Grandstream GCC6020 Router, PBX, Switch and Firewall

The Grandstream GCC6020 puts four separate products in one box: a VPN router, a next-generation firewall, an IP PBX and a network switch.

The argument for it is the comms cupboard, not the spec sheet. A small business normally buys a router, a firewall, a phone system and a switch from up to four vendors, each with its own power supply, its own web interface, its own firmware schedule and its own support contract. This is one device, one interface, one thing to patch — and one thing to blame when something breaks, which matters more than it sounds.

Ports: four Gigabit, one 2.5 Gigabit and one 10 Gigabit SFP+. The firewall is a real one — anti-virus, layer 3-7 IDS/IPS, deep packet inspection and SSL detection — not a NAT with a checkbox. It supports hot standby high availability and multi-WAN with load balancing and failover.

Key features

• Four products in one — VPN router, firewall, IP PBX and switch
• Built-in IP PBX — voice and video with collaboration features
• Next-generation firewall — anti-virus, layer 3-7 IDS/IPS, DPI, SSL detection
• 4 Gigabit ports, 1 × 2.5 Gigabit, 1 × 10 Gigabit SFP+
• Multi-WAN — load balancing and failover across several connections
• Hot standby high availability
• Built-in VPN router — link sites without extra hardware
• One web interface for all of it

Works with

• GCC6021 — 16 Gigabit, 8 × 2.5G and 4 × 10G SFP+
• GCC6011 — the smaller series, 10 Gigabit ports
• Grandstream IP phones — the extensions on the built-in PBX
• Grandstream GWN access points
• Grandstream UCM IP PBX range — if you want the PBX separate

Frequently asked questions

Is one box for everything actually a good idea?

For a small or medium site, usually yes — one interface, one firmware schedule, one support route, and far less to go wrong at the interfaces between vendors. The honest counter-argument is that a single device is a single point of failure, which is exactly why this one supports hot standby.

Is the firewall a real firewall?

Yes — anti-virus, layer 3-7 intrusion detection and prevention, deep packet inspection and SSL detection. That is a different category from the NAT firewall in a consumer router.

Is the PBX as capable as a UCM?

It is a full IP PBX with voice, video and collaboration features. If you need the very largest call capacities or a lot of analogue ports, a dedicated UCM is still the right answer — tell us the extension and call counts and we will say honestly which fits.

GCC6020 or GCC6021?

Switch size. The 6020 has four Gigabit ports, one 2.5G and one 10G SFP+; the 6021 has sixteen Gigabit, eight 2.5G and four 10G SFP+. If a separate switch is going in anyway, the 6020 is enough.

What does hot standby give me?

A second unit ready to take over if the first fails. On a device carrying the phones, the internet and the firewall, that is worth costing properly.

Do I still need a SIP provider?

Yes. The built-in PBX is the phone system, not the phone lines — it connects to your SIP trunk provider.

Consolidating a comms cupboard? Call 0333 242 1314 or email sales@clisecure.com — tell us what is in there now and we will work out whether one box genuinely covers it.