Cisco 881, 887VA, 888VA, 888, 887 Datasheet

...

Data Sheet

Cisco 880 Series Integrated Services Routers

The Cisco® 880 Series Integrated Services Routers combine Internet access, security, voice, and wireless services onto a single, secure device that is simple to use and manage for small businesses and enterprise small branch offices and teleworkers. The Cisco 880 Series delivers features including firewall, content filtering, VPNs, and wireless LANs (WLANs) at broadband speeds to small offices. Easy deployment and centralized management features enable enterprises or service providers to deploy the Cisco 880 Series in small branch offices or small businesses.

Product Overview

Cisco 880 Series Integrated Services Routers are fixed-configuration routers that provide collaborative business solutions for secure voice and data communication to small businesses and enterprise teleworkers. They offer concurrent broadband services over third-generation (3G), Metro Ethernet, and multiple DSL technologies to provide business continuity. Wireless 802.11n and 3G offer LAN and WAN mobility. The routers provide the performance required for concurrent services, including firewall, intrusion prevention, content filtering, and encryption for VPNs; optional 802.11g/n for mobility; and quality-of-service (QoS) features for optimizing voice and video applications. In addition, the web-based Cisco Configuration Professional configuration tool simplifies setup and deployment. Centralized management capabilities give network managers visibility and control of the network configurations at the remote site.

Cisco 880 Series Integrated Services Routers offer:

●

High performance for broadband access in small offices and small branch-office and teleworker sites

●

Collaborative services with secure analog, digital voice, and data communication

●

Business continuity and WAN diversity with redundant WAN links: Fast Ethernet, Multimode G.SHDSL(Ethernet in the First Mile [EFM] and ATM), Multimode DSL (very-high-data-rate DSL 2 [VDSL2] and asymmetric DSL 2 and 2+ [ADSL2 and ADSL2+, respectively]), 3G, and ISDN

●

Voice-enabling features:

◦

Cisco Unified Communications Manager Express(5 user) which offers innovative key system and small

private branch exchange (PBX) capabilities for small and medium business customers

◦

Survivable Remote Site Telephony (SRST) voice continuity for enterprise small branch-office and

teleworker sites

◦

Cisco Unified Border Element (Cisco UBE) IP-IP voice gateway functions for connecting to Session

Initiation Protocol (SIP) trunking services as a replacement for Primary Rate Interface (PRI) or foreignexchange-office (FXO) voice connectivity to the service provider. Note: Cisco Unified Border Element support for the Cisco 880 Series has feature limitations as compared to the Cisco Integrated Services Routers Generation 2 (ISR G2 Routers). Go to http://www.cisco.com/go/cube for the full set of Cisco Unified Border Element features. Cisco Unified Border Element limitations on Cisco 880 Routers are listed later in this document.

●

Enhanced security, including:

Firewall with advance application and control for email, Instant Messaging (IM), and HTTP traffic

◦

Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption

Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN (DMVPN), Group Encrypted Transport VPN with onboard acceleration, and Secure Sockets Layer (SSL) VPN

◦

Intrusion prevention system (IPS): An inline, deep-packet inspection feature that effectively mitigates a

wide range of network attacks

◦

Content filtering: A subscription-based integrated security solution that offers category-based reputation

rating; keyword blocking; and protection against adware, malware, spyware, and Uniform Resource Locator (URL) blocking

●

Four-port 10/100 Fast Ethernet managed switch with VLAN support; two ports support Power over Ethernet (PoE) for powering IP phones or external access points

●

Secure 802.11g/n access-point option based on draft 802.11n standard with support for autonomous or Cisco Unified WLAN architectures

●

CON/AUX port for console or external modem

●

One USB 1.1 port for security eToken credentials, booting from USB, and loading configuration

●

Easy setup, deployment, and remote-management capabilities through web-based tools and Cisco IOS® Software

Figure 1 shows a Cisco 881 Integrated Services Router.

Figure 1. Cisco 881 Integrated Services Router with Integrated 802.11n Access Point

Tables 1 and 2 list the routers that currently make up the Cisco 880 data, voice and SRST series, respectively.

Table 1. Cisco 880 Series Data Models

Models WAN Interface LAN Interfaces 802.11g/n Option Embedded 3G Integrated ISDN Dial

Cisco 881 10/100-Mbps Fast

Ethernet

Cisco 886 VA Multimode

VDSL2/ADSL2/2+ over ISDN

Cisco 887VA Multimode

VDSL2/ADSL2/2+ over basic telephone service

Cisco 886 ADSL2/2+ over ISDN

(Annex B)

Cisco 887 ADSL2/2+ over basic

telephone service

4-port 10/100-Mbps managed switch

Yes (Cisco 881W) Yes (Cisco 881G) -

Yes (Cisco 886VAW) Yes (Cisco 886VAG) Yes

Yes (Cisco 887VAW) Yes (Cisco 887VAG) No

Yes (Cisco 886W) Yes (Cisco 886G) Yes

Yes (Cisco 887W) Yes (Cisco 887G) Yes

Backup

Models WAN Interface LAN Interfaces 802.11g/n Option Embedded 3G Integrated ISDN Dial

(Annex A)

Cisco 887V VDSL2 over basic

telephone service

Cisco 888 G.SHDSL (ATM) 4-port 10/100-Mbps

Cisco 888E G.SHDSL (EFM) 4-port 10/100-Mbps

Cisco 888EA Multimode G.SHDSL

(EFM/ATM)

4-port 10/100-Mbps managed switch

managed switch

managed switch 4-port 10/100-Mbps

managed switch

Yes (Cisco 887V) Yes (Cisco 887VG) Yes

Yes (Cisco 888W) Yes (Cisco 888G) Yes

Yes (Cisco 888W) Yes (Cisco 888EG) Yes

No No No

Backup

Table 2. Cisco 880 Series Voice Models

Models WAN Interface LAN Interfaces Voice Ports 802.11g/n Option

Cisco881V 10/100-Mbps Fast

Cisco887VA-V Multi-mode

Cisco 881 SRST 10/100-Mbps Fast

Cisco 888 SRST G.SHDSL 4-port 10-/100-Mbps managed

Cisco 881 with Cisco Unified Border Element

Cisco 886VA with Cisco Unified Border Element

Cisco 887VA with Cisco Unified Border Element

Cisco 888E with Cisco Unified Border Element

Cisco 888 with Cisco Unified Border Element

Ethernet

VDSL2/ADSL2/2+ over POTS

Ethernet

10/100-Mbps Fast Ethernet

Multimode VDSL2/ADSL2/2+ over ISDN

Multimode VDSL2/ADSL2/2+ over basic telephone service

G.SHDSL (EFM) 4-port 10-/100-Mbps managed

G.SHDSL (ATM) 4-port 10-/100-Mbps managed

4-port 10/100 Mbps managed switch

4-port 10-/100-Mbps managed switch

switch 4-port 10-/100-Mbps managed

switch

4-port 10-/100-Mbps managed switch

switch

4 foreign-exchange-station (FXS) ports, 2 Basic Rate Interface(BRI) ports and 1 foreign-exchange-office (FXO) port for public-switchedtelephone-network (PSTN) fallback

4 foreign-exchange-station (FXS) ports and 2 Basic Rate Interface(BRI) ports

4 foreign-exchange-station (FXS) ports and 1 FXO port for publicswitched-telephone-network (PSTN) fallback

4 FXS ports and 1 Basic Rate Interface (BRI) port for PSTN fallback

No No

Yes (Cisco887VA-VW-K9)

Yes (Cisco 881 SRSTW)

Yes (Cisco 888 SRSTW)

The Cisco 880 Series is ideal for small branch offices and teleworkers who need to be connected to larger enterprise networks as well as small businesses for either voice or data applications. These routers help extend corporate networks to secure remote sites while giving users access to the same applications found in a corporate office. When users require WLAN access, visibility and control of network security are even more critical at the remote site. The Cisco 880 Series meets this need with a single device that combines integrated 802.11g/n capabilities with security features such as Wi-Fi Protected Access (WPA), including authentication with IEEE

802.1x with Cisco Extensible Authentication Protocol (LEAP) and Protected EAP (PEAP) and encryption with WPA Temporal Key Integrity Protocol (TKIP). (Refer to the wireless solution overview and security data sheet for more information. The Cisco 880 Series models that include the integrated access point can use either autonomous or Cisco Unified WLAN modes. In Cisco Unified WLAN mode, as part of an enterprise WLAN architecture, all WLAN functions are centrally managed through Cisco Wireless LAN Controllers and the Cisco Wireless Control System (WCS).

Service providers and value-added resellers can take advantage of the Cisco 880 Series to provide a true business-class broadband service. Business customers are using broadband access to connect to the Internet or to connect offices together, and they require a platform that incorporates voice and security without sacrificing performance. The Cisco 881V and Cisco 887VA-V voice routers offer industry-leading voice gateway capability with the ability to layer of Cisco Unified Communications Manager Express or SRST as required. Many of these customers are connecting computers in offices through WLANs; having a single device for both WAN and WLAN access provides a new option for managed services. These customers also require a higher level of support to keep their networks operational. Services with these customers should be simple to set up, while allowing a level of remote management and troubleshooting to quickly address support inquiries. The Cisco 880 Series meets the requirements of small offices and managed services providers.

Figure 2 shows deployment scenarios.

Figure 2. Deployment Scenarios

Applications

The Cisco 880 Series is ideally suited for deployment in a small office or in a small office that is part of a large network, most often with a secure VPN connection. These types of offices can include the following:

●

Small remote office: The Cisco 880 Series can connect users in a small remote office, such as an insurance, lawyer, or sales office. When connecting to the main office, VPN encryption and integrated security such as firewall and intrusion prevention protect the network at the perimeter. The Cisco 880 with the Cisco Unified Border Element Series can also support connection to SIP trunking voice-over-IP (VoIP) services provided by the service provider. Additionally, IT managers can centrally manage the remote site to quickly troubleshoot any network problems. For added reliability, customers can also use the integrated 3G or ISDN backup or connect through an external modem if the primary broadband link fails. Integrated secure unified WLAN connectivity simplifies the deployment and management devices at the remote site. Redundant WAN links offer business continuity, enabling nondisruptive business operation.

●

Virtual office: The Cisco 880 Series is ideal for corporate teleworkers who have a mix of broadband connection types such as DSL, 3G, and Metro Ethernet. The Cisco 880 Voice gateway and SRST Series provides a secure virtual office with all the collaborative services such as data, voice, and fax services. SRST helps ensure voice services are operational in case of WAN link failure, and redundant WAN links help ensure business continuity. QoS features in the Cisco 880 Series allow for connection of an IP or analog phone to the router, giving voice traffic precedence over data applications. Integrated WLAN support in the Cisco 880 Series helps ensure that if wireless connectivity is used it is secure. (Refer to the Cisco Virtual Office Solution,

●

Remote call-center agent: Similar to teleworking applications, this solution extends the Cisco IP Contact Center solution for telephone call-center agents to remote sites. With a high-quality, secure connection through the Cisco 880 Series, call-center agents can be dispersed away from costly call-center facilities while maintaining secure and productive voice and data access in their homes. SRST and businesscontinuity solutions in the Cisco 880 Series provide reliability and continuous business operation. Alternatively, the remote call-center agent can be provided with SIP trunking service with service demarcation provided by Cisco Unified Border Element features and the central call center can forward calls to the remote call-center agent through the remote-office SIP trunk.

●

Retail VPN: Retail stores migrating from dialup connections for point-of-sale transactions can use the Cisco 880 Series to take advantage of low-cost broadband access with the required security to comply with payment-card-industry (PCI) and other data security requirements. They can then add multiple devices and applications to the store network to take advantage of the increased bandwidth and also incorporate optional WLAN support to enable secure mobility and enhance productivity.

●

Managed services: Service providers and value-added resellers can use the Cisco 880 Series as a platform to offer differentiated business-class security, voice, and WLAN services for small business customers. With built-in analog and digital voice ports and the ability to upgrade to a 5 user Cisco Unified Communications Manager Express IP PBX, service providers can now offer all the Unified communications benefits to small and medium businesses. The SIP trunking connectivity features of the Cisco 880 with Cisco Unified Border Element Series Router can provide the high-quality VoIP service needed through the service provider cloud.

http://www.cisco.com/go/cvo, for more information.)

Features and Benefits

Table 3 lists the features and benefits of the Cisco 880 Series Integrated Services Routers.

Table 3. Features and Benefits of Cisco 880 Series Routers

Feature Benefit

Increased performance to run concurrent services

Enhanced security

WAN diversity

Redundant WAN links Four-port 10-/100-Mbps managed

switch

CON/AUX port

Optional 802.11g/n access point

Real-time clock

Voice Gateway (supported on 881V and 887VA-V voice models)

SRST (supported on SRST voice models)

Cisco Unified Border Element (supported on Cisco Unified Border Element voice models)

Cisco Configuration Professional

Unified wireless management

●

Cisco 880 Series Router performance allows customers to take advantage of broadband network speeds while running secure, concurrent data, voice, video, and wireless services.

●

An integrated stateful and application inspection firewall provides network perimeter security.

●

High-speed IPsec 3DES and AES encryption offers data privacy over the Internet.

●

Intrusion prevention enforces security policy in a larger enterprise or service provider network.

●

Content filtering offers category-based URL classification and blocking, thus providing increased productivity and better use of company resources.

●

Multiple WAN links include Fast Ethernet, multimode VDSL2/ADSL2/2+, multimode G.SHDSL, 3G, and ISDN.

●

Redundant WAN links provide business continuity and WAN diversity with.

●

The Cisco 880 Series allows for connection of multiple devices in a small office, with the ability to designate a port as the network edge.

●

An optional external PoE adapter powers IP phones and external access points to avoid individual power supplies or power injectors.

●

VLANs allow for secure segmentation of network resources.

●

A single dual-purpose port provides direct connection to a console or external modem for management or backup access points.

●

This broadband router offers a secure integrated access point in a single device.

●

This integrated Wi-Fi access point offers IEEE 802.11n 2.0 standard support for mobile access to high-bandwidth data, voice, and video applications through the use of multiple-input, multiple-output (MIMO) technology that provides increased throughput, reliability, and predictability.

●

The Cisco 880 Series supports both autonomous and unified modes.

●

A built-in real-time clock maintains an accurate date and time for applications that require an accurate time stamp, such as logging and digital certificates.

●

Provides voice gateway functionality with the ability to upgrade to a 5 user Cisco Unified Communications Manager Express or 5 user SRST)

●

SRST provides business continuity for voice when the WAN link fails by switching calls to the PSTN.

●

Support for SIP trunk connectivity, including demarcation and interworking, is based on a Cisco Unified Border Element feature license.

●

Transcoding of media is not supported on the Cisco 880 Series Cisco Unified Border Element feature set.

●

Cisco Configuration Professional uses smart wizards and task-based tutorials, which resellers and customers can use to quickly and easily deploy, configure, and monitor a Cisco access router without requiring knowledge of the Cisco IOS Software command-line interface (CLI).

●

Configuration and management of access points is automated and simplified without manual intervention.

●

A unified hybrid remote-edge access point (HREAP) provides the following:

◦

WLAN services to remote and branch offices without deploying a WLAN controller at each

location

◦

Central configuration and control of unified WLAN services for remote offices through a WAN link

◦

Flexibility in setting up wireless access at remote locations by specifying how traffic is to be

bridged or tunneled

Summary

Cisco 880 Series Integrated Services Routers combine increased network performance with advanced security to allow small-office customers to get the most from their broadband connections for both data and voice applications. With models supporting different broadband technologies such as DSL, 3G, and Metro Ethernet, the Cisco 880 Series can be deployed at any small-office location. Optional integrated 802.11g/n wireless capabilities provide true business-class WAN and WLAN access in a single solution. With the Cisco 880 Series, enterprise IT managers and service providers can take advantage of a solution that can be easily set up at the remote site and can be centrally managed to reduce ongoing operational costs.

Product Specifications

Cisco IOS Software Support

Table 4 lists the minimum Cisco IOS Software releases and the default Cisco IOS Software feature sets.

Table 4. Cisco IOS Software Releases and Default Cisco IOS Software Feature Sets

Models Universal Image Default Feature Set First Cisco IOS Software

Cisco 881 Data Advanced Security 12.4(20)T Cisco 881 SEC, Embedded 3G Data Advanced IP 12.4(20)T, 15.1(4)M Cisco 881V Voice Advanced IP* 15.1(4)M Cisco 881 SRST Voice Advanced IP* 12.4(20)T Cisco 886VA and 887VA Data Advanced Security 15.1(2)T Cisco 886VA and 887VA WLAN Data Advanced Security 15.1(3)T Cisco 886VA and 887VA

Embedded 3G Cisco 886 and 887 Data Advanced Security 12.4(22)YB3 Cisco 886 and 887 SEC, 3G Data Advanced IP 12.4(22)YB3 Cisco 887V Data Advanced Security 12.4(22)YB, 12.4(24)T Cisco 887V SEC, 3G Data Advanced IP 12.4(22)YB, 12.4(24)T Cisco 887V WLAN Data Advanced Security 15.0(1)M Cisco 887V 3G Data Advanced IP 15.0(1)M Cisco 887VA-V Voice Advanced IP 15.1(4)M Cisco 887VA-V-W Voice Advanced IP 15.1(4)M Cisco 888 Data Advanced Security 12.4(20)T Cisco 888 SEC, 3G Data Advanced IP 12.4(20)T, 15.1(4)M Cisco 888 SRST Voice Advanced IP* 12.4(20)T Cisco 888E Data Advanced Security 15.1(1)T Cisco 888E Embedded 3G Data Advanced IP 15.1(4)M Cisco 888EA Data Advanced Security 15.2(2)T Cisco 881, 886VA, 887VA, 888,

888E with Cisco Unified Border Element

Access-point software (ap801) - - 12.4(10b)JA3

Cisco 881V, 887VA-V, 881 SRST and 888 SRST run the Cisco 880 voice universal image, which shares the same data and

Data Advanced Security 15.1(4)M

Voice Advanced IP 15.1(4)M

Release

security features as the Advanced IP feature sets of Cisco 880 data models.

+ 16 hidden pages