Data Sheet
Cisco 870 Series Integrated Services Routers for Small Offices
The Cisco® 870 Series Integrated Services Routers extend the high-performance Cisco Integrated
Services Router capabilities of running secure concurrent services, including firewall, VPNs, and WLANs,
at broadband speeds to small offices. Easy deployment and centralized management features enable the
Cisco 870 Series to be deployed in small office or teleworker sites as part of an enterprise network, by
small to medium business customers for secure WAN and WLAN connectivity, or used by service
providers to offer business-class broadband and WLAN services.
Product Overview
Cisco 870 Series of integrated services routers are fixed-configuration routers that support multiple types of DSL
technologies, broadband cable, and Metro Ethernet connections in small offices (Figures 1 and 2). They provide the
performance needed to run concurrent services, including firewall, intrusion prevention, and encryption for VPNs;
optional 802.11b/g for WLAN networking; and quality of service (QoS) features for optimizing voice and video
applications. In addition, the Cisco Router and Security Device Manager (SDM) Web-based configuration tool
simplifies setup and deployment (Figure 3), and centralized management capabilities give network managers
visibility and control of the network configurations at the remote site.
.
Cisco 870 Series integrated services routers offer:
●
High performance for broadband access in small offices
●
Enhanced security, including:
◦
Stateful Inspection Firewall
IP Security (IPSec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard
◦
[AES])
◦
Intrusion prevention system (IPS)
Antivirus support through Network Admission Control (NAC) and enforcement of secure access policies
◦
●
4-port 10/100 managed switch with VLAN support
●
Secure WLAN 802.11b/g option with use of multiple antennas
●
Easy setup, deployment, and remote management capabilities through Web-based tools and Cisco IOS®
Software
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 1
Data Sheet
Figure 1. Cisco 871 Integrated Services Router
Table 1 lists the routers that currently make up the Cisco 870 Series.
Table 1. Cisco 870 Series Models
Models WAN Interface LAN Interfaces 802.11b/g Option Integrated ISDN Dial Backup
Cisco 871 10/100 Mbps Fast Ethernet 4-port 10/100 Mbps managed switch Yes (Cisco 871W) –
Cisco 876 Asymmetric DSL (ADSL) over ISDN 4-port 10/100 Mbps managed switch Yes (Cisco 876W) Yes
Cisco 877 ADSL over POTS 4-port 10/100 Mbps managed switch Yes (Cisco 877W) –
Cisco 878 G.SHDSL 4-port 10/100 Mbps managed switch Yes (Cisco 878W) –
The Cisco 870 Series is ideal for small remote offices and teleworkers that need to be connected to larger enterprise
networks. When extending corporate networks to numerous remote sites, network resources must remain secure
while giving users access to the same applications found in a corporate office. This applies to both data and voice
applications, where IP phones can be used to extend a corporate voice extension to the remote office. When users
require WLAN access, visibility and control of network security is even more critical at the remote site. The Cisco
870 Series meets this need with a single device that combines integrated 802.11b/g capabilities with security
features such as Wi-Fi Protected Access (WPA), including authentication with IEEE 802.1X with Cisco Extensible
Authentication Protocol (LEAP) and Protected EAP (PEAP), and encryption with WPA Temporal Key Integrity
Protocol (TKIP). (See Wireless Solution overview and Security Data Sheet for more information).
Service providers and value-added resellers can take advantage of the Cisco 870 Series to provide a true businessclass broadband service. Business customers are using broadband access to connect to the Internet or to connect
offices together, and require a platform that incorporates security without sacrificing performance. Many of these
customers are connecting computers in offices through WLANs; having a single device for both WAN and WLAN
access provides a new option for managed services. These customers also require a higher level of support to keep
their networks up and running. Services with these customers should be simple to set up, while allowing a level of
remote management and troubleshooting to quickly address support inquiries. The Cisco 870 Series meets the
requirements of small offices and managed services providers.
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 2 of 13
Figure 2. Deployment Scenarios
Data Sheet
Applications
The Cisco 870 Series is ideally suited to be deployed where a small office is going to be connected to a larger
network, most often with a secure VPN connection. These types of offices can include the following:
●
Small Remote Office: Connects users in a small remote office, such as insurance agents, lawyer offices, or
sales offices. When connecting to the main office, VPN encryption and integrated security such as firewall,
and intrusion prevention protect the network at every perimeter. IT managers can centrally manage the
remote site to quickly troubleshoot any network issues. For added reliability, customers can also use dial
backup, through an external modem, should the primary broadband link fail. Integrated secure WLAN
connectivity simplifies the number of devices that need to be managed at the remote site.
●
Teleworking: The Cisco 870 Series is ideal for corporate teleworkers who may have a mix of broadband
connection types to choose from. A platform such as the Cisco 870 Series gives IT managers a standard
platform to manage at the employee's home office. QoS features in the Cisco 870 Series allow an IP phone
to be connected to the router, giving voice traffic precedence over data applications. Integrated WLAN
support in the Cisco 870 Series helps ensure that if wireless connectivity is to be used, it can be done
securely. (See Cisco Business Ready Teleworker Solutions for more information.)
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 3 of 13
Data Sheet
●
Remote Call Center Agent: Similar to teleworking applications, this solution extends the Cisco IP Contact
Center solution for telephone call center agents to remote sites. With a high-quality, secure connection
through the Cisco 870 Series, the call center agent can be dispersed away from costly call center facilities
while maintaining secure and productive voice and data access in their home. (See Cisco Call Center
Solutions for more information.)
●
Retail VPN: Retail stores migrating from dialup connections for point of sales transactions can use the Cisco
870 Series to take advantage of low-cost broadband access with the required security to effectively use these
public networks. Multiple devices and applications can then be added to the store network to take advantage
of the increased bandwidth and also incorporate optional WLAN support to enable secure mobility and
enhance productivity.
●
Managed Services: Service providers and value-added resellers can use the Cisco 870 Series as a platform
to offer differentiated business class security and WLAN services for small to medium business customers.
Features and Benefits
Table 2 lists the features and benefits that the Cisco 870 Series provides. Additional product details for the 870
Series ISR are available in the 800 Series Q&A site located at
http://www.cisco.com/en/US/partner/products/hw/routers/ps380/products_qanda_item0900aecd8028a982.shtml.
Table 2. Features and Benefits of the Cisco 870 Series
Feature Benefits
●
Increased Performance to
Run Concurrent Services
Enhanced Security1
4-Port 10/100 Mbps
Managed Switch
Optional 802.11b/g WLANs
with Support for Multiple
Antennas
Cisco SDM and Cisco IOS
Software for Remote
Management
The performance in a Cisco 870 Series router allows customers to take advantage of broadband network speeds
while running secure, concurrent data, voice, and video services
●
Integrated Stateful Inspection Firewall for network perimeter security, high-speed IPSec 3DES and AES encryption for
data privacy over the Internet, IPS, and antivirus support through NAC to enforce security policy in a larger enterprise
or service provider network
●
Allows multiple devices to be connected in a small office, with the ability to designate a port as network DMZ
●
Optional external PoE adapter for powering IP phones, to avoid individual power supplies or power injectors
●
VLANs allow for secure segmentation of network resources
●
Broadband router with secure WLAN in a single device
●
Diversity antennas for optimizing coverage in a small office
●
Options for replaceable external antennas, to get wireless coverage in areas away from where the router is located
●
Using smart wizards and task-based tutorials, Cisco SDM helps resellers and customers quickly and easily deploy,
configure, and monitor a Cisco access router without requiring knowledge of the Cisco IOS® Software command-line
interface (CLI)
●
Dial backup and out-of-band management allow IT managers to remotely manage the router at small office and
teleworker sites
●
Cisco Configuration Express Service supports factory-loaded configurations for high-volume deployments
●
Support for the Cisco Configuration Engine enables plug-and-play installations with centralized configuration
management
1
Depending on IOS Feature Set selected below in Tables 3, 5, and 6
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 4 of 13