Cisco 1700 series, Руководство пользователя

Страница: 11 / 108

18 19
Series Distinctions
When to Deploy
Deploy the Cisco 870 Series when you need
the following in a small remote office, or
teleworker and small business sites:
• Secure, concurrent services for broadband
connection
• High-speed VPN solution
• Advanced security with firewall, VPNs, IPS,
NAC, DMVPNs, Easy VPNs
• Integrated 802 .11b/g with replaceable diversity
antennas
• Four-port 10/100 managed switch
• Easy to set up solution with Cisco SDM and
remote management capabilities
Cisco 870 Series Cisco 870 Series
Security Features
WLAN Features
Cisco 870 Security Features
• Stateful inspection firewall
• Intrusion Prevention System (IPS)
• Antivirus support through Network Admission Control (NAC) and enforcement of secure
access policies
• URL Filtering
Cisco 870 VPN Features
• Hardware-accelerated 3DES for IPSec
• Hardware-accelerated AES for IPSec
• Cisco Easy VPN Client and Server
• IPSec 3DES termination/initiation
• IPSec pass-through
• Point-to-Point Tunneling Protocol (PPTP) pass-through
• L2TP pass-through
• 802 .1X
• Secure HTTP (HTTPS), FTP, and Telnet authentication proxies
• Dynamic Multipoint VPN (DMVPN), SSL VPN, and Group Encrypted Transport (GET VPN)
Metro Ethernet
Cable
Teleworker
Small Offices or
Small Businesses
Corporate Headquarters
Internet
DSL
Cisco 870 Series
WAN Technologies • Cisco 871 – 100 MB Ethernet
• Cisco 876 – ADSL over ISDN (ADSL2/ADSL2+)
• Cisco 877 – ADSL over analog telephone lines (ADSL2/ADSL2+)
• Cisco 878 – G .SHDSL (2- and 4-wire support)
LAN Switch Managed 4-port 10/100Base-T switch with autosensing MDI/MDX (Media Device
In/Media Device Crossover) for auto-crossover
Network Security
Firewall, IPSec and AES High Speed Encryption, IPS, Antivirus through Cisco NAC,
IPSec, and AES High Speed Encryption, Cisco Easy VPN, DMVPN, DMZ, GET VPN
Upgradeability Cisco IOS Software upgrades and updates, memory upgrades
Network Example
WLAN Hardware
• 802 .11b/g
• Wi-Fi and Wireless Multi-Media (WMM)
Certified
• Automatic rate selection for 802 .11b/g
• Field-replaceable external antennas
• Antenna diversity
• WECA interoperability
• Default antenna gain: 2 .2 dBi
• PoE (optional external adapter for inline
power) for IP phones or external wireless
access points
WLAN Software Features
• Maximize throughput or maximize
range option
• Software configurable transmit power
• SSID Globalization
• SSIDs =10
• Wireless VLANs =10
• Encrypted Wireless VLANs =4
• MBSSIDs =2
• Universal Client Mode
WLAN Security Features
• 802 .1X
• 802 .11i
• Wi-Fi Protected Access (WPA) and AES
(WPA2)
• EAP Authentication: Cisco LEAP, PEAP, EAP-TLS,
EAP-FAST, EAP-SIM, EAP-MD5, EAP-TTLS
• Static and dynamic Wired Equivalent
Privacy (WEP)
• Temporal Key Integrity Protocol (TKIP)/SSN
Temporal Key Integrity Protocol/Simple
Security Network encryption
• MAC authentication/filter
• User database for survivable local
authentication using LEAP and EAP-FAST
• Configurable limit to the number of wireless
clients
• Configurable RADIUS accounting for wireless
clients
• PSK (Pre Shared Keys) (WPA-SOHO)