Cisco 850 Series Manual page 37

Cisco 7301 Series
Security Features
continued
Security Solutions
• Network Admission Control (NAC)
• Voice and Video Enabled IPSec VPN (V3PN)
• Group Encrypted Transport VPN (GET VPN)
tunnel-less VPN offering higher scalability
Optional Security Modules
• IDS/IPS Network Modules (NM-CIDS portfolio)
• VPN and Encryption Service Adapters
(SA-VAM2+)
Security Solutions Example
Easy VPN Server Application
Branch
Office Cisco IOS Router Enabled with
Firewall and Easy VPN Remote
Internet
Cisco Router Enabled
with Firewall and
Easy VPN Server
Mobile Worker with Cisco
VPN Client Enabled on Laptop
When To Deploy
With its combination of scalable performance, compact architecture, high density, and low price per
port, the Cisco 7301 is ideally suited for a variety of key applications within both the service provider
and enterprise markets .
70
Cisco Router and Security Device Manager (SDM)
• Ships by default with Cisco 7301
security bundles
Certifications
• ICSA IPSec
• ICSA Firewall
• Common Criteria IPSec (EAL4)
• Common Criteria Firewall (EAL4+)
• FIPS 140-2, Level 2
Teleworker
VPN Tunnels
Application Example
CISCO
SUBSCRIBER
ATM 10000
SERIES
DSLAM
IP
PPP oA or PPPoEoA
ATM
CISCO
SUBSCRIBER 10000
ATM
SERIES
DSLAM
IP
PPP oA or PPPoEoA
ATM
Key Application Service Providers
• Broadband aggregation: PTA/LAC or LNS/TS
(Tunnel Switching) aggregation router capable
of handling up to 8000 subscribers with per
sessions features enabled and up to 16,000
simultaneous sessions with basic non-CPU
intensive features and allowing for a pay-as-you-
grow "rack and stack" architecture .
• Managed services: High-end customer
premises equipment (CPE) or Multiprotocol
Label Switching-customer edge (MPLS-CE)
devices in managed L2 and L3 VPN solutions
due to its high-performance, feature-rich support
with both Gigabit Ethernet LAN connectivity and
WAN port adapter connectivity
Cisco 7301 Series
RADIUS/AAA
IP NETWORK
IP
RADIUS/AAA
RADIUS/AAA
IP NETWORK
LIIS
IP/PPP
L2TP
• Mesh Wireless and Public Wireless LAN
Solutions: With Intelligent Service Gateway the
Cisco 7301 is ideal platform for these wireless
solutions . ISG offers dynamic subscriber
awareness, authentication, authorization,
accounting, billing, and a customized portal
• High-availability design: 100 percent
redundancy via 2 CPEs configured for Hot
Standby Router Protocol (HSRP) or Layer 3
load balancing
• Cost-effective BgP Route Reflector: Ideally
suited as a low cost route reflector with its
ability to hold one million routes with its
1 GB of memory
71