Cisco 2811 Router Guide - Page 83

Cisco ASR 1000 Series supported dual images is available in the release notes. The (optionally) hardwareredundant route processor and ESP configuration in the Cisco ASR 1006 Router does not support Cisco IOS Software redundancy in a single route processor since each of the two RPs support one Cisco IOS XE image. Benefits and Advantages Four Models The Cisco ASR 1000 Series consists of four different versions: the Cisco ASR 1002-F, the Cisco ASR 1002 Router, the Cisco ASR 1004 Router, and the Cisco ASR 1006 Router. Fills a Gap From a price-to-performance perspective, the Cisco ASR 1000 Series Routers solution fits well between the Cisco 7200 and Cisco 7300 Series Routers and the higher-end Cisco 7600 Series Routers and Cisco Catalyst® 6000 Series Switches, thus dramatically enhancing the Cisco midrange routing portfolio. Enhanced Value The Cisco ASR 1000 Series provides a significant enhanced value compared to prior generations of Cisco midrange routing solutions by providing more than tenfold performance improvement with services running. Additionally, the routers have hardware and software redundancy, as well as an industry-leading high-availability design. Multiple Services The Cisco ASR 1000 Series delivers multiple services embedded in the Cisco QuantumFlow Processor at wire speeds of up to 20 Gbps. The services supported on the Cisco QuantumFlow Processor include: • Security services, such as encryption and firewall • Quality of service (QoS) • Network Based Application Recognition (NBAR) • Cisco IOS® Flexible Packet Matching (FPM) • Broadband aggregation • Cisco Unified Border Element for Service Providers and for Enterprise (formerly referred to as Session border controller), among others. Software and Hardware Redundancy With the separation of the control and data planes in the Cisco ASR 1000 Series Routers architecture, software redundancy (on the Cisco ASR 1002-F, ASR 1002 and 1004 Routers) and hardware redundancy (on the Cisco ASR 1006 Router) are provided. Nonstop Communications Additionally, the modular Cisco IOS XE Software that is introduced with the Cisco ASR 1000 Series facilitates in-service software upgrade (ISSU). When to Deploy Deploy the Cisco ASR 1000 Series when you need: • Superior application availability at the WAN edge: guarantee high-priority applications by creating a virtual "glass ceiling" for lower-priority applications. • Multiservice, scalable, and secure headend: The Cisco ASR 1000 Series offers full-service IP Security (IPsec) VPN aggregation that scales to meet the new bandwidth demands of service provider IP VPNs. • Embedded high-speed firewall: With the Zone-Policy Firewall, the Cisco ASR 1000 Series acts as an implicit complete barrier between any interfaces not members of the same zone. • Managed CPE: This implementation of branch architecture offers powerful investment protection with services and scale. 162 Cisco ASR 1000 Series When to Deploy continued • Next-generation voice and multimedia example: Cisco Session Border Controller (SBC): The SBC implementation performs the voice and video gateway functions simultaneously with regular IP data services. No appliance or additional service blade is required. The control protocols and media protocols work transparently within a complex voice architecture. • Broadband L2TP access concentrator (LAC) or L2TP Network Server (LNS): Layer 2 Tunneling Protocol (L2TP) endpoint to tunnel Point-to-Point Protocol (PPPoX) or IP sessions with bandwidth demands in the STM-1 ATM, Fast Ethernet, Gigabit Ethernet, and 20 Gigabit Ethernet range. • Service provider edge: Layer 3 VPN (L3VPN) provider edge: Example: Distributed provider edge, or provider edge in global VPN networks for bandwidth demands such as asymmetric DSL (ADSL), T1/E1, STM-1, STM-4, Fast Ethernet, Gigabit Ethernet, etc. • Service provider edge: High-end route reflector: As a route reflector for bandwidth support of 10 Gbps. Application Example Boardless Networks Secure WAN with ASR 1000 Product ASR1000 Solution Benefits Cisco Quantum Flow Processor Solution Benefits Business Technology • H ighly scalable built-in encryption engine for both IPsec and SSLVPN based solutions • Scalable IOS Firewall solution up to 20Gb • Based on multi-core encryption engine supporting both IKE and IPsec acceleration • Tighter QoS and HA integration • Support for DMVPN, EasyVPN, and GETVPN solutions • Efficient QoS, and multicast interaction with crypto engine • IOS Zone-based Firewall integrated with crypto solutions • Instant Services turn-on using embedded crypto engine • IOS Firewall acceleration using native QFP off-load • Jumbo frame support Operations • Ease of provisioning due to seamless crypto engine integration into data plane •Sub-50 ms failover times for crypto data plane • Crypto feature consistency across all Embedded Services Processors (ESP) • IOS Firewall CLI consistent with Cisco's Integrated Services Routers 163