
© 2013-2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 10
Cisco 880VA Series Integrated Services Routers
Product Overview
The new Cisco 880VA Series Integrated Services Routers (ISRs) are part of the Cisco Integrated Services Routers
Generation 2 (ISR G2) portfolio. The Cisco 880VA Series Routers support DSL multimode, including very-highspeed DSL 2 (VDSL2) and asymmetric DSL 2+ (ADSL2+). The routers support VDSL2 and ADSL2+ on a single
WAN interface, thus providing secure, cost-effective connectivity to small businesses, enterprise small branch
offices, and teleworker sites (Figure 1).
Features and Benefits
Cisco 880VA Series ISRs are fixed-configuration routers that provide collaborative business solutions for secure
voice and data communications to small businesses and enterprise teleworkers. They offer concurrent broadband
services over multiple DSL technologies to provide business continuity. The routers provide the performance
required for concurrent services, including firewall, intrusion prevention, content filtering, and encryption for VPNs;
and quality-of-service (QoS) features for optimizing voice and video applications. In addition, the web-based Cisco
Configuration Professional configuration tool simplifies setup and deployment. Centralized management
capabilities give network managers visibility and control of the network configurations at the remote site.
Cisco 880 Series Integrated Services Routers offer:
●
High performance for broadband access in small offices and small branch-office and teleworker sites
●
Collaborative services with secure analog, digital voice, and data communications
●
Business continuity with redundant WAN links: Multimode DSL (VDSL2 and ADSL2 and 2+) over telephone
service and ISDN
●
Enhanced security, including:
◦ Firewall with advance application and control for email, Instant Messaging (IM), and HTTP traffic
◦ Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption
Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN (DMVPN), Group
Encrypted Transport VPN with onboard acceleration, and Secure Sockets Layer (SSL) VPN
◦ Intrusion prevention system (IPS): An inline, deep-packet inspection feature that effectively mitigates a
wide range of network attacks
◦ Content filtering: A subscription-based integrated security solution that offers category-based reputation
rating; keyword blocking; and protection against adware, malware, spyware, and URL blocking
●
Four-port 10/100 Fast Ethernet managed switch with VLAN support; two ports support Power over Ethernet
(PoE) for powering IP phones or external access points
●
CON/AUX port for console or external modem
●
One USB 1.1 port for security eToken credentials, booting from USB, and loading configuration
●
Easy setup, deployment, and remote-management capabilities through web-based tools and Cisco IOS®
Software

© 2013-2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 2 of 10
Integrated ThirdGeneration (3G)
WAN Capabilities
Integrated ISDN Dial
Backup
Multimode VDSL2/
ADSL2 and 2+ over
ISDN
4-port 10/100-Mbps
managed switch
Multimode VDSL2/
ADSL2 and 2+ over
basic telephone
service
4-port 10/100-Mbps
managed switch
Multimode VDSL2/
ADSL2 and 2+ over
basic telephone
service Annex M
(extended upstream
band)
4-port 10/100-Mbps
managed switch
Multimode VDSL2/
ADSL2 and 2+ over
ISDN Annex J, alldigital ISDN band
4-port 10/100-Mbps
managed switch
Increased performance to run
concurrent services
●
Performance allows customers to take advantage of broadband network speeds while running secure,
concurrent data, voice, video, and wireless services.
●
An integrated stateful and application inspection firewall provides network perimeter security.
●
High-speed IPsec 3DES and AES encryption offers data privacy over the Internet.
●
Intrusion prevention enforces security policy in a larger enterprise or service provider network.
●
Content filtering offers category-based URL classification and blocking, thus providing increased productivity
and better use of company resources.
WAN ● DSL Multimode VDSL2 and ADSL2 and 2+ provide for business continuity.
●
Redundant WAN links provide business continuity and WAN diversity (CISCO886VA only).
Four-port 10/100-Mbps
managed switch
●
The Cisco 880 Series allows for connection of multiple devices in a small office, with the ability to designate
a port as the network edge.
●
An optional external PoE adapter powers IP phones and external access points to avoid individual power
supplies or power injectors.
●
VLANs allow for secure segmentation of network resources.
●
A single dual-purpose port provides direct connection to a console or external modem for management or
backup access points.
Figure 1 shows a Cisco 880VA Integrated Services Router, and Table 1 lists the data models.
Figure 1. Cisco 880VA Integrated Services Router
Table 1. Cisco 880VA Series Data Models
Features and Benefits
Table 2 lists the features and benefits of the Cisco 880VA Series Integrated Services Routers.
Table 2. Features and Benefits of Cisco 880VA Series Routers

© 2013-2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 3 of 10
●
A built-in real-time clock maintains an accurate date and time for applications that require an accurate time
stamp, such as logging and digital certificates.
Cisco Configuration
Professional
●
Cisco Configuration Professional uses smart wizards and task-based tutorials, which resellers and
customers can use to quickly and easily deploy, configure, and monitor a Cisco access router without
requiring knowledge of the Cisco IOS Software command-line interface (CLI).
First Cisco IOS Software Release
Cisco 886VA, 887VA, and 887VA-M
Cisco 886VA and 887VA SEC
C886VA-K9, C886VAJ-K9, C887VAK9, C887VAM-K9
IP and IP services features
●
Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2)
●
Generic routing encapsulation (GRE) and Multipoint GRE (MGRE)
●
Cisco Express Forwarding
●
Standard 802.1d Spanning Tree Protocol
●
Layer 2 Tunneling Protocol (L2TP)
●
Network Address Translation (NAT)
●
Dynamic Host Configuration Protocol (DHCP) server, relay, and client
●
Dynamic Domain Name System (DNS)
●
DNS Proxy
●
DNS Spoofing
●
Access control lists (ACLs)
●
ATM Variable Bit Rate real-time (VBR-rt)
●
ATM Unspecified Bit Rate (UBR), Constant Bit Rate (CBR), and Variable Bit Rate non-realtime (VBR-nrt)
●
ATM operations, administration, and maintenance (OA&M) support for F5 Continuity Check; segment and
end-to-end loopback; and Integrated Local Management Interface (ILMI) support
●
TX ring adjustment
●
Virtual-circuit (VC) bundling
●
Per-VC queuing
●
Per-VC traffic shaping
●
Four ATM virtual circuits (RFCs 1483 and 2684)
●
Point-to-Point Protocol over ATM (PPPoA)
●
PPP over Ethernet (PPPoE)
Summary
Cisco 880VA Series Integrated Services Routers combine increased network performance with advanced security
to allow small-office customers to get the most from their broadband connections. You can deploy Cisco 880VA
Series Routers at any small-office location. With the Cisco 880VA Series, enterprise IT managers and service
providers can take advantage of a solution that they can easily set up at the remote site and centrally manage to
reduce ongoing operating costs.
Product Specifications
Cisco IOS Software Support
Table 3 lists the minimum Cisco IOS Software releases and the default Cisco IOS Software feature sets.
Table 3. Cisco IOS Software Releases and Default Cisco IOS Software Feature Sets
Tables 4 and 5 list software features of the Cisco 880VA Series.
Table 4. Cisco IOS Software Features on Cisco 880 Series: Advanced Security Feature Set (Default)

© 2013-2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 10
●
Auto Media Device In/Media Device Cross Over (MDI-MDX)
●
Eight 802.1Q VLANs
●
MAC filtering
●
Two-port 802.3af and Cisco compliant PoE
●
Switched Port Analyzer (SPAN)
●
Storm Control
●
Smartports
Secure connectivity:
●
SSL VPN for secure remote access
●
Hardware-accelerated DES; 3DES; and AES 128, 192, and 256
●
Public-key-infrastructure (PKI) support
●
Twenty IPsec tunnels
●
Cisco Easy VPN Client and Server
●
Network Address Translation (NAT) transparency
Zone-based policy firewall:
●
Stateful inspection transparent firewall
●
Advanced application inspection and control
●
Secure HTTP (HTTPS), FTP, and Telnet authentication proxy
●
Dynamic and static port security
●
Low-Latency Queuing (LLQ)
●
Weighted Fair Queuing (WFQ)
●
Class-Based WFQ (CBWFQ)
●
Class-Based Traffic Shaping (CBTS) (on Fast Ethernet WAN ports and DSL ports in Packet Transport
Mode [PTM] only)
●
Class-Based Traffic Policing (CBTP)
●
Policy-Based Routing (PBR)
●
Class-Based QoS MIB
●
Class of service (CoS)-to-differentiated services code point (DSCP) mapping
●
Cisco Configuration Professional
●
Cisco Configuration Express
●
Cisco Configuration Engine support
●
Cisco AutoInstall
●
IP service-level agreement (SLA)
●
Cisco IOS Embedded Event Manager (EEM)
●
CiscoWorks
●
Cisco Security Manager
●
Telnet, Simple Network Management Protocol Version 3 (SNMPv3), Secure Shell (SSH) Protocol, CLI,
and HTTP management
●
RADIUS and TACACS+
●
Out-of-band management with ISDN S/T port or external modem through virtual auxiliary port
High-availability features
●
Virtual Router Redundancy Protocol (VRRP) (RFC 2338)
●
Hot Standby Router Protocol (HSRP)
●
Multigroup HSRP (MHSRP)
●
Dial backup with external modem through virtual auxiliary port
●
Dial backup with ISDN S/T port (CISCO886VA only)
Number of recommended users

© 2013-2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 5 of 10
IP and IP services features
●
IPv4 and IPv6 Multicast
●
Open Shortest Path First (OSPF)
●
Border Gateway Protocol (BGP)
●
Enhanced Interior Gateway Routing Protocol (EIGRP)
●
Virtual Route Forwarding (VRF) Lite
●
Next Hop Resolution Protocol (NHRP)
●
Layer 2 Tunneling Protocol Version 3 (L2TPv3)
●
Bidirectional Forwarding Detection (BFD)
●
Web Cache Communication Protocol (WCCP)
●
Internet Group Management Protocol Version 3 (IGMPv3) snooping
●
802.1x
Secure connectivity:
●
DMVPN
●
Tunnel-less Group Encrypted Transport VPN
●
IPsec stateful failover
●
VRF-aware IPsec
●
IPsec over IPv6
●
Adaptive control technology
●
Session Initiation Protocol (SIP) application layer gateway
Cisco IOS Firewall:
●
Firewall stateful failover
●
VRF-aware firewall
Content filtering:
●
Subscription-based content filtering with Trend Micro
●
Support for Websense and SmartFilter
●
Cisco IOS Software black and white lists
Integrated threat control:
●
IPS
●
Control-Plane Policing
●
Flexible Packet Matching
●
Network foundation protection
●
Class-Based Weighted Random Early Detection (CBWRED)
●
Network-Based Application Recognition (NBAR)
●
Link fragmentation and interleaving (LFI)
●
Resource Reservation Protocol (RSVP)
●
Real-Time Transport Protocol (RTP) header compression (cRTP)
●
Differentiated Services (DiffServ)
●
QoS preclassify and prefragmentation
●
Hierarchical QoS (HQoS)
●
IPv6 addressing architecture
●
IPv6 name resolution
●
IPv6 statistics
●
IPv6 translation: Transport packets between IPv6-only and IPv4-only endpoints (NAT-PT)
●
Internet Control Message Protocol Version 6 (ICMPv6)
●
IPv6 DHCP
Cisco IOS Software Advanced IP Services Feature Set (Optional Software Upgrade)
The Advanced IP Services software image has all the features of the Advanced Security software image, in
addition to the features listed in Table 4.
Table 5. Cisco IOS Software Features on Cisco 880 Series: Advanced IP Services Feature Set (Optional Software Upgrade)

© 2013-2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 6 of 10
●
256 MB on Cisco 880 Series data models
Default and maximum flash
memory
●
128 MB on Cisco 880 Series data models
WAN ● Multimode VDSL2 and ADSl2 and 2+ over ISDN with ISDN backup
●
Multimode VDSL2 and ADSl2 and 2+ over basic telephone service
Managed 4-port 10/100BASE-T with autosensing MDI/MDX for autocrossover
Console or auxiliary port
One USB 1.1 port for advanced
security features such as
security tokens or USB flash
memory
●
One USB 1.1 port on Cisco 880 Series Routers
●
USB devices supported:
◦ USB eTokens
◦ USB flash memory
Note: USB 1.1 port cannot be used for connecting external devices other than those specified at:
http://www.cisco.com/en/US/prod/collateral/modules/ps6247/product_data_sheet0900aecd80232473.html.
ISDN Basic Rate Interface (BRI)
S/T
Available on:
●
Cisco 886VA for out-of-band management and dial backup or primary
Universal 100- to 240-VAC input; 60W, 12-VDC output
Physical dimensions
and weight
Product dimensions, nonwireless models:
●
H x W x D = 1.9 x 12.8 x 9.8 in. (48 x 325 x 249 mm) (includes rubber feet)
●
H x W x D = 1.75 x 12.8 x 9.8 in. (44 x 325 x 249 mm) (without rubber feet)
Product dimensions, wireless models:
●
H x W x D = 1.9 x 12.8 x 10.4 in. (48 x 325 x 264 mm) (includes rubber feet)
●
H x W x D = 1.75 x 12.8 x 10.4 in. (44 x 325 x 264 mm) (without rubber feet; excludes antennas)
●
Weight: 5.5 lb (2.5 kg) maximum
Product power specifications:
●
AC input voltage: 100 to 240 VAC
●
Frequency: 50 to 60 Hz
●
Maximum output power: 60W
●
Output voltages: 12 VDC
Optional internal PoE with external adapter:
●
Maximum output power: 80W
●
External output voltage: 48 VDC
Emissions:
●
47 CFR Part 15: 2006
●
CISPR22: 2005
●
EN300386: V1.3.3: 2005
●
EN55022: 2006
●
EN61000-3-2: 2000 [Inc amd 1 and 2]
●
EN61000-3-3: 1995 [+ amd 1: 2001]
●
ICES-003 Issue 4: 2004
●
KN 22: 2005
●
VCCI: V-3/2006.04
Immunity:
●
CISPR24: 1997 [+ amd 1 and 2]
●
EN300386: V1.3.3: 2005
●
EN50082-1: 1992
●
EN50082-1: 1997
System Specifications
Table 6 lists the system specifications for the Cisco 880 Series Routers.
Table 6. System Specifications

© 2013-2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 7 of 10
●
EN55024: 1998 [+ amd 1 and 2]
●
EN61000-6-1: 2001
The following are supported on teleworker models:
●
AS/NRZ 3548: 1992 Class B
●
CFR 47 Part 15 Class B
●
EN60555-2 Class B
●
EN55022 Class B
●
ICES-003, Issue 2, Class B, April 1997S
Environmental operating range
●
Nonoperating temperature: -4 to 149°F (-20 to 65°C)
●
Nonoperating humidity: 5 to 95% relative humidity (noncondensing)
●
Nonoperating altitude: 0 to 15,000 ft (0 to 4570m)
●
Operating temperature
◦ At sea level: 32 to 104°F (0 to 40°C)
◦ Up 10,000ft: 32 to 77 °F (0 to 25°C)
◦ Derating 2.7°F/10000 ft (1.5°C [304.8m])
●
Operating humidity: 10 to 85% relative humidity (noncondensing)
●
Operating altitude: 0 to 10,000 ft (0 to 3000m)
Multimode DSL (VDSL2 and
ADSL2 and 2+)
●
Broadcom chipset
●
Dying gasp
●
IEEE 802.1q VLAN tagging
●
Independent DSL firmware loading
VDSL2:
●
ITU G.993.2 (VDSL2)
●
997 and 998 band plans
●
VDSL2 profiles: 8a, 8b, 8c, 8d, 12a, 12b, and 17a
●
U0 band support (25-276 kHz)
●
Ethernet PTM mode only based on IEEE 802.3ah 64/65 octet encapsulation
●
DELT diagnostics mode
ADSL2 and 2+:
●
ADSL over basic telephone service with Annex A T1.413, ITU
G.992.1 (ADSL 1 G.Dmt), G.992.3 (ADSL2 and G.DMT bis), and G.992.5 (ADSL2+ and G.DMT bis 2+)
●
Cisco 887VA: Optimized for Annex A
●
C887VA: Optimized for Annex A
●
ADSL over basic telephone service with Annex M (extended upstream bandwidth) G.992.3 (ADSL2) and
G.992.5 (ADSL2+)
●
Cisco 887VA-M: Optimized for PSD Mask EU-64 M9; also compatible with Annex A
●
Cisco 887VA-M: Supports UK Annex M
●
C887VAM: Optimized for PSD Mask EU-64 M9; also compatible with Annex A
●
C887VAM: Supports Annex M
●
ADSL over ISDN with Annex B ITU G.992.1 (ADSL), G.992.3 (ADSL2), and G.992.5 (ADSL2+)
●
Cisco 886VA: Optimized for Annex B
●
C886VA: Optimized for Annex B
●
ADSL over ISDN with Annex J Full Digital ISDN ITU-T G.992.3 (ADSL2) and G.992.5 (ADSL2+)
●
Cisco 886VA-J: Optimized for Annex J
●
C886VAJ: Optimized for Annex J
●
G.994.1 ITU G.hs
DSL Specifications
Tables 7 through 10 list the DSL feature specifications and DSL access multiplexer (DSLAM) interoperability
support for the Cisco 880 Series Routers. For more information and details about DSLAM and line-card
interoperability, please refer to the following document: What Is Cisco ISR and ISR G2 xDSL Interoperability?
Table 7. DSL Features Specifications

© 2013-2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 8 of 10
●
Reach-extended ADSL2 (G.922.3) Annex L for increased performance on loop lengths greater than
16,000 feet (4876.8m) from central office
●
T1.413 ANSI ADSL DMT issue 2 compliance
●
DSL Forum TR-067, TR-100, and TR-112 compliance
●
Inpulse Noise Protection (INP) and extended INP-Delay
●
Seamless Rate Adaptation
●
Physical Layer Retransmission (PhyR)
●
Downstream Power Back Off (DPBO)
●
ATM mode only
VDSL2 over ISDN and Basic Telephone Service Line-Card Chipset
ADSL2 and 2+ over ISDN Line-Card Chipset
ADSL2 and 2+ over Basic Telephone Service Line-Card Chipset
Multi-mode DSL (VDSL2 and ADSl2/2+)
Cisco 886VA router with VDSL2/ADSL2+ over ISDN
Cisco 886VA Secure router with VDSL2/ADSL2+ over ISDN
Cisco 886VA router with VDSL2/ADSL2+ over ISDN - Lead Free
Cisco 886VA router with VDSL2/ADSL2+ over ISDN Annex J
Table 8. VDSL2 over ISDN and Basic Telephone Service DSLAM Interoperability for Cisco 886VA and 887VA
Table 9. ADSL over ISDN DSLAM Interoperability for Cisco 886VA
Table 10. ADSL over Basic Telephone Service DSLAM Interoperability for Cisco 887VA
Ordering Information
Table 11 lists ordering information for the Cisco 880 Series. To place an order, visit the Cisco ordering homepage.
Table 11. Ordering Information

© 2013-2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 9 of 10
Cisco 886VA router with VDSL2/ADSL2+ over ISDN Annex J – Lead Free
Cisco 887VA router with VDSL2/ADSL2+ over POTS
Cisco 887VA Secure router with VDSL2/ADSL2+ over POTS
Cisco 887VA router with VDSL2/ADSL2+ over POTS - Lead Free
Cisco 887VA router with VDSL2/ADSL2+ over POTS Annex M router
Cisco 887VA router with VDSL2/ADSL2+ over POTS Annex M router – Lead Free
2 port 802.3af capable inline power module for 880 routers
256-MB DRAM upgrade to 512 MB for Cisco 880 Series Routers
512-MB DRAM upgrade to 768 MB for Cisco 880 Series Routers
512-MB DRAM upgrade to 768 MB for Cisco 880 Series Routers
CISCO800 DRAM Upgrade from 512MB to 1GB (For
Cisco IOS Universal Software for Cisco 880
Cisco 880 Series IOS UNIVERSAL DATA
Software License for Cisco 880 Data
Cisco 880 Advanced Security Image Feature License
SL-880-AIS (upgrade option)
Cisco 880 Advanced IP Services Image Feature License
Cisco 880 Advanced Security NPE License PAK (Paper)
SL-880-AIS-NPE (upgrade option)
Cisco 880 Advanced IP Services NPE License PAK (Paper)
Software License for Cisco 880 Data (Bulk)
Advanced IP e-Delivery PAK for Cisco 800 Series
One year subscription to Content Filtering for Cisco 881/888-URL/Phishing
30 day free trial license for 88x series
Feature License SSL VPN for Up to 10 Users (incremental), for 12.4T based IOS releases only
Feature License SSL VPN for Up to 10 Users (incremental), for 15.x based IOS releases only
Universal image for Cisco 880 ISR Data Router Series
C800data-universalk9-mz**
Universal image for Cisco 880 ISR Data Router Series
* This Memory license is only valid for C881-K9, C886VA-K9, C886VAJ-K9, C887VA-K9, and C887VA-M-K9
** This universal image is valid for C881-K9, C886VA-K9, C886VAJ-K9, C887VA-K9, and C887VA-M-K9
Cisco License Manager is a secure client- and server-based application used to manage Cisco IOS Software
activation and licenses. For more information about Cisco License Manager, visit http://www.cisco.com/go/clm.
Each software part number has the Cisco IOS Software release number at the end of the string. For example, the part number
of the Cisco IOS 12.4(20)T data universal image for the Cisco 880 Series is S880DUK9-12420T.

© 2013-2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 10 of 10
Printed in USA C78-613481-04 06/14
Cisco Services for the Branch Office
Services from Cisco and our certified partners can help you reduce the cost and complexity of branch-office
deployments. We have the depth and breadth of experience across technologies to architect a blueprint for a
branch-office solution to meet your company's needs. Planning and design services align technology with business
goals and can increase the accuracy, speed, and efficiency of deployment. Technical services help maintain
operational health, strengthen software application functions, solve performance problems, and lower expenses.
Optimization services are designed to continually improve performance and help your team succeed with new
technologies. For more information, please visit http://www.cisco.com/go/services.
Warranty Information
Warranty information is available on Cisco.com at the Product Warranties page.