Cisco Systems TG2050 Host system literature

Cisco Router Guide

For teleworkers, small ofﬁces, small to medium-sized businesses, and enterprise branch and head ofﬁces

Cisco Integrated Services Routers: Cisco 860, 880, 890, 1800 (ﬁxed), 1800 (modular), 1900, 2800,

2900, 3800, 390 0 Series;

Cisco Aggregation Routers: Cisco 7200, 7301, 7304, ASR 1000, 7600, Catalyst 6500 Series

Summer 2010 V.6

Cisco Router Guide

For Medium-sized Businesses, Enterprise Branches, Head Ofﬁces, and the Service Provider Edge

This is your guide to Cisco® Services Aggregation Routers

and Cisco Integrated Services Routers, the broadest and most versatile portfolio of products for enabling the deployment of multiple advanced services.

Cisco is the worldwide leader in networking systems for organizations of all sizes, offering solutions that fully support enterprise-wide deployment of networked business applications. A foundation of the Intelligent Information Network, Cisco routers provide high availability, comprehensive security, integrated wireless, ease of management, and advanced Quality of Service (QoS) for today’s most demanding network services, including IP communications, video, customer relationship management, ﬁnancial transactions, and other real-time applications.

This guide shows how Cisco Services Aggregation Routers

and Cisco Integrated Services Routers enable you to meet your current and future needs with modular designs, allowing incremental migration as your business and network requirements change.

In this guide, you can see for yourself how Cisco delivers beneﬁts beyond basic data access, providing services such as voice, security, and wireless as part of an integrated routing system that maximizes productivity and investment protection.

Cisco Router Guide

Series Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Product Transition Matrix ...................................................... 13

Integrated Services Routers

Cisco 860 Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ....... 19

Cisco 880 Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ....... 25

Cisco 890 Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ....... 37

Cisco 1800 Series (Fixed-Conﬁguration) ... . . .... . . ... . . .... . . .... . . .... . . .. 45

Cisco 1800 Series (Cisco 1841 Router Modular)............................ 53

Cisco 1800 Series (Cisco 1861 Router Modular)............................ 59

Cisco 1900 Series ............................................................. 67

Cisco 2800 Series ............................................................. 77

Cisco 2900 Series ............................................................. 89

Cisco 3800 Series ............................................................ 105

Cisco 3900 Series ............................................................ 117

Aggregation Routers

Cisco 7200 Series ............................................................133

Cisco 7301 Series ............................................................143

Cisco 7304 Series ............................................................ 153

Cisco ASR 1000 Series . . . . . . .. . . . . . . .. . . . . . . .. . . . . . . .. . . . . . . .. . . . . . . .. . . . . . . 161

Cisco 7600 Series ............................................................ 173

Cisco Catalyst 6500 Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191

Compatibility Quick Looks

Cisco Interface Card Compatibility Quick Look ............................203

Cisco Advanced Integration Module Compatibility Quick Look ...........205

Cisco Port Adapter Compatibility Quick Look . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209

Cisco Shared Port Adapter Compatibility Quick Look . . . . . . . . . . . . . . . . . . . . . 213

Cisco USB Flash Memory Compatibility Quick Look.......................217

Series Overview

For Small- to Medium-sized Businesses, Enterprise Branches, Head Ofﬁces, and the Service Provider Edge

Cisco offers the industry’s broadest and most versatile portfolio of secure, high-performance Integrated Services Routers, enabling the deployment of a wide array of services to the farthest reaches of an organization, from the home ofﬁce to the small ofﬁce to the large enterprise branch and head ofﬁce.

Cisco 860 Series

Small Ofﬁces

• Concurrent broadband services for small offices, and remote sites

• Secure connectivity with Stateful Inspection Firewall and IP Security (IPsec) VPN support for small offices

• Security features including:

- Stateful Inspection Firewall

- IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard

[AES])

• 4-por t 10/100 Fast Ethernet managed switch with VLAN support

• CON/AUX Port for console or external modem

• Secure 802.11g/n access point option based on IEEE802.11n draft 2.0 standard

• Easy setup, deployment, and remote management capabilities through Web-based tools and Cisco IOS® Software

Cisco 880 Series

Small Ofﬁces and Teleworker Deployments

• High per formance for broadband access in small office s and small branch-office and teleworker sites

• Collaborative services with secure analog, digital voice, and data communication

• Business continuity and WAN diversity with redundant WAN links: Fast Ethernet, G.SHDSL, ADSL2/2+, VDSL2, 3G, and ISDN

• Survivable Remote Site Telephony (SRST) voice continuity for enterprise small branch-office and teleworker sites

• Enhanced security, including:

- Firewall with advance application and control for email, Instant Messaging (IM), and HTTP traffic

- Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN (DMVPN), Group Encrypted Transport VPN with onboard acceleration, and Secure Sockets Layer (SSL) VPN

- Intrusion prevention system (IPS): An inline, deep-packet inspection feature that effectively mitigates a wide range of network attacks

- Content filtering: A subscriptionbased integrated security solution that offers categorybased reputation rating; keyword blocking; and protection against adware, malware, spyware, and URL blocking

• Four-port 10/100 Fast Ethernet managed switch with VLAN support; two ports support Power over Ethernet (PoE) for powering IP phones or external access p oints

• Secure 802.11g/n access-point option based on draft 802.11n standard with support for autonomous or Cisco Unified WLAN architectures

• CON/AUX port for console or external modem

• One USB 1.1 port for security eToken credentials, booting from USB, and loading configuration

• Easy setup, deployment, and remote-management capabilities through web-based tools and Cisco IOS® Software

Cisco 890 Series

Enterprise Small Branch

• High per formance for secure broadband and Metro Ethernet access with concurrent servic es for enterprise small branch offices

• Business continuity and WAN diversity with redundant WAN links: Fast Ethernet, V.92, and ISDN Basic Rate Interface (BRI)

• Integrated secure 802.11a/g/n access point (optional) based on the draft

802.11n standard; dual-band radios for mobility and support for autonomous or Cisco Unified WLAN architectures

• Enhanced security including :

- Firewall with advance application and control for email, instant messaging (IM), and HTTP traffic

- Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN [DMVPN], Group Encrypted Transport VPN [GET VPN] with onboard acceleration, and Secure Sockets Layer [SSL] VPN

- Intrusion prevention system (IPS): An inline, deep-packet-inspection feature that mitigates a wide range of network attacks

- Content filtering: A subscriptionbased integrated security solution that offers categorybased reputation rating, keyword blocking, and protection against adware, malware, spyware, and URL blocking

• An 8-por t 10/100 Fast Ethernet managed switch with VLAN suppor t and 4-port suppor t for Power over Ethernet (PoE) (optional) to power IP phones or external access p oints

• Metro Ethernet features include:

- One 1000 BASE-T Gigabit Ethernet WAN port

- One 10/100 BASE-T Fast Ethernet WAN port

- Intelligent hierarchical quality of service (HQoS): Supports hierarchical queuing and shaping

- Connectivity Fault Management (CFM), based on 802.1ag

- 802.3ah standard based Link operational administration and maintenance (OAM)

- Ethernet Local Management Interface (E-LMI) for the Customer Edge

- CFM Interworking and backwards compatibility

- Performance Management based on IP service-level agreement (SLA) for Ethernet

• Dedicated console and auxiliary ports for configuration and management

• Two USB 2.0 ports for security eToken credentials, booting, and loading configuration from USB

• Easy setup, deployment, and centralized and remotemanagement capabilities through web-based tools and Cisco IOS® Software

4 5

Series Overview (continued)

Extend services from the WAN to the campus edge with the industry’s most extensive WAN and MAN aggregation platform portfolio, which includes the Cisco 7200, 7301, 7304, and 7600 Series Routers and the Cisco Catalyst 6500 Series Switches, each providing a comprehensive set of highly secure, concurrent, and integrated services for enterprise customers.

Cisco 1800 Series (Fixed-configuration)

Small Ofﬁces and Small Enterprise Branch Ofﬁces

• Secure, concurrent services for broadban d access with WAN high availabilit y

• Manageabilit y and reliability of Cisco IOS Software B usiness-class Security

• Stateful firewall with URL filtering

• VPN 3 DES encryption and Advanced Encryption Standard (AES) encryption

• Dynamic M ultipoint VPN (DMVPN)

• Intrusion Prevention System (IPS) Fixed Configuration

• Secure broadband access at broadban d performance

• Inte grated ISDN Basic Rate S/ T Interface (BRI) , analog modem, or Ethernet backup por t for redundant WAN links and load balancing

• Secure wireless LAN option for simultan eous 802.11a and 802.11b/g with use of multiple antennas

• 8-port 10/100 managed switch with

802.1q VLAN support and optional Power over Ethernet (PoE)

Cisco 1800 Series (Modular)

Small- to Medium-sized Businesses and Small Enterprise Branch Ofﬁces

• Wire -speed performance with secure dat a services enabled at up to T1/E1/xDSL rates

• Increased ser vices density for secure dat a services

• Sup port for next-g eneration High-speed WAN Interface Cards

• Increased flexibility through suppor t of internal AIM slot for high-speed VPN and future applications

• Built-in dual Fast Ethernet por ts

• Sup port for over 30 existing and new modules Secure Net working

• Hardware-bas ed VPN acceleration on motherboard

• Antiviru s defense

• Intrusion Prevention System (IPS) Suppor t

Cisco 1900 Series Integrated Services Routers

Small Ofﬁces and Small Enterprise Branch Ofﬁces

• Embedded hardware-accelerated VPN encryption

• Secure collaborative communications with Group Encrypted Transport VPN, Dynamic Multipoint VPN, or Enhanced Easy VPN

• Integrated threat control using Cisco IOS Firewall, Cisco IOS Zone-Based Firewall, Cisco IOS IPS, and Cisco IOS Content Filtering

• Identity management that uses authentication, authorization, and accounting (AA A), and public key infrastructure

• 2 Integrated 10/100/1000 Ethernet ports

• 2 enhanced High-Speed WAN Interface Card slots that can host 2 single wide or 1 double wide and 1 single wide (e)HWIC

• Fully integrated power distribution to modules supporting 802.3af Power over Ethernet (PoE) and Cisco Enhanced PoE

Cisco 2800 Series

Small-to Medium-sized Businesses and Enterprise Branch Ofﬁces

• Wire-speed performance up to multiple T1/E1/xDSL rates

• Increased ser vices density for security, voice, caching, video, network analysis, and L2 switching

• Support for enhanced interfaces (NME, HWIC, EVM, and PVDM2)

• Built-in dual Fast Ethernet or Gigabit Ethernet ports

• Support for over 90 existing and new modules

• Optional support for integrated Power over Ethernet (PoE)

• 2 integrated 10/100/1000 Ethernet ports

• 2 enhanced High-Speed WAN Interface Card slots that can host 2 single wide or 1 double wide and 1 single wide (e)HWIC

• 1 Internal Services Module slot

• Fully integrated power distribution to modules supporting 802.3af Power over Ethernet (PoE) and Cisco Enhanced PoE

Secure Networking

• Hardware-based VPN acceleration

on motherboard

• Antivirus Defense

• Intrusion Prevention System (IPS)

IP Communications and IP Telephony Support

• IP Communications Express

(CCME/SRST/CUE)

• Enhanced Modularity (EVM and

PVDM2 support) Integrated Switching

• Up to 64 powered 10/100 switch

ports

• 802.3af Power over Ethernet

compliance

Cisco 2900 Series Integrated Services Router

Small- to Medium-sized and Enterprise Branch Ofﬁces

• Circuit-speed WAN performance up to 75 Mbps with services

• 1-2 RU modular form factor

• 3 onboard digital signal processor (DSP) slots

• 1 internal service module slot for application services

• Fully integrated power distribution to modules supporting 802.3af Power over Ethernet (PoE) and Cisco Enhanced PoE

Secure Networking

• Onboard hardware acceleration for

VPN encryption

• Secure collaborative

communications with Group Encrypted Transport VPN, Dynamic Multipoint VPN, or Enhanced Easy VPN

• Integrated threat control using Cisco

IOS Firewall, Cisco IOS Zone-Based Firewall, Cisco IOS IPS, and Cisco IOS Content Filtering

• Identity management using

authentication, authorization, and accounting (AA A), and public key infrastructure

Voice

• High-density packet voice DSP

module, optimized for voice and video support

• Standards-certified VoiceXML

browser services

• Voicemail support

• Cisco Communications Manager

Express and Survivable Remote Site Telephony

Cisco 3800 Series

Medium-sized to Large Businesses and Enterprise Branch Ofﬁces

• Wire-speed performance with services enable d at up to T3/E3 rates

• Increased ser vices density for security, voice, caching, video, network analysis, and L2 switching

• Support for enhanced interfaces (NME, HWIC, EVM, and PVDM2)

• Built-in dual Gigabit Ethernet ports

• Support for over 90 existing and new modules

• Single small form pluggable Gigabit Ethernet port

• High availability and resiliency through online insertion and removal support, as well as redundant systems and optional inline power

Secure Networking

• Hardware-based VPN acceleration

on motherboard

• Antivirus defense through Network

Admission Control Intrusion Prevention System (IPS) IP

Communications and IP Telephony Support

• IP Communications Express

(CCME/SRST/CUE)

• Enhanced Modularity (EVM and

PVDM2 support) Integrated Switching

• Up to 112 powered 10/100 switch

ports

• 802.3af Power over Ethernet

compliance

Series Overview (continued)

Cisco 3900 Series Integrated Services Routers

Medium-sized to Large Businesses and Enterprise Branch Ofﬁces

• Field-upgradeable motherboard, circuit-speed WAN performance up to 350 Mbps with services

• 3 RU modular form factor

• 4 Enhanced High-Speed WAN Interface Card slots

• Fully integrated power distribution to modules supporting 802 .3af Power over Ethernet

Secure Networking

• Embedded hardware-accelerated

VPN encryption for secure connectivity

• Integrated threat control using Cisco

IOS Firewall, Cisco IOS Zone-Based Firewall, Cisco IOS IPS, and Cisco IOS Content Filtering

• Identity management using

authentication, authorization, and accounting (AA A) and public key infrastructure

Unified Communications

• High-density-packet voice DSP

module, optimized for voice and video support

• Standards-certified VoiceXML

browser services

• Cisco Unified Border Element

capabilities for up to 1000 sessions

• Cisco Unity Express voicemail

support

• Support for Cisco Communications

Manager Express and Survivable Remote Site Telephony

Cisco 7200 Series

Enterprise Head Ofﬁces and Ser vice Provider Edge

Application Versatility

• Managed Network Services, WAN Aggregation, MPLS, VPN, broadband aggregation, QoS, and multiservice Business-class MPLS VPN and encrypted VPN

• Stateful inspection firewall

• VPNs: software and hardware

encryption, Cisco Easy VPN, Dynamic Multipoint VPN (DMVPN and Group Encrypted Transport VPN (GETVPN)

• Service-level validation features

• Intrusion Prevention System (IPS)

• Increased slot capacity utilizing I/O slot for modules with port adapter jacket card

• Cisco 7201 offers a very compact form factor (1 RU) with up to 2 Mpps routing performance and 4 built-in Gigabit Ethernet ports

Multiservice Data/Voice

• Analog and digital voice

• Survivable Remote Site Telephony (SRST)

• Multiservice interchange (MIX)-enabled backplane for service integration Modularity

• Supports over 70 interfaces, providing a comprehensive range of connectivity options from FE to GbE, and DS0 through OC-3/STM-1

• Shared Interfaces with Cisco 7201, 7301, 7304, 7500, and 7600 routers provides ease of management and investment protection

• Built-in FE/GbE ports on the NPE-G1 and NPE-G2 processors for high-performance L AN connectivity

• Upgradable processors, including NPE-G2 with up to 2 Mpps routing performance

• High-performing, hardware-based encryption support of up to 600 Mbps with the C7200-VSA security module

• Comprehensive management services through Cisc o Element Manager Framework (CEMF)

Cisco 7301 Series

Enterprise Head Ofﬁce and Service Provider Environments.

Application Versatility

• Application Versatility Managed Network Services, MPLS VPN, broadband aggregation, IP-to-IP Gateway, Mesh Wireless and Public Wireless LAN Solutions, BGP Route Reflector, Large-branch-office router, Enterprise High Speed Internet Gateway, and Secure Internet gateway

Business-class Security VPN

• Stateful inspection firewall

• VPNs: software and hardware

encryption, Cisco Easy VPN

• Group Encrypted Transport VPN

(GETVPN)

• Service-level validation features

• Intrusion Prevention System (IPS)

Multiservice data/voice

• Analog and digital voice

• Survivable Remote Site Telephony

(SRST)

Modularity

• Compact, power-efficient 1 RU form

factor with single port adapter slot

• Supports over 70 interfaces,

providing a comprehensive range of connectivity options from FE to GbE, and DS0 through OC-3/STM-1

• Shared Interfaces with Cisco 7304,

7500, and 7600 series routers providing ease of management and investment protection

• Three onboard Gigabit Ethernet

(copper or optical) or Fast Ethernet ports with Pluggable Gigabit Ethernet optics (Small Form-Factor Pluggable [SFP] optics) support

• Front-to-back airflow and single-

sided management

• High-per forming, hardware based

encryption support with new SA-VAM2+ security module

• Comprehensive management

services through Cisc o Element Manager Framework (CEMF)

Cisco 7304 Series

Enterprise Head Ofﬁce Environments

• High-per formance connectivity up to OC-48 speeds

• Built-in GbE for high-performance LAN connectivit y

• Hardware-accelerated services with Parallel Express Forwarding

• Optional redundant processor and power supplies for high availability in a single box solution

• Multiprotocol support

Business-class Security VPN

• Hardware-accelerated Access

Control Lists

• Stateful inspection firewall

Modularity

• More than 20 network line cards

• Chassis supports up to 4 line cards

or port adapters

• Built in GbE ports on processor

• Support for Cisco port adapters

• Manageability and reliability of

Cisco IOS Software

Cisco 7600 Series

Enterprise Head Ofﬁces High-end CPE Small Service Provider POP Environments

• Ideal for Enterprise WAN aggregation or service provider environments Business-class Securit y VPN

• Supports Services modules such as IPsec, firewall, SSL VPN

• Intrusion Prevention System (IPS) Modularity

• Chassis suppor ts up to 4-, 6-, 9-, and 13-slot chassis for redundant supervisors and line cards

• Supervisor engines supporting up to 15 Mpps with broad range of edge services

• Support for Shared Port Adapter (SPA) and SPA Interface Processors (SIP), which offers intelligent services. Supports up to 12 SPA bays

• Support for the Enhanced FlexWAN module, which offers Port Adapter investment protection

Series Overview (continued)

Notes

Cisco ASR 1000 Series

Cisco ASR 1000 Series Routers transform and future-proof the network edge for service providers and enterprises by offering industry-leading performance, service capabilities, reliability, and efﬁciencies in a compact form factor.

• For service providers, the Cisco ASR 1000 Series Routers enable more flexible, efficient, and cost-effective delivery of complex “any play” consumer and business services.

• For enterprises, the Cisco ASR 1000 Series Router transforms the WAN edge into a primary gateway for businesses where information, communication, collaboration, and commerce converge.

The Cisco ASR 1000 Series consists of four different versions, all powered by the Cisco QuantumFlow Processor (QFP):

• ASR 1002 Fixed Router

• ASR 1002 Router

• ASR 1004 Router

• ASR 1006 Router

The Cisco QFP provides a leap in performance and resiliency for route processors. The architecture and performance levels achieved by the Cisco QFP allows applications such as IPsec processing firewall, Cisco Unified Border Element (CUBE) (formerly referred to as Session Border Controller (SB/C)), and others to run natively on the ASR 1000 Series without the need for additional service blades or applianc es. The Cisco QFP also provides highly advanced QoS architecture.

The Cisco ASR 1000 Series provides carrier-class reliability and high-availability through a distributed architecture that separates the data plan from control plane functions. The ASR 1006 Router can be configured with redundant Route

Processors (RP) and Embedded Services Proc essors (ESP) to provide hardware redundancy within the system. Systems with a single RP and ESP (ASR 1002-F, ASR 1002 and ASR 1004 Routers) can run dual instances of IOS within the Linux-based IOS XE operating system for software based redundancy.

Network interfaces on the Cisco ASR 1000 Series are provided by Cisco Shared Port Adaptors (SPAs). These are the same SPAs that are used on all other Cisco platforms. The use of SPAs on the platform gives the customer great flexibility with interface choices and reduced OPEX by not having to spare different components to support the platform.

The WebEx Node SPA, a doubleheight SPA, suppor ted currently only on the ASR1002, ASR1004, and ASR1006 chassis, maximizes bandwidth efficiency and user experience for WebEx users in the Enterprise.

Cisco Catalyst® 6500 Series

Optimized for secure, converged voice, video, and data networks, the Catalyst 6500 offers industry-leading scalability (32 Gbps to 720 Gbps), operational control, and investment protection to meet the needs of head-end enterprises service aggregation, Internet access, data center interconnectivity, and service providers’ POP.

Integrated Security

• Suppor t of integrated multi-gigabit security Ser vices Modules offering intrusion detection and prevention, firewall, scalable IPsec VPN solutions, and Secure Sockets Layer (SSL)

Modularity and Flexibility

• Modular 3-, 4-, 6-, 9-, and 13-slot chassis with support of redundant supervisors and LAN/WAN line cards

• Application intelligence support with

PISA technology ensures application performance (NBAR) and security (FPM) in the LAN/WAN network

• Suppor ts WAN interfaces from DS0 to OC-192, 10/100/1000/10GbE with the flexibility of the Shared Port Adapter (SPA) and SPA Interface Processor (SIP)

• Suppor t of the Enhanced FlexWAN module for investment protection

Manageability

• Subsystem ISSUs with IOS modularity; integrated TDR; Encapsulated Remote Span (ERSPAN); Embedded Event Manager (EEM); Network Analysis Module (NAM); CiscoWorks; CNA

Scalable Performance

• Up to 400 Mpps with a distributed forwarding architecture

Operational Consistency

• Addresses WAN applications and

LAN/Core/Distribution/Data Center needs, reducing spares expense and enabling operational efficiencies

Validated Solutions

• L AN/ Distribution/Core/WAN/

DC applications are tested in Safe Harbor for end-to-end proven solutions

1111

Notes

Product Transition Matrix

Cisco 850 and 860 Product Comparison

Cisco 851, 857 Cisco 861, 867

Form Factor

DRAM (default)

DRAM (maximum)

Flash (default)

Flash (maximum)

Integrated LAN Switch

Integrated Hardware-based Encryption

Out of Band Management

Wireless LAN Option

Fast Ethernet WAN

ADSL2/2+

Cisco 870 and 880 Product Comparison

Form Factor

DRAM (default)

DRAM (maximum)

Flash (default)

Flash (maximum)

Integrated LAN Switch

Integrated Hardware-based Encryption

Backup Interface

Wireless LAN Option

Fast Ethernet WAN

ADSL/ADSL2+ over POTS

ADSL/ADSL2+ over ISDN

Desktop Desktop

64 MB 256 MB

20 MB 128 MB

4-port Switch 4-port Switch

Ye s Ye s

External Modem External Modem

Integrated 802.11b/g Integrated 802.11b/g/n

1 Port (851) 1 Port (861)

Cisco 871, 876, 877, 878 Cisco 881, 886, 887, 887V,

Desktop Desktop

128 MB 256 MB or

256 MB 768 MB

24 MB 128 MB or

52 MB 128 MB or

4-port Switch 4-port Manage d Switch

Yes Yes

External Modem (871, 877)

ISDN S/ T BRI (876, 878) (Out

of Band Management only

on 878)

Integrated 802.11b/g Integrated 802.11b/g/n

1 Port (871) 1 Port (881)

877 887

877 886

1 Port (867)

888, 888E

512 MB (SRST Models)

256 MB (SRST Models)

ISDN S/ T BRI (886, 8 87, 887V

888, 888E)

3G (all 3G Mo dels)

Product Transition Matrix

Transition Matrix continued

Cisco 870 and 880 Product Comparison (continued)

Cisco 871, 876, 877, 878 Cisco 881, 886, 887, 887V,

G.SHDSL (ATM Mode)

G.SHDSL (EFM Mode)

VDSL2

FXS

FXO

Voice BRI

USB Ports for Security Tokens

Power over Ethernet Support

Cisco Fixed FE WAN 1800/890 Product Comparison

Form Factor

Rack/Wall Mountable

DRAM (default)

DRAM (maximum)

Flash (default)

Flash (maximum)

Integrated LAN Switch

Fast Ethernet WAN

Gigabit Ethernet WAN

Back-up WAN

Wireless Option

USB Ports (v 2.0)

Integrated Power over Ethernet Support

Real Time Clock

878 888

No 888E

No 887V

No 4 Port (SRST Models)

No 1 Port (881SRST)

No 1 Port (888SRST)

2 Ports (871) 1 Port

Optional Optional

Cisco 1811, 1812 Cisco 891, 892

Desktop Desk top

Ye s Ye s

128 MB 512 MB

384 MB 512 MB

32 MB 256 MB

128 MB 256 MB

8-port Switch 8-port Switch

2 Ports 1 Port

No 1 Port

v.92 Modem (1811)/ ISDN S/T BRI (1812

Integrated 802.11a/b/g Integrated 802.11a/b/g/n

2 Ports 2 Ports

Optional Optional

Ye s Ye s

888, 888E

v.92 Modem (891)/

ISDN S/T BRI (892)

Transition Matrix continued

Cisco 1721/1841 Product Comparison

Cisco 1721 Cisco 1841

Form Factor

Chassis Type

DRAM (default)

DRAM (maximum)

Flash (default)

Flash (maximum)

AC Power Supply

Onboard AIM Slot

Support for High Speed WICs (HWICs)

LAN Ports

Integrated Hardware-based Encryption

USB Ports (v1.1)

Console Port (Up to 115.2 Kbps)

Auxiliary Port (Up to 115.2 Kbps)

Cisco 1751/1760, 2600, and 2800 Product Comparison

Cisco 1751, 1760 Cisco 2600 Cisco 2800

Form Factor

DRAM (default)

DRAM (maximum)

Flash (default)

Flash (maximum)

Onboard DSP Slot

Onboard AIM Slot

Support for High Speed WICs (HWICs)

LAN Ports

Integrated Hardware-based Encryption

Integrated Inline Power/ PoE Support

USB Ports

Console Port (Up to 115.2 Kbps)

Auxiliary Port (Up to 115.2 Kbps)

Desktop and 19”

Rack-mount

128 MB 256 MB 256 MB

128 MB (1751) 160 MB (1760)

32 MB Up to 32 MB 64 MB

64 MB (1760) Up to 128 MB Up to 256 MB

1 10/100 Up to 2 10/100 2 10/100 or

Optional Optional Ye s

Desktop Desktop (1 RU)

Plastic Metal

64 MB 128 MB

128 MB 384 MB

32 MB 32 MB

32 MB Up to 128 MB

External Internal

0 1

No Ye s

1 10/100 2 10/100

Optional Ye s

No 1

1 1

19” Rack-mount

2 0 Up to 3

0 1 2

No No Ye s

No No Yes, up to 2

1 1 1

(Up to 2 RU)

256 MB 1 GB

19” and 23”

Rack-mount Options

10/100/1000

14 15

Product Transition Matrix

Transition Matrix continued

Cisco 3700/3800 Product Comparison

Form Factor

DRAM (default)

DRAM (maximum)

Flash (default)

Flash (maximum)

Onboard DSP Slot

Onboard AIM Slot

Support for High Speed WICs (HWICs) or Enhanced Network Modules

LAN Ports

Integrated Hardware-based Encryption

Integrated Inline Power/PoE Support

USB Ports (v1.1)

Console Port (Up to 115.2 Kbps)

Auxiliary Port (Up to 115.2 Kbps)

Cisco 3700 Cisco 3800

19” and 23” Rack-mount

(2 and 4 RU)

256 MB 256 MB

Up to 512 MB (3745) Up to 1 GB

32 MB 64 MB

128 MB Up to 256 MB

0 Up to 4

2 2

No Ye s

2 10/100 2 10/100/1000

Optional Ye s

Yes (No PoE) Yes

No Yes, 2

1 1

19” and 23” Rack-mount

(2 and 4 RU)

Notes

Cisco 860 Series

The Cisco® 860 Series Integrated Services Routers combine Internet access, security, and wireless services onto a single, secure device that is simple to use and manage for small businesses. Cisco 860 Series delivers features, including firewall, IPsec VPNs, and WLANs, at broadband speeds to small offices. Easy deployment and centralized management features enable the Cisco 860 Series to be deployed by service providers in small businesses.

Beneﬁts and Advantages

Integrated Services

Cisco 860 Series Integrated Services Routers are fixed-configuration routers that provide business solutions for secure voice and data communication to small businesses. The Cisco 860 Series offer secure broadband services over Fast Ethernet and ADSL2/2+ WAN links. 802.11n offers LAN mobility and increased productivity. Cisco 860 Series provide the performance required for concurrent services, including firewall, and encryption for VPNs; optional 802.11g/n for mobility; and quality of service (QoS) features for multiple applications. In addition, the Cisco Configuration Professional (CCP) is a Web-based configuration tool that simplifies setup and deployment. Centralized management capabilities give network managers visibility and control of the network configurations at the remote site.

Easy Setup and Deployment

The Cisco Configuration Professional (CCP) Web-based configuration tool simplifies setup and deployment, and centralized management capabilities give network managers visibility and control of router configurations at the remote site. Cisco Configuration Express Service supports factory-loaded configurations in high-volume deployments. Support for the Cisco Configuration Engine enables plug-and-play installations with centralized configuration management.

Remote Management

Cisco 860 Series routers are ideally suited for small office and remote office deployments. Out-of-band management with an external modem through the auxiliary port allows IT managers to remotely manage routers at small office sites to quickly troubleshoot any network issues. Optional integrated secure WLAN connectivity simplifies the number of devices that need to be managed at the remote site. Cisco CCP helps resellers and customers to quickly and easily deploy, configure, and monitor a Cisco access router without knowledge of the Cisco IOS Software CommandLine Interface (CLI).

18 19

Cisco 860 Series

Security Features

Cisco 860 Security Features

• Secure Connectivity IPsec VPN

• Hardware-accelerated DES, 3DES, AES128, AES192, AES256

• Public Key Infrastructure (PKI) support

• 5 IPsec Tunnels

• Cisco Easy VPN Client and Server

• NAT transparency

WLAN Features

WLAN Hardware

• IEEE 802.11n draft 2.0 standard based access point with 802.11 b/g compatibility

• Automatic rate selection for 802.11g/n

• Captive omnidirectional 2dBi gain omni dipole antennas

• 2x3 MIMO radio operation

• WiFi 802.11n Draft v2.0 certiﬁed

WLAN Software Features

• Autonomous Access Point

• WCS support for autonomous conﬁgurations

• Maximize throughput or maximize range option

• Software-conﬁgurable transmit power

• Radio roles include access point, root bridge, non-root bridge, and workgroup bridge

• Wireless Multi Media Certiﬁcation (WMM)

• TSPEC Call Admission Control to ensure voice quality is maintained

• Unscheduled Automatic Power Save Deliver y (UPSD) to reduce latency

Zone-based Policy Firewall

• Stateful Inspection Routing Firewall

• Stateful Inspection Transparent Firewall

• Advanced Application Inspection and Control

• Secure HTTP (HTTPS), FTP, and Telnet Authentication Proxy

WLAN Security Features

• 802.11i

• WiFi Protected Access (WPA) & AES (WPA2)

• EAP Authentication: Cisco LEAP, PEAP, EAP-TLS, EAP-FAST, EAP-SIM, EAP-MD5, EAP-TTLS

• Static and dynamic Wired Equivalent Privacy (WEP)

• Temporal Key Integrity Protocol (TKIP)/SSN [Temporal Key Integrity Protocol/Simple Security Network encryption

• MAC authentication/ﬁlter

• User database for survivable local authentication using LEAP & EAP-FAST

• Conﬁgurable limit to the number of wireless clients

• Conﬁgurable RADIUS accounting for wireless clients

• PSK (Pre Shared Keys) (WPA-SOHO)

Network Example

When to Deploy

Deploy the Cisco 860 Series when you need:

• Secure connectivity with stateful inspection ﬁrewall and IP Security (IPsec) VPN support for small ofﬁces

• 4-port 10/100 switch

Series Distinctions

• Secure WLAN 802.11b/g/n option with ﬁxed captive omnidirectional 2dBi gain omni dipole antennas

• Easy setup, deployment, and remote management capabilities through Web-based tools and Cisco IOS Software

Cisco 860 Series

WAN Technologies

LAN Switch

Security

WLAN Option

• Cisco 861 – 100 MB Ethernet

• Cisco 867 – ADSL over analog telephone lines

4-port 10/100Base-T switch with autosensing MDI/MDX (Media Device In/Media

Device Crossover) for auto-crossover

Stateful ﬁrewall, IPsec, and VPNs

802.11b/g with ﬁxed captive omnidirectional 2dBi gain dipole antennas

Cisco 860 Series

Platform Overview

Models WAN Interface LAN Interface 802.11b/g

Cisco 861

Cisco 861W

Cisco 867

Cisco 867W

Physical Speciﬁcations

Dimensions (H x W x D)

Weight

Power Dissipations

AC Input Voltage

Frequency

Maximum Output Power

Output Voltages

Environmental Speciﬁcations

Operating Temperature

Non-operating Temperature

Relative Humidity (non-condensing)

Operating Altitude

10/100 Mbps Fast Ethernet 4-port 10/100 Mbps Managed Switch No

10/100 Mbps Fast Ethernet 4-port 10/100 Mbps Managed Switch Ye s

ADSL 4-port 10/100 Mbps Managed Switch No

ADSL 4-port 10/100 Mbps Managed Switch Ye s

Nonwireless Models:

12.8 x 9.8 x 1.9 in. (325 x 249 x 48 mm) (includes rubber feet)

12.8 x 9.8 x 1.75 in. (325 x 249 x 44 mm) (without rubber feet)

Wireless Models:

12.8 x 10.4 x 1.9 in. (325 x 264 x 48 mm) (includes rubber feet)

12.8 x 10.4 x 1.75 in. (325 x 264 x 44 mm) (without rubber feet; excluding antennas)

5.5 lb (2.5 kg) maximum

100–240 VAC

50–60 Hz

60W

12V DC

32 to 104°F (0 to 40°C)

-4 to 149°F (-20 to 65°C)

5 to 95%

0 to 10,000 ft. (0 to 3000m)

Series Speciﬁcations

Flash Memory

System DRAM Memory

External Power Supply

Console Port

802.11b/g WLANs

LEDs

Auxiliary Port

128 MB

256 MB

Universal 100–240 VAC

RJ-45

Optional on both models

PPP, VPN, ADSL, WLAN, L AN

Virtual AUX port

Ordering Information

Product Name Product Number Product Description

Cisco 861

Cisco 867

Note: For Cisco 860 Series wireless router part numbers, the following letters are associated with specifications meeting wireless regulations in the respective regions: A = FCC Compliant, E = ETSI Compliant, P = Japan Compliant.

CISCO861-K9

CISCO861W-GN-A-K9

CISCO861W-GN-E-K9

CISCO861W-GN-P-K9

CISCO867-K9

CISCO867W-GN-A-K9

CISCO867W-GN-E-K9

Cisco 861 Ethernet Security Router

Cisco 861 Ethernet Security Router with

802.11n FCC Compliant

Cisco 861 Ethernet Security Router with

802.11n ETSI Compliant

Cisco 861 Ethernet Security Router with

802.11n Japan Compliant

Cisco 867 ADSL2/2+ Annex A Router

Cisco 867 ADSL2 /2+ Annex A Router with

802.11n FCC Compliant

Cisco 867 ADSL2 /2+ Annex A Router with

802.11n ETSI Compliant

Regulatory Compliance

Approvals and Compliance

• IEC 60950-1:2005, Second Edition, with all country deviations

• AS/NZS 60950-1:2003, First Edition

• CAN/CSA 22.2 No. 60950-1-05, Second Edition

• UL 60950-1, Second Edition, 2005

• EN55024

• Industry Canada CS-03’

• TIA-968-A, Addendum 1, 2, 3, 4, 5

• EMI

• VCCI Class II

• IEC 1000-3-2

• California Energy Commission (CEC) Compliant

• Australia and New Zealand:

• Australia AS/ACIF S031: 2001

• Australia AS/ACIF S043.1: 2003

• Australia AS/ACIF S043.2: 2006

• New Zealand PTC220: 2003

Notes

Cisco 880 Series

Cisco 880 Series Integrated Services Routers are fixed-configuration routers that provide collaborative business solutions for secure voice and data communication to small businesses and enterprise teleworkers. They offer concurrent broadband services over third-generation (3G), Metro Ethernet, and multiple DSL technologies to provide business continuity. Wireless 802.11n and 3G offer LAN and WAN mobility. The routers provide the performance required for concurrent services, including firewall, intrusion prevention, content filtering, and encr yption for VPNs; optional 802.11g/n for mobility; and qualit y-of-service (QoS) features for optimizing voice and video applications. In addition, the web-based Cisco Configuration Professional configuration tool simplifies setup and deployment. Centralized management capabilities give network managers visibility and control of the network configurations at the remote site.

Beneﬁts and Advantages

Increased Performance to Run Concurrent Services

Cisco 880 Series Router performance allows customers to take advantage of broadband network speeds while running secure, concurrent data, voice, video, and wireless services.

Advanced Security

• An integrated stateful and application inspection firewall provides network perimeter securit y.

• High-speed IPsec 3DES and AES encryption offers data privacy over the Internet.

• Intrusion prevention enforces securit y policy in a larger enterprise or service provider network.

• Content filtering offers category-based URL classification and blocking, thus providing increased productivity and better use of company resources.

Redundant WAN Links

Redundant WAN links provide business continuity and WAN diversity with multiple WAN links: Fast Ethernet, ADSL2/2+, VDSL2, G.SHDSL, 3G, and ISDN.

24 25

4-port 10/100 Mbps Managed Switch

• The Cisco 880 Series allows for connection of multiple devices in a small office, with the ability to designate a port as the network edge.

• An optional ex ternal PoE adapter powers IP phones and external access points to avoid individual power supplies or power injectors.

• VL ANs allow for secure segmentation of network resources.

Optional 802.11g/n Access Point

• This broadband router offers a secure integrated access point in a single device.

• This integrated WiFi access point offers IEEE

802.11n draft 2.0 standard support for mobile access to high-bandwidth data, voice, and video applications through the use of multiple-input, multiple-output (MIMO) technology that provides increased throughput, reliability, and predictability.

• The Cisco 880 Series supports both autonomous and uniﬁed modes.

Cisco 880 SeriesCisco 880 Series

Beneﬁts and Advantages continued

Cisco SDM and Cisco IOS Software for Remote Management

Using smart wizards and task-based tutorials, Cisco Security Device Manager (SDM) helps resellers and customers quickly and easily deploy, configure, and monitor a Cisco access router without requiring knowledge of the Cisco IOS Software Command-Line Interface (CLI). Dial backup and out-of-band management allow IT managers to remotely manage the router at small office and teleworker sites. Cisco Configuration Express Service supports factory-loaded configurations in high-volume deployments. Support for the Cisco Configuration Engine enables plug-and-play installations with centralized configuration management.

SRST (supported on SRST models)

SRST provides business continuity for voice when the WAN link fails by switching calls to the PSTN.

Cisco Configuration Professional

Cisco Configuration Professional uses smart wizards and task-based tutorials, which resellers and customers can use to quickly and easily deploy, configure, and monitor a Cisco access router without requiring knowledge of the Cisco IOS Software command-line interface (CLI).

Unified Wireless Management

• Configuration and management of access points is automated and simplified without manual intervention.

• A unified hybrid remote-edge access point (HREAP) provides the following:

- WL AN services to remote and branch offices without deploying a wireless L AN controller at each location.

- Central configuration and control of unified WLAN services for remote offices through a WAN link.

- Flexibility in setting up wireless access at remote locations by specifying how traffic is to be bridged or tunneled.

Security Features

Cisco 880 Security Connectivity

• Secure Sockets Layer (SSL) VPN for secure remote access

• Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256

• Public-key-infrastructure (PKI) support

• 20 IPsec tunnels

• Cisco Easy VPN Client and Server

• NAT transparency

• DMVPN

• Tunnel-less Group Encrypted Transport VPN (GETVPN)

• IPsec stateful failover

• VRF-aware IPsec

• IPsec over IPv6

• Adaptive control technology

• Session Initiation Protocol (SIP) application layer gateway

26 27

Zone-based Policy Firewall

• Stateful inspection transparent ﬁrewall

• Advanced application inspection and control

• HTTPS, FTP, and Telnet authentication proxy

• Dynamic and static port security

• Firewall stateful failover

• VRF-aware ﬁrewall

• Cisco Easy VPN Client and Server

• IPsec 3DES termination/initiation

• IPsec pass-through

• Point-to-Point Tunneling Protocol (PPTP) pass-through

• L2TP pass-through

• 802.1X

• Secure HTTP (HTTPS), FTP, and Telnet authentication proxies

• Dynamic Multipoint VPN (DMVPN), SSL VPN, and Group Encrypted Transport (GET VPN)

Security Features continued

Content Filtering

• Subscription-based content ﬁltering with Trend Micro

• Support for Websense and Smartﬁlter

• Cisco IOS Software black and white lists

WLAN Features

WLAN Hardware

• IEEE 802.11n draft 2.0 standards-based access point with 802.11 b/g compatibility

• Automatic rate selection for 802.11g/n

• Captive omnidirectional 2-dBi gain dipole antennas

• 2 x 3 MIMO radio operation

• Removable antennas on Cisco 881W models

• WiFi 802.11n Draft v2.0 cer tiﬁed

WLAN Software Features

• Autonomous or uniﬁed access point

• Cisco WCS support for monitoring of autonomous-mode access points

• Option to maximize throughput or maximize range

• Software-conﬁgurable transmit power

• Radio roles, including access point, root bridge, nonroot bridge, and workgroup bridge

• WiFi Multimedia (WMM) certiﬁcation

• Trafﬁc speciﬁcations ( TSPEC) Call Admission Control (CAC) to ensure voice quality is maintained

• Unscheduled Automatic Power Save Delivery (UPSD) to reduce latency

WLAN Security Features

• Standard 802.11i

• WPA and AES (WPA2)

• EAP authentication: Cisco LEAP, PEAP, Extensible Authentication Protocol Transport Layer Security (EAP TLS), Extensible Authentication ProtocolFlexible Authentication via Secure Tunneling (EAP-FAST), Extensible Authentication ProtocolSubscriber Information Module (EAP-SIM), Extensible Authentication Protocol-Message Digest Algorithm 5 (EAP-MD5), and Extensible Authentication Protocol-Tunneled TLS (EAP-TTLS)

• Static and dynamic Wired Equivalent Privacy (WEP)

• Temporal Key Integrity Protocol/Simple Security Network (TKIP/SSN) encryption

Integrated Threat Control

• IPS

• Control Plane Policing

• Flexible Packet Matching

•Network foundation protection

• MAC authentication and ﬁlter

• User database for survivable local authentication using LEAP and EAP-FAST

• Conﬁgurable limit to the number of wireless clients

• Conﬁgurable RADIUS accounting for wireless clients

• Pre-Shared Keys (PSKs) (WPA-small ofﬁce or home ofﬁce [WPA-SOHO])

Features on Cisco 880 SRST Series

• SRST 7.0 and later

• Up to 4 voice channels

• H.323 Versions 1, 2, 3, and 4, Media Gateway Control Protocol (MGCP) 0.1 and 1.0, Skinny Client Control Protocol (SCCP), and SIP call-control protocols

• G.711, G.729, G.729a/b, G.723.1, G.726, and G.728

• Cisco Uniﬁed Communications Manager support for analog and digital ports with Releases 6.1(3),

7.0(2), and 7.1(3)

• FXS loop-start and ground-start signaling

• FXO

• Inbound signaling (such as dual-tone multifrequency [DTMF] and multifrequency support)

• BRI QSIG

• Echo cancellation

• Silence suppression and voice activity detection (VAD)

• Comfort-noise generation

• Caller ID support

• Dial-plan mapping

• Fax and modem pass-through

• Fax Relay

• T.37 and T.38 fax protocols

Cisco 880 SeriesCisco 880 Series

Network Example

When to Deploy

Deploy the Cisco 880 Series when you need the following in a small remote office, or teleworker and small business sites:

• Secure, concurrent services for broadband connection

• High-speed VPN solution

• Advanced security with ﬁrewall, VPNs, IPS, DMVPNs, Easy VPNs, GETVPNs

• Integrated 802.11b/g/n WLAN, in autonomous or Uniﬁed Wireless modes

• Four-port 10/100 managed switch

• WAN diversity with ADSL2/2+, G.SHDSL, VDSL2, FE WAN

• WAN redundancy with 3G, or ISDN interfaces

• Uniﬁed communications

Series Distinctions

Cisco 880 Series

WAN Technologies

LAN Switch

Backup Interfaces

Unified Communications

802.11g/n

• Cisco 881 – 100 MB Ethernet

• Cisco 886 – ADSL over ISDN (ADSL2/ADSL2+)

• Cisco 887 – ADSL over analog telephone lines (ADSL2/ADSL2+)

• Cisco 887V – VDSL2 over analog telephone lines

• Cisco 888 – G.SHDSL (2- and 4-wire support)

Managed 4-port 10/100Base-T switch with autosensing MDI/MDX (Media Device In/Media Device Crossover) for auto-crossover

Cisco 881G, 886G, 887G, 887VG, 888G – 3G Wireless WAN Cisco 886, 887, 887V, 888 – ISDN BRI

Cisco 881SRST, 888SRST

Cisco 881W, 886W, 887W, 887VW, 888W

Platform Overview

Models WAN Interface LAN Interfaces

Cisco 881

Cisco 886

Cisco 887

Cisco 887V

Cisco 888

Cisco 888E

Models WAN Interface LAN Interfaces Voice Ports 802.11g/n Option

Cisco 881 SRST

Cisco 888 SRST

10/100-Mbps Fast

Ethernet

ADSL2/2+ over ISDN

(Annex B)

ADSL2/2+ over POTS

(Annex A)

VDSL2 over POTS 4-port 10/100-Mbps

G.SHDSL (ATM) 4-port 10/100-Mbps

G.SHDSL (EFM) 4-port 10/100-Mbps

10/100-Mbps Fast

Ethernet

G.SHDSL 4-port 10/100-Mbps

4-port 10/100-Mbps

managed switch

4-port 10/100-Mbps

managed switch

4-port 10/100-Mbps

managed switch

4-port 10/100 Mbps

managed switch

802.11b/g Option

Yes

(Cisco 881W)

Yes

(Cisco 886W)

Yes

(Cisco 887W)

Yes

(Cisco 887V)

Yes

(Cisco 888W)

Yes

(Cisco 888W)

4 foreign-exchange-

station (FXS) ports and

1 foreign-exchange-

office (FXO) port for

public-switched-

telephone-network

(PSTN) fallback

4 FXS ports and 1

Basic Rate Interface

(BRI) port for PSTN

Integrated 3GIntegrated ISDN

Yes

(Cisco 881G)

Yes

(Cisco 886G)

Yes

(Cisco 887G)

Yes

(Cisco 887VG)

Yes

(Cisco 888G)

No Ye s

(Cisco 881 SRSTW)

(Cisco 888 SRSTW)

fallback

Dial Backup

Ye s

Yes

28 29

Cisco 880 SeriesCisco 880 Series

Platform Overview continued

Physical Speciﬁcations

Dimensions (H x W x D)

Weight

Power Dissipations

AC Input Voltage

Frequency

Maximum Output Power

Output Voltages

Environmental Speciﬁcations

Operating Temperature

Non-operating Temperature

Relative Humidity (non-condensing)

Operating Altitude

Regulatory Compliance

Approvals and Compliance

Nonwireless Models:

1.9 x 12.8 x 9.8 in. (48 x 325 x 249 mm) (includes rubber feet)

1.75 x 12.8 x 9.8 in. (44 x 325 x 249 mm) (without rubber feet)

Wireless Models:

1.9 x 12.8 x 10.4 in. (48 x 325 x 264 mm) (includes rubber feet)

1.75 x 12.8 x 10.4 in. (44 x 325 x 264 mm) (without rubber feet; excludes antennas)

5.5 lbs. (2.5 kg) maximum

100–240 VAC

50–60 Hz

60W

12V DC

32 to 104°F (0 to 40°C)

-4 to 149°F (-20 to 65°C)

5 to 95%

0 to 10,000 ft. (0 to 3000 m)

Emissions:

• 47 CFR Part 15: 2006

• CISPR22: 2005

• EN300386: V1.3.3: 2005

• EN55022: 2006

• EN61000-3-2: 2000 [Inc amd 1 and 2]

• EN61000-3-3: 1995 [+ amd 1: 2001]

• ICES-003 Issue 4: 2004

• KN 22: 2005

• VCCI: V-3/2006.04

Immunity:

• CISPR24: 1997 [+ amd 1 and 2]

• EN300386: V1.3.3 : 2005

• EN50082-1: 1992

• EN50082-1: 1997

• EN55024: 1998 [+ amd 1 and 2]

• EN61000-6-1: 2001

The following are supported on teleworker models:

• AS/NRZ 3548: 1992 Class B

• CFR 47 Part 15 Class B

• EN60555-2 Class B

• EN55022 Class B

• ICES-003, Issue 2, Class B, April 1997S

Series Speciﬁcations

Flash Memory

System DRAM Memory

External Power Supply

Console Port

802.11b/g WLANs

3G Specifications

LEDs

USB 1.1Ports for Advanced Security Features Such as Security Tokens

Power over Ethernet

128 MB on Cisco 880 Series data models

256 MB on Cisco 880 Series SRST models

256 MB on Cisco 880 Series data models 512 MB on Cisco 880 Series SRST models Expandable to 768 MB

Universal 100 to 240 VAC input; 60W, 12 VDC output

RJ-45

Optional on all models

• HSPA, UMTS, and GSM (CISCO881G-G-K9 and CISCO881G-A-K9)

• 850, 1900, and 2100 MHz UMTS bands

• 850 MHz GSM, GPRS, and EDGE band

• 900 MHz GSM, GPRS, and EDGE band

• 1800 MHz GSM, GPRS, and EDGE band

• 1900 MHz GSM, GPRS, and EDGE band

• EVDO Rev A/ EVDO/1xRTT (CDMA) (CISCO881G-S-K9 and CISCO8801G-V-K9)

• 800 MHz: Nor th American cellular band

• 1900 MHz: Nor th American PCS band

PPP, VPN, DSL, WLAN, L AN

1 USB 1.1 port cannot be used for connecting external device s than speciﬁed

for the Cisco 880 series

Optional Two-port 802.3af and Cisco compliant PoE

High-Availability Features

• Virtual Router Redundancy Protocol (VRRP) (RFC 2338)

• Hot Standby Router Protocol (HSRP)

• Multigroup HSRP (MHSRP)

• Dial backup with external modem through virtual auxiliary port

• Dial backup with ISDN S/T por t (DSL models only)

• 3G backup (3G models only)

30 31

880 SeriesCisco 880 Series

Ordering Information

Product Name Product Number Product Description

Cisco 881

Cisco 881G

Cisco 886

Cisco 887

CISCO881-K9

CISCO881-SEC-K9

CISCO881W-GN-A-K9

CISCO881W-GN-E-K9

CISCO881W-GN-P-K9

CISCO881G-K9

CISCO881GW-GN-A-K9

CISCO881GW-GN-E-K9

C881SRST-K9

C881SRSTW-GN-A-K9

C881SRSTW-GN-E-K9

CISCO881G-S-K9

CISCO881G-V-K9

CISCO881G-A-K9

CISCO886-K9

CISCO886-SEC-K9

CISCO886W-GN-E-K9

CISCO886G-K9

CISCO886GW-GN-E-K9

CISCO887-K9

CISCO887-SEC-K9

CISCO887W-GN-A-K9

Cisco 881 Ethernet Security Router

Cisco 881 Ethernet Security Router with Advanced IP Services

Cisco 881 Ethernet Security Router with

802.11n FCC Compliant

Cisco 881 Ethernet Security Router with

802.11n ETSI Compliant

Cisco 881 Ethernet Security Router with

802.11n Japan Compliant

Cisco 881 Ethernet Security Router with 3G

Cisco 881 Ethernet Security Router with 3G, 802.11n FCC Compliant

Cisco 881 Ethernet Security Router with 3G, 802.11n ETSI Compliant

Cisco 881 SRST Ethernet Securit y Router with FXS, FXO

CCisco 881 SRST Ethernet Securit y Router with FXS, FXO; 802.11n FCC Compliant

Cisco 881 SRST Ethernet Securit y Router with FXS, FXO; 802.11n ETSI Compliant

Cisco 881G Ethernet Security Router with 3G Sprint

Cisco 881G Ethernet Security Router with 3G Verizon

Cisco 881G Ethernet Security Router with 3G GSM North America

Cisco 886 ADSL2/2+ Annex B Router

Cisco 886 ADSL2/2+ Annex B Securit y Router with Advanced IP S ervices

Cisco 886 ADSL2/2+ Annex B Router with 802.11n ETSI Compliant

Cisco 886 ADSL2/2+ Annex B Router with 3G

Cisco 886 ADSL2/2+ Annex B Router with 3G, 802.11n ETSI Compliant

Cisco 887 ADSL2/2+ Annex A Router

Cisco 887 ADSL2/2+ Annex A Securit y Router with Advanced IP S ervices

Cisco 887 ADSL2 /2+ Annex A Router with

802.11n FCC Compliant

Ordering Information continued

Series Features Overview

Product Name Product Number Product Description

Cisco 887

Cisco 887V

Cisco 888

CISCO887W-GN-E-K9

CISCO887M-K9

CISCO887MW-GN-E-K9

CISCO887G-K9

CISCO881G-K9

CISCO881GW-GN-A-K9

CISCO881GW-GN-E-K9

C881SRST-K9

C881SRSTW-GN-A-K9

CISCO887GW-GN-E-K9

CISCO887V-K9

CISCO887V-SEC-K9

CISCO887VW-GNA-K9

CISCO887VW-GNE-K9

CISCO887VG-K9

CISCO887VGW-GNA-K9

CISCO887VGW-GNE-K9

CISCO888-K9

CISCO888-SEC-K9

CISCO888W-GN-A-K9

CISCO888W-GN-E-K9

C888SRST-K9

C888SRSTW-GN-A-K9

C888SRSTW-GN-E-K9

Cisco 887 ADSL2 /2+ Annex A Router with

802.11n ETSI Compliant

Cisco 887 ADSL2/2+ Annex M Router

Cisco 887 ADSL2/2+ Annex M Router with 802.11n ETSI Compliant

Cisco 887 ADSL2/2+ Annex A Router with 3G

Cisco 881 Ethernet Security Router with 3G

Cisco 881 Ethernet Security Router with 3G, 802.11n FCC Compliant

Cisco 881 Ethernet Security Router with 3G, 802.11n ETSI Compliant

Cisco 881 SRST Ethernet Securit y Router with FXS, FXO

Cisco 887 ADSL2 /2+ Annex A Router with 3G, 802.11n FCC Compliant

Cisco 887 ADSL2 /2+ Annex A Router with 3G, 802.11n ETSI Compliant

Cisco 887 VDSL2 over POTS Router

Cisco 887 VDSL2 over POTS Security Router with Advanced IP S ervices

Cisco 887V VDSL2 Router with 802.11n FCC Compliant

Cisco 887V VDSL2 Router with 802.11n ETSI Compliant

Cisco 887V VDSL2 Router with 3G

Cisco 887V VDSL2 Router with 3G,

802.11n FCC Compliant

Cisco 887V VDSL2 Router with 3G,

802.11n ETSI Compliant

Cisco 888 G.SHDSL Router

Cisco 888 G.SHDSL Security Router with Adv IP Services

Cisco 888 G.SHDSL Router with 802.11n FCC Compliant

Cisco 888 G.SHDSL Router with 802.11n ETSI Compliant

Cisco 888 SRST Ethernet Securit y Router with FXS, FXO; 802.11n ETSI Compliant

Cisco 888 SRST G.SHDSL Router with FXS, BRI

Cisco 888 SRST G.SHDSL Router with FXS, BRI; 802.11n FCC Compliant

Cisco 888 SRST G.SHDSL Router with FXS, BRI; 802.11n ETSI Compliant

Cisco 880 Series

Ordering Information continued

Product Name Product Number Product Description

Cisco 888E

CISCO888E-K9

CISCO888E-SEC-K9

CISCO888EW-GN-A-

CISCO888EW-GN-E-K9

CISCO888G-K9

CISCO888GW-G-NA-K9

CISCO888GW-G-NE-K9

Cisco 888E G.SHDSL Router with 802.3ah EFM Support

Cisco 888E G.SHDSL Security Router with Advanced IP Services and 802.3ah EFM Support

Cisco 888E G.SHDSL Router with 802.11n FCC Compliant and 802.3ah EFM Support

Cisco 888E G.SHDSL Router with

802.11n ETSI Compliant and 802.3ah EFM Support

Cisco 888E G.SHDSL Router with 3G

Cisco 888E G.SHDSL Router with 3G,

802.11n FCC Compliant

Cisco 888E G.SHDSL Router with 3G,

802.11n ETSI Compliant

Ordering Information continued

Part Numbe r Product Description

800-IL-PM=2 2 port 802.3af Capable Inline Power Module for 880 Routers

MEM8XX-256U512D 256-MB DRAM upgrade to 512 MB for Cisco 880 Series Routers MEM8XX-

MEM8XX-256U768D 512-MB DRAM Upgrade to 768 MB for Cisco 880 Series Routers

MEM8XX-512U768D 512-MB DRAM Upgrade to 768 MB for Cisco 880 Series Routers

PCEX-3G-CDMA-V Cisc o 3G EVDO Modem-Verizon Network

PCEX-3G-CDMA-S Cisco 3G EVDO Modem-Sprint Network

PCEX-3G-CDMA Cisco 3G EVDO Modem

PCEX-3G-HSPA-A Cisco HSPA Modem-North America

PCEX-3G-HSPA Cisco 3G HSPA Modem

S880DUDK9* Cisco 880 Series IOS Universal Data

S880VUDK9* Cisco 880 Series IOS Universal Voice

SL-880-ADSEC (default) Cisc o 880 Advanced Security Image Feature License

SL-880-AIS (upgrade option) Cisco 880 Advanced IP Services Image Feature License

Software License for Cisco 880 SRST

SL-SRST880-AIS (included by default)

SL-CNFIL-88x-1Y One year subscription to Content Filtering for Cisco 881/888-URL/Phishing

SL-CNFIL-8xx-TRI 30 day free trial lic ense for 88x series

FL-WEBVPN-10-K9 Feature License SSL VPN for Up to 10 Users (incremental)

C880data-universalk9-mz Universal Image for Cisco 880 ISR Data Router Series

C880voice-universalk9-mz Universal Image for Cisco 880 SRST Router Series

ap801-k9w7-tar Autonomous Software Image for ap801

ap801-rcvk9w8-tar LWAPP Recovery Image for ap801

256U768D

Cisco 880 Advanced IP Services Image Feature License

Notes

Cisco 890 Series

Cisco 890 Series Integrated Services Routers are fixed-configuration routers that provide collaborative business solutions for secure voice and data communications to enterprise small branch offices. They are designed to deliver secure broadband, Metro Ethernet, wireless L AN (WLAN) connectivity, and business continuity. The routers also come with powerful management tools, such as the web-based Cisco Configuration Professional configuration management tool, which simplifies setup and deployment. Centralized management capabilities give network managers visibility and control of the network configurations at the remote site.

Beneﬁts and Advantages

Increased Performance for Concurrent Services

Router performance allows customers to take advantage of broadband network speeds while running secure, concurrent data, voice, video, and wireless services.

Integrated Gigabit and Fast Ethernet WAN Po rt s

Integrated ports offer flexibility in Ethernet WAN access, and the additional capability to deploy redundant WAN connections for failover protections and load balancing.

Integrated 8-port 10/100 BASE-T Managed Switch

Fully managed LAN switch ports connect multiple LAN devices and reduce the need for an additional LAN switch.

Integrated WAN Backup

ISDN BRI S/T (Cisco 892) or analog modem (Cisco

891) port provides high availability by establishing a backup WAN connection if the primar y connection fails.

36 37

Optional Dual-radio/Dual-band IEEE

802.11n Access Point

• The Cisco 890 Series offers a secure, integrated access point in a single device. It supports both autonomous and uniﬁed modes. It is backwardcompatible with 802.11a/b/g.

• The router supports IEEE 802.11n draft 2.0 and uses multiple-input, multiple-output (MIMO) technology that provides increased throughput, reliability, and predictability.

Enhanced Security

• An integrated stateful and application inspection firewall provides network perimeter security.

• High-speed IPsec 3DES and AES encryption offers data privacy over the Internet.

• Intrusion prevention enforces security policy in a larger enterprise or service provider network.

• Content filtering offers category-based URL classification and blocking, thus providing increased productivity and better use of company resources.

Cisco 890 SeriesCisco 890 Series

Beneﬁts and Advantages continued

Unified Wireless Management

• Configuration and management of access points is automated and simplified without manual intervention.

• A unified hybrid remote-edge access point (HREAP) provides the following:

- WLAN services to remote and branch offices without deploying a wireless LAN controller at each location

- Central configuration and control of unified WLAN services for remote offices through a WAN li nk

- Flexibility in setting up wireless access at remote locations by specifying how traffic is to be bridged or tunneled

Cisco Configuration Professional

Cisco Configuration Professional uses smart wizards and task-based tutorials, which reseller and customers can use to quickly and easily deploy, configure, and monitor a Cisco access router without requiring knowledge of the Cisco IOS Software CLI.

Security Features

Cisco 890 Security Connectivity

• Secure Sockets Layer (SSL) VPN for secure remote access

• Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256

• Public-key-infrastructure (PKI) support

• 20 IPsec tunnels

• Cisco Easy VPN Client and Server

• NAT transparency

• DMVPN

• Tunnel-less Group Encrypted Transport VPN (GETVPN)

• IPsec stateful failover

• VRF-aware IPsec

• IPsec over IPv6

• Adaptive control technology

• Session Initiation Protocol (SIP) application layer gateway

38 39

Zone-based Policy Firewall

• Stateful inspection transparent ﬁrewall

• Advanced application inspection and control

• HTTPS, FTP, and Telnet authentication proxy

• Dynamic and static port security

• Firewall stateful failover

• VRF-aware ﬁrewall

Content Filtering

• Subscription-based content ﬁltering with Trend Micro

• Support for Websense and Smartﬁlter

• Cisco IOS Software black and white lists

Integrated Threat Control

• IPS

• Control Plane Policing

• Flexible Packet Matching

• Network foundation protection

WLAN Features

WLAN Hardware

• IEEE 802.11n draft v2.0 standards-based access point with 802.11 a/g compatibility

• Automatic rate selection for 802.11a/g/n

• Noncaptive RPTNC omnidirectional dipole antennae; 2 dBi gain @ 2.4 GHz, 5 dBi gain @ 5GHz

• 2x3 MIMO radio operation

• WiFi 802.11n Draft v2.0 cer tiﬁed

WLAN Software Features

• Autonomous or uniﬁed access point

• Cisco WCS support for monitoring of autonomous-mode access points

• Option to maximize throughput or maximize range

• Software-conﬁgurable transmit power

• Radio roles, including access point, root bridge, nonroot bridge, and workgroup bridge

• WiFi Multimedia (WMM) certiﬁcation

• Trafﬁc speciﬁcations ( TSPEC) Call Admission Control (CAC) to ensure voice quality is maintained

• Unscheduled Automatic Power Save Delivery (UPSD) to reduce latency

WLAN Security Features

• Standard 802.11i

• WPA and AES (WPA2)

• Static and dynamic Wired Equivalent Privacy (WEP)

• Temporal Key Integrity Protocol/Simple Security Network (TKIP/SSN) encryption

• MAC authentication and ﬁlter

• User database for survivable local authentication using LEAP and EAP-FAST

• Conﬁgurable limit to the number of wireless clients

• Conﬁgurable RADIUS accounting for wireless clients

• Preshared keys (PSKs) (WPA-small ofﬁce or home ofﬁce [WPA-SOHO])

Metro Ethernet Features

• One 1000 BASE-T Gigabit Ethernet WAN port

• One 10/100 BASE-T Fast Ethernet WAN port

• Intelligent hierarchical quality of ser vice (HQoS): Supports hierarchical queuing and shaping

• Connectivity Fault Management (CFM), based on

802.1ag

• 802.3ah standard based Link operational administration and maintenance (OAM)

• Ethernet Local Management Interface (E-LMI) for the Customer Edge

• CFM Interworking and backwards compatibility

• Performance Management based on IP servicelevel agreement (SLA) for Ethernet

Cisco 890 SeriesCisco 890 Series

Network Example

When to Deploy

Deploy the Cisco 890 Series when you need the following in a small branch office, or small business sites:

• Secure, concurrent services for broadband connection

• High-speed VPN solution

Platform Overview

Models WAN Interface LAN Interfaces

Cisco 891

Cisco 892

1-port GE

1-port FE

1-port GE

1-port FE

4-port 10/100-Mbps

Managed Switch

4-port 10/100-Mbps

Managed Switch

• Advanced security with ﬁrewall, VPNs, IPS, DMVPNs, Easy VPNs, GETVPNs

• Metro Ethernet service

• Integrated 802.11a/b/g/n WLAN, in autonomous or Uniﬁed Wireless modes

• Eight-port 10/100 managed switch

802.11a/g/n Option

Yes Yes/Yes/Yes V.92 Analog

Yes Yes/Yes/Yes ISDN BRI

Integrated

USB 2.0/

AUX/

Console

Integrated Dial

Backup

Modem

Platform Overview continued

Physical Speciﬁcations

Dimensions (H x W x D)

Weight

Power Dissipations

AC Input Voltage

Frequency

Maximum Output Power

Output Voltages

Environmental Speciﬁcations

Operating Temperature

Non-operating Temperature

Relative Humidity (non-condensing)

Operating Altitude

Regulatory Compliance

Approvals and Compliance

Nonwireless Models:

1.9 x 12.8 x 9.8 in. (48 x 325 x 249 mm) (includes rubber feet)

1.75 x 12.8 x 9.8 in. (44 x 325 x 249 mm) (without rubber feet)

Wireless Models:

1.9 x 12.8 x 10.4 in. (48 x 325 x 264 mm) (includes rubber feet)

1.75 x 12.8 x 10.4 in. (44 x 325 x 264 mm) (without rubber feet; excludes antennas)

5.5 lbs. (2.5 kg) maximum

100–240 VAC

50–60 Hz

60W

12V DC

32 to 104°F (0 to 40°C)

-4 to 149°F (-20 to 65°C)

5 to 95%

0 to 10,000 ft.. (0 to 3000 m)

Emissions:

• 47 CFR Part 15: 2006

• CISPR22: 2005

• EN300386: V1.3.3: 2005

• EN55022: 2006

• EN61000-3-2: 2000 [Inc amd 1 & 2]

• EN61000-3-3: 1995 [+ amd 1: 2001]

• ICES-003 Issue 4: 2004

• KN 22: 2005

• VCCI: V-3/2006.04

Immunity:

• CISPR24: 1997 [+ amd 1 & 2]

• EN300386: V1.3.3: 2005

• EN50082-1: 1992

• EN50082-1: 1997

• EN55024: 1998 [+ amd 1 & 2]

• EN61000-6-1: 2001

40 41

Cisco 890 Series

Series Speciﬁcations

Flash Memory

System DRAM Memory

External Power Supply

Console Port

802.11b/g WLANs

USB 2.0

Power over Ethernet

256 MB

512 MB (Expandable to 768 MB)

Universal 100 to 240 VAC input; 60W, 12 VDC output

RJ-45

Optional on all models

• Two USB 2.0 ports

USB devices suppor ted:

• USB eTokens

• USB Flash

Optional internal adapter for inline PoE on 4 switch por ts for IP phones or external wireless access points; 802.3af compliant and Cisco PoE compliant

High-Availability Features

• Virtual Router Redundancy Protocol (VRRP) (RFC 2338)

• HSRP

• MHSRP

• Dial backup with external modem through virtual auxiliar y port

• Dial backup with ISDN S/ T or V.92 Analog modem port

Ordering Information

Notes

Part Numbe r Product Description

Integrated Services Routers

CISCO891-K9 Cisco 891 Gigabit Ethernet Security Router

CISCO891W-AGN-A-K9 Cisco 891W Gigabit Ethernet Security Router w/ 802.11n FCC Compliant

CISCO891W-AGN-N-K9 Cisc o 891W Gigabit Ethernet Security Router w/ 802.11n Australia Compliant

CISCO892-K9 Cisco 892 Gigabit Ethernet Security Router

CISCO892W-AGN-E-K9 Cisco 892W Gigabit Ethernet Securit y Router w/ 802.11n ETSI Comp

MEM8XX-512U768D 512 MB DRAM upgrade to 768 MB for Cisco 890 Series routers

C890-universalk9-mz Universal image for Cisco 890 Series routers

ap801-k9w7-tar Autonomous software image for ap801

ap801-rcvk9w8-tar Lightweight Access Point Protocol (LWAPP) recovery image for ap801

800-IL-PM-4 4-port 802.3af capable internal power module for Cisco 890 Series routers

SL-CNFIL-890-1Y One year subs cription to Content Filtering for Cisco 890 Series routers

SL-CNFIL-8xx-TRI 30-day free trial license for Cisco 890 Series routers

FL-WEBVPN-25-K9 Feature license SSL VPN for up to 25 users (incremental)

Notes

Cisco 1800 Series (Fixed-Configuration)

Cisco is redefining best-in-class enterprise and small- to medium-sized business routing with a new line of Integrated Services Routers that are optimized for the secure delivery of data services. Founded on 20 years of leadership and innovation, the Cisco 1800 Series Integrated Services Routers intelligently embed data, security, and wireless technology into a single, resilient system for fast, secure, scalable delivery of mission-critical business applications. The Cisco 1800 Series architecture has been specifically designed to meet requirements of small- to medium-sized businesses (SMBs), small enterprise branch offices, and service provider-managed services applications for delivery of concurrent services for broadband access. The integrated secure systems architecture of the Cisco 1800 Series delivers maximum business agility and investment protection.

Beneﬁts and Advantages

Cisco 1800 Series Integrated Services Routers are the next evolution of the award-winning Cisco 1700 Series modular and ﬁxed-conﬁguration routers. The Cisco 1801, 1802, 1803, 1811, and 1812 Integrated Services Routers are ﬁxed-conﬁguration, while the Cisco 1841 Integrated Services Router is modular. The routers are designed for secure broadband, Metro Ethernet, and wireless connectivity, and provide signiﬁcant performance improvements, feature capability, versatility, and additional value compared to prior generations of Cisco 1700 Series. The Cisco 1800 Series ﬁxed-conﬁguration routers provide:

• Secure broadband access with concurrent services for branch and small ofﬁces

• Integrated ISDN Basic Rate S/T Interface (BRI), analog modem, or Ethernet backup port for redundant WAN links and load balancing

• Secure wireless LAN option for simultaneous

802.11a and 802.11b/g with use of two dual-mode antennas

• Advanced security including: Stateful Inspection Firewall, IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]), Intrusion Prevention System (IPS), Antivirus support through Network Admission Control (NAC) and enforcement of

44 45

secure access policies

• 8-por t 10/100 managed switch with 802.1q VLAN support and optional Power over Ethernet (PoE)

• Easy deployment and remote-management capabilities through Web-based tools and Cisco IOS Software

Cisco 1801, 1802, and 1803 routers provide highspeed DSL broadband access through asymmetric DSL (ADSL) over basic telephone service (Cisco 1801), ADSL over ISDN (Cisco 1802), or Symmetrical High-Data-Rate DSL (G.SHDSL) (Cisco

1803) while helping to ensure reliable networking

with integrated ISDN S/T BRI backup. The Cisco 1811 and 1812 provide high-speed broadband or Ethernet access through two 10/100BASE-T Fast Ethernet WAN ports and also provide integrated WAN backup through a V.92 analog modem (Cisco

1811) or ISDN S/T BRI interface (Cisco 1812).

Cisco 1800 Series (Fixed-Conﬁguration)

Beneﬁts and Advantages continued

The Cisco 1800 Series fixed-configuration routers help enable a network infrastructure for SMBs and enterprise small branch offices, providing access to the Internet, corporate headquarters, or other remote offices, while securing and protecting critical data with integrated Cisco IOS Software security features and capabilities. They also help businesses reduce costs by enabling deployment of a single device to provide multiple services

(integrated router with redundant link, L AN switch, firewall, VPN, IPS, wireless technology, and Quality of Service [QoS]) typically per formed by separate devices. Cisco IOS Software allows this flexibility, providing the industry’s most robust, scalable, and feature-rich internetworking support, using the accepted standard networking software for the Internet and private WANs.

Security Features

Cisco IOS Firewall

• Stateful ﬁrewall with URL ﬁltering

• Per-user authentication and authorization

• Real-time alerts

• Transparent ﬁrewall

• IPv6 ﬁrewall

VPN

• Advanced Encryption Standard (AES) 128, 192, and 256

• Triple Data Encryption Standard (3DES), and DES encryption

• Embedded hardware-based VPN acceleration on the motherboard

• Cisco Easy VPN remote and server support

• Dynamic Multipoint VPN (DMVPN)

• Group Encrypted Transport VPN (GET VPN)

Onboard USB Port

• USB 2.0 ports (2) (Cisco 1811 and 1812 models only)

IPS

• More than 700 IPS signatures supported in Cisco IOS Software, with the ability to load and enable selected IPS signatures

URL Filtering

• Local URL ﬁltering in Cisco IOS Software based on external server (Websense and N2H2)

• Stateful ﬁrewall contains URL ﬁltering

Cisco SDM

• Cisco Router and Security Device Manager (SDM)

IOS WebVPN (SSL VPN)

• Secure remote access for mobile users without installing PC client software

• Integrated into the router—no separate appliance required

• Cisco 1801 and 1812 supports up to 10 users

• Requires IOS WebVPN feature license FL-WEBVPN-10

• Requires an IOS security feature set (IOS security feature set is included in all secure router bundles)

Security Application Example

Branch Office

VPN Tunnel

Cisco 1811/1812 Router with

IOS Firewall, NAC, IPsec VPN,

and IPS Enabled

Wireless

Integrated Wireless LAN Capability

Cisco 1800 Series of fixed-configuration routers includes models with an integrated wireless access point, providing secure router and secure wireless LAN services in one device, helping businesses reduce total cost of ownership with simplified WLAN deployment and management capabilities. The integrated wireless access point supports IEEE 802.11a/b/g simultaneously to provide highspeed wireless capability and flexibility to support

2.4 GHz and 5 GHz dual-band simultaneous operation, making them ideal choices for hotspot deployments and wireless office solutions. WiFi Certified client devices including Cisco Aironet, WiFi Certified and Cisco Compatible client devices are fully supported.

The Cisco 1800 Series routers with integrated wireless access points are WiFi certified and support WPA and WPA2 providing secure mutual authentication and encryption via Cisco IOS Software features to meet the strict demands of

Headquarters Office

Internet

today’s businesses. These products also provide support for multiple BSSIDS (8) and multiple wireless VLANs (16 with 8 encrypted) that can be configured to provide additional security, segmentation, and separation of user groups. When using the routers in conjunction with the Cisco Ser vice Selection Gateway (SSG) and Subscriber Edge Services Manager (SESM), managed service providers can incorporate service-based authorization and accounting, and service and subscriber management for customizable, on-demand wireless services such as hotspots. Additional features such as Universal Client mode allow the router to wirelessly connect to an AP (such as an outdoor wireless Mesh network) and local authentication allow users to maintain wireless connectivity to the router in the event that a remote authentication server goes down. Quality of Service (QoS) via WiFi Multimedia (WMM) is also supported.

46 47

Cisco 1800 Series (Fixed-Conﬁguration)

Branch Office

Internet

PCs

Laptops

File Server

PDA

Printer

Cisco 1800 Fixed-

Configuration Router with

integrated 802.11a/b/g

access point

Headquarters Office

Cisco 1800 Series (Fixed-Conﬁguration)

Wireless Example

High-Availability Features Example

Platform Overview

Models

Cisco 1801 1 8 ADSL Ye s 256 384 64 128 AC

Cisco 1802 1 8 ADSLoISDN Ye s 256 384 64 128 AC

Cisco 1803 1 8 G.SHDSL Ye s 256 384 64 128 AC

Cisco 1805 2 4 DOCSIS 2.0 Ye s 256 384 64 128 AC

Cisco 1811 2 8 10/100 Ethernet Ye s 256 384 64 128 AC

Cisco 1812 2 8 10/100 Ethernet Ye s 256 384 64 128 AC

FE WAN

Ports

Switch

Ports WAN

Wireless

Option

DRAM (MB) Default Max

Compact

Flash (MB)

Default Max

Power

Supply

When to Deploy

Deploy the Cisco 1800 Series fixed-configuration routers when you need:

• An application-speciﬁc conﬁgured router

• Fully integrated DSL/Security/Wireless router

• To support high performance Internet access

High-Availability Features

The Cisco IOS Software Advanced IP Services feature set offers basic and advanced routing capabilities to deliver failover protection and load balancing. These capabilities include Border Gateway Protocol (BGP), Open Shortest Path First (OSPF) Protocol, Enhanced Interior Gateway Routing Protocol (EIGRP), and Routing Information Protocol (RIP) routing protocols along with dial-on-demand routing (DDR) Reliable Static Routing Using Object Tracking. Each of the Cisco 1800 Series fixed-configuration routers is equipped with either an ISDN BRI, V.92 analog modem, or Ethernet port for secondary WAN backup connection. If the primary DSL, cable, or Ethernet-access WAN experiences a link failure or loss of connectivity, the router will detect this failure and will fail over to the secondary backup WAN. The Cisco 1800 Series fixed-configuration routers help enable customers to deliver high-per formance and high-availability, mission-critical business applications.

• High availability Internet connections and load balancing

• Easy to order products

• Ability to connect several LAN devices

Series Speciﬁcations

Dimensions (H x W x D)

Console Port

Auxiliary Port

USB Port

Wireless LAN

V.92 Analog Modem Port

Integrated Channel Service Unit/Data

Service Unit (CSU/D SU)

Voice/Data Support

Encryption

10/100 Switch Ports

Integrated Modems

Default 10/100 WAN Ports

ISDN Basic Rate Interface (BRI) Ports S/T

12.5 x 9.5 in. (34.3 x 27.4 cm)

1 (up to 115.2 Kbps)

2 (USB 2.0) on Cisco 1811 and 1812 only. The Cisco

1801, 1802, and 1803 do not offer USB suppor t

IEEE 802.11a,b,g (W models)

One analog modem port on Cisco 1805 and 1811

No, see Cisco 1841

Only data support

Hardware support on motherboard (3DES and AES)

8 10/100BASE-T fully managed switch ports with 802.3af PoE support 4 10/100BASE-T fully managed switch ports with

802.3af PoE support (Cisco 1805 Model only)

1 (Cisco 1805 and 1811 models only) V.92

1 (Cisco 1801, 1802, 1803, and 1812 models), 2 (Cisco 1805, 1811 and 1812 models)

1 (Cisco 1801, 1802, 1803, and 1812 models only)

Cisco 1800 Series (Fixed-Conﬁguration)

Ordering Information

Product Number Product Description

CISCO1801

CISCO1801-M

CISCO1805-D

CISCO 1805-D/K9

CISCO1801/K9

CISCO1801-M/K9

CISCO1802

CISCO1802/K9

CISCO1803/K9

CISCO1811/K9

CISCO1812/K9

CISCO1801W-AG-B/K9

CISCO1801W-AG-C/K9

CISCO1801W-AG-N/K9

ADSL over POTS router with 8-port 10/100BASE-T switch, ISDN S/T backup, Cisco IOS IP broadband, 32 MB Flash, and 128 MB DR AM

ADSL over POTS Annex M router with 8-port 10/100BASE-T switch, ISDN S/T backup, Cisco IOS IP broadband, 32 MB Flash, and 128 MB DRAM

DOCSIS 2.0 with 4 Port FE switch, 64 MB Flash, 128 MB DRAM

DOCSIS 2.0 with 4 Port FE switch, 64 MB Flash, 192 MB DRAM and Advanc ed IP Service s IOS

ADSL over POTS router with 8-port 10/100BASE-T switch, ISDN S/T backup, Cisco IOS Advanced IP Services, 32 MB Flash, and 128 MB DRAM

ADSL over POTS Annex M router with 8-port 10/100BASE-T switch, ISDN S/T backup, Cisco IOS Advanced IP Servic es, 32 MB Flash, and 128 MB DRAM

ADSL over POTS router with 8-port 10/100BASE-T switch, ISDN S/T backup, Cisco IOS IP broadband, 32 MB Flash, and 128 MB DR AM

ADSL over ISDN router with 8-por t 10/100BASE-T switch, ISDN S/T backup, Cisco IOS Advanced IP Services, 32 MB Flash, and 128 MB DRAM

G.SHDSL router with 8-port 10/100BASE-T switch, ISDN S/T backup, Cisco IOS Advanced IP Services, 32 MB Flash, and 128 MB DRAM

Security router with dual 10/100 WAN ports, 8-port 10/100BASE-T switch, V.92 analog modem backup, Cisco IOS Advanced IP Services, 32 MB Flash, and 128 MB DRAM

Security router with dual 10/100 WAN ports, 8-port 10/100BASE-T switch, ISDN S/T backup, Cisco IOS Advanced IP Services, 32 MB Flash, and 128 MB DRAM

ADSL over POTS router with 8-port 10/100BASE-T switch, ISDN S/T backup, Cisco IOS Advanced IP Services, 32 MB Flash, and 128 MB DRAM, and integrated FCC-compliant 802.11a,b,g wireless capability

ADSL over POTS router with 8-port 10/100BASE-T switch, ISDN S/T backup, Cisco IOS Advanced IP Services, 32 MB Flash, and 128 MB DRAM, and integrated China-compliant 802.11a,b,g wireless capability

ADSL over POTS router with 8-port 10/100BASE-T switch, ISDN S/T backup, Cisco IOS Advanced IP Services, 32 MB Flash, and 128 MB DRAM, and integrated Australia/NZ compliant 802.11a,b,g wireless capability

Notes

Cisco 1800 Series (Cisco 1841 Router Modular)

Cisco is redefining best-in-class enterprise and small- to medium-sized business (SMB) routing with a line of Integrated Services Routers that are optimized for the secure, wire-speed delivery of data services. Founded on 20 years of leadership and innovation, Cisco 1800 Series Integrated Services Routers intelligently embed data and security into a single, resilient system for fast, scalable delivery of missioncritical business applications. The Cisco 1800 Series architecture has been specifically designed to meet requirements of SMBs, small enterprise branch offices, and service-provider-managed services applications for delivery of concurrent secure data services at wire-speed performance. The integrated, secure systems architecture of the Cisco 1800 Series delivers maximum business agility and investment protection.

Beneﬁts and Advantages

Enhanced Architecture

The Cisco 1841 Integrated Services Router provides secure data connectivity at up to one T1/E1/xDSL WAN connectivity rates. It provides significant additional value compared to prior generations of Cisco 1700 Series routers by offering more than a five-fold per formance increase, integrated onboard hardware-based encryption enabled by an optional Cisco IOS Software securit y image, and a dramatic increase in interface card slot per formance and density. Support for one internal Advanced Integration Module (AIM) slot is provided for additional hardware-accelerated encryption and scalability. The modular architecture on the Cisco 1841 router also supports two high-speed WAN interface card (HWIC) slots which significantly increase data-throughput capability (up to 800 Mbps aggregate). The Cisco 1841 also offers integrated dual high-speed Ethernet LAN ports to allow LAN segmentation and to help enable connectivity speeds up to 100BASE-T Ethernet technology. Ample default memory (Flash, SDRAM) is provided to support deployment of concurrent services.

Flexibilit y and Investment Protection

The modular architecture of the Cisco 1841 router offers a wide variety of LAN and WAN options; interface cards and modules are field-upgradable to accommodate future technologies. The Cisco

1841 delivers investment protection with support for more than 30 modules and interface cards, including existing WICs and voice WAN interface cards (VWICs—on the Cisco 1841 router for data support only) as well as Advanced Integration Modules (AIM). This Integrated Services Router provides 2 slots that are WIC/HWIC/VWIC (data) capable and enables multiple services on an integrate-as-you-grow basis.

Market-leading Integrated Security

A primary component of the Cisco Selfdefending Network, the Cisco 1841 Integrated Services Router ships with the industry ’s most comprehensive security services embedded within the router that can be enabled with a Cisco IOS Security Image. This provides customers with a single, resilient platform to rapidly deploy secure networks and applications. The Cisco 1800 Series was designed with integrated security to provide a tight coupling among security, routing, and other integrated services throughout the network. With a Cisco IOS Software-based VPN, firewall, and intrusion prevention system (IPS), as well as optional enhanced VPN acceleration, and Network Admission Control (NAC) suppor t for anti-virus defense, the Cisco 1841 offers a robust and adaptable security solution for branchoffice routers. Every Cisco 1800 Series router comes with the factory-installed Cisco Router and Security Device Manager (SDM). Cisco SDM is an

Security Features continued

Cisco 1800 Series (Cisco 1841 Router Modular)

Security Example

Corporate Headquarters

Small Branch Office

Large

Branch

Office

Branch

Office

Cisc o 7200

(VoIP-enabled)

SS7 IMT

PRI

Cisc o 3800 (VoIP-enabled)

Cisco 1841 Cisc o 2800

SP IP VPN Core

PSTN

Branch office Network Admission Control (NAC) helps ensure that every endpoint complies with network security policies before being granted access, protecting the network from viruses and worms.

• Requires IOS WebVPN feature license FL-WEBVPN-10 or FL-WEBVPN-25

• Requires an IOS security feature set (IOS securit y feature set is included in all secure router bundles)

Network Foundation Protection

• Control Plane Policing (CPP) • Access Control List (ACL)

• AutoSecure • Command-Line Interface (CLI)

• Secure Shell (SSH) • Committed Access Rate (CAR)

URL Filtering

• Local URL ﬁltering in Cisco IOS software based on external server

Onboard USB 1.1 Port

• Single onboard USB 1.1 port

• Secure token and Flash memory support

Security Solutions

• Network Admission Control (NAC)

Optional Security Modules

• VPN and Encryption Advanced Integration Modules (AIM-VPN/SSL-1)

Cisco Router and Security Device Manager (SDM)

• Ships by default

Certiﬁcations

• ICSA IPsec

• ICSA Firewall

IPsec VPN

• Advanced Encryption Standard (AES) 128, 192, and 256; Triple Data Encryption Standard (3DES); and DES cryptology support

• Embedded hardware-based VPN acceleration on the motherboard

• Cisco Easy VPN remote

• Cisco Easy VPN server

• Dynamic Multipoint VPN (DMVPN)

• Virtual Tunnel Interfaces (VTI)

• 802.1x

• VPN QoS—Preclassiﬁcation support

• Support for up to 800 IPsec tunnels using the AIM-VPN/SSL-1

Multiprotocol Label Switching (MPLS) VPN Support

• Support for VRF-lite and VRF aware IPsec

Cisco IOS IPS

• Inline ability to drop packet, reset connection, locally shun, or send an alarm

• Dynamically load and enable selected attack signatures in the same manner as Cisco IPS Appliances

Cisco IOS Firewall

• Feature rich, stateful ﬁrewall

• Per-user authentication and authorization

• Real-time alerts

• Transparent ﬁrewall

• IPv6 ﬁrewall

IOS WebVPN (SSL VPN)

• Secure remote access for mobile users without installing PC client software

• Integrated into the router—no separate appliance required

• Cisco 1841 supports up to 25 users

Beneﬁts and Advantages continued

Cisco 1800 Series (Cisco 1841 Router Modular)

Security Features

intuitive, Web-based device manager that offers easy router configuration and monitoring, startup wizards for quick deployment and lock-down, smart wizards to help enable security and routing features, Cisco Technical Assistance Center (TAC)-approved router configurations, and subject- related educational content.

Integrated Services

By providing integrated services, as well as great modular density and high performance, the Cisco 1841 router provides security, versatility, scalability, and flexibility for multiple applications to the small- to-medium-sized business, small

enterprise branch office, and the service provider customer edge. The Cisco 1841 router easily accommodates several network applications, such as secure branch-office data access (including NAC for antivirus defense), VPN access and firewall protection, business-class DSL, IPS support, inter-VLAN routing, and serial device concentration. The Cisco 1841 router provides customers with the industry’s most flexible, secure, and adaptable infrastructure to meet both today’s and tomorrow’s business requirements for maximum investment protection.

• VRF-aware ﬁrewall

• Advanced Application Inspection and Control – HTTP inspection engine – E-mail inspection engines (SMTP, ESMTP, IMAP, POP)

• Common Criteria IPsec (EAL4) (in process)

• Common Criteria Firewall (EAL4+) (in process)

• FIPS 140-2, Level 2 (in process)

Cisco 1800 Series (Cisco 1841 Router Modular)Cisco 1800 Series (Cisco 1841 Router Modular)

When to Deploy

Deploy the Cisco 1841 Router when you need:

• Performance and densities for concurrent data and security services up to one T1/E1/xDSL WAN connectivity rates

• The ﬂexibilit y to add or change WAN services to support changing needs and applications, including serial T1, E1, ISDN and broadband DSL, etc.

• VPN connections, or plan to migrate to them over time

• Low density (up to four ports) of integrated 10/100 switching

• Integrated security services as part of the Cisco Self-Defending Network, which enable network device protection, threat defense, secure connectivity, and endpoint protection and control

• Advanced management for security, routing, Quality of Ser vice (QoS), and switching services with Cisco SDM Version 2.0

Platform Overview

Fixed

HWIC

AIM

PVDM*

NME*

LAN

Slots

Ports

Cisco 1841

* NME = Enhanced Network Module; EVM = Extension Voice Module; PVDM = Packet Voice/Digital Signal Processor Module

2 2 1 0 0 0 128 384 32 128 AC

Slots

EVM*

Slots

DRAM (MB)

Default Max

Series Speciﬁcations

Dimensions (H x W x D)

Console Port

Auxiliary Port

USB Port

Integrated Channel Service Unit/Data Service Unit (CSU/D SU)

Voice/Data Support

Compression

Encryption

Maximum 10/100 Switch Ports

Maximum Integrated Modems

Maximum ISDN Basic Rate Interface (BRI) Ports

1.73 x 13.5 x 10.8 in. (43.9 x 343 x 274 mm)

1 (up to 115.2 Kbps)

Yes, with optional T1/E1, Fractional T1/E1, 56k/64k support

Unit/Data Service Unit (CSU/DSU)

Only data support

Software and hardware

Hardware support on motherboard; optional AIM for enhanced performance

4 (without onboard Fast Ethernet ports)

Flash (MB )

Power Supply

Ordering Information

Product Number Product Description

Cisco 1800 Series Base Chassis Part Numbers

CISCO1841

Cisco 1800 Series Modular Router with two integrated Fast Ethernet slots, two WAN slots, IP BASE, 32 MB of Flash memory and 128 MB of DR AM

Product Bundles

Product Number Product Description

HSEC Bundles

CISCO1841-HSEC/K9

Security

CISCO1841-SEC/K9

CISCO1841-HSEC/K9

CISCO1841-T1SEC/K9

Broadband Bundles

CISCO1841-ADSL

CISCO1841-ADSL2

CISCO1841-ADSL2-B

CISCO1841-ADSLI

CISCO1841-ADSL-DG

CISCO1841-SHDSL-V3

CISCO1841-2SHDSL

CISCO1841-4SHDSL

T1 Bundles

CISCO1841-T1

3G Bundles

C1841-3G-G

C1841-3G-V

C1841-3G-S

C1841-3G-G-SEC/K9

C1841-3G-V-SEC/K9

C1841-3G-S-SEC/K9

Cisco 1841 Security Bundle with IOS Advanced IP Services Image, AIM-VPN/ SSL-1, 64 MB Flash/256 MB DRAM, 10 User SSL License

Cisco 1841 security bundle with advanced security, 64 MB Compact Flash/256 MB DRAM

Cisco 1841 security bundle with AIM-VPN/SSL-1 Advanced IP Services, 64 MB Compact Flash/256 MB DRAM

Cisco 1841 security bundle with WIC-1DSU-T1-V2, Advanced Security, 64 MB Compact Flash/256 MB DRAM

Cisco 1841 asymmetric DSL (ADSL) over POTS (ADLSoPOTS) bundle, IP broadband, 32 MB Compact Flash/128 MB DRAM

Cisco 1841 bundle, HWIC-1ADSL, IOS IP Broadband, 32 MB Flash/ 128 MB DRAM

Cisco 1841 bundle, HWIC-ADSL-B/ST, IOS IP Broadband, 32 MB Flash/ 128 MB DRAM

Cisco 1841 ADSLoISDN bundle, IP broadband, 32 MB Compact Flash/ 128 MB DRAM

Cisco 1841 ADSLoPOTS bundle with Dying Gasp, IP broadband, 32 MB Compact Flash/128 MB DRAM

Cisco 1841 bundle, WIC-1SHDSL-V3, IOS IP Broadband, 32 MB Flash/ 128 MB DRAM

Cisco 1841 2-pair G.SHDSL bundle, HWIC-2SHDSL, IP Base, 64 MB Flash/ 128 MB DRAM

Cisco 1841 4-pair G.SHDSL bundle, HWIC-2SHDSL, IP Base, 64 MB Flash/ 128 MB DRAM

Cisco 1841 T1 bundle, advanced security, 32 MB Compact Flash/128 MB DRAM

1841 bundle w/HWIC-3G-GSM, IP Base, 64FL /128DR

1841 bundle w/HWIC-3G-CDMA-V, IP Base, 64FL/128DR

1841 bundle w/HWIC-3G-CDMA-S, IP Base, 64FL /128DR

Cisco 1841, HWIC-3G-GSM, 64MB Flash /256MB DRAM, Adv Security

Cisco 1841, HWIC-3G-CDMA-V, 64MB Flash /256MB DRAM, Adv Security

Cisco 1841, HWIC-3G-CDMA-S, 64MB Flash /256MB DRAM, Adv Security

+ 81 hidden pages