The Cisco® 880 Series Integrated Services Routers combine Internet access, security, voice, and wireless
services onto a single, secure device that is simple to use and manage for small businesses and
enterprise small branch offices and teleworkers. The Cisco 880 Series delivers features including firewall,
content filtering, VPNs, and wireless LANs (WLANs) at broadband speeds to small offices. Easy
deployment and centralized management features help enable enterprises or service providers to deploy
the Cisco 880 Series in small branch offices or small businesses.
Product Overview
Cisco 880 Series Integrated Services Routers are fixed-configuration routers that provide collaborative business
solutions for secure voice and data communication to small businesses and enterprise teleworkers. They offer
concurrent broadband services over third-generation (3G), Metro Ethernet, and multiple DSL technologies to provide
business continuity. Wireless 802.11n and 3G offer LAN and WAN mobility. The routers provide the performance
required for concurrent services, including firewall, intrusion prevention, content filtering, and encryption for VPNs;
optional 802.11g/n for mobility; and quality-of-service (QoS) features for optimizing voice and video applications. In
addition, the web-based Cisco Configuration Professional configuration tool simplifies setup and deployment.
Centralized management capabilities give network managers visibility and control of the network configurations at
the remote site.
Cisco 880 Series Integrated Services Routers offer:
●
High performance for broadband access in small offices and small branch-office and teleworker sites
●
Collaborative services with secure analog, digital voice, and data communication
●
Business continuity and WAN diversity with redundant WAN links: Fast Ethernet, G.SHDSL, ADSL2/2+,
VDSL2, 3G, and ISDN
●
Survivable Remote Site Telephony (SRST) voice continuity for enterprise small branch-office and teleworker
sites
●
Enhanced security, including:
◦
Firewall with advance application and control for email, Instant Messaging (IM), and HTTP traffic
◦
Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption
Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN (DMVPN), Group
Encrypted Transport VPN with onboard acceleration, and Secure Sockets Layer (SSL) VPN
Intrusion prevention system (IPS): An inline, deep-packet inspection feature that effectively mitigates a
◦
wide range of network attacks
◦
Content filtering: A subscription-based integrated security solution that offers category-based reputation
rating; keyword blocking; and protection against adware, malware, spyware, and URL blocking
●
Four-port 10/100 Fast Ethernet managed switch with VLAN support; two ports support Power over Ethernet
(PoE) for powering IP phones or external access points
●
Secure 802.11g/n access-point option based on draft 802.11n standard with support for autonomous or Cisco
Unified WLAN architectures
One USB 1.1 port for security eToken credentials, booting from USB, and loading configuration
●
Easy setup, deployment, and remote-management capabilities through web-based tools and Cisco IOS®
Software
Figure 1 shows a Cisco 881 Integrated Services Router.
Figure 1. Cisco 881 Integrated Services Router with Integrated 802.11n Access Point
Tables 1 and 2 list the routers that currently make up the Cisco 880 data and SRST series, respectively.
Table 1. Cisco 880 Series Data Models
Data Sheet
Models WAN Interface LAN Interfaces 802.11g/n Option Integrated 3G Integrated ISDN Dial
Cisco 881 10/100-Mbps Fast
Ethernet
Cisco 886 ADSL2/2+ over ISDN
(Annex B)
Cisco 887 ADSL2/2+ over POTS
(Annex A)
Cisco 887V VDSL2 over POTS 4-port 10/100-Mbps
Cisco 888 G.SHDSL (ATM) 4-port 10/100-Mbps
Cisco 888E G.SHDSL (EFM) 4-port 10/100-Mbps
4-port 10/100-Mbps
managed switch
4-port 10/100-Mbps
managed switch
4-port 10/100-Mbps
managed switch
managed switch
managed switch
managed switch
Yes (Cisco 881W) Yes (Cisco 881G) –
Yes (Cisco 886W) Yes (Cisco 886G) Yes
Yes (Cisco 887W) Yes (Cisco 887G) Yes
Yes (Cisco 887V) Yes (Cisco 887VG) Yes
Yes (Cisco 888W) Yes (Cisco 888G) Yes
Yes (Cisco 888W) No Yes
Backup
Table 2. Cisco 880 Series SRST Models
Models WAN Interface LAN Interfaces Voice Ports 802.11g/n Option
Cisco 881 SRST 10/100-Mbps Fast Ethernet 4-port 10/100 Mbps managed
switch
Cisco 888 SRST G.SHDSL 4-port 10/100-Mbps managed
switch
4 foreign-exchange-station
(FXS) ports and 1 foreignexchange-office (FXO) port
for public-switchedtelephone-network (PSTN)
fallback
4 FXS ports and 1 Basic Rate
Interface (BRI) port for PSTN
fallback
Yes (Cisco 881 SRSTW)
Yes (Cisco 888 SRSTW)
The Cisco 880 Series is ideal for small branch offices and teleworkers who need to be connected to larger enterprise
networks as well as small businesses. These routers help extend corporate networks to secure remote sites while
giving users access to the same applications found in a corporate office. This access applies to both data and voice
applications. When users require WLAN access, visibility and control of network security are even more critical at
the remote site. The Cisco 880 Series meets this need with a single device that combines integrated 802.11g/n
capabilities with security features such as Wi-Fi Protected Access (WPA), including authentication with IEEE 802.1X
with Cisco Extensible Authentication Protocol (LEAP) and Protected EAP (PEAP) and encryption with WPA
Temporal Key Integrity Protocol (TKIP). (Refer to the wireless solution overview and security data sheet for more
information. The Cisco 880 Series models that include the integrated access point can use either autonomous or
Cisco Unified WLAN modes. In Cisco Unified WLAN mode, as part of an enterprise WLAN architecture, all WLAN
functions are centrally managed through Cisco Wireless LAN Controllers and the Cisco Wireless Control System
(WCS).
Service providers and value-added resellers can take advantage of the Cisco 880 Series to provide a true businessclass broadband service. Business customers are using broadband access to connect to the Internet or to connect
offices together, and they require a platform that incorporates security without sacrificing performance. Many of
these customers are connecting computers in offices through WLANs; having a single device for both WAN and
WLAN access provides a new option for managed services. These customers also require a higher level of support
to keep their networks operational. Services with these customers should be simple to set up, while allowing a level
of remote management and troubleshooting to quickly address support inquiries. The Cisco 880 Series meets the
requirements of small offices and managed services providers.
Figure 2 shows deployment scenarios.
Figure 2. Deployment Scenarios
Applications
The Cisco 880 Series is ideally suited for deployment in a small office or in a small office that is part of a large
network, most often with a secure VPN connection. These types of offices can include the following:
●
Small remote office: The Cisco 880 can connect users in a small remote office, such as an insurance, lawyer,
or sales office. When connecting to the main office, VPN encryption and integrated security such as firewall
and intrusion prevention protect the network at the perimeter. IT managers can centrally manage the remote
site to quickly troubleshoot any network problems. For added reliability, customers can also use the
integrated 3G or ISDN backup or connect through an external modem if the primary broadband link fails.
Integrated secure unified WLAN connectivity simplifies the deployment and management devices at the
remote site. Redundant WAN links offer business continuity, enabling nondisruptive business operation.
Virtual office: The Cisco 880 Series is ideal for corporate teleworkers who have a mix of broadband
connection types such as DSL, 3G, and Metro Ethernet. The Cisco 880 SRST Series provides a secure
virtual office with all the collaborative services such as data, voice, and fax services. SRST helps ensure
voice services are operational in case of WAN link failure, and redundant WAN links help ensure business
continuity. QoS features in the Cisco 880 Series allow for connection of an IP or analog phone to the router,
giving voice traffic precedence over data applications. Integrated WLAN support in the Cisco 880 Series
helps ensure that if wireless connectivity is used it is secure. (Refer to Cisco Virtual Office Solution,
http://www.cisco.com/go/cvo, for more information.)
●
Remote call-center agent: Similar to teleworking applications, this solution extends the Cisco IP Contact
Center solution for telephone call-center agents to remote sites. With a high-quality, secure connection
through the Cisco 880 Series, call-center agents can be dispersed away from costly call-center facilities while
maintaining secure and productive voice and data access in their home. SRST and business-continuity
solutions in the Cisco 880 Series provide reliability and continuous business operation.
●
Retail VPN: Retail stores migrating from dialup connections for point-of-sale transactions can use the Cisco
880 Series to take advantage of low-cost broadband access with the required security to comply with
payment-card-industry (PCI) and other data security requirements. They can then add multiple devices and
applications to the store network to take advantage of the increased bandwidth and also incorporate optional
WLAN support to enable secure mobility and enhance productivity.
●
Managed services: Service providers and value-added resellers can use the Cisco 880 Series as a platform
to offer differentiated business-class security and WLAN services for small business customers.
Data Sheet
Features and Benefits
Table 3 lists the features and benefits of the Cisco 880 Series Integrated Services Routers.
Table 3. Features and Benefits of Cisco 880 Series Routers
Feature Benefit
Increased performance to run concurrent services ● Cisco 880 Series Router performance allows customers to take advantage of broadband
Enhanced security
Redundant WAN links
Four-port 10/100-Mbps managed switch
CON/AUX port
Optional 802.11g/n access point
Real-time clock
network speeds while running secure, concurrent data, voice, video, and wireless
services.
●
An integrated stateful and application inspection firewall provides network perimeter
security.
●
High-speed IPsec 3DES and AES encryption offers data privacy over the Internet.
●
Intrusion prevention enforces security policy in a larger enterprise or service provider
network.
●
Content filtering offers category-based URL classification and blocking, thus providing
increased productivity and better use of company resources.
●
Redundant WAN links provide business continuity and WAN diversity with multiple WAN
links: Fast Ethernet, ADSL2/2+, VDSL2, G.SHDSL, 3G, and ISDN.
●
The Cisco 880 Series allows for connection of multiple devices in a small office, with the
ability to designate a port as the network edge.
●
An optional external PoE adapter powers IP phones and external access points to avoid
individual power supplies or power injectors.
●
VLANs allow for secure segmentation of network resources.
●
A single dual-purpose port provides direct connection to a console or external modem for
management or backup access points.
●
This broadband router offers a secure integrated access point in a single device.
●
This integrated Wi-Fi access point offers IEEE 802.11n draft 2.0 standard support for
mobile access to high-bandwidth data, voice, and video applications through the use
of multiple-input, multiple-output (MIMO) technology that provides increased throughput,
reliability, and predictability.
●
The Cisco 880 Series supports both autonomous and unified modes.
●
A built-in real-time clock maintains an accurate date and time for applications that require
an accurate time stamp, such as logging and digital certificates.
SRST provides business continuity for voice when the WAN link fails by switching calls to
the PSTN.
●
Cisco Configuration Professional uses smart wizards and task-based tutorials, which
resellers and customers can use to quickly and easily deploy, configure, and monitor a
Cisco access router without requiring knowledge of the Cisco IOS Software command-line
interface (CLI).
●
Configuration and management of access points is automated and simplified without
manual intervention.
●
A unified hybrid remote-edge access point (HREAP) provides the following:
◦
WLAN services to remote and branch offices without deploying a wireless LAN
controller at each location
Central configuration and control of unified WLAN services for remote offices through a
◦
WAN link
Flexibility in setting up wireless access at remote locations by specifying how traffic is to
◦
be bridged or tunneled
Summary
Cisco 880 Series Integrated Services Routers combine increased network performance with advanced security to
allow small-office customers to get the most from their broadband connections. With models supporting different
broadband technologies such as DSL, 3G, and Metro Ethernet, the Cisco 880 Series can be deployed at any smalloffice location. Optional integrated 802.11g/n wireless capabilities provide true business-class WAN and WLAN
access in a single solution. With the Cisco 880 Series, enterprise IT managers and service providers can take
advantage of a solution that can be easily set up at the remote site and can be centrally managed to reduce ongoing
operational costs.
Product Specifications
Cisco IOS Software Support
Table 4 lists the minimum Cisco IOS Software releases and the default Cisco IOS Software feature sets.
Models Universal Image Default Feature Set First Cisco IOS Software Release
Cisco 881 Data Advanced Security 12.4(20)T
Cisco 881 SEC, 3G Data Advanced IP 12.4(20)T
Cisco 881 SRST Voice Advanced IP* 12.4(20)T
Cisco 886 and 887 Data Advanced Security 12.4(22)YB3
Cisco 886 and 887 SEC, 3G Data Advanced IP 12.4(22)YB3
Cisco 887V Data Advanced Security 12.4(22)YB, 12.4(24)T
Cisco 887V SEC, 3G Data Advanced IP 12.4(22)YB, 12.4(24)T
Cisco 887V WLAN Data Advanced Security 15.0(1)M
Cisco 887V 3G Data Advanced IP 15.0(1)M
Cisco 888 Data Advanced Security 12.4(20)T
Cisco 888 SEC, 3G Data Advanced IP 12.4(20)T
Cisco 888 SRST Voice Advanced IP* 12.4(20)T
Cisco 888E Data Advanced Security 15.1(1)T
Access-point software (ap801) – – 12.4(10b)JA3
*Cisco 881 SRST and 888 SRST run the Cisco 880 voice universal image, which shares the same data and security features as the Advanced IP
feature sets of Cisco 880 data models.