Cisco 1700 series, Manual

Page: 37 / 108

70 71
Cisco 7301 Series Cisco 7301 Series
Application Example Security Features
continued
Security Solutions
• Network Admission Control (NAC)
• Voice and Video Enabled IPSec VPN (V3PN)
• Group Encrypted Transport VPN (GET VPN)
tunnel-less VPN offering higher scalability
Optional Security Modules
• IDS/IPS Network Modules (NM-CIDS portfolio)
• VPN and Encryption Service Adapters
(SA-VAM2+)
Cisco Router and Security Device Manager (SDM)
• Ships by default with Cisco 7301
security bundles
Certifications
• ICSA IPSec
• ICSA Firewall
• Common Criteria IPSec (EAL4)
• Common Criteria Firewall (EAL4+)
• FIPS 140-2, Level 2
Cisco IOS Router Enabled with
Firewall and Easy VPN Remote
Mobile Worker with Cisco
VPN Client Enabled on Laptop
Cisco Router Enabled
with Firewall and
Easy VPN Server
Branch
Office
Teleworker
VPN Tunnels
Internet
ATM
CISCO
10000
SERIES
RADIUS/AAA
IP NETWORK
DSLAM
IP
PPP oA or PPPoEoA
ATM
IP
SUBSCRIBER
ATM
CISCO
10000
SERIES
RADIUS/AAA
IP NETWORK
LIIS
DSLAM
IP
PPP oA or PPPoEoA
ATM
IP/PPP
L2TP
SUBSCRIBER
RADIUS/AAA
Easy VPN Server Application
Security Solutions Example
With its combination of scalable performance, compact architecture, high density, and low price per
port, the Cisco 7301 is ideally suited for a variety of key applications within both the service provider
and enterprise markets .
When To Deploy
• Broadband aggregation: PTA/LAC or LNS/TS
(Tunnel Switching) aggregation router capable
of handling up to 8000 subscribers with per
sessions features enabled and up to 16,000
simultaneous sessions with basic non-CPU
intensive features and allowing for a pay-as-you-
grow “rack and stack” architecture .
•
Managed services:
High-end customer
premises equipment (CPE) or Multiprotocol
Label Switching-customer edge (MPLS-CE)
devices in managed L2 and L3 VPN solutions
due to its high-performance, feature-rich support
with both Gigabit Ethernet LAN connectivity and
WAN port adapter connectivity
• Mesh Wireless and Public Wireless LAN
Solutions:
With Intelligent Service Gateway the
Cisco 7301 is ideal platform for these wireless
solutions . ISG offers dynamic subscriber
awareness, authentication, authorization,
accounting, billing, and a customized portal
•
High-availability design:
100 percent
redundancy via 2 CPEs configured for Hot
Standby Router Protocol (HSRP) or Layer 3
load balancing
• Cost-effective BgP Route Reflector: Ideally
suited as a low cost route reflector with its
ability to hold one million routes with its
1 GB of memory
Key Application Service Providers