Cisco 2811 Series Scheda tecnica - Pagina 5

Sfoglia online o scarica il pdf Scheda tecnica per Router di rete Cisco 2811 Series. Cisco 2811 Series 20. 2800 series integrated services routers
Anche per Cisco 2811 Series: Operazioni (31 pagine), Installazione e aggiornamento (14 pagine), Operazioni (31 pagine), Manuale di avvio rapido (47 pagine)

Stampa la pagina

Feature

Dual AIM slots

Packet voice DSP module (PVDM)

slots on motherboard

Extension-voice-module (EVM)

slot

Secure Networking–Feature and Benefits

The Cisco 2800 Series features enhanced security functionality as shown in Table 3. Integrated on the motherboard of every Cisco 2800 Series

router is hardware-based encryption acceleration that offloads the encryption processes to provide greater IPsec throughput with less overhead

for the router CPU when compared with software-based solutions. With the integration of optional VPN modules (for enhanced VPN tunnel

count), Cisco IOS Software-based firewall, network access control, or content-engine network modules, Cisco offers the industry's most robust

and adaptable security solution for branch-office routers.

Table 3.

Secure Networking—Feature and Benefits

Feature

Cisco IOS Software

Firewall

Onboard VPN encryption

acceleration

Network Admissions

Control (NAC)

Multiprotocol Label

Switching (MPLS) VPN

support

Onboard USB 1.1 port(s)

AIM-based security

acceleration

Intrusion Prevention

System (IPS)

Cisco Easy VPN remote

and server support

Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com.

Benefit

Dual AIM slots support concurrent services such as hardware-accelerated security, ATM

segmentation and reassembly (SAR), compression, and voice mail (Refer to Table 7 for more

details on specific platform support).

Slots for Cisco PVDM2 Modules (DSP Modules) are integrated on the motherboard, freeing slots

on the router for other services.

The EVM supports additional voice services and density without consuming the network-module

slot (Note: available only on Cisco 2821 and 2851).

Benefit

Sophisticated security and policy enforcement provides features such as stateful, application-based filtering

(context-based access control), per-user authentication and authorization, real-time alerts, transparent

firewall, and IPv6 firewall.

The Cisco 2800 Series supports IPsec Digital Encryption Standard (DES), Triple DES (3DES), Advanced

Encryption Standard (AES) 128, AES 192, and AES 256 cryptology without consuming an AIM slot.

A Cisco Self-Defending Network initiative, NAC seeks to dramatically improve the ability of networks to

identify, prevent, and adapt to threats by allowing network access only to compliant and trusted endpoint

devices.

The Cisco 2800 Series supports specific provider edge functions plus a mechanism to extend customers'

MPLS VPN networks out to the customer edge with virtual routing and forwarding (VRF) firewall and

VRF IPsec. For details on the MPLS VPN support on the different versions of the Cisco 2800 Series,

please check the feature navigator tool on www.cisco.com.

The USB port(s) will be used for future capabilities and will initially support secure token and flash memory

Support for an optional dedicated security AIM can deliver 2 to 3 times the performance of embedded

encryption capabilities with Layer 3 compression.

Flexible support is offered through Cisco IOS

(IDS) network module.

The ability to load and enable selected IDS signatures in the same manner as Cisco IDS Sensor Appliances

The Cisco 2800 Series eases administration and management of point-to-point VPNs by actively pushing

new security policies from a single headend to remote sites.

Software or a high-performance intrusion-detection-system

Page 5 of 19