Cisco WS-C3550-12G Switch Guide - Page 118

Applications Control Engine Module-30, IPsec VPN Shared Port Adapter

Page 118 highlights

Modular Switches: Cisco Catalyst 6500 Series Applications Control Engine Module-30 This module is Cisco's next-generation application delivery solution, providing the industry's highest throughput (up to 16 Gigabits per second), rich multilayer security, and unique virtual partitioning capabilities. The ACE multiservice module offers many new capabilities, including hundreds of virtual partitions, per-partition resource allocation, rolebased access control, and an XML management API. • Partitions network for up to 250 logical devices that can be managed and operated separately. Role-based access control capabilities enable IT to delegate management tasks to distributed IT teams, guarantee resource levels for each logical partition, and apply desired functions to each partition separately. • Allows IT to control the infrastructure centrally while delegating application administration to separate operational teams. Also simplifies application infrastructures, shortens the workflow necessary to bring applications and business services online, and shortens time-to-deployment of applications. • Also consolidates functionality such as server load balancing and off-load, application acceleration, and application-layer security. • Supports 4, 8, or 16 Gbps of data throughput and up to 345,000 sustained connection setups per second. Several ACE modules can be deployed in a Catalyst 6500 chassis for even higher throughput. Cisco Security Service Modules • Cisco Catalyst 6500 Series switches support a variety of high-performance security modules that protect networks from the full range of threats, while also simplifying management and reducing overhead by consolidating security services into the switching chassis. IPsec VPN Shared Port Adapter This module delivers scalable and cost-effective VPN performance with Data Encryption Standard (DES), Triple Data Encryption Standard (3DES), plus next-generation Advanced Encryption Standard (AES) technology, including all key sizes (128-, 192-, and 256-bit keys) for ultimate in IPsec VPN security and interoperability. • Provides up to 2.5 Gbps of AES and 3DES IPsec throughput with large packets and 1.6 Gbps with Internet mix (IMIX) traffic. • Up to 10 Cisco IPsec VPN SPAs can be installed in a system, scaling to 25 Gbps of total throughput for wire-speed security transport for native 10 Gigabit Ethernet (10 GBE) interfaces. • Using the Cisco Services SPA Carrier-400, each slot of the Cisco Catalyst 6500 supports up to two IPsec VPN SPAs, increasing total performance per slot. 116

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278

Applications Control Engine Module-30
This module is Cisco’s next-generation application
delivery solution, providing the industry’s highest
throughput (up to 16 Gigabits per second), rich
multilayer security, and unique virtual partitioning
capabilities. The ACE multiservice module offers
many new capabilities, including hundreds of virtual
partitions, per-partition resource allocation, role-
based access control, and an XML management API.
• Partitions network for up to 250 logical devices
that can be managed and operated separately.
Role-based access control capabilities enable IT
to delegate management tasks to distributed IT
teams, guarantee resource levels for each logical
partition, and apply desired functions to each
partition separately.
• Allows IT to control the infrastructure centrally
while delegating application administration
to separate operational teams. Also simplifies
application infrastructures, shortens the workflow
necessary to bring applications and business
services online, and shortens time-to-deployment
of applications.
• Also consolidates functionality such as server load
balancing and off-load, application acceleration,
and application-layer security.
• Supports 4, 8, or 16 Gbps of data throughput and
up to 345,000 sustained connection setups per
second. Several ACE modules can be deployed
in a Catalyst 6500 chassis for even higher
throughput.
Modular Switches: Cisco Catalyst 6500 Series
116
• Cisco Catalyst 6500 Series switches support a variety of high-performance security modules that protect
networks from the full range of threats, while also simplifying management and reducing overhead by
consolidating security services into the switching chassis.
Cisco Security Service Modules
This module delivers scalable and cost-effective
VPN performance with Data Encryption Standard
(DES), Triple Data Encryption Standard (3DES), plus
next-generation Advanced Encryption Standard
(AES) technology, including all key sizes (128-, 192-,
and 256-bit keys) for ultimate in IPsec VPN security
and interoperability.
• Provides up to 2.5 Gbps of AES and 3DES IPsec
throughput with large packets and 1.6 Gbps with
Internet mix (IMIX) traffic.
• Up to 10 Cisco IPsec VPN SPAs can be installed
in a system, scaling to 25 Gbps of total throughput
for wire-speed security transport for native 10
Gigabit Ethernet (10 GBE) interfaces.
• Using the Cisco Services SPA Carrier-400, each
slot of the Cisco Catalyst 6500 supports up to two
IPsec VPN SPAs, increasing total performance
per slot.
IPsec VPN Shared Port Adapter