Cisco SR520W-FE-K9, SR520-FE-K9, SR520-ADSL-K9, SR520-ADSLI-K9, SR520W-ADSL-K9 Datasheet

Data Sheet

Cisco 520 Secure Router for
Cisco Smart Business Communications System

A Flexible, Easy-to-Manage Router to Secure Your Small Business

More than ever, you need to secure your network to keep you business assets safe from threats.
You depend on your network to keep you connected to the people you do business with every day,
from customers to suppliers and business partners. Yet when you have a small networking staff, it
can be difficult to manage your network and make sure it is well protected from security breaches.
To be successful, you need a complete network solution that delivers the security and rich features
you need, yet is affordable and easy to use.

The Cisco® 520 Secure Router combines Internet access, advanced security, virtual private
network (VPN) access, and optional wireless networking, all in a single easy-to-use device.
Designed for seamless integration with the Cisco Smart Business Communications System—a
complete set of advanced voice, data, security, and wireless networking products designed
specifically for small businesses—the Cisco 520 Secure Router brings together multiple
technologies to help you improve network security and simplify network management.

Product Overview

The Cisco 500 Series Secure Routers deliver:

●

High performance broadband access for small offices and teleworkers

●

Highly secure remote access and site-to-site connectivity with IP Security (IPsec) VPN,
Secure Sockets Layer (SSL) VPN, and dynamic multipoint VPN (DMVPN)

●

Built-in threat defense, including:

◦

Stateful packet inspection (SPI) firewall to help minimize web and email threats

◦

Intrusion prevention system (IPS), providing protection from attacks, worms, and viruses

by detecting and stopping these threats before they can affect the network

◦

Cisco IOS

against malware and phishing attacks

●

Highly secure 802.11b/g wireless networking option to connect mobile employees in the
workplace

●

Support for static routing and dynamic routing protocols to easily adapt to diverse network
environments

●

Quality of service (QoS) for crisp voice and video communications

●

4-port 10/100 managed switch with VLAN support to interconnect workplace devices such
as computers, servers, and printers

●

Simple deployment, management, and troubleshooting with Cisco Configuration Assistant

®

Content Filtering to restrict access to undesirable websites and help guard

© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 10

Data Sheet

Table 1 lists the current Cisco 500 Series Secure Router models.

Table 1. Cisco 500 Series Secure Router Models

Model Number Part Number WAN Interface 802.11b/g Wireless

Cisco SR520

Cisco SR520W

SR520-FE-K9 10/100 Mbps Fast Ethernet No
SR520-ADSL-K9 Asymmetric DSL (ADSL) over basic telephone

service
SR520-ADSLI-K9 ADSL over ISDN (Annex B) No
SR520W-FE-K9 10/100 Mbps Fast Ethernet Yes
SR520W-ADSL-K9 ADSL over basic telephone service Yes
SR520W-ADSLI-K9 ADSL over ISDN (Annex B) Yes

No

Figure 1 shows a Cisco 520 Secure Router with and without wireless connectivity.

Figure 1. Cisco 520 Secure Routers

Applications

Part of the Cisco Smart Business Communications System, the Cisco 520 Secure Router is ideal
for securely connecting small offices to the Internet or to other company offices. Figure 2 illustrates
several different deployment scenarios.

Figure 2. Deployment Scenarios for the Cisco 520 Secure Router

This solution can help you accomplish the following:

●

Securely connect your small office: The Cisco 520 Secure Router is ideal for securely
connecting your employees with customers, business partners, and suppliers. Built-in
advanced security and encryption lets you do business over the Internet with confidence
and peace of mind. For example, online stores can safely perform transactions with credit
cards and debit cards.

© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 2 of 10

●

Move beyond your traditional phone system: The Cisco 520 Secure Router works hand
in hand with other Cisco Smart Business Communications System products, such as the
Cisco Unified Communications 500 Series, to transform your business by securely bringing
together all of your communications—phone calls, messaging, data, and wireless
networking—onto a single network. Your employees can be more productive, and you can
save money by managing and paying for just one network.

●

Upgrade your business communications: If your business is already using the Cisco
Smart Business Communications System, you can strengthen security by adding the Cisco
520 Secure Router. Intrusion prevention and Cisco IOS Content Filtering can add to your
peace of mind, and intelligent network QoS lets you prioritize voice and data network traffic
to improve network performance.

●

Safely connect traveling employees or teleworkers: The Cisco 520 Secure Router is
perfect for travelers or teleworkers who need secure VPN access to office applications and
files. QoS features in the Cisco 520 Secure Router help maintain the integrity of voice
communications from home offices.

Features and Benefits

Data Sheet

The Cisco 520 Secure Router provides:

●

Built-in advanced security: The Cisco 520 Secure Router includes advanced security
features to help protect your business, including a firewall that inspects traffic at the
application layer to help protect the network from unauthorized users, an inline intrusion
prevention system that provides deep-packet inspection to effectively prevent a wide range
of network attacks; built-in encryption using Triple Data Encryption Standard (3DES) and
Advanced Encryption Standard (AES) that lets remote employees connect to the network
securely using IPsec VPN, SSL VPN, or DMVPN; and Cisco IOS Content Filtering to add
another layer of defense against malware and phishing attacks.

●

Increased performance to run concurrent services: The Cisco 520 Secure Router
delivers broadband performance while simultaneously running services such as firewall,
intrusion prevention, VPN encryption, and wireless networking. Managing a single, all-in­one router is easier and less expensive than managing multiple network devices.

© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 3 of 10

●

Optional secure wireless networking: All Cisco 500 Series Secure Router models are
available with built-in 802.11b/g wireless access points to enable your employees to access
the network when away from their desks. Encryption and compliance with wireless network
security standards protect your network traffic every step of the way.

●

Built-in managed switch: An integrated 4-port 10/100 managed switch can connect
computers, printers, and servers in your office. One port on the switch can serve as a
network edge (DMZ) to add an additional layer of security to your network. The switch also
supports VLANs to let you securely separate traffic on your office network.

●

Simplified deployment and management: Cisco Configuration Assistant makes it easy to
configure, install, and manage the Cisco 520 Secure Router. It can also generate status
reports, synchronize passwords, and upgrade software across all of your Cisco network
devices, reducing the time your staff devotes to network maintenance. Cisco Configuration
Assistant is available for download free of charge at

●

Quality of service: The Cisco 520 Secure Router features the QoS intelligence you need

http://www.cisco.com/go/configassist.

to prioritize networking traffic and support crisp delivery of rich voice and video applications.

●

Multiple connectivity options: The Cisco 520 Secure Router offers a number of options
for WAN connectivity, including Fast Ethernet, ADSL over basic telephone service, and
ADSL over ISDN, enabling you to connect your offices with the technology that best meets
your needs.

●

Seamleass integration with the Cisco Smart Business Communications System: The
Cisco 520 Secure Router was designed as an integral part of this complete system of
advanced voice, data, security, and wireless networking for small business.

Data Sheet

Product Specifications

Table 2 gives specifications for the Cisco 520 Secure Router. Table 3 lists the Cisco IOS Software
features available with the wireless option, and Table 4 gives hardware specifications for the
routers.

© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 4 of 10

Table 2. Cisco 520 Secure Router Specifications

Feature Description

●

Routing protocols and general
router features

Recommended number of users Up to 50
IPv6 features

DSL and ATM features (DSL
models only)

Security features

QoS features

Management features

VLAN support Support for 4 VLANs

Routing Information Protocol (RIP) versions 1 and 2

●

Open Shortest Path First (OSPF) Protocol

●

Cisco Express Forwarding

●

Port Address Translation (PAT)

●

RFC 1483/2684

●

Point-to-Point Protocol over ATM (PPPoA) (DSL models only)

●

Point-to-Point Protocol over Ethernet (PPPoE)

●

802.1d Spanning Tree Protocol

●

Dynamic Host Configuration Protocol (DHCP) server/relay/client

●

Dynamic Domain Name System (DNS)

●

IPv6 addressing architecture

●

IPv6 name resolution

●

IPv6 statistics

●

IPv6 translation-transport packets between IPv6-only and IPv4-only endpoints

●

Internet Control Message Protocol (ICMP) v6

●

IPv6 DHCP

●

ATM Variable Bit Rate/real time (VBR-rt)

●

ATM Unspecified Bit Rate (UBR), Constant Bit Rate (CBR), and Variable Bit
Rate/non-real time (VBR-nrt)

●

ATM Operation, Administration, and Maintenance (OAM) support for F5 continuity
check; segment and end-to-end loopback; and Interim Local Management Interface
(ILMI) support

●

10 virtual circuits

Secure connectivity:

●

10 SSL VPN tunnels

●

20 IPsec VPN tunnels

●

Hardware-accelerated 3DES and AES

●

Dynamic multipoint VPN (DMVPN)

●

IPsec pass-through

●

Point-to-Point Tunneling Protocol (PPTP) pass-through

●

Stateful packet inspection firewall

●

Intrusion prevention system

●

Advanced application inspection and control

●

Cisco IOS Content Filtering

●

Network Address Translation (NAT) transparency

●

802.1

●

Secure HTTP (HTTPS), FTP, and Telnet authentication proxies

●

No service password recovery

●

Access control lists (ACLs)

●

Weighted fair queuing (WFQ)

●

Class-based WFQ (CBWFQ)

●

Low-latency queuing (LLQ)

●

Class-based QoS MIB

●

Prefragment before encryption

●

TX ring adjustment

●

Virtual circuit (VC) bundling

●

Policy-based routing (PBR)

●

Per-VC queuing

●

Per-VC traffic shaping

●

Cisco Configuration Assistant

●

Management of LAN switch ports

●

Telnet, Simple Network Management Protocol (SNMP v3), command-line interface,
and HTTP management

●

RADIUS and TACACS+

Data Sheet

© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 5 of 10

Data Sheet

Table 3. Cisco IOS Software Features on Cisco 520 Secure Router: WLAN Features (Available with

Wireless Option)

Feature Description

WLAN hardware features

WLAN software features

WLAN security features

SSIDs 10
Wireless VLANs 10
Encrypted wireless VLANs 4
MBSSIDs 2

●

802.11b/g

●

Automatic rate selection for 802.11b/g

●

Indoor range: 1 Mbps at 320 ft

●

Wireless Ethernet Compatibility Alliance (WECA) interoperability

●

Default antenna gain: 2.2 dBi

●

Maximize throughput or maximize range option

●

Universal Client Mode (allows radio to connect router to external WLAN network)

●

Wi-Fi Multimedia (WMM) certification

●

Service Set Identification (SSID) globalization

●

802.1

●

802.11i

●

Wi-Fi Protected Access (WPA) and AES (WPA2)

●

Extensible Authentication Protocol (EAP) authentication: Cisco LEAP, Protected
EAP (PEAP), EAP Transport Layer Security (EAP-TLS), EAP Flexible Authentication
via Secure Tunneling (EAP-FAST), EAP Subscriber Identity Module (EAP-SIM), EAP
Message Digest Algorithm 5 (EAP-MD5), EAP Tunneled Transport Layer Security
(EAP-TTLS)

●

Static and dynamic Wired Equivalent Privacy (WEP)

●

Temporal Key Integrity Protocol (TKIP)/Simple Security Network (SSN) encryption

●

MAC authentication/filter

●

User database for survivable local authentication using Cisco LEAP and EAP-FAST

●

Configurable limit to the number of wireless clients

●

Configurable RADIUS accounting for wireless clients

●

PSK (Pre-Shared Keys) (WPA-SOHO)

Table 4. Cisco 520 Secure Router Hardware

Feature Description

Default DRAM 128 MB
Maximum DRAM 128 MB
Default flash memory 36 MB
Maximum flash memory 36 MB
LAN switch Managed 4-port 10/100BASE-T with autosensing medium dependent interface

Console port RJ-45
LEDs PPP, VPN, ADSL, WLAN, LAN
External power supply Universal 100 to 240V AC

(MDI)/MDI crossover (MDI-X) for auto-crossover

© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 6 of 10

Data Sheet

DSL specifications

Wireless Specifications
Data rates supported 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, and 54 Mbps
Receive sensitivity

Maximum transmit power Note: Maximum power setting is subject to change by channel and by region, depending

Immunity

Physical dimensions and weight Product dimensions:

Power Product power specifications:

●

ST-Microelectronics 20190 chipset

●

Supports ADSL over basic telephone service with Annex A and Annex B ITU G.992.1
(ADSL), G.992.3 (ADSL2), and G.992.5 (ADSL2+)

●

G.994.1 ITU G.hs

●

Complies with T1.413 ANSI ADSL DMT issue 2

●

DSL Forum TR-067

●

The chipset does not provide interoperability with carrierless amplitude
modulation/phase modulation (CAP)-based ADSL lines.

●

Annex A and Annex B are supported starting with Cisco IOS Software Release

12.4(4)T.

●

The ADSL2 standard (ITU G.992.3) adds new features and functions targeted at
improving ADSL performance and interoperability. In addition, the standard adds
support for new applications, services, and deployment scenarios. Among the
changes are improvements in data rate and reach performance, rate adaptation,
improved diagnostics, and power enhancements. The conventional ADSL standard
(ITU G.992.1) provides downstream data rates of up to 8 Mbps and upstream data
rates of up to 0.8 Mbps, and ADSL2 provides higher downstream rates of up to 12
Mbps and upstream data rates of up to 1 Mbps.

●

The ADSL2+ standard (ITU G.992.5) doubles the bandwidth used for downstream
data transmission, effectively doubling the maximum downstream data rates and
achieving downstream data rates of up to 24 Mbps and upstream data rates of up to

1.5 Mbps.

●

802.11b

◦

-94 dBm @ 1 Mbps

-93 dBm @ 2 Mbps

◦

◦

-92 dBm @ 5.5 Mbps

-90 dBm @ 11 Mbps

◦

●

802.11g

◦

-92 dBm @ 6 Mbps

-90 dBm @ 9 Mbps

◦

◦

-89 dBm @ 12 Mbps

-87 dBm @ 18 Mbps

◦

◦

-85 dBm @ 24 Mbps

◦

-81 dBm @ 36 Mbps

-76 dBm @ 48 Mbps

◦

◦

-73 dBm @ 54 Mbps

on regulations.

●

802.11b: average 80 mW (19 dBm), peak (FCC) 245 mW (23.9 dBm)

●

802.11g: average 50 mW (17 dBm)

●

IEC 61000-4-2:1995 Immunity to Electrostatic Discharges

●

IEC 61000-4-3:1995 Immunity to Radio Frequency Electromagnetic Fields

●

IEC 61000-4-4:1995 Immunity to Electrical Fast Transients

●

IEC 61000-4-5:1995 Immunity to Power Line Transients (Surges)

●

IEC 61000-4-6:1996 Immunity to Radio Frequency Induced Conducted Disturbances

●

IEC 6100-4-8: 1003 Immunity to Power-Frequency Magnetic Fields (N/A for most
Cisco equipment)

●

IEC 61000-4-11:1995 Immunity to Voltage Dips, Voltage Variations, and Short
Voltage Interruptions

●

W x D x H = 10.578 x 8.289 x 1.719 in. (268.68 x 210.54 x 43.66 mm) (nonwireless
models)

●

W x D x H = 10.578 x 8.65 x 1.719 in. (268.68 x 219.72 x 43.66 mm) (wireless
models with antenna connectors, excludes antennae)

●

Weight: 3.0 lb (1.36 kg) maximum

●

AC input voltage: 100 to 240 VAC

●

Frequency: 50 to 60 Hz

●

Maximum output power: 26W

●

Output voltages: 5 and 12V

© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 7 of 10

Data Sheet

Approvals and compliance

Certifications

Environmental operating range

●

UL 1950/ CSA 950-95, third edition

●

IEC 950, second edition with amendments 1, 2, 3, and 4

●

IEC/EN 60950-1, first edition

●

CS-03, Canadian Telecom Requirements

●

FCC Part 68 U.S. Telecom Requirements

●

AS/NZS 3260: 1996 with amendments 1, 2, 3, and 4

●

ETSI 300-047

●

TS 001 with amendment 1

●

EMI

●

AS/NRZ 3548:1992 Class B

●

CFR 47 Part 15 Class B

●

EN60555-2 Class B

●

EN55022 Class B

●

VCCI Class II

●

ICES-003, Issue 2, Class B, April 1997S

●

IEC 1000-3-2

●

UNI 3.1/4.0 PVC

●

Nonoperating temperature: –4° to 149°F (–20° to 65° C)

●

Nonoperating humidity: 5% to 95% relative humidity (noncondensing)

●

Nonoperating altitude: 0 to 15,000 ft (0 to 4570 m)

●

Operating temperature: 32° to 104°F (0° to 40°C)

●

Operating humidity: 10% to 85%, relative humidity (noncondensing)

●

Operating altitude: 0 to 10,000 ft (0 to 3000 m)

DSLAM Interoperability

Table 5 lists the supported DSL Access Multiplexers (DSLAMs) for the Cisco 520 Secure Router.

Table 5. Cisco 520 Secure Router DSLAM Interoperability

Cisco SR520-ADSL-K9

Cisco SR520W-ADSL-K9
(Basic Telephone Service)

DSLAM Model Name: Cisco 6260
Chipset: Globespan No Yes
DSLAM Model Name: Siemens XpressLink Ver. 2.1
Chipset: Texas Instruments No Yes
DSLAM Model Name: Siemens XpressLink Ver. 2.0
Chipset: Texas Instruments No Yes
DSLAM Model Name: ECI Hi-Focus
Chipset: ADI No Yes
Chipset: ADI Anaconda No Yes
Chipset: Analog Devices Yes No
DSLAM Model Name: Alcatel 7300
Chipset: Globespan No Yes
Chipset: Alcatel/ST Yes No
DSLAM Model Name: Lucent Stinger
Chipset: Globespan Yes Yes

Cisco SR520-ADSLI-K9
Cisco SR520W-ADSL1-K9
(ISDN)

© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 8 of 10

ADSL2+ Support

Table 6 lists the supported ADSL2+ line cards for the Cisco 520 Secure Router.

Table 6. ADSL2+ Support

DSLAM Line Card Line Card Chipset DSLAM Firmware

Alcatel 7300 ADSL2/2+ basic telephone service

(Annex A)

Lucent Stinger ADSL2/2+ basic telephone service

(Annex A)

Alcatel 7300 ADSL2/2+ basic telephone service

(Annex A)

Lucent Stinger ADSL2/2+ basic telephone service

(Annex A)

ECI SAM480 ADSL2/2+ basic telephone service

(Annex A)

Ericsson EDA2.1 ADSL2/2+ basic telephone service

(Annex A)

Alcatel 7300 ADSL2+ ISDN (Annex B) ADLT-F (24-port)/Broadcom L7D6AA47.020

ADLT-D (24-port)/Broadcom L7D6AA47.020

stngr-72-gs-adsl-card/
Conexant

ABLT-D (24-port)/Broadcom L7D6AA47.174

stngr-72-gs-adsl­card/Conexant

ATUC-32/Infineon A4_9.00.56

EDN312xp/Broadcom CXC 132 7380 R2C09

9.7.1e64

9.9.1 (E.67.1.36)

Data Sheet

Ordering

Table 7 lists the part numbers for the Cisco 520 Secure Router.

Table 7. Product Part Numbers

Part Number/SKU Product

SR520-FE-K9 4-port Cisco 520 Secure Router, Fast Ethernet WAN
SR520W-FE-K9 4-port Cisco 520 Secure Router, Fast Ethernet WAN, 802.11b/g compliant
SR520-ADSL-K9 4-port Cisco 520 Secure Router, ADSL over POTS (basic telephone service) (Annex A) WAN
SR520W-ADSL-K9 4-port Cisco 520 Secure Router, ADSL over POTS (basic telephone service) (Annex A) WAN,

SR520-ADSLI-K9 4-port Cisco 520 Secure Router, ADSL over IDSN (Annex B) WAN
SR520W-ADSLI-K9 4-port Cisco 520 Secure Router, ADSL over ISDN (Annex B) WAN, 802.11b/g compliant
FL-WEBVPN-10-K9 SSL VPN Feature License for up to 10 users
SL-CNFIL-87x-1Y 1-year subscription to Cisco IOS Content Filtering for Cisco 520 Series Secure Router
SL-CNFIL-8xx-TRI 30-day free trial license of Cisco IOS Content Filtering for Cisco 520 Series Secure Router

802.11b/g compliant

Secure Connectivity for Your Business

The network is becoming a key part of your most important business operations. To keep your
business running at its best, and to give customers the service they expect, you need a network
that is secure, powerful, and flexible.

The Cisco 520 Secure Router helps make communications easier by connecting customers to
your business and your employees to each other. It delivers the solid security, secure VPN access,
and advanced routing you need. At the same time, it helps you control costs, reduce your need for
separate network equipment, and simplify network management. The Cisco 520 Secure Router is
an important part of the Cisco Smart Business Communications System, which brings you
communications capabilities usually found only at larger companies—at an affordable price.
Whether you are starting up a small business or expanding a successful one, the Cisco 520
Secure Router can help you get connected today and grow smoothly in the future.

© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 9 of 10

Data Sheet

Service and Support

Cisco offers a wide range of service programs to help you accelerate your business success.
These innovative services are delivered through a unique combination of people, processes, tools,
and partners, to keep you and your customers satisfied. Cisco Services help you protect your
technology investment and keep your network running at its best. Cisco Services also help you
prepare your network for new applications to extend network intelligence and help your business
thrive. For more information about Cisco Services, see

http://www.cisco.com/go/services.

For More Information

For more information about the Cisco Smart Business Communication System, visit

http://www.cisco.com/go/sbcs.

For more information about Cisco Configuration Assistant, or to download the tool free of charge,
visit

http://www.cisco.com/go/configassist.

For more information about the Cisco 520 Secure Router, visit http://www.cisco.com/go/sr500 or
contact your local account representative.

Printed in USA C78-484356-01 03/09

© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 10 of 10