Cisco 2811 Router Guide - Page 15

Cisco 880 Series Benefits and Advantages continued Cisco SDM and Cisco IOS Software for Remote Management Using smart wizards and task-based tutorials, Cisco Security Device Manager (SDM) helps resellers and customers quickly and easily deploy, configure, and monitor a Cisco access router without requiring knowledge of the Cisco IOS Software Command-Line Interface (CLI). Dial backup and out-of-band management allow IT managers to remotely manage the router at small office and teleworker sites. Cisco Configuration Express Service supports factory-loaded configurations in high-volume deployments. Support for the Cisco Configuration Engine enables plug-and-play installations with centralized configuration management. SRST (supported on SRST models) SRST provides business continuity for voice when the WAN link fails by switching calls to the PSTN. Cisco Configuration Professional Cisco Configuration Professional uses smart wizards and task-based tutorials, which resellers and customers can use to quickly and easily deploy, configure, and monitor a Cisco access router without requiring knowledge of the Cisco IOS Software command-line interface (CLI). Unified Wireless Management • Configuration and management of access points is automated and simplified without manual intervention. • A unified hybrid remote-edge access point (HREAP) provides the following: - WLAN services to remote and branch offices without deploying a wireless LAN controller at each location. - Central configuration and control of unified WLAN services for remote offices through a WAN link. - Flexibility in setting up wireless access at remote locations by specifying how traffic is to be bridged or tunneled. Security Features Cisco 880 Security Connectivity • Secure Sockets Layer (SSL) VPN for secure remote access • Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256 • Public-key-infrastructure (PKI) support • 20 IPsec tunnels • Cisco Easy VPN Client and Server • NAT transparency • DMVPN • Tunnel-less Group Encrypted Transport VPN (GETVPN) • IPsec stateful failover • VRF-aware IPsec • IPsec over IPv6 • Adaptive control technology • Session Initiation Protocol (SIP) application layer gateway Zone-based Policy Firewall • Stateful inspection transparent firewall • Advanced application inspection and control • HTTPS, FTP, and Telnet authentication proxy • Dynamic and static port security • Firewall stateful failover • VRF-aware firewall • Cisco Easy VPN Client and Server • IPsec 3DES termination/initiation • IPsec pass-through • Point-to-Point Tunneling Protocol (PPTP) pass-through • L2TP pass-through • 802.1X • Secure HTTP (HTTPS), FTP, and Telnet authentication proxies • Dynamic Multipoint VPN (DMVPN), SSL VPN, and Group Encrypted Transport (GET VPN) 26 Security Features continued Cisco 880 Series Content Filtering • Subscription-based content filtering with Trend Micro • Support for Websense and Smartfilter • Cisco IOS Software black and white lists WLAN Features Integrated Threat Control • IPS • Control Plane Policing • Flexible Packet Matching •Network foundation protection WLAN Hardware • IEEE 802.11n draft 2.0 standards-based access point with 802.11 b/g compatibility • Automatic rate selection for 802.11g/n • Captive omnidirectional 2-dBi gain dipole antennas • 2 x 3 MIMO radio operation • Removable antennas on Cisco 881W models • WiFi 802.11n Draft v2.0 certified WLAN Software Features • Autonomous or unified access point • Cisco WCS support for monitoring of autonomous-mode access points • Option to maximize throughput or maximize range • Software-configurable transmit power • Radio roles, including access point, root bridge, nonroot bridge, and workgroup bridge • WiFi Multimedia (WMM) certification • Traffic specifications (TSPEC) Call Admission Control (CAC) to ensure voice quality is maintained • Unscheduled Automatic Power Save Delivery (UPSD) to reduce latency WLAN Security Features • Standard 802.11i • WPA and AES (WPA2) • EAP authentication: Cisco LEAP, PEAP, Extensible Authentication Protocol Transport Layer Security (EAP TLS), Extensible Authentication ProtocolFlexible Authentication via Secure Tunneling (EAP-FAST), Extensible Authentication ProtocolSubscriber Information Module (EAP-SIM), Extensible Authentication Protocol-Message Digest Algorithm 5 (EAP-MD5), and Extensible Authentication Protocol-Tunneled TLS (EAP-TTLS) • Static and dynamic Wired Equivalent Privacy (WEP) • Temporal Key Integrity Protocol/Simple Security Network (TKIP/SSN) encryption • MAC authentication and filter • User database for survivable local authentication using LEAP and EAP-FAST • Configurable limit to the number of wireless clients • Configurable RADIUS accounting for wireless clients • Pre-Shared Keys (PSKs) (WPA-small office or home office [WPA-SOHO]) Features on Cisco 880 SRST Series • SRST 7.0 and later • Up to 4 voice channels • H.323 Versions 1, 2, 3, and 4, Media Gateway Control Protocol (MGCP) 0.1 and 1.0, Skinny Client Control Protocol (SCCP), and SIP call-control protocols • G.711, G.729, G.729a/b, G.723.1, G.726, and G.728 • Cisco Unified Communications Manager support for analog and digital ports with Releases 6.1(3), 7.0(2), and 7.1(3) • FXS loop-start and ground-start signaling • FXO • Inbound signaling (such as dual-tone multifrequency [DTMF] and multifrequency support) • BRI QSIG • Echo cancellation • Silence suppression and voice activity detection (VAD) • Comfort-noise generation • Caller ID support • Dial-plan mapping • Fax and modem pass-through • Fax Relay • T.37 and T.38 fax protocols 27