18
19

Series Distinctions

When to Deploy
Deploy the Cisco 870 Series when you need
the following in a small remote office, or
teleworker and small business sites:
Secure, concurrent services for broadband
connection
High-speed VPN solution
Advanced security with rewall, VPNs, IPS,
NAC, DMVPNs, Easy VPNs
Integrated 80211b/g with replaceable diversity
antennas
Four-port 10/100 managed switch
Easy to set up solution with Cisco SDM and
remote management capabilities
Cisco 870 SeriesCisco 870 Series
Security Features

WLAN Features

Cisco 870 Security Features
Stateful inspection rewall
Intrusion Prevention System (IPS)
Antivirus support through Network Admission Control (NAC) and enforcement of secure
access policies
URL Filtering
Cisco 870 VPN Features
Hardware-accelerated 3DES for IPSec
Hardware-accelerated AES for IPSec
Cisco Easy VPN Client and Server
IPSec 3DES termination/initiation
IPSec pass-through
Point-to-Point Tunneling Protocol (PPTP) pass-through
L2TP pass-through
8021X
Secure HTTP (HTTPS), FTP, and Telnet authentication proxies
Dynamic Multipoint VPN (DMVPN), SSL VPN, and Group Encrypted Transport (GET VPN)
Metro Ethernet
Cable
Te leworker
Small Offices or
Small Businesses
Corporate Headquarters
Internet
DSL
Cisco 870 Series
WAN Technologies • Cisco 871 – 100 MB Ethernet
• Cisco 876 – ADSL over ISDN (ADSL2/ADSL2+)
• Cisco 877 – ADSL over analog telephone lines (ADSL2/ADSL2+)
• Cisco 878 – GSHDSL (2- and 4-wire support)
LAN Switch Managed 4-port 10/100Base-T switch with autosensing MDI/MDX (Media Device
In/Media Device Crossover) for auto-crossover
Network Security Firewall, IPSec and AES High Speed Encryption, IPS, Antivirus through Cisco NAC,
IPSec, and AES High Speed Encryption, Cisco Easy VPN, DMVPN, DMZ, GET VPN
Upgradeability Cisco IOS Software upgrades and updates, memory upgrades
Network Example
WLAN Hardware
80211b/g
Wi-Fi and Wireless Multi-Media (WMM)
Certied
Automatic rate selection for 80211b/g
Field-replaceable external antennas
Antenna diversity
WECA interoperability
Default antenna gain: 22 dBi
PoE (optional external adapter for inline
power) for IP phones or external wireless
access points
WLAN Software Features
Maximize throughput or maximize
range option
Software congurable transmit power
SSID Globalization
SSIDs =10
Wireless VLANs =10
Encrypted Wireless VLANs =4
MBSSIDs =2
Universal Client Mode
WLAN Security Features
8021X
80211i
Wi-Fi Protected Access (WPA) and AES
(WPA2)
EAP Authentication: Cisco LEAP, PEAP, EAP-TLS,
EAP-FAST, EAP-SIM, EAP-MD5, EAP-TTLS
Static and dynamic Wired Equivalent
Privacy (WEP)
Temporal Key Integrity Protocol (TKIP)/SSN
Temporal Key Integrity Protocol/Simple
Security Network encryption
MAC authentication/lter
User database for survivable local
authentication using LEAP and EAP-FAST
Congurable limit to the number of wireless
clients
Congurable RADIUS accounting for wireless
clients
PSK (Pre Shared Keys) (WPA-SOHO)