Cisco C881-K9 Product Data Sheet

Data Sheet

Cisco 880 Series Integrated Services Routers

The Cisco® 880 Series Integrated Services Routers (ISRs) combine Internet access, security, voice, and wireless services onto a single, secure device that is simple to use and manage for small businesses and enterprise small branch offices and teleworkers. The Cisco 880 Series delivers features including firewall, content filtering, VPNs, and wireless LANs (WLANs) at broadband speeds to small offices. Easy deployment and centralized management features enable enterprises or service providers to deploy the Cisco 880 Series in small branch offices or small businesses.

Product Overview

Cisco 880 Series Integrated Services Routers are fixed-configuration routers that provide collaborative business solutions for secure voice and data communication to small businesses and enterprise teleworkers. They offer concurrent broadband services over third-generation (3G), Metro Ethernet, and multiple DSL technologies to provide business continuity. Wireless 802.11n and 3G offer LAN and WAN mobility. The routers provide the performance required for concurrent services, including firewall, intrusion prevention, content filtering, and encryption for VPNs; optional 802.11g/n for mobility; and quality-of-service (QoS) features for optimizing voice and video applications. In addition, the web-based Cisco Configuration Professional configuration tool simplifies setup and deployment. Centralized management capabilities give network managers visibility and control of the network configurations at the remote site.

Cisco 880 Series Integrated Services Routers offer:

●

High performance for broadband access in small offices and small branch-office and teleworker sites

●

Collaborative services with secure analog, digital voice, and data communication

●

Business continuity and WAN diversity with redundant WAN links: Fast Ethernet, Multimode G.SHDSL (Ethernet in the First Mile [EFM] and ATM), Multimode DSL (very-high-data-rate DSL 2 [VDSL2] and asymmetric DSL 2 and 2+ [ADSL2 and ADSL2+, respectively]), 3G, and ISDN

●

Voice-enabling features:

◦ Cisco Unified Communications Manager Express (5 user), which offers innovative key system and small

private-branch-exchange (PBX) capabilities for small and medium-sized business customers

◦ Survivable Remote Site Telephony (SRST) voice continuity for enterprise small branch-office and

teleworker sites

◦ Cisco Unified Border Element (Cisco UBE) IP-IP voice gateway functions for connecting to Session

Initiation Protocol (SIP) trunking services as a replacement for Primary Rate Interface (PRI) or foreignexchange-office (FXO) voice connectivity to the service provider. Note: Cisco Unified Border Element support for the Cisco 880 Series has feature limitations as compared to the Cisco Integrated Services Routers Generation 2 (ISR G2) Routers. Go to http://www.cisco.com/go/cube for the full set of Cisco Unified Border Element features. Cisco Unified Border Element limitations on Cisco 880 Routers are listed later in this document.

Models

WAN Interface

LAN Interfaces

802.11g/n Option

Embedded 3G

Integrated ISDN Dial Backup

C881

10/100-Mbps Fast Ethernet

4-port 10/100-Mbps managed switch

Cisco 881

10-/100-Mbps Fast Ethernet

4-port 10-/100-Mbps managed switch

Yes (Cisco 881W)

Yes (Cisco 881G)

C886VA

Multimode VDSL2/ADSL2/2+ over ISDN

4-port 10-/100-Mbps managed switch

Yes

C886VAJ

Multimode VDSL/ADSL Annex J over ISDN

4-port 10-/100-Mbps managed switch

Yes

●

Enhanced security, including:

◦ Firewall with advance application and control for email, Instant Messaging (IM), and HTTP traffic ◦ Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption

Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN (DMVPN), Group Encrypted Transport VPN with onboard acceleration, and Secure Sockets Layer (SSL) VPN

◦ Intrusion prevention system (IPS): An inline, deep-packet inspection feature that effectively mitigates a

wide range of network attacks

◦ Content filtering: A subscription-based integrated security solution that offers category-based reputation

rating; keyword blocking; and protection against adware, malware, spyware, and Uniform Resource Locator (URL) blocking

●

Four-port 10/100 Fast Ethernet managed switch with VLAN support; two ports support Power over Ethernet (PoE) for powering IP phones or external access points

●

Secure 802.11g/n access-point option based on draft 802.11n standard with support for autonomous or Cisco Unified WLAN architectures

●

Newer Cisco 880 Series (part numbers C881-K9, C886VA-K9, C886VAJ-K9, C887VA-K9, C887VAM-K9 and C888-K9), which are fanless, providing a quiet, comfortable working environment in small offices

●

CON/AUX port for console or external modem

●

One USB 1.1 port for security eToken credentials, booting from USB, and loading configuration

●

Easy setup, deployment, and remote-management capabilities through web-based tools and Cisco IOS® Software

Figure 1 shows a Cisco 881 Integrated Services Router.

Figure 1. Cisco 881 Integrated Services Router with Integrated 802.11n Access Point

Tables 1 and 2 list the routers that currently make up the Cisco 880 data, voice, and SRST series, respectively.

Table 1. Cisco 880 Series Data Models

Models

WAN Interface

LAN Interfaces

802.11g/n Option

Embedded 3G

Integrated ISDN Dial Backup

Cisco 886 VA

Multimode VDSL2/ADSL2/2+ over ISDN

4-port 10-/100-Mbps managed switch

Yes (Cisco 886VAW)

Yes (Cisco 886VAG)

Yes

Cisco 887VA

Multimode VDSL2/ADSL2/2+ over basic telephone service

4-port 10-/100-Mbps managed switch

Yes (Cisco 887VAW)

Yes (Cisco 887VAG)

Cisco 886

ADSL2/2+ over ISDN (Annex B)

4-port 10-/100-Mbps managed switch

Yes (Cisco 886W)

Yes (Cisco 886G)

Yes

C887

Multimode VDSL/ADSL over POTS

4-port 10-/100-Mbps managed switch

C887VAM

Multimode VDSL/ADSL Annex-M over POTS

4-port 10-/100-Mbps managed switch

Cisco 887

ADSL2/2+ over basic telephone service (Annex A)

4-port 10-/100-Mbps managed switch

Yes (Cisco 887W)

Yes (Cisco 887G)

Yes

Cisco 887V

VDSL2 over basic telephone service

4-port 10-/100-Mbps managed switch

Yes (Cisco 887V)

Yes (Cisco 887VG)

Yes

C888

G.SHDSL(EFM/ATM) (No ATM IMA support)

4-port 10-/100-Mbps managed switch

Yes

Cisco 888

G.SHDSL (ATM)

4-port 10-/100-Mbps managed switch

Yes (Cisco 888W)

Yes (Cisco 888G)

Yes

Cisco 888E

G.SHDSL (EFM)

4-port 10-/100-Mbps managed switch

Yes (Cisco 888W)

Yes (Cisco 888EG)

Yes

Cisco 888EA

Multimode G.SHDSL (EFM/ATM)

4-port 10-/100-Mbps managed switch

Yes

Models

WAN Interface

LAN Interfaces

Voice Ports

802.11g/n Option

Cisco881V

10-/100-Mbps Fast Ethernet

4-port 10-/100-Mbps managed switch

4 foreign-exchange-station (FXS) ports, 2 Basic Rate Interface(BRI) ports, and 1 foreign-exchange-office (FXO) port for public-switchedtelephone-network (PSTN) fallback

Cisco887VA-V

Multimode VDSL2/ADSL2/2+ over POTS

4-port 10-/100-Mbps managed switch

4 foreign-exchange-station (FXS) ports and 2 Basic Rate Interface(BRI) ports

Yes (Cisco887VA-VW-K9)

Cisco 881 SRST

10-/100-Mbps Fast Ethernet

4-port 10-/100-Mbps managed switch

4 foreign-exchange-station (FXS) ports and 1 FXO port for publicswitched-telephone-network (PSTN) fallback

Yes (Cisco 881 SRSTW)

Cisco 888 SRST

G.SHDSL

4-port 10-/100-Mbps managed switch

4 FXS ports and 1 Basic Rate Interface (BRI) port for PSTN fallback

Yes (Cisco 888 SRSTW)

Cisco 881 with Cisco Unified Border Element

10-/100-Mbps Fast Ethernet

4-port 10-/100-Mbps managed switch

Cisco 886VA with Cisco Unified Border Element

Multimode VDSL2/ADSL2/2+ over ISDN

4-port 10-/100-Mbps managed switch

Cisco 887VA with Cisco Unified Border Element

Multimode VDSL2/ADSL2/2+ over basic telephone service

4-port 10-/100-Mbps managed switch

Cisco 888E with Cisco Unified Border Element

G.SHDSL (EFM)

4-port 10-/100-Mbps managed switch

Cisco 888 with

G.SHDSL (ATM)

4-port 10-/100-Mbps managed

Table 2. Cisco 880 Series Voice Models

Models

WAN Interface

LAN Interfaces

Voice Ports

802.11g/n Option

Cisco Unified Border Element

switch

The Cisco 880 Series is ideal for small branch offices and teleworkers who need to be connected to larger enterprise networks as well as small businesses for either voice or data applications. These routers help extend corporate networks to secure remote sites while giving users access to the same applications found in a corporate office. When users require WLAN access, visibility and control of network security are even more critical at the remote site. The Cisco 880 Series meets this need with a single device that combines integrated 802.11g/n capabilities with security features such as Wi-Fi Protected Access (WPA), including authentication with IEEE

802.1x with Cisco Extensible Authentication Protocol (LEAP) and Protected EAP (PEAP) and encryption with WPA Temporal Key Integrity Protocol (TKIP). (Refer to the wireless solution overview and security data sheet for more information.) The Cisco 880 Series models that include the integrated access point can use either autonomous or Cisco Unified WLAN modes. In Cisco Unified WLAN mode, as part of an enterprise WLAN architecture, all WLAN functions are centrally managed through Cisco Wireless LAN Controllers and the Cisco Wireless Control System (WCS).

Service providers and value-added resellers can take advantage of the Cisco 880 Series to provide a true business-class broadband service. Business customers are using broadband access to connect to the Internet or to connect offices together, and they require a platform that incorporates voice and security without sacrificing performance. The Cisco 881V and Cisco 887VA-V voice routers offer industry-leading voice gateway capability with the ability enable Cisco Unified Communications Manager Express or SRST as required. Many of these customers are connecting computers in offices through WLANs; having a single device for both WAN and WLAN access provides a new option for managed services. These customers also require a higher level of support to keep their networks operational. Services with these customers should be simple to set up, while allowing a level of remote management and troubleshooting to address support inquiries quickly. The Cisco 880 Series meets the requirements of small offices and managed services providers.

Figure 2 shows deployment scenarios.

Figure 2. Deployment Scenarios

Applications

The Cisco 880 Series is ideally suited for deployment in a small office or in a small office that is part of a large network, most often with a secure VPN connection. These types of offices can include the following:

●

Small remote office: The Cisco 880 Series can connect users in a small remote office, such as an insurance, lawyer, or sales office. When connecting to the main office, VPN encryption and integrated security such as firewall and intrusion prevention protect the network at the perimeter. The Cisco 880 with the Cisco Unified Border Element Series can also support connection to SIP trunking voice-over-IP (VoIP) services the service provider offers. Additionally, IT managers can centrally manage the remote site to quickly troubleshoot any network problems. For added reliability, customers can also use the integrated 3G or ISDN backup or connect through an external modem if the primary broadband link fails. Integrated secure unified WLAN connectivity simplifies the deployment and management devices at the remote site. Redundant WAN links offer business continuity, enabling nondisruptive business operation.

●

Virtual office: The Cisco 880 Series is ideal for corporate teleworkers who have a mix of broadband connection types such as DSL, 3G, and Metro Ethernet. The Cisco 880 Voice Gateway and SRST Series provides a secure virtual office with all the collaborative services such as data, voice, and fax services. SRST helps ensure voice services are operational in case of WAN link failure, and redundant WAN links help ensure business continuity. QoS features in the Cisco 880 Series allow for connection of an IP or analog phone to the router, giving voice traffic precedence over data applications. Integrated WLAN support in the Cisco 880 Series helps ensure that if wireless connectivity is used it is secure. (Refer to the Cisco Virtual Office Solution, http://www.cisco.com/go/cvo, for more information.)

●

Remote call-center agent: Similar to teleworking applications, this solution extends the Cisco IP Contact Center solution for telephone call-center agents to remote sites. With a high-quality, secure connection through the Cisco 880 Series, call-center agents can be dispersed away from costly call-center facilities

Feature

Benefit

Increased performance to run concurrent services

●

Cisco 880 Series Router performance allows customers to take advantage of broadband network speeds while running secure, concurrent data, voice, video, and wireless services.

Enhanced security

●

An integrated stateful and application inspection firewall provides network perimeter security.

●

High-speed IPsec 3DES and AES encryption offers data privacy over the Internet.

●

Intrusion prevention enforces security policy in a larger enterprise or service provider network.

●

Content filtering offers category-based URL classification and blocking, thus providing increased productivity and better use of company resources.

WAN diversity

●

Multiple WAN links include Fast Ethernet, multimode VDSL2/ADSL2/2+, multimode G.SHDSL, 3G, and ISDN.

Redundant WAN links

●

Redundant WAN links provide business continuity and WAN diversity.

Four-port 10-/100-Mbps managed switch

●

The Cisco 880 Series allows for connection of multiple devices in a small office, with the ability to designate a port as the network edge.

●

An optional external PoE adapter powers IP phones and external access points to avoid individual power supplies or power injectors.

●

VLANs allow for secure segmentation of network resources.

CON/AUX port

●

A single dual-purpose port provides direct connection to a console or external modem for management or backup access points.

Optional 802.11g/n access point

●

This broadband router offers a secure integrated access point in a single device.

●

This integrated Wi-Fi access point offers IEEE 802.11n 2.0 standard support for mobile access to highbandwidth data, voice, and video applications through the use of multiple-input, multiple-output (MIMO) technology that provides increased throughput, reliability, and predictability.

●

The Cisco 880 Series supports both autonomous and unified modes.

Real-time clock

●

A built-in real-time clock maintains an accurate date and time for applications that require an accurate time stamp, such as logging and digital certificates.

Voice gateway (supported on 881V and 887VA-V voice models)

●

The Cisco 881V and 887VA-V models provide voice gateway functions with the ability to upgrade to a five-user Cisco Unified Communications Manager Express or five-user SRST).

SRST (supported on SRST voice models)

●

SRST provides business continuity for voice when the WAN link fails by switching calls to the PSTN.

while maintaining secure and productive voice and data access in their homes. SRST and businesscontinuity solutions in the Cisco 880 Series provide reliability and continuous business operation. Alternatively, the remote call-center agent can be provided with SIP trunking service with service demarcation provided by Cisco Unified Border Element features, and the central call center can forward calls to the remote call-center agent through the remote-office SIP trunk.

●

Retail VPN: Retail stores migrating from dialup connections for point-of-sale transactions can use the Cisco 880 Series to take advantage of low-cost broadband access with the required security to comply with payment-card-industry (PCI) and other data security requirements. They can then add multiple devices and applications to the store network to take advantage of the increased bandwidth and also incorporate optional WLAN support to enable secure mobility and enhance productivity.

●

Managed services: Service providers and value-added resellers can use the Cisco 880 Series as a platform to offer differentiated business-class security, voice, and WLAN services for small business customers. With built-in analog and digital voice ports and the ability to upgrade to a five-user Cisco Unified Communications Manager Express IP PBX, service providers can now offer all the Cisco Unified Communications benefits to small and medium-sized businesses. The SIP trunking connectivity features of the Cisco 880 with the Cisco Unified Border Element Series Router can provide the high-quality VoIP service needed through the service provider cloud.

Features and Benefits

Table 3 lists the features and benefits of the Cisco 880 Series Integrated Services Routers.

Table 3. Features and Benefits of Cisco 880 Series Routers

Cisco Unified Border Element (supported on Cisco Unified Border Element voice models)

●

Support for SIP trunk connectivity, including demarcation and interworking, is based on a Cisco Unified Border Element feature license.

●

Transcoding of media is not supported on the Cisco 880 Series Cisco Unified Border Element feature set.

Cisco Configuration Professional

●

Cisco Configuration Professional uses smart wizards and task-based tutorials, which resellers and customers can use to quickly and easily deploy, configure, and monitor a Cisco access router without requiring knowledge of the Cisco IOS Software command-line interface (CLI).

Unified wireless management

●

Configuration and management of access points is automated and simplified without manual intervention.

●

A unified hybrid remote-edge access point (HREAP) provides the following:

◦ WLAN services to remote and branch offices without deploying a WLAN controller at each location ◦ Central configuration and control of unified WLAN services for remote offices through a WAN link ◦ Flexibility in setting up wireless access at remote locations by specifying how traffic is to be bridged

or tunneled

Models

Universal Image

Default Feature Set

First Cisco IOS Software Release

Cisco 881

Data

Advanced Security

12.4(20)T

Cisco 881 SEC, Embedded 3G

Data

Advanced IP

12.4(20)T, 15.1(4)M

Cisco 881V

Voice

Advanced IP*

15.1(4)M

Cisco 881 SRST

Voice

Advanced IP*

12.4(20)T

Cisco 886VA and 887VA

Data

Advanced Security

15.1(2)T

Cisco 886VA and 887VA WLAN

Data

Advanced Security

15.1(3)T

Cisco 886VA and 887VA Embedded 3G

Data

Advanced Security

15.1(4)M

Cisco 886 and 887

Data

Advanced Security

12.4(22)YB3

Cisco 886 and 887 SEC, 3G

Data

Advanced IP

12.4(22)YB3

Cisco 887V

Data

Advanced Security

12.4(22)YB, 12.4(24)T

Cisco 887V SEC, 3G

Data

Advanced IP

12.4(22)YB, 12.4(24)T

Cisco 887V WLAN

Data

Advanced Security

15.0(1)M

Cisco 887V 3G

Data

Advanced IP

15.0(1)M

Cisco 887VA-V

Voice

Advanced IP

15.1(4)M

Cisco 887VA-V-W

Voice

Advanced IP

15.1(4)M

Cisco 888

Data

Advanced Security

12.4(20)T

Cisco 888 SEC, 3G

Data

Advanced IP

12.4(20)T, 15.1(4)M

Summary

Cisco 880 Series Integrated Services Routers combine increased network performance with advanced security to allow small-office customers to get the most from their broadband connections for both data and voice applications. With models supporting different broadband technologies such as DSL, 3G, and Metro Ethernet, the Cisco 880 Series can be deployed at any small-office location. Optional integrated 802.11g/n wireless capabilities provide true business-class WAN and WLAN access in a single solution. With the Cisco 880 Series, enterprise IT managers and service providers can take advantage of a solution that can be easily set up at the remote site and can be centrally managed to reduce ongoing operational costs.

Product Specifications

Cisco IOS Software Support

Table 4 lists the minimum Cisco IOS Software releases and the default Cisco IOS Software feature sets.

Table 4. Cisco IOS Software Releases and Default Cisco IOS Software Feature Sets

Models

Universal Image

Default Feature Set

First Cisco IOS Software Release

Cisco 888 SRST

Voice

Advanced IP*

12.4(20)T

Cisco 888E

Data

Advanced Security

15.1(1)T

Cisco 888E Embedded 3G

Data

Advanced IP

15.1(4)M

Cisco 888EA

Data

Advanced Security

15.2(2)T

Cisco 881, 886VA, 887VA, 888, 888E with Cisco Unified Border Element

Voice

Advanced IP

15.1(4)M

C881-K9, C886-K9, C886VAJ-K9, C887VA-K9, and C887VAM-K9

Data

Advanced Security

15.3(3)M2, 15.4(1)T

C888-K9

Data

Advanced Security

15.4(2)T

Access-point software (ap801)

- - 12.4(10b)JA3

Feature

Description

IP and IP services features

●

Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2)

●

Generic routing encapsulation (GRE) and Multipoint GRE (MGRE)

●

Cisco Express Forwarding

●

Standard 802.1d Spanning Tree Protocol

●

Layer 2 Tunneling Protocol (L2TP)

●

Network Address Translation (NAT)

●

Dynamic Host Configuration Protocol (DHCP) server, relay, and client

●

Dynamic Domain Name System (DNS)

●

DNS Proxy

●

DNS Spoofing

●

Access control lists (ACLs)

ATM features (ADSL and G.SHDSL ATM models only)

●

ATM Variable Bit Rate real-time (VBR-rt)

●

ATM Unspecified Bit Rate (UBR), Constant Bit Rate (CBR), and Variable Bit Rate non-realtime (VBR-nrt)

●

ATM operations, administration, and maintenance (OA&M) support for F5 Continuity Check; segment and end-to-end loopback; and Integrated Local Management Interface (ILMI) support

●

TX ring adjustment

●

Virtual-circuit (VC) bundling

●

Per-VC queuing

●

Per-VC traffic shaping

●

10 ATM virtual circuits on the 886, 887, and 888 models

●

4 ATM virtual circuits on the 886VA and 887VA models

●

RFCs 1483 and 2684

●

Point-to-Point Protocol over ATM (PPPoA)

●

PPP over Ethernet (PPPoE)

Switch features

●

Auto Media Device In/Media Device Cross-Over (medium dependent interface (MDI)/MDI crossover (MDX)

●

Eight 802.1Q VLANs

●

MAC filtering

●

Two-port 802.3af and Cisco compliant PoE

●

Switched Port Analyzer (SPAN)

●

Storm Control

●

Smartports

Security features

Secure connectivity:

●

SSL VPN for secure remote access

●

Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256

●

Public-key-infrastructure (PKI) support

Cisco 881V, 887VA-V, 881 SRST, and 888 SRST run the Cisco 880 voice universal image, which shares the same data and

security features as the Advanced IP feature sets of Cisco 880 data models.

Tables 5 and 6 list Cisco IOS Software features of the Cisco 880 Series.

Table 5. Cisco IOS Software Features on Cisco 880 Series: Advanced Security Feature Set (Default)

+ 16 hidden pages