) are a different product line. On this site they appear under Cisco 8100 Switches; treat them as service-provider platforms, not as Catalyst SD-WAN edge routers.
How do the new Secure Routers differ from Catalyst 8200 Edge Platforms?
Secure Routers are Cisco's current 8100 and 8200 Series branch platforms with a dedicated secure networking processor, while Catalyst 8200 Edge Platforms are the established modular SD-WAN chassis with one NIM and one PIM slot. Match the generation to your license plan and module needs before you compare port counts.
Cisco rates the C8130-G2 at 1.9 Gbps forwarding and 1.5 Gbps IPsec (512-byte), with six 1GE ports in a fanless small-branch form factor. The C8140-G2 raises forwarding to 5.6 Gbps on ten 1GE ports. The C8231-G2 adds two 1/10GE SFP+ ports, four 2.5GE Multigigabit RJ-45 ports (one with PoE+), and four 1GE LAN ports, with Cisco documenting 19 Gbps forwarding, 5 Gbps IPsec, and 4 Gbps SD-WAN throughput.
The Catalyst C8200-1N-4T keeps four built-in 1GE WAN ports (two RJ-45 and two SFP), one NIM, and one PIM, with default 8 GB DRAM and 16 GB M.2 storage. The C8200L-1N-4T ships with 4 GB DRAM and no default M.2; Cisco rates its SD-WAN IPsec throughput up to 500 Mbps versus up to 1 Gbps on the non-L model, and does not support the same containerized on-box security stack. Working series pages also live under Cisco Catalyst 8200 Edge Platforms.
When should you choose a Catalyst 8300 or 8500?
Choose a Catalyst 8300 when the branch needs Service Module slots, higher IPsec scale, or dual power supplies, and a Catalyst 8500 when the site aggregates many overlays or needs dense 10GE or 40GE ports. Port density and hub versus branch role matter more than the shared "8000" marketing name. Cisco has announced end of sale for these Catalyst Edge chassis: the C8500-12X, C8500-12X4QC, C8500L-8S4X, C8300-1N1S-4T2X, and C8300-1N1S-6T on January 31, 2027, and the C8300-2N2S-4T2X, C8300-2N2S-6T, C8200-1N-4T, and C8200L-1N-4T on July 31, 2027, with last date of support on January 31, 2032 and July 31, 2032 respectively.
The C8300-1N1S-4T2X is a 1RU platform with two 10GE and four 1GE ports plus one SM, one NIM, and one PIM slot. The C8300-1N1S-6T keeps the same slot layout with six 1GE ports. The C8300-2N2S-4T2X doubles to 2RU with two SM and two NIM slots. Like every Catalyst 8300 model, it ships with dual power supplies by default, per Cisco.
For hubs, the C8500-12X provides twelve 1/10GE SFP+ ports on third-generation Quantum Flow Processor hardware. The C8500-12X4QC adds QSFP options for 40GE and 100GE configurations (Cisco states up to 240GE of ports can be enabled at once). The C8500L-8S4X pairs four 1/10GE with eight 1GE ports for smaller aggregation sites. Browse the working Cisco Catalyst 8300 Edge Platforms and Cisco Catalyst 8500 Edge Platforms pages when you need those series alone.
Which licenses do these routers need?
Licensing follows the platform generation: Cisco 8000 Series Secure Routers use a Cisco Networking Subscription with WAN Essentials or WAN Advantage, while Catalyst 8200, 8300, and 8500 Edge Platforms still order under Cisco DNA Essentials, Cisco DNA Advantage, or Catalyst Routing Essentials on Cisco's current data sheets. Confirm the tier and HSEC crypto entitlement before you stage IOS XE.
On Secure Routers, Cisco includes Routing OS Essentials with the hardware and limits aggregated crypto throughput to 250 Mbps until you add the matching subscription or OS Advantage upgrade. WAN Essentials and WAN Advantage are term subscriptions under Cisco Networking Subscription for SD-WAN or SD-Routing.
On Catalyst 8200 and 8300 Edge Platforms, Cisco requires a Cisco DNA subscription or Catalyst Routing Essentials with the chassis, and an HSEC entitlement for cryptography above 250 Mbps and higher tunnel scale. Catalyst 8500 platforms initially require Cisco DNA Advantage. Refurbished units in this category are hardware only unless a transferrable license is confirmed on the RFQ.
How should you read ports, slots, and -RF suffixes?
Read left to right: series, slot layout, then copper versus fiber port codes, and treat -RF as refurbished stock on M&F listings. Matching NIM, PIM, and SM counts to the modules you already own prevents a costly second quote round.
In C8200-1N-4T, 1N means one NIM and 4T means four 1GE WAN ports. In C8300-1N1S-4T2X, 1N1S is one NIM plus one SM, 4T is four 1GE, and 2X is two 10GE. C8300-2N2S-4T2X doubles both NIM and SM counts versus the 1N1S models. On Secure Routers, -G2 marks the current generation; C8130-G2 and C8140-G2 are 8100 Series, and C8231-G2 is 8200 Series.
Always confirm optics, power cords, rack kits, and cellular PIMs separately. Voice NIMs and LAN switch NIMs that fit ISR 4000 often fit Catalyst 8200 and 8300 as well. UCS-E compute modules need a Service Module slot, so they fit Catalyst 8300 models with an SM slot but not the Catalyst 8200, which has one NIM and one PIM slot. Verify the exact PID against Cisco's module tables for that chassis.
What should you confirm before you request a quote?
Confirm site role, encrypted throughput target, WAN media, module needs, license plan, and condition before you send an RFQ. Those six details decide whether a Secure Router, Catalyst 8200, 8300, or 8500 is the right chassis on the first pass.
- Branch versus hub role, and target SD-WAN or IPsec throughput
- Copper, fiber, Multigigabit, and PoE requirements on the WAN edge
- NIM, PIM, and SM modules you must reuse or add
- Cisco Networking Subscription WAN tier, or Cisco DNA / Catalyst Routing Essentials term
- HSEC or crypto throughput above 250 Mbps
- New or refurbished, quantity, Smart Account readiness, and delivery date
Cisco 8000 Series router FAQs
Is a Catalyst 8200 the same as a Cisco 8200 Series Secure Router?
No. Catalyst 8200 Edge Platforms (C8200-1N-4T and C8200L-1N-4T) are the modular SD-WAN chassis with one NIM and one PIM slot. Cisco 8200 Series Secure Routers such as the C8231-G2 are the newer secure-router generation with different ports, performance, and Cisco Networking Subscription licensing.
What does -RF mean on these router part numbers?
-RF means refurbished on M&F Collaboration listings. Match the base PID to Cisco's data sheet, then confirm condition, license transfer, and warranty on the quote. New G2 Secure Routers in this category ship without the -RF suffix.
Does the C8200L-1N-4T support the same on-box security as the C8200-1N-4T?
No. Cisco documents multilayer security performance use cases on the C8200-1N-4T and states that the C8200L-1N-4T does not support the same embedded, containerized security features. Use the non-L model when you need that on-box stack.
When do I need an HSEC license?
On Catalyst 8200, 8300, and 8500 Edge Platforms, Cisco requires an HSEC entitlement for cryptography above 250 Mbps and for higher tunnel scale. On Secure Routers, Routing OS Essentials likewise limits aggregated crypto to 250 Mbps until you add the matching subscription or OS Advantage upgrade.
Are the 8101-32FH-O routers in this category?
No. Those are Cisco 8000 Series IOS XR service-provider routers. On this site they are filed under Cisco 8100 Switches. This category covers Catalyst 8000 Edge Platforms and Cisco 8000 Series Secure Routers for enterprise SD-WAN and routing.
Can I reuse ISR 4000 NIMs in a Catalyst 8300?
Often yes for many Ethernet, voice, and serial NIMs, but not every ISR 4000 module is supported. Cisco states that more than 70% of ISR 4000 family modules are reused on Catalyst 8200 and 8300 platforms; verify each PID against the Catalyst 8300 module table before you assume fit.
About this guide
Prepared by M&F Collaboration, a B2B reseller of Cisco networking, collaboration, power, and UCS hardware based in West Chicago, Illinois. Ports, slots, throughput, power, and licensing details were checked against Cisco's data sheets for the 8100 and 8200 Series Secure Routers and the Catalyst 8200, 8300, and 8500 Edge Platforms, such as the Catalyst 8300 Series Edge Platforms data sheet. When a marketplace listing title disagrees with Cisco's data sheet, we follow the data sheet.
Need a Cisco 8000 Series router quote?
Send us the site role, target encrypted throughput, WAN media, modules to reuse, license plan, and the part numbers you have in mind. We will match new or refurbished Catalyst Edge and Secure Router platforms to your design.
Prefer to browse first? Explore these categories:
