Cisco 2811 Router Guide - Page 75

Cisco 7301 Series Security Features continued Security Solutions • Network Admission Control (NAC) • Voice and Video Enabled IPsec VPN (V3PN) • Group Encrypted Transport VPN (GET VPN) tunnel-less VPN offering higher scalability Optional Security Modules • VPN and Encryption Service Adapters (SA-VAM2+) Cisco Router and Security Device Manager (SDM) • Ships by default with Cisco 7301 security bundles Certifications • ICSA IPsec • ICSA Firewall • Common Criteria IPsec (EAL4) • Common Criteria Firewall (EAL4+) • FIPS 140-2, Level 2 Security Solutions Example Easy VPN Server Application Branch Office Cisco IOS Router Enabled with Firewall and Easy VPN Remote Teleworker Internet VPN Tunnels Cisco Router Enabled with Firewall and Easy VPN Server Mobile Worker with Cisco VPN Client Enabled on Laptop When To Deploy With its combination of scalable performance, compact architecture, high density, and low price per port, the Cisco 7301 is ideally suited for a variety of key applications within both the service provider and enterprise markets. 146 Application Example SUBSCRIBER DSLAM ATM CISCO 10000 SERIES RADIUS/AAA IP NETWORK Cisco 7301 Series IP PPP oA or PPPoEoA ATM SUBSCRIBER DSLAM ATM CISCO 10000 SERIES IP RADIUS/AAA IP NETWORK IP PPP oA or PPPoEoA ATM LIIS IP/PPP L2TP RADIUS/AAA Key Application Service Providers • B roadband aggregation: PTA/LAC or LNS/TS (Tunnel Switching) aggregation router capable of handling up to 8000 subscribers with per sessions features enabled and up to 16,000 simultaneous sessions with basic non-CPU intensive features and allowing for a pay-as-you-grow "rack and stack" architecture. • M anaged services: High-end customer premises equipment (CPE) or Multiprotocol Label Switchingcustomer edge (MPLS-CE) devices in managed L2 and L3 VPN solutions due to its high-performance, feature-rich support with both Gigabit Ethernet LAN connectivity and WAN port adapter connectivity. • M esh Wireless and Public Wireless LAN Solutions: With Intelligent Service Gateway the Cisco 7301 is ideal platform for these wireless solutions. ISG offers dynamic subscriber awareness, authentication, authorization, accounting, billing, and a customized portal. • H igh-availability design: 100 percent redundancy via 2 CPEs configured for Hot Standby Router Protocol (HSRP) or Layer 3 load balancing. • C ost-effective BGP Route Reflector: Ideally suited as a low cost route reflector with its ability to hold one million routes with its 1 GB of memory. 147