Cisco® 890 Series Integrated Services Routers combine Internet access,
comprehensive security, and wireless services in a single, secure device that is easy
to deploy and manage (Figure 1). The best-in-class Cisco 890 Series architecture is
specifically designed to deliver high performance with concurrent services, business
continuity, and investment protection for enterprise small branch offices and service
provider-managed services applications.
Figure 1. Cisco 890 Series Integrated Services Router
Product Overview
Cisco 890 Series Integrated Services Routers (ISRs) are fixed-configuration routers that provide collaborative
business solutions for secure voice and data communications to enterprise small branch offices (Figure 2). They
are designed to deliver secure broadband, Metro Ethernet, wireless LAN (WLAN) connectivity, and business
continuity. The routers also come with powerful management tools, such as the web-based Cisco Configuration
Professional configuration management tool, which simplifies setup and deployment. Centralized management
capabilities give network managers visibility and control of the network configurations at the remote site.
Cisco 890 Series Integrated Services Routers offer the following:
●
The routers offer high performance for secure broadband and Metro Ethernet access with concurrent
services for enterprise small branch offices.
●
They provide business continuity and WAN diversity with redundant WAN links: Fast Ethernet (FE), V.92,
ISDN Basic Rate Interface (BRI), Gigabit Ethernet (GE), ADSL2+/VDSL (Annex A/B/M), Multimode
G.SHDSL, and Small Form-Factor Pluggable (SFP).
●
An integrated secure 802.11a/g/n access point (optional) is based on the draft 802.11n standard. Dual-band
radios allow for mobility and support for autonomous or Cisco Unified WLAN architectures.
●
The routers offer enhanced security including:
◦Firewall with advance application and control for email, instant messaging (IM), and HTTP traffic
8-port 10-/100-Mbps managed
switch (4-ports PoE capable
with 80W Power Supply
adapter)
Yes
Yes/Yes/Yes
V.92 analog modem
Cisco 892
1-port GE
1-port FE
8-port 10-/100-Mbps managed
switch (4-ports PoE capable
with 80W Power Supply
adapter)
Yes
Yes/Yes/Yes
ISDN BRI
Cisco 892F
1-port GE or 1-port SFP
1-port FE
8-port 10-/100-Mbps managed
switch (4-ports PoE capable
with 80W Power Supply
adapter)
Yes
Yes/Yes/Yes
ISDN BRI
Cisco 892FSP
1-port GE or 1-port SFP
1-port GE
8-port 10-/100-/1000-Mbps
managed switch
No
Yes/Yes/Yes
No
Cisco 896VA
1-port GE or 1-port SFP
VDSL/ADSL2+ Annex B
8-port 10-/100-/1000-Mbps
managed switch (4-ports PoE
capable with 125W Power
Supply adapter)
No
Yes/Yes/Yes
ISDN
◦Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption
Standard [3DES] or Advanced Encryption Standard [AES], Dynamic Multipoint VPN [DMVPN], Group
Encrypted Transport VPN with onboard acceleration, and Secure Sockets Layer [SSL] VPN)
◦Intrusion prevention system (IPS): An inline, deep-packet-inspection feature that mitigates a wide range
of network attacks
◦ Web security with Cisco ScanSafe deployment
●
The 890s are available with 8-port or 24-port Gigabit Ethernet managed switch that offers VLAN and PoE
support
●
Metro Ethernet features include:
◦ Intelligent hierarchical quality of service (HQoS): Support for hierarchical queuing and shaping
◦ Connectivity Fault Management (CFM), based on 802.1ag
◦ 802.3ah standards-based link operations, administration, and maintenance (OA&M)
◦ Ethernet Local Management Interface (E-LMI) for the customer edge
◦ CFM Interworking and backward compatibility
◦ Performance management based on IP service-level agreement (SLA) for Ethernet
●
Dedicated console and auxiliary ports for configuration and management
●
Two USB 2.0 ports for security eToken credentials, booting, and loading configuration from USB available
on the Cisco 891, 892, and 892F
●
Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, 891F, and 891-24X are fan-less, providing a quiet,
comfortable working environment in small offices
●
One USB 2.0 port for booting and loading configurations from the USB port is available on the Cisco
892FSP, 896VA, 897VA, 897VAB, 898EA, 891F, and 891-24X
●
Easy to set up and deploy, the Cisco 890 ISRs offer centralized and remote-management capabilities
through web-based tools and Cisco IOS® Software
Figure 2 illustrates a typical enterprise small branch-office deployment.
Figure 2. Typical Enterprise Small Branch-Office Deployment
Architecture Features and Benefits
Secure Network Connectivity
Cisco 890 Series Routers deliver high performance with integrated security and threat defense. Network security
has become a fundamental building block of any network, and Cisco routers play an important role in embedding
security at the customer’s access edge. Cisco recognizes this requirement, so Cisco 890 Series Routers are
equipped with security hardware acceleration and Cisco IOS Software (by default, a universal image with
Advanced IP Services feature license). This Cisco IOS Software feature set facilitates hardware-based IPsec
encryption on the motherboard and provides a robust array of security capabilities such as Cisco IOS Firewall,
Cisco ScanSafe Connector, IPS support, IPsec VPNs (DES, 3DES, and AES), SSL VPN, tunnel-less Group
Encrypted Transport VPN, DMVPN, Easy VPN server and client support, Secure Shell (SSH) Protocol Version 2.0,
and Simple Network Management Protocol (SNMP) in one solution set.
Cisco 890 Series Routers come with a comprehensive security solution that protects organizations’ networks from
known and new Internet vulnerabilities and attacks while improving employee productivity. Security suite also
includes the following:
●
FlexVPN: Large customers deploying IPsec VPN over IP networks are faced with high complexity and high
cost of deploying multiple types of VPN to meet different types of connectivity requirements. Customers
often have to learn different type of VPNs to manage and operate different types of networks. And when a
technology is selected for a deployment, migrating or adding functions to enhance the VPN is often avoided.
FlexVPN was created to simplify the deployment of VPN and address the complexity of multiple solutions,
and, as a unified ecosystem, to cover all types of VPNs: remote-access, teleworker, site-to-site, mobility,
managed security services, and others.
●
Next-generation encryption (NGE): Traditional encryption standards (Internet Key Exchange Version 1
[IKEv1], Secure Hash Algorithm1 [SHA-1], etc.) were developed more than a decade ago. They are no
longer considered as secure as before. NGE is meant to refresh the existing security protocols to the next
level based on the standard Suite-B algorithms such as SHA-2, AES-Galois Counter Mode (AES-GCM),
Elliptic Curve Diffie-Hellman (ECDH), Elliptic Curve Digital Signature Algorithm (ECDSA), IKEv2, etc. NGE
offers customers secure network communications systems that will be reliable for the next decade.
●
Cisco ISR Web Security with Cisco ScanSafe: Cisco Cloud Web Security is a cloud-based service designed
to prevent zero-day malware from reaching corporate networks, including roaming or mobile users. The
Cisco ScanSafe Cloud Web Security solution requires no hardware, initial capital costs, or maintenance and
provides unparalleled real-time threat protection (Figure 3). This solution is scalable and easy to maintain,
and is ideally suited for small businesses and enterprise small branch offices.
Figure 3. Typical Cisco ISR Web Security with Cisco ScanSafe Deployment
Metro Ethernet Connectivity
Cisco 890 Series Routers are ideal for service provider deployments as Metro Ethernet customer premises
equipment (CPE). The routers also provide failover protection and load balancing. The 8-port managed switch
provides enough LAN ports for connecting multiple devices, and the optional PoE capability can supply power to IP
phones or other devices. The Cisco 890 Series offers customers significant value by simplifying deployment of
Ethernet WAN services with end-to-end OA&M, service-level agreement (SLA) monitoring and verification, and
configuration management, resulting in increased operational efficiency and reduced operating expenses (OpEx).
The Cisco 890 Series supports the following Metro Ethernet features:
●
E-LMI: Basic configuration for detection and isolation of connectivity in the Metro Ethernet network
●
E-LMI: Automated configuration of customer edge based on profiles configured:
◦ Layer 2 connectivity management
◦ E-LMI for the customer edge
●
Metro Ethernet OA&M:
◦ Debugging hierarchy of Ethernet networks
◦ Layer 2 service performance monitoring
●
802.1agCFM:
◦Standard that uses domains to contain OA&M flows and bound OA&M responsibilities
●
802.3ah: Ethernet in the First Mile (EFM)
◦Three types of packets: Continuity Check, Layer 2 Ping, and Layer 2 Traceroute
●
IP SLA for Ethernet
Figure 4 shows a typical small branch-office Metro Ethernet deployment.
Figure 4. Typical Metro Ethernet Deployment
High Availability
Cisco 890 Series Routers enable customers to deliver high-performance, high-availability, mission-critical business
applications (Figure 5). The Cisco IOS Software universal image with Advanced IP Services feature license
(default) offers basic and advanced routing capabilities to deliver failover protection and load balancing. These
capabilities include Virtual Router Redundancy Protocol (VRRP) (RFC 2338), Hot Standby Router Protocol
(HSRP), MultigroupHSRP (MHSRP), and dial backup with external modem through a virtual auxiliary port. Cisco
890 Series Routers are integrated with ISDN BRI (892, 896, and 897 models), a V.92 analog modem (891 model),
or a Gigabit Ethernet port for a secondary WAN backup connection. The Cisco 891F supports both the ISDN BRI
and a V.92 analog modem with a Fast Ethernet port for a secondary WAN backup connection. If the primary
Ethernet-access WAN is disconnected, the router detects this failure and fails over to the secondary backup WAN.
The Cisco 890 Series is ideal for enterprise small branch offices and small businesses that need to be connected
to larger enterprise networks. These routers help extend corporate networks to secure remote sites while giving
users access to the same applications found in a corporate office. They provide increased reliability for diversity of
wireless data, voice, and video applications. When users require WLAN access, visibility and control of network
security are even more critical at the remote site. The Cisco 890 Series meets this need with a single device that
combines integrated 802.11a/g/n capabilities with security features such as Wi-Fi Protected Access (WPA),
including authentication with IEEE 802.1X with Cisco Extensible Authentication Protocol (LEAP) and Protected
EAP (PEAP), and encryption with WPA Temporal Key Integrity Protocol (TKIP). The Cisco 890 Series wireless
models that include the integrated access point have full feature parity with the Cisco Aironet® 1250 Series Access
Point and can be used in either autonomous or Cisco Unified WLAN modes. In Cisco Unified WLAN mode, as part
of an enterprise WLAN architecture, all WLAN functions are centrally managed through Cisco Wireless LAN
Controllers and the Cisco Wireless Control System (WCS). The Cisco 897 and 891F with wireless support Cisco
CleanAir technology.
Figure 6 shows a Cisco 890 Series Router deployed in an enterprise small branch-office WLAN application.
Router performance allows customers to take advantage of broadband network speeds while running
secure, concurrent data, voice, video, and wireless services.
Integrated Gigabit Ethernet,
SFP, and Fast Ethernet WAN
ports
●
Integrated ports offer flexibility in Ethernet WAN access, and the additional capability to deploy redundant
WAN connections for failover protections and load balancing.
●
Refer to Table 1 for details about the WAN interface.
Option of integrated 8-port
10/100BASE-T managed switch,
integrated 8-port
10/100/1000BASE-T managed
switch or integrated 24-port
10/100/1000BASE-T managed
switch
●
Fully managed LAN switch ports connect multiple LAN devices and reduce the need for an additional
LAN switch.
●
The Cisco 891, 892, and 892F support 8-ports 10/100BASE-T.
●
The Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, and 891F support 8-ports 10/100/1000BASE-T
●
The Cisco 891-24X supports 24-ports 10/100/1000BASE-T
Integrated WAN backup
●
Refer to Table 1 for details about the backup WAN interface.
Real-time clock
●
A built-in, real-time clock maintains an accurate date and time for applications that require an accurate
time stamp, such as logging and digital certificates.
Enhanced security
●
An integrated stateful and application inspection firewall provides network perimeter security.
●
High-speed IPsec 3DES and AES encryption offers data privacy over the Internet.
●
Intrusion prevention enforces security policy in a larger enterprise or service provider network.
●
Web Security is supported with Cisco ScanSafe deployments.
Optional dual-radio or dualband IEEE 802.11n access point
●
The Cisco 890 Series offers a secure, integrated access point in a single device. It supports both
autonomous and unified modes. It is backward-compatible with 802.11a/b/g.
●
The router supports IEEE 802.11n draft 2.0 and uses multiple-input, multiple-output (MIMO) technology
that provides increased throughput, reliability, and predictability.
●
Refer to Table 1 for details about Wi-Fi options.
Separate console, auxiliary, and
USB ports
●
One auxiliary and one console port enable remote configuration and management.
●
The router has two USB 2.0 flash memory or security eTokens. Integrated USB ports can be configured
to work with an optional USB token for off-platform storage of VPN credentials or for deployment of
configurations stored on USB flash-memory devices.
Figure 6. Enterprise Small Branch-Office WLAN
Manageability
Cisco 890 Series Routers support a whole suite of management tools to provide ease of use. Tools such as Cisco
Configuration Professional use smart wizards and task-based tutorials, which resellers and customers can use to
quickly and easily deploy, configure, and monitor a Cisco access router without requiring knowledge of the Cisco
IOS Software command-line interface (CLI).
Table 2 lists the features and benefits of the Cisco 890 Series Routers.
Table 2. Features and Benefits of Cisco 890 Series Routers
Configuration and management of access points is automated and simplified without manual intervention.
●
A unified hybrid remote-edge access point (HREAP) provides the following:
◦WLAN services to remote and branch offices without deploying a wireless LAN controller at each
location.
◦ Central configuration and control of unified WLAN services for remote offices through a WAN link.
◦ Flexibility in setting up wireless access at remote locations by specifying how traffic is to be bridged or
tunneled.
Cisco Configuration
Professional
●
Cisco Configuration Professional uses smart wizards and task-based tutorials, which resellers and
customers can use to quickly and easily deploy, configure, and monitor a Cisco access router without
requiring knowledge of the Cisco IOS Software CLI.
Feature
Description
IP and IP services features
●
Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2)
●
Generic routing encapsulation (GRE) and multipoint GRE (MGRE)
●
Cisco Express Forwarding
●
Standard 802.1d Spanning Tree Protocol
●
Layer 2 Tunneling Protocol (L2TP)
●
Layer 2 Tunneling Protocol Version 3 (L2TPv3)
●
Network Address Translation (NAT)
●
Dynamic Host Configuration Protocol (DHCP) server, relay, and client
Cisco 890 Series Integrated Services Routers combine increased network performance with advanced security and
wireless technology to allow enterprise small branch-office customers to get the most from their broadband
connections. Service providers and value-added resellers can take advantage of the Cisco 890 Series to provide a
true business-class broadband service. The Cisco 890 Series delivers on the requirements of enterprise small
branch offices and managed services providers.
Product Specifications
Tables 3 and 4 list software and hardware features of the Cisco 890 Series.
Table 3. Cisco IOS Software Features on Cisco 890 Series Routers: Advanced IP Features Set (Default)
Class of service (CoS)-to-differentiated services code point (DSCP) mapping
●
Class-Based Weighted Random Early Detection (CBWRED)
●
Network-Based Application Recognition (NBAR)
●
Link fragmentation and interleaving (LFI)
●
Resource Reservation Protocol (RSVP)
●
Real-Time Transport Protocol (RTP) header compression (cRTP)
●
Differentiated Services (DiffServ)
●
QoS preclassify and prefragmentation
●
HQoS
Management features
●
Cisco Configuration Professional
●
Cisco Configuration Express
●
Cisco Configuration Engine support
●
Cisco AutoInstall
●
IP SLA
●
Cisco IOS Embedded Event Manager (EEM)
●
CiscoWorks
●
Cisco Security Manager
●
Telnet, SNMPv3, SSH, CLI, and HTTP management
●
RADIUS and TACACS+
●
Out-of-band management with ISDN S/T port or external modem through a virtual auxiliary port on
models supporting those interfaces; refer to Table 1 for details
●
Cisco Wireless Control System (WCS) for management of unified access points in models supporting
WLAN; on models supporting WLAN, refer to Table 1 for details
Product power specifications:
AC input voltage: Universal 100 to 240 VAC
Frequency: 50 to 60 Hz
Maximum output power: 60W
Output voltages: 12 VDC
Optional POE:
Separate 80W POE power supply for Cisco 891 and 892 ISRs
Single 125W power supply required for Cisco 896, 897, 898 and 891F for router and PoE
External output voltage: 48 VDC
To place an order, visit the Cisco Ordering Home Page.
For more information about the Cisco 890 Series, visit http://www.cisco.com/go/800. Table 6 lists the ordering
information for Cisco 890 Series Integrated Services Routers and other available options.
Cisco 892 Gigabit Ethernet security router with SFP
CISCO892FW-A-K9
Cisco 892 Gigabit security router with SFP and 802.11n, FCC compliant
CISCO892FW-E-K9
Cisco 892 Gigabit security router with SFP and 802.11n, ETSI compliant
C892FSP-K9
Cisco 892FSP Gigabit Ethernet security router with SFP
C896VA-K9
Cisco 896VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex B
C897VA-K9
Cisco 897VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex A
C897VAW-A-K9
Cisco 897 VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex A with Wireless
C897VAW-E-K9
Cisco 897VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex A with Wireless
C897VA-M-K9
Cisco 897VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex M
C897VAM-W-E-K9
Cisco 897VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex M with Wireless
C897VAB-K9
Cisco 897VA Gigabit Ethernet security router with SFP and VDSL2/ADSL2+ Bonding over POTS
C898EA-K9
Cisco 898EA Gigabit Ethernet security router with SFP and 4 channel multimode G.SHDSL (EFM/ATM)
C891F-K9
Cisco 891F Gigabit Ethernet security router with SFP
C891-24X/K9
Cisco 891 Gigabit Ethernet security router with SFP and 24-ports Ethernet Switch
C891FW-A-K9
Cisco 891F Gigabit Ethernet security router with SFP and Dual Radio 802.11n Wifi for FCC -A domain
C891FW-E-K9
Cisco 891F Gigabit Ethernet security router with SFP and Dual Radio 802.11n Wifi for ETSI -E domain
*
Cisco 892FSP is supported only on Cisco IOS Software Release 15.2(4)M and later
Cisco 896, 897, 898EA is supported only on Cisco IOS Software Release 15.2(4)M1 and later
Cisco 891F is supported only on Cisco IOS Software Release 15.3(3)M2, 15.4(1)T and later
C897VAB is supported only on Cisco IOS Software Release 15.4(3)M1 and later
C891-24X is supported only on Cisco IOS Software Release 15.5(1)T and later
Memory Options
MEM8XX-512U768D
512 MB DRAM upgrade to 768 MB for Cisco 891 and 892models
MEM8XX-512U1GBD
512 MB DRAM upgrade to 1 GB for Cisco 892F
FL-8XX-512U1GB
512 MB DRAM upgrade to 1 GB for Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, 891F model (Feature
License)
Router Software
Image
C890-universalk9-mz: Universal image for Cisco 891, Cisco 892 and Cisco 892F
C800-universalk9-mz: Universal image for Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, 891F
Access Point Software
ap801-k9w7-tar
Autonomous software image for ap801
ap801-rcvk9w8-tar
Lightweight Access Point Protocol (LWAPP) recovery image for ap801
ap802-k9w7-tar
Autonomous software image for ap802
ap802-rcvk9w8-tar
Lightweight Access Point Protocol (LWAPP) recovery image for ap802
Power over Ethernet Options
800-IL-PM-4
4-port 802.3af capable internal power module for Cisco 891, Cisco 892, Cisco 892F, C896, C897, C898,
C891F routers
(*) Supported only on Cisco 892F. For more information regarding Cisco 890 Series Routers and options, contact
your local Cisco representative or visit: http://www.cisco.com/go/800. To upgrade the Cisco IOS Software for the
Cisco 890 Series, visit the Cisco Software Center.
Table 7 gives the Cisco IOS Software images for the Cisco 891 and 892 Integrated Services Routers.
Table 7. Cisco IOS Software Images for Cisco 890 Series
Services from Cisco and our certified partners can help you reduce the cost and complexity of branch-office
deployments. We have the depth and breadth of experience across technologies to architect a blueprint for a
branch-office solution to meet your company's needs. Planning and design services align technology with business
goals and can increase the accuracy, speed, and efficiency of deployment. Technical services help maintain
operational health, strengthen software application functions, solve performance problems, and lower expenses.
Optimization services are designed to continually improve performance and help your team succeed with new
technologies. For more information, visit http://www.cisco.com/go/services.
Cisco SMARTnet® technical support for the Cisco 890 Series is available on a one-time or annual contract basis.
Support options range from help-desk assistance to proactive, onsite consultation. All support contracts include:
●
Major Cisco IOS Software updates in protocol, security, bandwidth, and feature improvements
●
Full access rights to Cisco.com technical libraries for technical assistance, electronic commerce, and
product information
●
24-hour access to the industry’s largest dedicated technical support staff
For More Information
For more information about the Cisco 890 Series Integrated Services Routers, visit http://www.cisco.com/go/800 or
contact your local Cisco account representative.
For more information about Cisco products, contact:
●
United States and Canada: 800 553-NETS (6387)
●
Europe: 32 2 778 4242
●
Australia: 61 2 9935 4107
●
Other: 408 526-7209
●
Web: http://www.cisco.com
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.