Cisco Systems 850, 870 manual Security Solutions Example, Application Example

Page 32

Cisco 7200 Series

Security Features continued

URL Filtering

Cisco Router and Security Device Manager (SDM)

• Local URL filtering in Cisco IOS software

• Ships by default with Cisco 7200 VXR and

based on external server

Cisco 7201 security bundles

Security Solutions

Certifications

• Network Admission Control (NAC)

• ICSA IPSec

• Voice and Video Enabled IPSec VPN (V3PN)

• ICSA Firewall

• Group Encrypted Transport VPN (GET VPN)

• Common Criteria IPSec (EAL4)

Tunnel-less VPN offering higher scalability

• Common Criteria Firewall (EAL4+)

• Dynamic Multipoint VPN (DMVPN)

• FIPS 140-2, Level 2

Optional Security Modules

IDS/IPS Network Modules (NM-CIDS portfolio)

VPN and Encryption Service Adapters (SA-VAM2+C7200-VSA [on Cisco 7204 VXR and Cisco 7206VXR chassis only])

Security Solutions Example

Easy VPN Server Application

Branch

 

Teleworker

 

Office

Cisco IOS Router Enabled with

 

 

 

 

 

Firewall and Easy VPN Remote

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Internet

VPN Tunnels

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Cisco Router Enabled with Firewall and

Easy VPN Server Mobile Worker with Cisco VPN Client Enabled on Laptop

When To Deploy

Deploy the Cisco 7200 VXR Series when you need a high-performance access solution offering:

Headquarters service aggregation with Integrated Services Routers at branch sites

Flexibility in configurations

A wide range of services

A wide range of connectivity options

High performance in a compact form factor

Deploy the Cisco 7201 router when you need high performance in a 1-RU form factor.

The Cisco 7201 router makes a very attractive security appliance given its 1-RU form factor with the four built-in Gigabit Ethernet ports and the integrated Network Processing Engine NPE-G2, offering up to 2 million packets per second routing performance..

Cisco 7200 Series

Application Example

Branch Offices

 

 

Large

Enterprise

POP

with Integrated

 

 

Small

Medium

Services Routers

 

 

Enterprise

 

 

POP

 

 

 

 

 

Cisco 7200

Small

 

 

POP

 

 

Small POP

 

 

 

Cisco 7200

Cisco 7200

 

Services Aggregation

CPE

 

Remote

Region

Series Specifications

These specifications apply to Cisco 7200 VXR routers with NPE-G1 and NPE-G2 as well as Cisco 7201 routers..

Flash Memory

NPE-G1: 64 MB (expandable to 256 MB) NPE-G2 and 7201: 256 MB

System DRAM Memory

NPE-G1: 256 MB (expandable to 1 GB)

 

NPE-G2 and 7201: 1 GB (expandable to 2 GB)

Modular Slots

4- or 6-port/service adapter slots plus one additional slot when using

 

the Port Adapter Jacket Card, 1 NPE slot, 1 I/O controller card slot

Supported Port Adapters

70+

Internal Power Supply

AC or DC, dual option

Dimensions (H x W x D)

 

Cisco 7201

1..73 x 17..3 x 13..87 in..

Cisco 7204 VXR

5..25 x 16..8 x 17 in..

Cisco 7206 VXR

5..25 x 16..8 x 17 in..

Performance

Up to 2 Mpps with Cisco 7201 or NPE-G2 engine running inside the

 

Cisco 7200 VXR chassis

Console Port

1

Auxiliary Port

1

Base Configuration: Cisco 7201

NPE-G2, I GB memory, 256 MB Flash, 4 fixed 10/100/1000 ports

 

(can accommodate any one of the port adapters supported on the

 

Cisco 7200 VXR Series), dual power supplies, IP software

Base Configuration: Cisco 7204 VXR 4-slot chassis, 1 AC power supply, IP software

Base Configuration: Cisco 7206 VXR 6-slot chassis, 1 AC power supply, IP software

Maximum Ethernet Ports

 

Cisco 7201

12

Cisco 7204 VXR

32

Cisco 7206 VXR

48

Maximum Token Ring Ports

 

Cisco 7204 VXR

16

Cisco 7206 VXR

24

60

61

Image 32
Contents Cisco Router Guide Cisco Router Guide Integrated Services Routers Series Overview Cisco 7200 Series Product Transition Matrix Transition Matrix Cisco Cisco 1801, 1802Cisco 1711 Cisco 1811 CiscoIntegrated Services Easy Setup and DeploymentCisco 850 Series Remote ManagementSecurity Features Wlan FeaturesWhen to Deploy Series DistinctionsCisco 870 Series Cisco 870 Security Features Cisco 870 VPN FeaturesDeploy the Cisco 870 Series when you need Following in a small remote office, orHigh-Availability Features Cisco 1800 Series Fixed-Configuration Benefits and AdvantagesIntegrated Wireless LAN Capability WirelessSecurity Application Example VPNWireless Example High-Availability Features ExampleDram MB WANCISCO1801 CISCO1801W-AG-E/K9CISCO1802W-AG-E/K9 CISCO1803W-AG-A/K9Cisco 1800 Series Modular Enhanced ArchitectureMarket-leading Integrated Security Flexibility and Investment ProtectionSecurity Solutions Multiprotocol Label Switching Mpls VPN SupportIPSec VPN Network Foundation ProtectionProduct Bundles CISCO1841AIM NMEInvestment Protection and Versatility Integrated SwitchingCisco 2800 Series Security Features Series Features Overview Features DetailsIP Telephony Features Secure NetworkingFeatures Details Cisco Srst Up to 96 phones Deploy the Cisco 2800 Series when you needNME EVM AIM Hwic Pvdm Pstn WANOptional items Cisco 2800 Series Base Chassis Part NumbersVoice Bundles Security BundlesCisco 3800 Series Investment Protection and VersatilityBroadband Bundles WAN Optimization BundlesMedia Authentication and Encryption EVM-HDSrst IP Telephony FeaturesDeploy the Cisco 3800 Series when you need NME NME-XNMD NME-XD Application Examples Secure Voice BundlesCisco 7200 Series Feature-Rich Maximum ROIConnectivity/Flexibility Common Port AdaptersApplication Example Security Solutions ExampleSecurity Solutions Certifications CISCO7201 7206VXR/VSA+VPNK9MPLS/IPV6 CPECisco 7301 Series Key features of the Cisco 7301 Router areNext-Generation Policy and Subscriber Solution Low Power Consumption Benefits & Advantages Security FeaturesCompact Form Factor VPN Support Benefits & AdvantagesKey Application Service Providers When To Deploy Internet VPN Tunnels Cisco Router EnabledPower Supplies Key Applications for Enterprise deploymentsCisco 7301 Bundles and Other Part Numbers BroadbandCisco 7301 Accessories Cisco 7301 Feature LicensesProduct Number Product Description Memory options FR-ISG73=Highly Scalable and Available High-performance IP/MPLS ServicesCisco 7304 Series Deploy the Cisco 7304 when you need CISCO7304CISCO7304-CH CISCO7304CH-NSE150PA-A3-8E1IMA= PA-A3-8T1IMA=PA-A6-OC3MM= PA-A6-OC3SMI=Product Number Product Description Cisco 7304 Accessories HALFSLOTBLNK=7300-4RU/RCKBRKT= CNTR-SPTUM=Service Protection Cisco 7600 SeriesDevice Protection Network ProtectionCisco 7613 Systems Cisco 7604 Systems Cisco 7609 SystemsCisco 7606 Systems Cisco 7603 Flexwan Modules CISCO7603-SSPA-24CHT1-CE-ATM SPA-1CHOC3-CE-ATM= SPA-24CHT1-CE-ATM=WS-SUP32-GE-3B WS-SUP720-3BXLWS-F6700-DFC3BXL WS-F6K-DFC3BOSM-1CHOC12/T1-SI OSM-1CHOC12/T1-SI= PA-HPA-H= PA-2H PA-E3Cisco 7600/CATALYST 6500 Ethernet Modules Cisco 7600 Services Modules CWDM-OADM4-1= CWDM-OADM4-2= SFP-GE-ZSFP-GE-Z= SFP-OC3-IR1Cisco Catalyst Series Maximum Network UptimeServices Integration and Flexibility Validated SolutionsIntegrated Security Scalable PerformanceFeature Cisco 6503-E Cisco 6504-E Cisco 6506-E Cisco 6509-E Cisco 6513 SystemsCisco 6509-E Systems Cisco 6506-E SystemsCisco 6504-E Systems Cisco 6503-E SystemsCisco 7600 and Catalyst 6500 SIP Modules and SPA Modules ACE10-6500-K9 WS-SVC-IPSEC-1=WS-SVC-AON-1-K9 WS-X6066-SLB-APC=Cisco Security Services Modules Network Analysis Module CiscoModularNetworkAccessModulesRouters LAN and Mixed Media Network ModulesNM-16ESW NM-16ESW-1GIG1GIG NME-16ES-1G-PPPWR-DCARD- 16ESW NME-X-23ES-1G-PLAN Network Modules LAN and WIC Combo Network ModulesCircuit Emulation Over IP Network Modules NM-1FE1R2WNM-CEM-4TE1 NM-2WCisco Serial Connectivity Network Modules Serial T3/E3 Network ModulesHigh-Speed Serial Network Modules-Up to 52 Mbps NM-1T3/E3Synchronous Serial Network Modules-Up to 8 Mbps Asynchronous Serial Network Modules-Up to 128 KbpsNM-4T NM-4A/SNM-2CE1T1-PRI Cisco Channelized T1/E1 and Isdn Network ModulesNM-1CE1T1-PRI Cisco ATM Network Modules Isdn Basic Rate Interface Network ModuleATM OC3 Network Modules ATM T3/E3 Network ModulesNM-1VSAT-GILAT Cisco Satellite Network ModulesWay Satellite WAN Connectivity Network Module Cisco Dial-up/Remote Access Network Modules Digital Modem Network ModulesNM-6DM NM-12DMAnalog Modem Network Modules NM-24DMNM-8AM-V2 NM-30DMCisco Voice Network Modules Analog and Isdn Basic Rate Voice Network ModulesNM-HD-1V NM-HD-2VNM-HD-2VE EVM-HD-8FXS/DIDNM-HDA-4FXS EM-4BRI-NT/TET1/E1 Digital Voice Network Modules PVDM2-8 NM-HDV2Voice Mail Network Modules Network Analysis And Monitoring Cisco Services Network ModulesWireless LAN Controller Module Content Engine Network Modules Cisco Interface Cards Serial WICsWIC-1T WIC-2TWIC-1DSU-T1-V2 HWIC-4TWIC-1DSU-56K4 HWIC-4A/SIsdn BRI WICs DSL WICs and HWICsWIC-1ADSL-DG HWIC-4SHDSLWIC-1ADSL-I-DG HWIC-1ADSLAnalog Modem WICs Ethernet and High-speed Switching WICsCable DOCSIS-based HWICs ILPM-8= HWIC-D-9ESW-POEHWIC-1FE Hwic Wireless LAN Interface Cards and Accessories Wireless LAN AntennasHWIC-2FE HWIC-AP-G and HWIC-AP-AGWireless LAN Antenna Cisco Voice Interface/WICsCables VWIC2-1MFT-T1/E1VWIC2-2MFT-T1/E1 VWIC-2MFT-T1VWIC-2MFT-T1-DI VWIC-1MFT-T1VWIC-1MFT-E1 VWIC-2MFT-E1-DIVWIC-2MFT-E1 VWIC2-1MFT-G703VWIC-1MFT-G703 VWIC2-2MFT-G703VWIC-2MFT-G703 Cisco Voice Interface Cards Analog Voice Interface CardsVIC-2DID VIC2-2FXSIsdn BRI Voice Interface Cards Cisco Advanced Integration Modules Security Modules Compression Advanced Integration ModulesAIM-COMPR4 AIM-COMPR2-V2Security Modules Voice Mail Advanced Integration ModulesATM Advanced Integration Modules Cisco Universal Serial Bus USB Cards Universal Serial Bus USB PortsMEMUSB-64FT MEMUSB-128FTEthernet Switching Network Modules Accessories Cisco Network Module Compatibility Quick LookLAN Network Modules LAN and WIC Combo Network ModulesCisco Network Module Compatibility Quick Look High-density Digital Voice Network Modules and Accessories Voice Digital Signal Processors DSPsModem Digital Signal Processors DSPs Services Network ModulesIsdn BRI WICs Cisco Interface Card Compatibility Quick LookSerial WICs Cisco Interface Card Compatibility Quick Look Analog Voice Interface Cards Isdn BRI Voice Interface CardsCisco Advanced Integration Module Compatibility Quick Look Compression Advanced Integration ModulesVPN and Encryption Advanced Integration Modules Voice-mail Advanced Integration ModulesCisco Port Adapter Compatibility Quick Look Cisco Advanced Integration Module Compatibility Quick LookATM Advanced Integration Modules ATM Port AdaptersCisco Port Adapter Compatibility Quick Look VPN Service Adapters Cisco Shared Port Adapter Compatibility Quick LookSonet PAs Other Port Adapters and SAsUSB Flash Memory Cisco USB Flash Memory Compatibility Quick LookCisco Series Port Adapter Compatibility Quick Look 210 211 USA