Cisco 850 Series Manual page 33

Cisco 3800 Series
Benefits and Advantages
continued
service options, and dramatically increased slot
performance and density while maintaining support
for most of the more than 90 existing modules that
are available today for the Cisco 3700 Series . This
helps to ensure continuing investment protection
to accommodate network expansion or changes in
technology as new services and applications are
deployed . By integrating the functions of multiple
separate devices into a single, compact unit,
Cisco 3800 Series Integrated Services Routers
dramatically reduce the cost and complexity of
managing remote networks . The Cisco 3800 Series
delivers multiple concurrent services at wire-
speed performance of up to T3/E3 speeds . The
Cisco 3845 features a removable motherboard, fan
assembly, and supports high-availability features
such as online insertion and removal (OIR) of like
network modules, and redundant integrated system
and inline power supplies .
Integrated Services
With the optional integration of numerous services
modules, the Cisco 3800 Series offers the ability
to easily integrate the functions of standalone
network appliances and components into the Cisco
3800 Series chassis itself . Many of these modules,
such as the Cisco Network Analysis Module,
Cisco Unity Express™ Voice Mail Module, Cisco
Intrusion Prevention Module, and Cisco Wide Area
Application Services Module, have embedded
processors and hard drives that allow them to run
largely independently of the router while allowing
management from a single management interface .
This flexibility greatly expands the potential
applications of the Cisco 3800 Series beyond
traditional routing, while maintaining the benefits
of integration . The Cisco 3845 Integrated Services
Router is optimized for the concurrent delivery of
voice, video, and data at T3 wire-rate performance .
The architecture provides high-performance
embedded security and voice processing
for reliable delivery of mission-critical traffic
such as VoIP, business video, and collaborative
communications .
The Cisco 3845 is engineered to help customers
effectively scale deployment of services, offering
the following hardware features:
• Two built-in autosensing 10/100/1000
Ethernet ports
• One small form-factor pluggable (SFP) slot
gigabit Ethernet
• Two built-in USB ports
60
• Four network module slots for single-wide or
extended network modules, two double-wide
or extended double-wide network modules
(NME-XD), or two extension voice/fax modules
(EVM-HD)
• Four single-wide or two double-wide HWICs
• Two advanced integration modules (AIMs)
• Four Packet Voice DSP Modules (PVDM) slots
for voice processing
• Onboard IP Security (IPsec) acceleration
• 802 . 3 af-compliant inline power for IP phones
or wireless access points
The Cisco 3825 is engineered to help customers
effectively scale deployment of services, offering
the following hardware features:
• Two built-in autosensing 10/100/1000
Ethernet ports
• One SFP slot gigabit Ethernet
• Two built-in USB ports
• Two network module slots for single-wide or
extended network modules, one double-wide
or extended double-wide network module
(NME-XD), or one extension voice/fax module
(EVM-HD)
• Four single-wide or two double-wide HWICs
• Two AIMs
• Four PVDM slots for voice processing
• Onboard IPsec encryption acceleration
• 802 . 3 af-compliant inline power for IP phones
or wireless access points
• External Redundant Power Supply (RPS) for
system power and external redundant inline
power for IP phones
Secure Networking
Integrated on the motherboard of every Cisco
3800 Series router is hardware-based encryption
acceleration that offloads the encryption processes
to provide greater IPsec throughput with less
overhead for the router CPU when compared
with software-based solutions . The integration of
optional VPN modules (for enhanced performance
and tunnel count), intrusion prevention modules
or NAC network modules for network admission
control, combined with the rich Cisco IOS Software
security feature set that includes firewall, intrusion
prevention, voice- and video-enabled VPN (V3PN),
Group Encrypted Transport (GET) VPN, and
Dynamic Multipoint VPN (DMVPN), Cisco offers
the industry's most robust and adaptable security
solution for branch office routers .
Benefits and Advantages
continued
IP Telephony
The Cisco 3800 Series allows network managers
to provide scalable analog and digital telephony
without investing in a one-time solution, giving
enterprises greater control of their converged
telephony needs . Using voice and fax modules,
the Cisco 3800 Series can be deployed for
applications ranging from VoIP and Voice-over-
Frame Relay (VoFR) transport to robust, centralized
solutions using the Cisco Survivable Remote
Site Telephony (SRST) solution or distributed call
processing using Cisco Communication Express
(CCME) . The architecture is highly scalable with the
ability to support up to 168 IP phones with the 3825
router and 240 IP phones with the 3845 router, 24
T1/E1s trunks, 88 foreign-exchange-station (FXS)
ports, or 56 foreign-exchange-office (FXO) ports
concurrent with data routing and other services .
Security Features
IPsec VPN
• Advanced Encryption Standard (AES) 128,
192, and 256 bit keys; Triple Data Encryption
Standard (3DES); and DES cryptology support
• Embedded hardware-based VPN acceleration
on the motherboard
• Cisco Easy VPN remote and server
• Group Encrypted Transport (GET-VPN)
• Dynamic Multipoint VPN (DMVPN)
• Virtual Tunnel Interfaces (VTI)
• 802 . 1 x
• VPN QoS—Preclassification support
Multiprotocol Label Switching (MPLS) VPN
Support
• Limited provider edge capabilities
• Virtual routing and forwarding (VRF) firewall and
VRF IPsec
Cisco IOS IPS
• Inline ability to drop packet, reset connection,
locally shun, or send an alarm
• Dynamically load and enable selected attack
signatures in the same manner as Cisco IPS
Appliances
For broader signature support and higher
performance, look at optional IPS AIM module
for ISR
Cisco 3800 Series
Video Surveillance
The Cisco ® Integrated Video Surveillance solution
enables you to rapidly deploy highly distributed,
IP-enabled video surveillance at your offices while
migrating traditional analog surveillance equipment
to IP . The solution based on Cisco 2800 and 3800
Series ISR offers the lowest total cost of ownership
(TCO) for the branch office, ease of integration
through network transparency, reliable data
interoperability, and maximized overall security .
It allows you to consolidate costly branch-office
servers and deploy new applications centrally while
still offering real-time access to physical security
video and data
Network Foundation Protection
• Control Plane Policing (CPP)
• AutoSecure
• CPU/Memory Threshold
• Secure Shell (SSH)
• Access Control List (ACL)
• Command-Line Interface (CLI)
• Committed Access Rate (CAR)
IOS WebVPN (SSL VPN)
• Secure remote access for mobile users
without installing PC client software
• Integrated into the router —no separate
appliance required
• Cisco 3825 and 3845 support up to 200 users
(with AIM-VPN/SSL-3)
• Requires IOS WebVPN feature license
FL-WEBVPN-10, FL-WEBVPN-25 or
FL-WEBVPN-100 (purchase multiple quantities
to add up to the desired number of users)
• Requires an IOS security feature set (IOS
security feature set is included in all secure
router bundles)
Media Authentication and Encryption
• Standards-based authentication and
encryption using secure RTP provides a secure
environment for IP Communications
• Advanced Encryption Standard (AES) 128-bit
cryptography support
61