Cisco 2811 Series 데이터시트 - 페이지 5

{카테고리_이름} Cisco 2811 Series에 대한 데이터시트을 온라인으로 검색하거나 PDF를 다운로드하세요. Cisco 2811 Series 20 페이지. 2800 series integrated services routers
Cisco 2811 Series에 대해서도 마찬가지입니다: 운영 (31 페이지), 설치 및 업그레이드 (14 페이지), 운영 (31 페이지), 빠른 시작 매뉴얼 (47 페이지)

페이지 인쇄

Feature

Dual AIM slots

Packet voice DSP module (PVDM)

slots on motherboard

Extension-voice-module (EVM)

slot

Secure Networking–Feature and Benefits

The Cisco 2800 Series features enhanced security functionality as shown in Table 3. Integrated on the motherboard of every Cisco 2800 Series

router is hardware-based encryption acceleration that offloads the encryption processes to provide greater IPsec throughput with less overhead

for the router CPU when compared with software-based solutions. With the integration of optional VPN modules (for enhanced VPN tunnel

count), Cisco IOS Software-based firewall, network access control, or content-engine network modules, Cisco offers the industry's most robust

and adaptable security solution for branch-office routers.

Table 3.

Secure Networking—Feature and Benefits

Feature

Cisco IOS Software

Firewall

Onboard VPN encryption

acceleration

Network Admissions

Control (NAC)

Multiprotocol Label

Switching (MPLS) VPN

support

Onboard USB 1.1 port(s)

AIM-based security

acceleration

Intrusion Prevention

System (IPS)

Cisco Easy VPN remote

and server support

Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com.

Benefit

Dual AIM slots support concurrent services such as hardware-accelerated security, ATM

segmentation and reassembly (SAR), compression, and voice mail (Refer to Table 7 for more

details on specific platform support).

Slots for Cisco PVDM2 Modules (DSP Modules) are integrated on the motherboard, freeing slots

on the router for other services.

The EVM supports additional voice services and density without consuming the network-module

slot (Note: available only on Cisco 2821 and 2851).

Benefit

Sophisticated security and policy enforcement provides features such as stateful, application-based filtering

(context-based access control), per-user authentication and authorization, real-time alerts, transparent

firewall, and IPv6 firewall.

The Cisco 2800 Series supports IPsec Digital Encryption Standard (DES), Triple DES (3DES), Advanced

Encryption Standard (AES) 128, AES 192, and AES 256 cryptology without consuming an AIM slot.

A Cisco Self-Defending Network initiative, NAC seeks to dramatically improve the ability of networks to

identify, prevent, and adapt to threats by allowing network access only to compliant and trusted endpoint

devices.

The Cisco 2800 Series supports specific provider edge functions plus a mechanism to extend customers'

MPLS VPN networks out to the customer edge with virtual routing and forwarding (VRF) firewall and

VRF IPsec. For details on the MPLS VPN support on the different versions of the Cisco 2800 Series,

please check the feature navigator tool on www.cisco.com.

The USB port(s) will be used for future capabilities and will initially support secure token and flash memory

Support for an optional dedicated security AIM can deliver 2 to 3 times the performance of embedded

encryption capabilities with Layer 3 compression.

Flexible support is offered through Cisco IOS

(IDS) network module.

The ability to load and enable selected IDS signatures in the same manner as Cisco IDS Sensor Appliances

The Cisco 2800 Series eases administration and management of point-to-point VPNs by actively pushing

new security policies from a single headend to remote sites.

Software or a high-performance intrusion-detection-system

Page 5 of 19