Cisco Systems A9014CFD manual Security Features, Quality of Service and Class of Service Features

Chapter 1 Cisco ASR 901 Router Overview

Features

monitoring, remote fault detection, and remote loopback, and IEEE 802.3ah Ethernet OAM discovery, link monitoring, remote fault detection, and remote loopback (requires the metro IP access or metro access image)

•Configuration replacement and rollback to replace the running configuration on a router with any saved Cisco IOS configuration file

•CPU utilization threshold logs.

Security Features

•Password-protected access (read-only and read-write access) to management interfaces for protection against unauthorized configuration changes

•Configuration file security so that only authenticated and authorized users have access to the configuration file, preventing users from accessing the configuration file by using the password recovery process

•Multilevel security for a choice of security level, notification, and resulting actions

•Automatic control-plane protection to protect the CPU from accidental or malicious overload due to Layer 2 control traffic on UNIs or ENIs

•TACACS+, a proprietary feature for managing network security through a TACACS server

•RADIUS for verifying the identity of, granting access to, and tracking the actions of remote users through authentication, authorization, and accounting (AAA) services

•Extended IP access control lists for defining security policies in the inbound direction on physical ports.

•Extended IP access control lists for defining security policies in the inbound and outbound direction on SVIs.

Quality of Service and Class of Service Features

•Configurable control-plane queue assignment to assign control plane traffic for CPU-generated traffic to a specific egress queue.

•Cisco modular quality of service (QoS) command-line (MQC) implementation

•Classification based on IP precedence, Differentiated Services Code Point (DSCP), and IEEE 802.1p class of service (CoS) packet fields, or assigning a QoS label for output classification

•Policing

–One-rate policing based on average rate and burst rate for a policer

–Two-color policing that allows different actions for packets that conform to or exceed the rate

–Aggregate policing for policers shared by multiple traffic classes

•Table maps for mapping CoS, and IP precedence values

•Queuing and Scheduling

–Class-based traffic shaping to specify a maximum permitted average rate for a traffic class

–Port shaping to specify the maximum permitted average rate for a port

–Class-based weighted queuing (CBWFQ) to control bandwidth to a traffic class

–Low-latency priority queuing to allow preferential treatment to certain traffic

Cisco ASR 901 Series Aggregation Services Router Software Configuration Guide

1-4 OL-23826-09