Investing in the Cisco C3945E-VSEC-CUBEK9 ensures robust enterprise-grade communication with top-tier voice security and encryption. It stands out with its Cisco Unified Border Element (CUBE) capabilities, supporting SIP and H.323 protocols for boundary-less collaboration across organizations. The included Security and Unified Communications licenses provide a complete package for secure voice operations, inter-networking, and session control. For businesses demanding reliability, the C3945E-VSEC-CUBEK9 is designed for high availability and resilience with SPE 250, allowing smooth handling of services during peak usage. With enhanced features for authentication, codec support, and modular upgrades, this router future-proofs communication infrastructure. The investment in Cisco’s trusted technology translates to cost efficiency by reducing the risk of cyber threats, aiding compliance, and minimizing downtime. The router’s modular design ensures seamless integration and expansion as business needs evolve. Whether for unified communications, remote connectivity, or secure voice services, the Cisco 3945E-VSEC-CUBEK9 positions your enterprise to leverage the full power of modern voice networking.
C3945E-VSEC-CUBEK9 is the Cisco 3945E router with Voice Sec and CUBE Bundle, including PVDM3-64, UC and SEC License PAK, and FL-CUBEE-25.
Quick Specs
Table 1 shows the Quick Specs of the C3945E-VSEC-CUBEK9.
|
Product Code |
C3945E-VSEC-CUBEK9 |
|
Bundle |
VSEC CUBE Bundle, PVDM3-64, UC SEC Lic, FL-CUBEE-25 |
|
Services Performance Engine module |
w/SPE 250 |
|
Rack Units |
3U |
|
Interfaces |
4 integrated 10/100/1000 Ethernet ports with 2 SFP ports |
|
Expansion Slot(s) |
4 service module slots 3 Enhanced High-Speed WAN Interface Card slots 3 onboard digital signal processor (DSP) slots |
|
RAM |
1 GB (installed) / 2 GB (max) |
|
Flash Memory |
256 MB (installed) / 8 GB (max) |
|
Dimensions |
18.7 x 17.2 x 5.7 in |
Product Details
Figure 1 shows the front panel of the Cisco 3945E router. C3945E-VSEC-CUBEK9 is similar with it.
Note:
|
① |
② |
③ |
|
On/Off switch |
Power connector |
LEDs area |
Figure 2 shows the back panel of the Cisco 3945E router with slots and ports. C3945E-VSEC-CUBEK9 is similar with it.
Note:
|
① |
EHWIC 0,1, and 2 (0, far right) |
⑦ |
SFP 1 and SFP 2 (1, Top) |
|
② |
USB serial port |
⑧ |
USB 0 and USB 1 (1, Left) |
|
③ |
AUX port |
⑨ |
Ground |
|
④ |
RJ-45 serial console port |
⑩ |
Service module slots |
|
⑤ |
10/100/1000 Ethernet ports (GE 0/3, Top; GE 0/2, Bottom) |
⑪ |
Compact flash 0 and 1 (0, right) |
|
⑥ |
10/100/1000 Ethernet ports (GE 0/1, Top; GE 0/0, Bottom) |
|
|
Table 2. Voice Security Bundle Features Table
|
Authentication and |
• Media encryption of voice RTP streams using SRTP • Exchange of RTP Control Protocol (RTCP) information using secure RTCP • SRTP to RTP fallback for calls between secure and insecure endpoints • Secure calls supported in Cisco Unified Survivable Remote Site Telephony (SRST) mode during WAN failover • Compressed RTP (CRTP) supported with media encrypted calls using SRTP |
|
Authentication and |
• Supports AES-128 encryption algorithm • Supports the HMAC secure hash authentication algorithm (SHA 1) |
|
Signaling Authentication and Encryption Features |
• Gateway to Cisco Unified Communications Manager signaling and encryption uses IPSec for Media Gateway Control Protocol (MGCP), H.323 and SIP gateways • IP phone to Cisco Unified Survivable Remote Site Telephony router signaling and encryption uses TLS |
|
Protocol Support |
• MGCP 0.1 (supports MGCP gateways with Cisco Unified Communications Manager) • H.323 (supported on H.323 gateways and CUBE; Cisco Unified Communications Manager interoperability is optional) • Session Initiation Protocol (SIP) • SCCP (Cisco Unified IP Phone) in SRST mode |
|
Module Support |
• Any module that has PVDM2, PVDM3 and/or built-in DSP |
|
Codec Support |
• G.711, G.729A, and G.729 |
Table 3 shows the Cisco Unified Border Element Features (CUBE Versions Include 9.5.1 or Later).
|
Feature |
Support Details |
|
Protocols |
● H.323 and SIP |
|
Protocol and signal interworking |
● H.323 to H.323 (including Cisco Unified Communications Manager) ● H.323 to SIP (including Cisco Unified Communications Manager) ● SIP to SIP (including Cisco Unified Communications Manager) ● SIP to SIP (including Cisco TelePresence calls) |
|
Media support |
● RTP, RTCP, and Binary Floor Control Protocol (BFCP) ● Sub-RTCP for media statistics |
|
Media interworking |
● SIP delayed-offer to SIP early-offer interworking for audio or video calls ● H.323 Slow Start to H.323 Fast Start for audio calls |
|
Media modes |
● Media flow-through ● Media flow-around |
|
Signaling transport mode |
● TCP ● User Datagram Protocol (UDP) ● TCP-to-UDP interworking |
|
Fax support |
● T.38 fax relay ● Fax pass-through ● Fax over G711 |
|
Modem support |
● Modem pass-through ● Modem over G711 |
|
Dual-tone multifrequency (DTMF) |
● H.245 alphanumeric ● H.245 signal ● RFC 2833 ● SIP notify ● Key Press Markup Language (KPML) ● Interworking capabilities include: ◦ H.323 to SIP ◦ RFC 2833 to G.711 in-band DTMF * ◦ Various SIP-to-H.323 DTMF interworking options ◦ RFC 2833 to KPML |
|
Supplementary services |
● Call hold, call transfer, and call forwarding for H.323 networks using H.450 and transparent passing of Empty Capability Set (ECS) ● SIP-to-SIP supplementary services (holds and transfers) support using REFER ● SIP-to-SIP supplementary services (holds and transfers) support using REINVITE ● H.323-to-SIP supplementary services for Cisco Unified Communications Manager with media termination point (MTP) on the H.323 trunk |
|
Internetworking |
● Configurable SIP profiles to manipulate SIP message content, including header fields andSession Descriptor Protocol (SDP) attributes ● P-Asserted-Identity (PAI), P-Preferred-Identity (PPI), and Remote-Part-ID (RPID) internetworking** ● Unsupported Multipurpose Internet Mail Extensions (MIME)-type attachment pass-through** ● Unsupported SIP header pass-through** ● Dial-peer bind (allows Cisco Unified Border Element to connect to multiple different service providers) ● Incoming dial-peer match based on remote IP address ● Assisted RTCP for Microsoft Lync Interoperability |
|
Call routing and dialing options |
● E164-based dialing ● Uniform Resource Identifier (URI)-based dialing ● Routing based on nonsequential lists (either E164 or URI or both) ● Dial Peer Groups (Trunk Groups) (outbound routing determined by inbound dial pattern) ● Server Groups to define order of selection of alternative or backup routing paths for outbound routing |
|
Cisco Call Admission Control (CAC) |
● Maximum number of calls per trunk (maximum number of calls) ● CAC based on IP circuits ● CAC based on total calls, CPU use, or memory use threshold ● CAC based on bandwidth availability and call-spike detection ● Resource Reservation Protocol (RSVP) |
|
OPTIONS SIP message support |
● Support for response to OPTIONS-PING messages with OPTION- PING groups based on session target ● Support for generation of in-dialog OPTIONS-PING messages ● Support for generation of out-of-dialog OPTIONS-PING messages to control dial-peer status** |
|
Media recording |
● Media forking features for both voice and video to integrate with Cisco TelePresence Media Recording Servers ● Active (SIP-based) and passive (application programming interface [API]-based) mechanisms for invoking media forking |
|
IP Routing feature |
● Support for Cisco IOS Software-based routing features, including Border Gateway Protocol (BGP), Enhanced IGRP (EIGRP), and Multiprotocol Label Switching (MPLS) ● Support for Cisco IOS Software-based policy routing features ● Support for Cisco IOS Software-based access-control-list (ACL) features |
|
Voice-quality statistics |
● Packet loss, jitter, and round-trip time (RTT) ● Per-call leg call-quality statistics ● Flexible NetFlow call-quality statistics and information ● Sub-RTCP statistics collection |
|
QoS |
● IP Precedence and differentiated-services-code-point (DSCP) marking ● Per-call QoS packet marking |
|
Network Address Translation (NAT) traversal |
● NAT traversal support for SIP phones deployed behind non-Application Line Gateway (ALG) data routers ● Stateful NAT traversal ● IPv4-to-IPv6 translation |
|
Network hiding |
● IP network privacy and topology hiding ● IP network security boundary ● Intelligent IP address translation for call media and signaling ● Back-to-back user agent, replacing all SIP-embedded IP addressing ● History information-based topology hiding and call routing |
|
Number translation |
● Number translation rules for voice-over-IP (VoIP) numbers ● URI-based dialing translations |
|
Codecs |
● G.711 mu-law and a-law ● G.722 and G.722.2 ● G.723ar53, G.723ar63, G.723r53, and G.723r63 ● G.726r16, G.726r24, and G.726r32 ● G.728 ● G.729, G.729A, G.729B, and G.729AB ● Internet Low Bitrate Codec (iLBC) ● Midcall codec renegotiation ● Adaptive Multirate (AMR) wideband ● AAC-LD |
|
Transcoding |
● Transcoding between any two different families of codecs from the following list: ◦ G.711 a-law and mu-law ◦ G.729, G.729A, G.729B, and G.729AB ◦ iLBC ◦ G.722 ● Midcall transcoder insert and drop |
|
Security |
● Rogue SIP invite and rogue RTP packet detection ● Alerts for rogue packet activity ● IP Security (IPsec) ● Secure RTP (SRTP) ● Transport Layer Security (TLS) ● SRTP-to-RTP interworking |
|
Authentication, authorization, and accounting (AAA) |
● AAA with RADIUS |
|
Voice media applications |
● Tool Command Language (Tcl) scripts support for application customization ● VoiceXML 2.0 script support for application customization ● Web-based API to monitor and control signaling and media traffic |
|
API |
● Web-based API compatible with Web Service Description Language (WSDL) development tools to support call monitoring and control, call-detail records (CDRs), and serviceability attribute interaction with external application; specifically designed for voice-policy applications |
|
Billing |
● Standard CDRs for accurate billing available through: ◦ AAA records ◦ Syslog ◦ Simple Network Management Protocol (SNMP) |
|
Lawful intercept |
● Provision of replicated packets to third-party mediation device |
|
Remote phone proxy sessions |
● Termination of SIP-TLS and SRTP with registration pass-through to allow SIP-based endpoints, including Cisco Unified IP Phone 7900, 8900, and 9900 models and Jabber® Voice Client, to connect from remote sites through the Internet without requiring IPsec VPN to Cisco Unified Communications Manager, Cisco Business Edition, or Cisco HCS (not included with NANOCUBE license) |
|
Line-side back-to-back user agent NANOCUBE sessions |
● Termination of Cisco Shared Port Adapter (SPA) and other third-party SIP endpoints with registration pass‑through and survivability for use with third-party hosted call-control service provider services |
|
Inter-Cluster Lookup Service (ILS) routing |
● Support for ILS routing to complement ILS dial-plan exchange between Cisco Unified Communications Manager clusters or to simplify call-routing complexity between multiple clusters |
|
Video |
|
|
Protocols |
● H.323 and SIP |
|
Cisco endpoints supported |
● Cisco Unified Video Advantage (UVA) and Cisco TelePresence endpoints |
|
Rich media |
● Simultaneous support for data, audio, and video |
|
Signaling interworking |
● SIP delayed-offer to SIP early-offer calls |
|
Media |
● Support for multiplex RTP calls (for Cisco TelePresence solution) ● Simple Traversal of UDP through NAT (STUN)/Datagram TLS (DTLS) pass-through for telepresence |
|
H.323-enhanced features |
● H.235 pass-through for secure calls ● H.239 pass-through for picture-in-picture feature |
|
QoS |
● DSCP markings to prioritize video streams as they traverse the network |
|
Data support |
● T.120 data collaboration flow-around only |
|
Camera control |
● Far-end camera control (FECC) |
|
Video codecs |
● H.261 ● H.263 ● H.264 |
|
Network Management |
|
|
Manageability and serviceability |
● Resource usage monitoring over SIP trunk ● SNMP per-call quality traps ● SNMP and syslog SIP trunk status messages |
|
High Availability |
|
|
High availability |
● Inbox redundancy on Cisco ASR 1006 ● Box-to-box redundancy on Cisco ASR 1000 (based on RG Infrastructure) ● Box-to-box redundancy on Cisco ISRs (Hot Standby Router Protocol [HSRP]-based) Note: Media is preserved for active calls at time of failover in each redundancy configuration listed. |
Compare to Similar Routers
Table 4 shows the comparison between CISCO3945E/k9 and C3945E-VSEC-CUBEK9.
|
Model |
CISCO3945E/k9 |
C3945E-VSEC-CUBEK9 |
|
Bundle |
N/A |
C3945E VSEC CUBE Bundle, PVDM3-64, UC SEC Lic, FL-CUBEE-25 |
|
SPE |
w/SPE 250 |
w/SPE 250 |
|
Interface |
4GE |
4GE |
|
EHWIC slots |
3 |
3 |
|
SM slots |
4 |
4 |
|
ISM slots |
0 |
0 |
|
DSP |
3 |
3 |
|
SFP |
2 |
2 |
|
Rack Unit |
3U |
3U |
Get more information
Do you have any question about the C3945E-VSEC-CUBEK9 router?
Contact us now via Contact Form or cisco@northlandusa.com.
Why Choose C3945E-VSEC-CUBEK9 Cisco 3945E Secure Voice & Unified Border Element
Cost-Effective Without Compromise on Quality: Northland Systems guarantees high-quality network equipment at wholesale prices. The C3945E-VSEC-CUBEK9 offers reliable and secure voice and Unified Border Element functionality. Coupled with a 100% Low Price Guarantee, Northland Systems stands behind their unbeatable pricing, ensuring you get more for your investment.
Complimentary Access to Expertise: When you purchase the Cisco 3945E router from Northland Systems, you also gain access to free CCIE expert support. This significant value means you get installation assistance and technical guidance at no additional charge, ensuring your network operates optimally.
Transaction Security With Flexibility: Your financial and operational security take precedence at Northland Systems. The convenience of secure payment options, along with flexible shipping arrangements, are affirmed by trusted McAfee Secure and VeriSign Secured certifications.
Guaranteed Authenticity: Northland Systems assures the authenticity and condition of the Cisco 3945E. Whether you choose ‘New Sealed’ or ‘Used / Refurbished’, our Cisco-certified engineers have fully tested each unit for complete reliability.
Confidence in Your Purchase: Every transaction is backed by a 100% Money Back Guarantee. Your confidence in purchasing the C3945E-VSEC-CUBEK9 is our priority. Northland Systems’ commitment to customer satisfaction is unwavering.
A Legacy of Trust and Affordability: Since 1997, Northland Systems has built a reputation for economic efficiency offering substantial discounts on Cisco routers. Opting for Northland means choosing a partner recognized for reliability in the network equipment industry.
The Advantages of Pre-owned Hardware: Diversity in hardware options is key—pre-owned network equipment like the Cisco 3945E offers not only immediate cost savings but also quick delivery. Full warranty coverage, environmental sustainability, and availability of legacy parts secure your long-term network investment. Opting for Cisco Router ISR 3900 series models from Northland Systems means a savvy, eco-friendly, and economical choice.
Routers > Cisco Routers offers a spectrum of networking solutions, and the Cisco 3945E stands among the best for secure voice and data transactions. Northland System reinforces your enterprise networking with unmatched affordability, quality, and service.
