Cisco Systems A9014CFD Router User Manual


 
1-4
Cisco ASR 901 Series Aggregation Services Router Software Configuration Guide
OL-23826-09
Chapter 1 Cisco ASR 901 Router Overview
Features
monitoring, remote fault detection, and remote loopback, and IEEE 802.3ah Ethernet OAM
discovery, link monitoring, remote fault detection, and remote loopback (requires the metro IP
access or metro access image)
Configuration replacement and rollback to replace the running configuration on a router with any
saved Cisco IOS configuration file
CPU utilization threshold logs.
Security Features
Password-protected access (read-only and read-write access) to management interfaces for
protection against unauthorized configuration changes
Configuration file security so that only authenticated and authorized users have access to the
configuration file, preventing users from accessing the configuration file by using the password
recovery process
Multilevel security for a choice of security level, notification, and resulting actions
Automatic control-plane protection to protect the CPU from accidental or malicious overload due to
Layer 2 control traffic on UNIs or ENIs
TACACS+, a proprietary feature for managing network security through a TACACS server
RADIUS for verifying the identity of, granting access to, and tracking the actions of remote users
through authentication, authorization, and accounting (AAA) services
Extended IP access control lists for defining security policies in the inbound direction on physical
ports.
Extended IP access control lists for defining security policies in the inbound and outbound direction
on SVIs.
Quality of Service and Class of Service Features
Configurable control-plane queue assignment to assign control plane traffic for CPU-generated
traffic to a specific egress queue.
Cisco modular quality of service (QoS) command-line (MQC) implementation
Classification based on IP precedence, Differentiated Services Code Point (DSCP), and IEEE
802.1p class of service (CoS) packet fields, or assigning a QoS label for output classification
Policing
One-rate policing based on average rate and burst rate for a policer
Two-color policing that allows different actions for packets that conform to or exceed the rate
Aggregate policing for policers shared by multiple traffic classes
Table maps for mapping CoS, and IP precedence values
Queuing and Scheduling
Class-based traffic shaping to specify a maximum permitted average rate for a traffic class
Port shaping to specify the maximum permitted average rate for a port
Class-based weighted queuing (CBWFQ) to control bandwidth to a traffic class
Low-latency priority queuing to allow preferential treatment to certain traffic