Product Name:
XPand6004 Small Form Factor SFF Router with Cisco IOS


Small Form Factor (SFF) Router with Cisco IOS®

The XPand6004 is a Small Form Factor (SFF) router that runs Cisco IOS® Software with Cisco® Mobile Ready Net capabilities, providing highly secure data, voice, and video communications to stationary and mobile network nodes across wired and wireless links. This high-performance, ruggedized, packaged router is designed for applications with the most severe Size, Weight, and Power (SWaP) constraints and are deployed in harsh environments.

The XPand6004 uses the same Cisco IOS® that IT staffs in the military, energy, public safety, and other industries are already trained on, enabling these organizations to expand their network to personnel, equipment, facilities, and vehicles at the edge of the network – warfighters on the battlefield, mines and drilling platforms, natural disaster mobile command centers – without any additional training. The XPand6004 can be connected to UHF, VHF, Wi-Fi, and other IP-based radio platforms to create the network nodes used to form mobile ad hoc networks (MANETs). With the ability to operate without a connection to central infrastructure, MANETs offer many advantages for military, public safety, and emergency response users. The XPand6004 extends the Cisco® enterprise infrastructure beyond the reach of traditional fixed-network infrastructure for oil and gas, mining, smart grid, heavy construction, transportation, homeland security, and public safety applications.

The router offers high performance, four Gigabit Ethernet interfaces, and a rich Cisco IOS® Software feature set for the most Size, Weight, and Power (SWaP)-constrained applications. To meet the needs of demanding mobile and embedded networking applications, the XPand6004 provides hardware encryption, radio aware routing (RAR) with support for the latest Dynamic Link Exchange Protocol (DLEP), support for IPv6, integrated threat control with integrated Cisco IOS® firewalls and Intrusion Prevention System (IPS), and Quality of Service (QoS).

The XPand6004 is packaged in a conduction-cooled, horizontally oriented enclosure with two D38999 front-panel connectors. It is also available in natural convection-cooled or forced-air-cooled enclosures in horizontal or vertical orientations. The XPand6004 is designed to meet MIL-STD-810/461 environmental and EMI requirements to enable it to be deployed quickly into demanding environments.

  • Runs Cisco IOS® software
  • Cisco® Unified Communications Manager Express (CME) support
  • Cisco® Mobile Ready Net, which allows for mobile ad hoc networking and radio aware routing
  • Hardware acceleration
  • Hardware encryption
  • Integrated threat control using Cisco IOS Firewall, Cisco IOS® Zone-based Firewall, Cisco IOS® Intrusion Prevention System (IPS), and Cisco IOS® Content Filtering
  • Identity management using authentication, authorization, and accounting (AAA) and public key infrastructure
  • Dimensions: 7.70 in. (L) x 4.88 in. (W) x 1.90 in. (H)
  • Four 10/100/1000 Ethernet ports via D38999 connectors
  • Environmental and EMI qualifications
  • Conduction cooling

Hardware Encryption Support

  • Onboard hardware encryption processor supporting IP Security (IPsec)
  • Secure Sockets Layer with transparent LAN services (SSL/TLS)
  • Secure Real-time Transport Protocol (SRTP)
  • Triple Digital Encryption Standard (3DES)
  • Advanced Encryption Standard (AES)
  • Internet Key Exchange (IKE)

Cisco® IP Multiplexing

  • Improve bandwidth efficiency over pps-constrained links

Cisco® Wide Area Application Services (WAAS) Express

  • Bandwidth optimization and application acceleration capabilities
  • Increases remote user productivity, reduces WAN bandwidth costs, and offers investment protection by interoperating with existing Cisco WAAS infrastructure

Routing Protocols

  • Routing Information Protocol (RIP)
  • RIPv2
  • Open Shortest Path First (OSPF)
  • Enhanced Interior Gateway Routing Protocol (EIGRP)
  • Border Gateway Protocol (BGP)
  • Cisco Discovery Protocol
  • IP Policy Routing
  • IP Multicast Protocol Independent Multicast (PIM) Versions 1 and 2
  • Internet Group Management Protocol (IGMP) Versions 1 and 2
  • IP Multicast Load Splitting
  • Four, 10/100/1000 Mbps, IEEE 802.3-compliant, Ethernet controllers
  • Cisco® Group Management Protocol (GMP)


  • Up to 32 VLANs supported per router

IPv4 and IPv6

  • IPv6 routing and Cisco Express Forwarding switching
  • IPv6 QoS
  • IPv6 tunneling support
  • Zone-based Firewall for IPv6 traffic


  • Point-to-Point Protocol (PPP)
  • PPP over Ethernet (PPPoE) client and server for Fast Ethernet
  • 802.1q VLAN trunking support
  • Generic Routing Encapsulation (GRE)
  • Additional protocol support

Radio Aware Routing

  • Optimizes IP routing over fixed or temporary radio networks
  • Factors radio link metrics into route calculations
  • Immediately recognizes and adapts to changes in network neighbor status
  • Dynamic Link Exchange Protocol (DLEP)
  • Router Radio Control Protocol (R2CP)
  • RFC 5578 (authored by Cisco)

Mobile Ad Hoc Networks

  • OSPFv3 enhancements for mobile ad hoc networks

Mobile IP

  • Home agent and mobile router redundancy
  • Mobile router preferred interfaces
  • Mobile router reverse tunneling
  • Mobile router asymmetric links
  • Mobile router static and dynamic networks
  • Static co-located care-of address
  • Authentication, authorization, and accounting (AAA) server
  • Cisco Mobile Networks Network Address Translation (NAT) Traversal over Mobile IP
  • Support for Mobile IP tunnel templates, allowing configuration of IP Multicast and IPsec on Mobile IP tunnels
  • Mobile IP foreign agent local routing optimization

Next Generation Encryption

  • Suite-B support in IOS SW crypto including Suite-B-GCM-128, Suite-B-GCM-256, Suite-B-GMAC-128, Suite-B-GMAC-256 as described in RFC-4869


  • Route and router authentication
  • Password Authentication Protocol (PAP)
  • Challenge Handshake Authentication Protocol (CHAP)
  • Microsoft CHAP (MS-CHAP) local password
  • IP basic and extended access lists
  • Time-based access control lists (ACLs)

Secure Connectivity

  • Secure collaborative communications with Group Encrypted Transport VPN, Dynamic Multipoint VPN (DMVPN), or Enhanced Easy VPN

Integrated Threat Control

  • Responding to sophisticated network attacks and threats using Cisco IOS® Firewall, Cisco IOS® Zone-based Firewall, Cisco IOS® IPS, Cisco IOS® Content Filtering, and Flexible Packet Matching (FPM)

Identity Management

  • Intelligently protecting endpoints using technologies such as authentication, authorization, and accounting (AAA) and public key infrastructure (PKI)

Traffic Management

  • QoS
  • Generic traffic shaping
  • Class-based Ethernet matching and mobile access routing (802.1p Class of Service [CoS])
  • Committed access rate
  • Flow-based Weighted Random Early Detection (WRED)
  • Class-based Weighted Fair Queuing (WFQ)
  • Low Latency Queuing (LLQ)
  • Priority Queuing
  • Weighted Fair Queuing (WFQ)
  • Link Fragmentation and Interleaving (LFI)
  • Traffic Policing Resource Reservation Protocol (RSVP)

Security Protocols

  • IP Security (IPsec)
  • Secure Sockets Layer with transparent LAN services (SSL/TLS)
  • Secure Real-time Transport Protocol (SRTP)
  • Triple Digital Encryption Standard (3DES)
  • Advanced Encryption Standard (AES)
  • Internet Key Exchange (IKE)

Unified Communications

  • Cisco® Unified Communications Manager Express with support for up to 150 phones

Management Services

  • Simple Network Management Protocol (SNMP) Versions 2 and 3
  • Telnet
  • Console port
  • Cisco® Service Assurance Agent
  • Syslog
  • Response Time Reporter
  • Network Time Protocol (NTP) Client
  • Trivial File Transfer Protocol (TFTP) Client and Server
  • Dynamic Host Configuration Protocol (DHCP) Client and Server
  • DHCP Relay
  • Hot Standby Router Protocol (HSRP)

Tool Command Language (Tcl) scripts

  • Tcl script support

Address Conservation

  • NAT Many-to-One (Port Address Translation [PAT])
  • NAT Many-to-Many (Multi-NAT)
  • DHCP Client Address Negotiation
  • Easy IP Phase I

I/O Interfaces

  • Four 10/100/1000 routed Gigabit Ethernet ports supporting auto-negotiation
  • One console port supporting RS-232 signaling
  • One AUX serial port supporting RS-232/422 signaling plus handshaking

Front Panel I/O

  • Two D38999 connectors


  • MIL-STD-704 28 VDC
  • MIL-STD-461 EMI filtering
  • Integrated internal hold-up (optional)
  • Additional power supply options available

Physical Characteristics

  • Weighs less than 3.5 lbs. (fully populated)
  • Dimensions: 7.70 in. (L) x 4.88 in. (W) x 1.90 in. (H)


  • Designed to meet the rigorous standards of MIL-STD-810


  • Cable (90000075) - Serial, Micro D to DB-9, F to M, 3 ft.