Cisco Systems 870 Router User Manual


 

Cisco 2800 Series


• Control Plane Policing (CPP)
• AutoSecure
• CPU/Memory Threshold
• Secure Shell (SSH)
• Access Control List (ACL)
• Command Line Interface (CLI)
• Committed Access Rate (CAR)

• Onboard with an optional content-engine
network module
• Local URL ltering in Cisco IOS software
based on external server

• 1 or 2 onboard USB 11 ports
• Secure token and Flash memory support

• Network Admission Control (NAC)
• Voice and Video Enabled IPSec VPN (V3PN)

• IDS/IPS Network Modules (NM-CIDS portfolio)
• VPN and Encryption Advanced Integration
Modules (AIM-VPN portfolio)
• Content Engine Network Modules (NM-CE
portfolio)

• Ships by default

• ICSA IPSec
• ICSA Firewall
• Common Criteria IPSec (EAL4) (in process)
• Common Criteria Firewall (EAL4+) (in process)
• FIPS 140-2, Level 2 (in process)
expands the potential applications of the Cisco
2800 Series beyond traditional routing, while
maintaining the benefits of integration

Integrated on the motherboard of every
Cisco 2800 Series router is hardware-based
encryption acceleration that offloads the
encryption processes to provide greater IPSec
throughput with less overhead for the router
CPU, when compared with software-based
solutions With the optional integration of VPN
modules (for enhanced performance and tunnel
count), content engine network modules for URL
filtering, or intrusion-prevention network modules,
combined with the rich Cisco IOS Software
security feature set that includes firewall,
network admission control (NAC), voice and
video-enabled VPN (V3PN), intrusion prevention,
and Dynamic Multipoint VPN (DMVPN), Cisco
offers the industry’s most robust and adaptable
security solution for branch-office routers

The Cisco 2800 Series allows network managers
to provide scalable analog and digital telephony
without investing in a one-time solution, giving
enterprises greater control of their converged
telephony needs Using voice and fax modules,
the Cisco 2800 Series can be deployed for
applications ranging from voice over IP (VoIP)
and voice over Frame Relay (VoFR) transport
to robust, centralized solutions using the Cisco
Survivable Remote Site Telephony (SRST)
solution or distributed call processing using
Cisco CallManager Express (CCME) The
architecture is highly scalable with the ability to
support up to 96 IP phones, 12 T1/E1s trunks,
52 foreign-exchange-station (FXS) ports, or 36
foreign-exchange-office (FXO) ports concurrent
with data routing and other services
Cisco 2800 Series
38



• Advanced Encryption Standard (AES) 128, 192,
and 256; Triple Data Encryption Standard
(3DES); and DES cryptology support
• Embedded hardware-based VPN acceleration
on the motherboard
• Cisco Easy VPN remote; Cisco Easy VPN server
• Dynamic Multipoint VPN (DMVPN)
• Virtual Tunnel Interfaces (VTI)
• VPN QoS—Preclassication support
• Support for up to 1500 VPN tunnels with the
AIM-VPN module

• Specic provider edge capabilities
• Virtual Routing and Forwarding (VRF) rewall
and VRF IPSec

• Inline ability to drop packet, reset connection,
locally shun, or send an alarm; dynamically
load and enable selected attack signatures in
the same manner as Cisco IPS Appliances

• Secure remote access for mobile users
without installing PC client software
• Integrated into the router—no separate
appliance required
• Cisco 2801 supports up to 25 users, Cisco
2811 and 2821 support up to 50 users, and
Cisco 2851 supports up to 75 users
• Requires IOS WebVPN feature license
FL-WEBVPN-10 or FL-WEBVPN-25 (purchase
multiple quantities to add up to the desired
number of users)
• Requires an IOS security feature set (IOS
security feature set is included in all secure
router bundles)

• Feature rich, stateful rewall
• Per-user authentication and authorization
• Real-time alerts
• Transparent rewall
• IPv6 rewall
• VRF-Aware rewall
• Advanced Application Inspection and Control
– HTTP inspection engine
– E-mail inspection engines (SMTP, ESMTP,
IMAP, POP)
39
 


Specic Provider Edge (PE) capabilities

More than 1600 IPS signatures supported in Cisco IOS Software,
with the ability to load and enable selected IPS signatures
Optional high-performance IPS Network Module with more than
2000 signatures

Onboard ltering with an optional content engine network module
Local URL ltering in Cisco IOS Software based on external server



Comes standard on all Cisco 2800 Series routers

Standards-based authentication and encryption using secure RTP
provides a secure environment for IP Communications
Advanced Encryption Standard (AES) 256-bit cryptography support


Optional integrated power supply with inline power, 8023af support
Up to 360W of inline power (Note: requires power supply upgrade)

One EVM on the Cisco 2821 and Cisco 2851
Up to 52 FXS and 36 FXO ports

Up to 192 calls


Up to three DSP slots on motherboard
Local Conferencing and Transcoding

Up to 96 phones