Cisco Router Guide (PDF)

Series OverviewFor Medium-sized Businesses, Enterprise Branches, Head Offices,and the Service Provider EdgeCisco 850 SeriesCisco 870 SeriesSmall OfficesSmall Offices and TeleworkerDeployments Manageability and reliability of CiscoIOS SoftwareSecure Connectivity Stateful inspection firewall VPN 3DES encryption (hardwareaccelerated)Fixed Configuration Asymmetric DSL (ADSL) over analogtelephone lines (Cisco 857) 100 MB Ethernet (Cisco 851) Secure WLAN 802.11b/g option witha single fixed antenna 4-port 10/100Base-T switch withautosensing MDI/MDX (Media DeviceIn/Media Device Crossover) forauto-crossover Secure, concurrent services forbroadband accessCisco 1800 Series(Fixed-configuration)Small Offices and Small EnterpriseBranch Offices Manageability and reliability of CiscoIOS Software Secure, concurrent services forbroadband access with WAN highavailabilityBusiness-class Security Stateful inspection firewall Manageability and reliability of CiscoIOS Software VPN 3DES encryption and AdvancedEncryption Standard (AES)encryptionBusiness-class Security Stateful firewall with URL filtering Intrusion Prevention System (IPS) URL FilteringFixed Configuration 4-port 10/100 managed switch withVLAN support Secure WLAN 802.11b/g option with asingle fixed antenna with replaceablediversity antennas 100 MB Ethernet (Cisco 871) ADSL over ISDN (Cisco 876) ADSL over analog telephone lines(Cisco 877) G.SHDSL (Cisco 878) VPN 3DES encryption and AdvancedEncryption Standard (AES)encryptionCisco offers the industry’s broadest and most versatile portfolio of secure, high-performanceIntegrated Services Routers, enabling the deployment of a wide array of services to the farthestreaches of an organization, from the home office to the small office to the large enterprise branchand head office.Cisco 1800 Series (Modular)Cisco 2800 SeriesCisco 3800 SeriesSmall- to Medium-sized Businessesand Small Enterprise Branch OfficesSmall- to Medium-sized Businessesand Enterprise Branch OfficesMedium-sized to Large Businessesand Enterprise Branch Offices Wire-speed performance withsecure data services enabled at upto T1/E1/xDSL rates Wire-speed performance up tomultiple T1/E1/xDSL rates Wire-speed performance withservices enabled at up to T3/E3rates Increased services density forsecure data services Increased services density forsecurity, voice, caching, video,network analysis, and L2 switching Support for next-generationHigh-speed WAN Interface Cards Support for enhanced interfaces(NME, HWIC, EVM, and PVDM2) Increased flexibility through supportof internal AIM slot for high-speedVPN and future applications Built-in dual Fast Ethernet or GigabitEthernet ports Increased services density forsecurity, voice, caching, video,network analysis, and L2 switching Support for enhanced interfaces(NME, HWIC, EVM, and PVDM2) Built-in dual Gigabit Ethernet ports Built-in dual Fast Ethernet ports Support for over 90 existing andnew modules Support for over 90 existing andnew modules Intrusion Prevention System (IPS) Support for over 30 existing andnew modules Optional support for integratedPower over Ethernet (PoE) Single small form pluggable GigabitEthernet portFixed Configuration Secure broadband access atbroadband performanceSecure Networking Hardware-based VPN accelerationon motherboardSecure Networking Hardware-based VPN accelerationon motherboard Integrated ISDN Basic Rate S/TInterface (BRI), analog modem, orEthernet backup port for redundantWAN links and load balancing Antivirus defense Antivirus Defense High availability and resiliencythrough online insertion and removalsupport, as well as redundantsystems and optional inline power Intrusion Prevention System (IPS) Intrusion Prevention System (IPS) SDM Support Secure wireless LAN option forsimultaneous 802.11a and 802.11b/gwith use of multiple antennasIntegrated Switching Support for the 4-port 10/100managed EtherSwitch moduleIP Communications and IPTelephony Support IP Communications Express (CCME/SRST/CUE) Dynamic Multipoint VPN (DMVPN) 8-port 10/100 managed switch with802.1q VLAN support and optionalPower over Ethernet (PoE) Enhanced Modularity (EVM andPVDM2 support)Integrated Switching Up to 64 powered 10/100 switchports 802.3af Power over EthernetcomplianceSecure Networking Hardware-based VPN accelerationon motherboard Antivirus defense through NetworkAdmission Control Intrusion Prevention System (IPS)IP Communications and IPTelephony Support IP Communications Express (CCME/SRST/CUE) Enhanced Modularity (EVM andPVDM2 support)Integrated Switching Up to 112 powered 10/100 switchports 802.3af Power over Ethernetcompliance45

Extend services from the WAN to the campus edge with the industry’s most extensive WAN and MAN aggregation platformSeries Overview continuedportfolio, which includes the Cisco 7200, 7301, 7304, and 7600 Series Routers and the Cisco Catalyst 6500 Series Switches,each providing a comprehensive set of highly secure, concurrent, and integrated services for enterprise customers.Cisco 7200 SeriesCisco 7301 SeriesCisco 7304 SeriesCisco 7600 SeriesCisco Catalyst 6500 SeriesEnterprise Head Offices and Service Provider EdgeEnterprise Head Office and ServiceProvider Environments.Enterprise Head Office EnvironmentsEnterprise Head Offices High-endCPE Small Service Provider POPEnvironmentsOptimized for secure, convergedvoice, video, and data networks, theCatalyst 6500 offers industry-leadingscalability (32 Gbps to 720 Gbps),operational control, and investmentprotection to meet the needs ofhead-end enterprises serviceaggregation, Internet access, datacenter interconnectivity , and serviceproviders’ POP.Application Versatility Managed Network Services,WAN Aggregation, MPLS, VPN,broadband aggregation, QoS,IP-to-IP Gateway, and multiserviceBusiness-class security VPN Stateful inspection firewall VPNs: software and hardwareencryption, Cisco Easy VPN Group Encrypted Transport VPN(GETVPN) Service-level validation features Intrusion Prevention System (IPS)Multiservice Data/Voice Analog and digital voiceModularity (continued) Increased slot capacity utilizing I/Oslot for modules with port adapterjacket card Cisco 7201 offers a very compactform factor (1-RU) with up to 2 Mppsrouting performance and 4 built-inGigabit Ethernet portsApplication Versatility Managed Network Services, MPLSVPN, broadband aggregation, IP-to-IPGateway, Mesh Wireless and PublicWireless LAN Solutions, BGP RouteReflector, Large-branch-office router,Enterprise High Speed InternetGateway, and Secure Internet gatewayBusiness-class Security VPN Stateful inspection firewall VPNs: software and hardwareencryption, Cisco Easy VPN Group Encrypted Transport VPN(GETVPN) Service-level validation features High-performance connectivity upto OC-48 speeds Built-in GbE for high-performanceLAN connectivity Hardware-accelerated services withParallel Express Forwarding Optional redundant processor andpower supplies for high availabilityin a single box solution Multiprotocol supportBusiness-class Security VPN Hardware-accelerated AccessControl Lists Stateful inspection firewallModularity More than 20 network line cards Survivable Remote Site Telephony(SRST) Intrusion Prevention System (IPS)Multiservice data/voice Multiservice interchange(MIX)-enabled backplane for serviceintegration Analog and digital voice Chassis supports up to 4 line cardsor port adapters Survivable Remote Site Telephony (SRST) Built in GbE ports on processorModularity Compact, power-efficient 1-RU formfactor with single port adapter slot Support for Cisco port adaptersModularity Supports over 70 interfaces,providing a comprehensive range ofconnectivity options from FE to GbE,and DS0 through OC-3/STM-1 Shared Interfaces with Cisco 7201,7301, 7304, 7500, and 7600 routersprovides ease of management andinvestment protection Built-in FE/GbE ports on the NPE-G2processor for high-performanceLAN connectivity Upgradable processors, includingNPE-G2 with up to 2 Mpps routingperformance High-performing, hardware-basedencryption support of up to 600Mbps with the C7200-VSA securitymodule Comprehensive managementservices through Cisco ElementManager Framework (CEMF)6 Supports over 70 interfaces,providing a comprehensive range ofconnectivity options from FE to GbE,and DS0 through OC-3/STM-1 Shared Interfaces with Cisco 7304,7500, and 7600 series routersproviding ease of management andinvestment protection Three onboard Gigabit Ethernet(copper or optical) or Fast Ethernetports with Pluggable GigabitEthernet optics (Small Form-FactorPluggable [SFP] optics) support Front-to-back airflow and singlesided management High-performing, hardware basedencryption support with newSA-VAM2 security module Comprehensive managementservices through Cisco ElementManager Framework (CEMF) Manageability and reliability ofCisco IOS Software Ideal for Enterprise WANaggregation or service providerenvironmentsBusiness-class Security VPN Supports Services modules such asIPSec, firewall, SSL VPN Intrusion Prevention System (IPS)Modularity Chassis supports up to4-, 6-, 9-, and 13-slot chassis forredundant supervisors and linecards Supervisor engines supportingup to 15 Mpps with broad range ofedge services Support for Shared Port Adapter(SPA) and SPA Interface Processors(SIP), which offers intelligentservices. Supports up to12 SPA bays Support for the Enhanced FlexWANmodule, which offers Port Adapterinvestment protectionIntegrated Security Support of integrated multi-gigabitsecurity Services Modules offeringintrusion detection and prevention,firewall, scalable IPSec VPN solutions,and Secure Sockets Layer (SSL)Modularity and Flexibility Modular 3-, 4-, 6-, 9-, and 13-slotchassis with support of redundantsupervisors and LAN/WAN line cards Application intelligence support withPISA technology ensures applicationperformance (NBAR) and security(FPM) in the LAN/WAN network Supports WAN interfaces from DS0 toOC-192, 10/100/1000/10GbE with theflexibility of the Shared Port Adapter(SPA) and SPA Interface Processor (SIP) Support of the Enhanced FlexWANmodule for investment protectionManageability Subsystem ISSUs with IOS modularity;integrated TDR; Encapsulated RemoteSpan (ERSPAN); Embedded EventManager (EEM); Network AnalysisModule (NAM); CiscoWorks; CNAScalable Performance Up to 400 Mpps with a distributedforwarding architectureOperational Consistency Addresses WAN applications andLAN/Core/Distribution/Data Centerneeds, reducing spares expense andenabling operational efficienciesValidated Solutions LAN/ Distribution/Core/WAN/DCapplications are tested in Safe Harborfor end-to-end proven solutions7

NotesProduct Transition MatrixC I S C O S O H O 9 0 A N D 8 5 0 P R O D U C T C O M PA R I S O NCisco SOHO 91, SOHO 97Cisco 851, 857DesktopDesktopDRAM (default)64 MB64 MBDRAM (maximum)64 MB64 MBFlash (default)8 MB20 MBFlash (maximum)8 MB20 MB4-port Switch4-port SwitchForm FactorIntegrated LAN SwitchIntegrated Hardware-based EncryptionNoYesExternal ModemExternal ModemWireless OptionNoIntegrated 802.11b/gFast Ethernet WANNo1 Port (851)Cisco 831, 836, 837, 828Cisco 871, 876, 877, 878DesktopDesktopDRAM (default)16-64 MB(Depends on model)128 MBDRAM (maximum)32-80 MB(Depends on model)256 MBFlash (default)8-24 MB(Depends on model)24 MBFlash (maximum)8-24 MB(Depends on model)52 MB4-port Switch4-port Managed SwitchOut of Band ManagementC I S C O 82 0 , 8 3 0 A N D 870 P R O D U C T C O M PA R I S O NForm FactorIntegrated LAN SwitchIntegrated Hardware-based EncryptionOut of Band ManagementWireless OptionFast Ethernet WAN8Yes (except 828)External Modem (831, 837) /ISDN S/T BRI (836)YesExternal Modem (871, 877)/ISDN S/T BRI (876, 878) (Out ofBand Management only on 878)NoIntegrated 802.11b/gNo, only 10 Mbps (831)1 Port (871)2 USB Ports for Security TokensNoYes (871)Power over Ethernet SupportNoOptional9

Product Transition MatrixProduct Transition MatrixTransition Matrix continuedTransition Matrix continuedC I S C O F I X E D D S L 170 0/18 0 0 P R O D U C T C O M PA R I S O NForm FactorRack/Wall MountableDRAM (default)DRAM (maximum)C I S C O 1721/18 41 P R O D U C T C O M PA R I S O NCisco 1701Cisco 1801, 1802, 1803DesktopDesktopCisco 1841DesktopDesktop (1RU)NoYesChassis TypePlasticMetal96 MB128 MBDRAM (default)64 MB128 MBDRAM (maximum)128 MB384 MB32 MB32 MB128 MB384 MBFlash (default)32 MB32 MBFlash (maximum)32 MB128 MBFlash (maximum)32 MBUp to 128 MBNo8-port SwitchAC Power SupplyExternalInternalADSL over POTSADSL over POTS (1801),ADSL over ISDN (1802)G.SHDSL (1803)Onboard AIM Slot01ADSL 2/2 NoYesWireless OptionNo802.11a/b/gIntegrated LAN SwitchDSL TechnologyFast Ethernet WANIntegrated Power over Ethernet1 Port1 PortNoOptionalC I S C O F I X E D F E WA N 170 0/18 0 0 P R O D U C T C O M PA R I S O NForm FactorRack/Wall MountableDRAM (default)DRAM (maximum)Flash (default)Support for High Speed WICs (HWICs)NoYesLAN Ports1 10/1002 10/100Integrated Hardware-based EncryptionOptionalYesUSB Ports (v1.1)No1Console Port (Up to 115.2 Kbps)11Auxiliary Port (Up to 115.2 Kbps)11C I S C O 1751/176 0 , 2 6 0 0 , A N D 2 8 0 0 P R O D U C T C O M PA R I S O NCisco 1711, 1712Cisco 1811, 1812DesktopDesktopNoYes96 MB128 MBForm FactorDRAM (default)DRAM (maximum)128 MB384 MBFlash (default)32 MB32 MBFlash (maximum)32 MB128 MBFlash (maximum)4-port Switch8-port SwitchOnboard DSP Slot1 Port2 PortsOnboard AIM Slotv.90 Modem (1711)/ISDN S/T BRI (1712)v.92 Modem (1811)/ISDN S/T BRI (1812)Integrated LAN SwitchFast Ethernet WANBack-up WANWireless OptionNoIntegrated 802.11a/b/gNone2 PortsIntegrated Power over Ethernet SupportNoOptionalReal Time ClockNoYesUSB Ports (v 2.0)10Cisco 1721Form FactorFlash (default)Cisco 1751, 1760Cisco 2600Cisco 2800Desktop and 19”Rack Mount19” Rack Mount(Up to 2RU)19” and 23” RackMount Options128 MB256 MB256 MB128 MB (1751)160 MB (1760)256 MB1 GB32 MBUp to 32 MB64 MB64 MB (1760)Up to 128 MBUp to 256 MB20Up to 3012NoNoYesLAN Ports1 10/100Up to 2 10/1002 10/100 or10/100/1000Integrated ted Inline Power/PoE SupportNoNoYesUSB PortsNoNoYes, up to 2Console Port (Up to 115.2 Kbps)111Auxiliary Port (Up to 115.2Kbps)111Support for High SpeedWICs (HWICs)11

Product Transition MatrixTransition Matrix continuedC I S C O 370 0/3 8 0 0 P R O D U C T C O M PA R I S O NForm FactorDRAM (default)DRAM (maximum)Flash (default)Cisco 3700Cisco 380019” and 23” RackMount (2 and 4 RU)19” and 23” RackMount (2 and 4 RU)256 MB256 MBUp to 512 MB (3745)Up to 1 GB32 MB64 MBFlash (maximum)128 MBUp to 256 MBOnboard DSP Slot0Up to 4Onboard AIM SlotSupport for High Speed WICs (HWICs)or Enhanced Network ModulesLAN PortsIntegrated Hardware-based EncryptionIntegrated Inline Power/PoE Support22NoYes2 10/1002 10/100/1000OptionalYesYes (No PoE)YesUSB Ports (v1.1)NoYes, 2Console Port (Up to 115.2 Kbps)11Auxiliary Port (Up to 115.2 Kbps)11Cisco 850 SeriesThe Cisco 850 Series of secure broadband and wireless routers is part of the CiscoIntegrated Services Router portfolio. Designed for small offices, the routersprovide secure WAN connectivity with optional integrated 802.11b/g WLANs in asingle device. Easy setup allows the Cisco 850 Series to be deployed at smallremote offices and small businesses, and remote management features enable ITmanagers and service providers to better support remote sites.Benefits and AdvantagesIntegrated ServicesRemote ManagementCisco 850 Series Integrated Services Routersare fixed-configuration routers that supportbroadband cable and Asymmetric DSL (ADSL)over analog telephone line connections in smalloffices. They provide the performance neededto run concurrent services, including firewalland encryption for VPNs. An optional 802.11b/gwireless option offers a secure broadbandrouter and wireless access point for WLANs ina single device. The stateful inspection firewalland IPSec VPN support provide secure accesswhen connecting to the Internet or connectingsmall offices to a central site. High-speed LANports connect multiple devices to the small officenetwork.Cisco 850 Series routers are ideally suited forsmall office and remote office deployments.Out-of-band management with an externalmodem through the auxiliary port allows ITmanagers to remotely manage routers at smalloffice sites to quickly troubleshoot any networkissues. Optional integrated secure WLANconnectivity simplifies the number of devicesthat need to be managed at the remote site.Cisco SDM helps resellers and customers toquickly and easily deploy, configure, and monitora Cisco access router without knowledge of theCisco IOS Software command-line interface(CLI).Easy Setup and DeploymentThe Cisco Router and Security Device Manager(SDM) Web-based configuration tool simplifiessetup and deployment, and centralizedmanagement capabilities give network managersvisibility and control of router configurations atthe remote site. Cisco Configuration ExpressService supports factory-loaded configurationsin high-volume deployments. Support for theCisco Configuration Engine enables plug-andplay installations with centralized configurationmanagement.1213

Cisco 850 SeriesCisco 850 SeriesSecurity FeaturesWhen to DeployCisco 850 Security FeaturesDeploy the Cisco 850 Series when you need: Stateful inspection firewallHardware-accelerated Triple Data Encryption Standard (3DES) for IPSecHardware-accelerated Advanced Encryption Standard (AES) for IPSecIPSec 3DES termination/initiationIPSec pass-throughPoint-to-Point Tunneling Protocol (PPTP) pass-throughL2TP pass-throughWLAN Features Secure connectivity with stateful inspectionfirewall and IP Security (IPSec) VPN support forsmall offices Four-port 10/100 switch Secure WLAN 802.11b/g option with a singlefixed antenna Easy setup, deployment, and remotemanagement capabilities through Web-basedtools and Cisco IOS SoftwareSeries DistinctionsCisco 850 SeriesWLAN HardwareWLAN Security Features 802.11b/g Wi-Fi and Wireless Multi-Media (WMM)Certified Automatic rate selection for 802.11b/g Single, fixed antenna WECA interoperability Default antenna gain: 2.2 dBi 802.1X 802.11i Wi-Fi Protected Access (WPA) and AES(WPA2) EAP Authentication: Cisco LEAP, PEAP, EAP-TLS,EAP-FAST, EAP-SIM, EAP-MD5, EAP-TTLS Static and dynamic Wired EquivalentPrivacy (WEP) Temporal Key Integrity Protocol (TKIP)/SSNTemporal Key Integrity Protocol/SimpleSecurity Network encryption MAC authentication/filter User database for survivable localauthentication using LEAP and EAP-FAST Configurable limit to the number ofwireless clients Configurable RADIUS accounting forwireless clients PSK (Pre Shared Keys) (WPA-SOHO)WLAN Software Features Maximize throughput or maximizerange option Software configurable transmit power SSID Globalization SSIDs 10 Wireless VLANs 10 Encrypted Wireless VLANs 4 MBSSIDs 1WAN Technologies Cisco 851 – 100 MB Ethernet Cisco 857 – ADSL over analog telephone linesLAN Switch4-port 10/100Base-T switch with autosensing MDI/MDX (Media Device In/MediaDevice Crossover) for auto-crossoverSecurityStateful firewall, IPSec, and AES VPNsWLAN Option802.11b/g with single fixed antennaPlatform OverviewModelsWAN InterfaceLAN Interface802.11b/gCisco 85110/100 Mbps Fast Ethernet4-port 10/100 Mbps managed switchNoCisco 851W10/100 Mbps Fast Ethernet4-port 10/100 Mbps managed switchYesCisco 857ADSL4-port 10/100 Mbps managed switchNoCisco 857WADSL4-port 10/100 Mbps managed switchYesPhysical specificationsDimensions (H x W x D)Network ExampleDimensions with antenna connectors: 2.00 x 10.25 x 9.13 in.(50.8 x 260.4 x 231.9 mm)Dimensions without antenna connectors: 2.00 x 10.25 x 8.50 in.(50.8 x 260.4 x 215.9.9 mm)Corporate HeadquartersTeleworkerWeight2.10 lbPOWER DISSIPATIONSCableInternetDSLSmall Offices orSmall Businesses14AC Input Voltage100–240 VACFrequency50–60 HzMaximum Output Power26WOutput Voltages5 and 12VEnvironmental specificationsOperating Temperature32 to 104 F (0 to 40 C)Non-operating Temperature-4 to 149 F (-20 to 65 C)Relative Humidity (non-condensing)10 to 95%Operating Altitude0 to 15,000 ft. (0 to 4570 m)15

Cisco 850 SeriesPlatform Overview continuedRegulatory ComplianceApprovals and Compliance UL 1950/CSA 950-95, Third Edition IEC 950: Second Edition with Amendments 1, 2, 3, and 4Cisco 870

Cisco Router Guide Summer 2007 V.4 Cisco Router Guide . single fixed antenna with replaceable diversity antennas 100 MB Ethernet (Cisco 871) ADSL over ISDN (Cisco 876) ADSL over analog telephone lines (Cisco 877) G.SHDSL (