Cisco 2801 - Integrated Services Router Lembar data - Halaman 5
Jelajahi secara online atau unduh pdf Lembar data untuk Router Jaringan Cisco 2801 - Integrated Services Router. Cisco 2801 - Integrated Services Router 20 halaman. 2800 series integrated services routers
Juga untuk Cisco 2801 - Integrated Services Router: Panduan Pengguna (29 halaman), Panduan Memulai Cepat (47 halaman)
Halaman Cetak
Feature
Dual AIM slots
Packet voice DSP module (PVDM)
slots on motherboard
Extension-voice-module (EVM)
slot
Secure Networking–Feature and Benefits
The Cisco 2800 Series features enhanced security functionality as shown in Table 3. Integrated on the motherboard of every Cisco 2800 Series
router is hardware-based encryption acceleration that offloads the encryption processes to provide greater IPsec throughput with less overhead
for the router CPU when compared with software-based solutions. With the integration of optional VPN modules (for enhanced VPN tunnel
count), Cisco IOS Software-based firewall, network access control, or content-engine network modules, Cisco offers the industry's most robust
and adaptable security solution for branch-office routers.
Table 3.
Secure Networking—Feature and Benefits
Feature
Cisco IOS Software
Firewall
Onboard VPN encryption
acceleration
Network Admissions
Control (NAC)
Multiprotocol Label
Switching (MPLS) VPN
support
Onboard USB 1.1 port(s)
AIM-based security
acceleration
Intrusion Prevention
System (IPS)
Cisco Easy VPN remote
and server support
Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com.
Benefit
Dual AIM slots support concurrent services such as hardware-accelerated security, ATM
segmentation and reassembly (SAR), compression, and voice mail (Refer to Table 7 for more
details on specific platform support).
Slots for Cisco PVDM2 Modules (DSP Modules) are integrated on the motherboard, freeing slots
on the router for other services.
The EVM supports additional voice services and density without consuming the network-module
slot (Note: available only on Cisco 2821 and 2851).
Benefit
Sophisticated security and policy enforcement provides features such as stateful, application-based filtering
(context-based access control), per-user authentication and authorization, real-time alerts, transparent
firewall, and IPv6 firewall.
The Cisco 2800 Series supports IPsec Digital Encryption Standard (DES), Triple DES (3DES), Advanced
Encryption Standard (AES) 128, AES 192, and AES 256 cryptology without consuming an AIM slot.
A Cisco Self-Defending Network initiative, NAC seeks to dramatically improve the ability of networks to
identify, prevent, and adapt to threats by allowing network access only to compliant and trusted endpoint
devices.
The Cisco 2800 Series supports specific provider edge functions plus a mechanism to extend customers'
MPLS VPN networks out to the customer edge with virtual routing and forwarding (VRF) firewall and
VRF IPsec. For details on the MPLS VPN support on the different versions of the Cisco 2800 Series,
please check the feature navigator tool on www.cisco.com.
The USB port(s) will be used for future capabilities and will initially support secure token and flash memory
Support for an optional dedicated security AIM can deliver 2 to 3 times the performance of embedded
encryption capabilities with Layer 3 compression.
Flexible support is offered through Cisco IOS
(IDS) network module.
The ability to load and enable selected IDS signatures in the same manner as Cisco IDS Sensor Appliances
The Cisco 2800 Series eases administration and management of point-to-point VPNs by actively pushing
new security policies from a single headend to remote sites.
© 2004 Cisco Systems, Inc. All rights reserved.
®
Software or a high-performance intrusion-detection-system
Page 5 of 19