Cisco 2811 Router Guide - Page 69

Simplified Network Convergence - router commands

Page 69 highlights

Cisco 7200 Series voice over IP, security, and various other IP applications due to its exceptionally broad feature offerings. As a 1-RU form factor of a Cisco 7200 VXR Series, the Cisco 7201 provides packet forwarding speeds up to 2 Mpps. It also offers extensive port and service adapter support. In comparison to the Cisco 7200 VXR Series with NPE-G2 engine, the Cisco 7201 provides an additional fourth built-in Ethernet ports (10/100/1000) with support for one port adapter. The Cisco 7201 also supports AC and DC power supply with the option of dual DC power supply. The Cisco 7201 is most attractive to customers looking for the functionality and performance of Cisco 7200 VXR Series routers, but less concerned with port density than a compact form factor and lower power consumption. Cisco 7301 continues to be available for applications where performance above 1 Mpps is not required. Benefits and Advantages Compact Form Factor The Cisco 7200 VXR Series can support up to seven port/service adapters when utilizing the port adapter jacket card in its fully modular 3-RU form factor chassis. Up to 16 chassis can be supported in a 7' rack. The Cisco 7201 is the most powerful 1-RU router solution in the industry. Exceptional Value As the most powerful Cisco single-processor platform, the Cisco 7200 VXR Series offers customers a superior price/performance ratio supporting high-speed media and high-density configurations with up to 2 million packets per second processing at a competitive price point. Simplified Network Convergence The Cisco 7200 VXR Series' Multiservice Interchange (MIX)-enabled backplane allows for integration of data, voice, and video in a single WAN Edge device. With the latest Quality of Service (QoS) features, the Cisco 7200 VXR Series enables enterprises to save money by bypassing their carrier's long distance charges. VPN Support The dedicated VPN acceleration adapters supported in Cisco 7200 VXR and 7201 routers enable an integrated solution for routing and security including QoS, multicast, and multiprotocol traffic across the VPN. Utilizing the VPN Acceleration Module (SA-VAM2+) or VPN Services Adapter (C7200-VSA), the Cisco 7200 VXR series delivers up to 600 Mbps for the most demanding head-end, site-to-site VPN deployments. Cisco 7200 VXR and 7201 routers provide an integrated security solution which includes IPsec, FW, and IDS features sets. Enhanced Security Cisco 7200 VXR and Cisco 7201 routers help ensure the highest levels of network security. All Cisco 7200 Series routers support integrated SSL VPN, access control lists (ACLs), Network Address Translation (NAT), full NetFlow, firewall, intrusion prevention systems, IP Service Level Agreements (IP SLA), and a new category of IPsec Virtual Private Network (GET VPN) that eliminates the need for tunneling and enables higher levels of scalability. 134 Benefits and Advantages continued Cisco 7200 Series Maximum ROI A low price point makes the Cisco 7200 Series very attractive, while allowing customers to easily upgrade and redeploy their equipment as network needs change. Connectivity/Flexibility Providing high port density and an extensive range of LAN and WAN media, plus the three built-in GbE ports on the NPE-G1 and NPE-G2 engines, the Cisco 7200 Series dramatically reduces the cost per port and allows for flexible configurations to meet customers' specific network needs. Feature-Rich Full support for Cisco IOS Software and enhancements for high-performance network services enables the Cisco 7200 to offer industryleading network services including MPLS, broadband aggregation, quality of service, security, and voice services. Common Port Adapters The Cisco 7200 VXR series shares the majority of the port adapters with Cisco 7201, Cisco 7301, Cisco 7304, Cisco 7500 Series, and Cisco 7600 Series routers, which simplifies inventory management and increases investment protection. Security Features IPsec VPN • Advanced Encryption Standard (AES) 128, 192, and 256; Triple Data Encryption Standard (3DES); and DES cryptology support • Cisco Easy VPN remote • Cisco Easy VPN server • Group Encrypted Transport VPN (GET VPN) • Dynamic Multipoint VPN (DMVPN) • Virtual Tunnel Interfaces (VTI) • 802.1x • VPN QoS-Preclassification support • Support for up to 5000 IPsec tunnels Multiprotocol Label Switching (MPLS) VPN Support • Comprehensive provider edge capabilities • Virtual routing and forwarding (VRF) firewall and VRF IPsec Cisco IOS IPS • Inline ability to drop packet, reset connection, locally shun, or send an alarm • Dynamically load and enable selected attack signatures in the same manner as Cisco IPS Appliances Network Foundation Protection • Control Plane Policing (CPP) • AutoSecure • CPU/Memory Threshold • Secure Shell (SSH) • Access Control List (ACL) • Command Line Interface (CLI) • Committed Access Rate (CAR) Cisco IOS Firewall • Feature rich, stateful firewall • Per-user authentication and authorization • Real-time alerts • Transparent firewall • IPv6 firewall • VRF-aware firewall • Advanced Application Inspection and Control - HTTP inspection engine - E-mail inspection engines (SMTP, ESMTP, IMAP, POP) IOS WebVPN (SSL VPN) • Secure remote access for mobile users without installing PC client software • Integrated into the router-no separate appliance required • Cisco 7204VXR, Cisco 7206VXR, and Cisco 7201 routers support up to 150 users • Requires IOS WebVPN feature license (licenses are per user) FL-WEBVPN-10, FL-WEBVPN-25 or FL-WEBVPN-100 (licenses are per user, purchase multiple quantities to add up to the desired number of users) • Requires an IOS security feature set (IOS security feature set is included in all secure router bundles) URL Filtering • Local URL filtering in Cisco IOS software based on external server 135

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111

134
voice over IP, security, and various other IP applications due to its exceptionally
broad feature offerings.
As a 1-RU form factor of a Cisco 7200 VXR Series, the Cisco 7201 provides packet
forwarding speeds up to 2 Mpps. It also offers extensive port and service adapter
support. In comparison to the Cisco 7200 VXR Series with NPE-G2 engine, the
Cisco 7201 provides an additional fourth built-in Ethernet ports (10/100/1000)
with support for one port adapter. The Cisco 7201 also supports AC and DC power
supply with the option of dual DC power supply.
The Cisco 7201 is most attractive to customers looking for the functionality and
performance of Cisco 7200 VXR Series routers, but less concerned with port
density than a compact form factor and lower power consumption. Cisco 7301
continues to be available for applications where performance above 1 Mpps is
not required.
Benefits and Advantages
Compact Form Factor
The Cisco 7200 VXR Series can support up to
seven port/service adapters when utilizing the port
adapter jacket card in its fully modular 3-RU form
factor chassis. Up to 16 chassis can be supported
in a 7’ rack. The Cisco 7201 is the most powerful
1-RU router solution in the industry.
Exceptional Value
As the most powerful Cisco single-processor
platform, the Cisco 7200 VXR Series offers
customers a superior price/performance ratio
supporting high-speed media and high-density
configurations with up to 2 million packets per
second processing at a competitive price point.
Simplified Network Convergence
The Cisco 7200 VXR Series’ Multiservice
Interchange (MIX)-enabled backplane allows for
integration of data, voice, and video in a single WAN
Edge device. With the latest Quality of Service
(QoS) features, the Cisco 7200 VXR Series enables
enterprises to save money by bypassing their
carrier’s long distance charges.
VPN Support
The dedicated VPN acceleration adapters
supported in Cisco 7200 VXR and 7201 routers
enable an integrated solution for routing and
security including QoS, multicast, and multiprotocol
traffic across the VPN. Utilizing the VPN
Acceleration Module (SA-VAM2+) or VPN Services
Adapter (C7200-VSA), the Cisco 7200 VXR series
delivers up to 600 Mbps for the most demanding
head-end, site-to-site VPN deployments. Cisco
7200 VXR and 7201 routers provide an integrated
security solution which includes IPsec, FW, and IDS
features sets.
Enhanced Security
Cisco 7200 VXR and Cisco 7201 routers help
ensure the highest levels of network security.
All Cisco 7200 Series routers support integrated
SSL VPN, access control lists (ACLs), Network
Address Translation (NAT), full NetFlow, firewall,
intrusion prevention systems, IP Service Level
Agreements (IP SLA), and a new category of IPsec
Virtual Private Network (GET VPN) that eliminates
the need for tunneling and enables higher levels of
scalability.
Cisco 7200 Series
Cisco 7200 Series
Benefits and Advantages
continued
Maximum ROI
A low price point makes the Cisco 7200 Series
very attractive, while allowing customers to easily
upgrade and redeploy their equipment as network
needs change.
Connectivity/Flexibility
Providing high port density and an extensive range
of LAN and WAN media, plus the three built-in GbE
ports on the NPE-G1 and NPE-G2 engines, the
Cisco 7200 Series dramatically reduces the cost
per port and allows for flexible configurations to
meet customers’ specific network needs.
Feature-Rich
Full support for Cisco IOS Software and
enhancements for high-performance network
services enables the Cisco 7200 to offer industry-
leading network services including MPLS,
broadband aggregation, quality of service, security,
and voice services.
Common Port Adapters
The Cisco 7200 VXR series shares the majority
of the port adapters with Cisco 7201, Cisco
7301, Cisco 7304, Cisco 7500 Series, and Cisco
7600 Series routers, which simplifies inventory
management and increases investment protection.
Security Features
135
IPsec VPN
• Advanced Encryption Standard (AES) 128, 192,
and 256; Triple Data Encryption Standard (3DES);
and DES cryptology support
• Cisco Easy VPN remote
• Cisco Easy VPN server
• Group Encrypted Transport VPN (GET VPN)
• Dynamic Multipoint VPN (DMVPN)
• Virtual Tunnel Interfaces (VTI)
• 802.1x
• VPN QoS—Preclassification support
• Support for up to 5000 IPsec tunnels
Multiprotocol Label Switching (MPLS) VPN Support
• Comprehensive provider edge capabilities
• Virtual routing and forwarding (VRF) firewall and
VRF IPsec
Cisco IOS IPS
• Inline ability to drop packet, reset connection,
locally shun, or send an alarm
• Dynamically load and enable selected attack
signatures in the same manner as Cisco IPS
Appliances
Network Foundation Protection
• Control Plane Policing (CPP)
• AutoSecure
• CPU/Memory Threshold
• Secure Shell (SSH)
• Access Control List (ACL)
• Command Line Interface (CLI)
• Committed Access Rate (CAR)
Cisco IOS Firewall
• Feature rich, stateful firewall
• Per-user authentication and authorization
• Real-time alerts
• Transparent firewall
• IPv6 firewall
• VRF-aware firewall
• Advanced Application Inspection and Control
– HTTP inspection engine
– E-mail inspection engines (SMTP, ESMTP,
IMAP, POP)
IOS WebVPN (SSL VPN)
• Secure remote access for mobile users
without installing PC client software
• Integrated into the router—no separate
appliance required
• Cisco 7204VXR, Cisco 7206VXR, and Cisco 7201
routers support up to 150 users
• Requires IOS WebVPN feature license (licenses
are per user) FL-WEBVPN-10, FL-WEBVPN-25 or
FL-WEBVPN-100 (licenses are per user, purchase
multiple quantities to add up to the desired
number of users)
• Requires an IOS security feature set (IOS
security feature set is included in all secure
router bundles)
URL Filtering
• Local URL filtering in Cisco IOS software based
on external server