Cisco C891F-K9 Product Data Sheet

Data Sheet

Cisco 890 Series Integrated Services Routers

Cisco® 890 Series Integrated Services Routers combine Internet access, comprehensive security, and wireless services in a single, secure device that is easy to deploy and manage (Figure 1). The best-in-class Cisco 890 Series architecture is specifically designed to deliver high performance with concurrent services, business continuity, and investment protection for enterprise small branch offices and service provider-managed services applications.

Figure 1. Cisco 890 Series Integrated Services Router

Product Overview

Cisco 890 Series Integrated Services Routers (ISRs) are fixed-configuration routers that provide collaborative business solutions for secure voice and data communications to enterprise small branch offices (Figure 2). They are designed to deliver secure broadband, Metro Ethernet, wireless LAN (WLAN) connectivity, and business continuity. The routers also come with powerful management tools, such as the web-based Cisco Configuration Professional configuration management tool, which simplifies setup and deployment. Centralized management capabilities give network managers visibility and control of the network configurations at the remote site.

Cisco 890 Series Integrated Services Routers offer the following:

●The routers offer high performance for secure broadband and Metro Ethernet access with concurrent services for enterprise small branch offices.

●They provide business continuity and WAN diversity with redundant WAN links: Fast Ethernet (FE), V.92, ISDN Basic Rate Interface (BRI), Gigabit Ethernet (GE), ADSL2+/VDSL (Annex A/B/M), Multimode G.SHDSL, and Small Form-Factor Pluggable (SFP).

●An integrated secure 802.11a/g/n access point (optional) is based on the draft 802.11n standard. Dual-band radios allow for mobility and support for autonomous or Cisco Unified WLAN architectures.

●The routers offer enhanced security including:

◦ Firewall with advance application and control for email, instant messaging (IM), and HTTP traffic

© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.

Page 1 of 16

◦Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES], Dynamic Multipoint VPN [DMVPN], Group Encrypted Transport VPN with onboard acceleration, and Secure Sockets Layer [SSL] VPN)

◦Intrusion prevention system (IPS): An inline, deep-packet-inspection feature that mitigates a wide range of network attacks

◦Web security with Cisco ScanSafe deployment

●The 890s are available with 8-port or 24-port Gigabit Ethernet managed switch that offers VLAN and PoE support

●Metro Ethernet features include:

◦Intelligent hierarchical quality of service (HQoS): Support for hierarchical queuing and shaping

◦Connectivity Fault Management (CFM), based on 802.1ag

◦802.3ah standards-based link operations, administration, and maintenance (OA&M)

◦Ethernet Local Management Interface (E-LMI) for the customer edge

◦CFM Interworking and backward compatibility

◦Performance management based on IP service-level agreement (SLA) for Ethernet

●Dedicated console and auxiliary ports for configuration and management

●Two USB 2.0 ports for security eToken credentials, booting, and loading configuration from USB available on the Cisco 891, 892, and 892F

●Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, 891F, and 891-24X are fan-less, providing a quiet, comfortable working environment in small offices

●One USB 2.0 port for booting and loading configurations from the USB port is available on the Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, 891F, and 891-24X

●Easy to set up and deploy, the Cisco 890 ISRs offer centralized and remote-management capabilities through web-based tools and Cisco IOS® Software

Table 1 summarizes the Cisco 890 Series models.

	Table 1.	Cisco 890 Series Models
	Models		WAN Interface	LAN Interfaces	802.11a/g/n	Integrated USB	Integrated Dial
					Option	2.0/AUX/Console	Backup
	Cisco 891		1-port GE	8-port 10-/100-Mbps managed	Yes	Yes/Yes/Yes	V.92 analog modem
			1-port FE	switch (4-ports PoE capable
				with 80W Power Supply
				adapter)
	Cisco 892		1-port GE	8-port 10-/100-Mbps managed	Yes	Yes/Yes/Yes	ISDN BRI
			1-port FE	switch (4-ports PoE capable
				with 80W Power Supply
				adapter)
	Cisco 892F		1-port GE or 1-port SFP	8-port 10-/100-Mbps managed	Yes	Yes/Yes/Yes	ISDN BRI
			1-port FE	switch (4-ports PoE capable
				with 80W Power Supply
				adapter)
	Cisco 892FSP		1-port GE or 1-port SFP	8-port 10-/100-/1000-Mbps	No	Yes/Yes/Yes	No
			1-port GE	managed switch
	Cisco 896VA		1-port GE or 1-port SFP	8-port 10-/100-/1000-Mbps	No	Yes/Yes/Yes	ISDN
			VDSL/ADSL2+ Annex B	managed switch (4-ports PoE
				capable with 125W Power
				Supply adapter)
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.							Page 2 of 16

	Models	WAN Interface	LAN Interfaces	802.11a/g/n	Integrated USB	Integrated Dial
				Option	2.0/AUX/Console	Backup
	Cisco 897VA	1-port GE or 1-port SFP	8-port 10-/100-/1000-Mbps	Yes	Yes/Yes/Yes	ISDN (only on Cisco
		VDSL/ADSL2+ Annex	managed switch (4-ports PoE	Cisco		897VA-K9)
			capable with 125W Power
		A/M		CleanAir®
			Supply adapter)
				technology
	Cisco 897VAB	1-port GE or 1-port SFP	8-port 10-/100-/1000-Mbps	No	Yes/Yes/Yes	No
		VDSL/ADSL2+ Annex A	managed switch (4-ports PoE
			capable with 80W Power
		with Bonding
			Supply adapter)
	Cisco 898EA	1-port GE or 1-port SFP	8-port 10-/100-/1000-Mbps	No	Yes/Yes/Yes	No
		4 pair Ethernet in the first	managed switch (4-ports PoE
			capable with 125W Power
		mile (EFM)
			Supply adapter)
	Cisco 891F	1-port GE or 1-port SFP	8-port 10-/100-/1000-Mbps	Yes	Yes/Yes/Yes	V.92 analog modem
		1-port FE	managed switch (4-ports PoE	Cisco CleanAir		ISDN BRI
			capable with 125W Power
				technology
			Supply adapter)
	Cisco 891-24X	2-port GE or 2-port SFP	24-port 10-/100-/1000-Mbps	No	Yes/Yes/Yes	No
			managed switch (8-ports PoE
			capable)

Figure 2 illustrates a typical enterprise small branch-office deployment.

Figure 2. Typical Enterprise Small Branch-Office Deployment

Architecture Features and Benefits

Secure Network Connectivity

Cisco 890 Series Routers deliver high performance with integrated security and threat defense. Network security has become a fundamental building block of any network, and Cisco routers play an important role in embedding security at the customer’s access edge. Cisco recognizes this requirement, so Cisco 890 Series Routers are equipped with security hardware acceleration and Cisco IOS Software (by default, a universal image with Advanced IP Services feature license). This Cisco IOS Software feature set facilitates hardware-based IPsec encryption on the motherboard and provides a robust array of security capabilities such as Cisco IOS Firewall, Cisco ScanSafe Connector, IPS support, IPsec VPNs (DES, 3DES, and AES), SSL VPN, tunnel-less Group Encrypted Transport VPN, DMVPN, Easy VPN server and client support, Secure Shell (SSH) Protocol Version 2.0, and Simple Network Management Protocol (SNMP) in one solution set.

© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.

Page 3 of 16

Cisco 890 Series Routers come with a comprehensive security solution that protects organizations’ networks from known and new Internet vulnerabilities and attacks while improving employee productivity. Security suite also includes the following:

●FlexVPN: Large customers deploying IPsec VPN over IP networks are faced with high complexity and high cost of deploying multiple types of VPN to meet different types of connectivity requirements. Customers often have to learn different type of VPNs to manage and operate different types of networks. And when a technology is selected for a deployment, migrating or adding functions to enhance the VPN is often avoided. FlexVPN was created to simplify the deployment of VPN and address the complexity of multiple solutions, and, as a unified ecosystem, to cover all types of VPNs: remote-access, teleworker, site-to-site, mobility, managed security services, and others.

●Next-generation encryption (NGE): Traditional encryption standards (Internet Key Exchange Version 1 [IKEv1], Secure Hash Algorithm1 [SHA-1], etc.) were developed more than a decade ago. They are no longer considered as secure as before. NGE is meant to refresh the existing security protocols to the next level based on the standard Suite-B algorithms such as SHA-2, AES-Galois Counter Mode (AES-GCM), Elliptic Curve Diffie-Hellman (ECDH), Elliptic Curve Digital Signature Algorithm (ECDSA), IKEv2, etc. NGE offers customers secure network communications systems that will be reliable for the next decade.

●Cisco ISR Web Security with Cisco ScanSafe: Cisco Cloud Web Security is a cloud-based service designed to prevent zero-day malware from reaching corporate networks, including roaming or mobile users. The Cisco ScanSafe Cloud Web Security solution requires no hardware, initial capital costs, or maintenance and provides unparalleled real-time threat protection (Figure 3). This solution is scalable and easy to maintain, and is ideally suited for small businesses and enterprise small branch offices.

Figure 3. Typical Cisco ISR Web Security with Cisco ScanSafe Deployment

Metro Ethernet Connectivity

Cisco 890 Series Routers are ideal for service provider deployments as Metro Ethernet customer premises equipment (CPE). The routers also provide failover protection and load balancing. The 8-port managed switch provides enough LAN ports for connecting multiple devices, and the optional PoE capability can supply power to IP phones or other devices. The Cisco 890 Series offers customers significant value by simplifying deployment of Ethernet WAN services with end-to-end OA&M, service-level agreement (SLA) monitoring and verification, and configuration management, resulting in increased operational efficiency and reduced operating expenses (OpEx).

© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.

Page 4 of 16

The Cisco 890 Series supports the following Metro Ethernet features:

●E-LMI: Basic configuration for detection and isolation of connectivity in the Metro Ethernet network

●E-LMI: Automated configuration of customer edge based on profiles configured:

◦Layer 2 connectivity management

◦E-LMI for the customer edge

●Metro Ethernet OA&M:

◦Debugging hierarchy of Ethernet networks

◦Layer 2 service performance monitoring

●802.1agCFM:

◦Standard that uses domains to contain OA&M flows and bound OA&M responsibilities

●802.3ah: Ethernet in the First Mile (EFM)

◦Three types of packets: Continuity Check, Layer 2 Ping, and Layer 2 Traceroute

●IP SLA for Ethernet

Figure 4 shows a typical small branch-office Metro Ethernet deployment.

Figure 4. Typical Metro Ethernet Deployment

High Availability

Cisco 890 Series Routers enable customers to deliver high-performance, high-availability, mission-critical business applications (Figure 5). The Cisco IOS Software universal image with Advanced IP Services feature license (default) offers basic and advanced routing capabilities to deliver failover protection and load balancing. These capabilities include Virtual Router Redundancy Protocol (VRRP) (RFC 2338), Hot Standby Router Protocol (HSRP), MultigroupHSRP (MHSRP), and dial backup with external modem through a virtual auxiliary port. Cisco 890 Series Routers are integrated with ISDN BRI (892, 896, and 897 models), a V.92 analog modem (891 model), or a Gigabit Ethernet port for a secondary WAN backup connection. The Cisco 891F supports both the ISDN BRI and a V.92 analog modem with a Fast Ethernet port for a secondary WAN backup connection. If the primary Ethernet-access WAN is disconnected, the router detects this failure and fails over to the secondary backup WAN.

© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.

Page 5 of 16