Cisco 2811 - Voice Security Bundle Router Manual page 83

Cisco ASR 1000 Series
supported dual images is available in the release notes. The (optionally) hardware-
redundant route processor and ESP configuration in the Cisco ASR 1006 Router
does not support Cisco IOS Software redundancy in a single route processor since
each of the two RPs support one Cisco IOS XE image.
Benefits and Advantages
Four Models
The Cisco ASR 1000 Series consists of four different
versions: the Cisco ASR 1002-F, the Cisco ASR
1002 Router, the Cisco ASR 1004 Router, and the
Cisco ASR 1006 Router.
Fills a Gap
From a price-to-performance perspective, the Cisco
ASR 1000 Series Routers solution fits well between
the Cisco 7200 and Cisco 7300 Series Routers
and the higher-end Cisco 7600 Series Routers
and Cisco Catalyst ® 6000 Series Switches, thus
dramatically enhancing the Cisco midrange routing
portfolio.
Enhanced Value
The Cisco ASR 1000 Series provides a significant
enhanced value compared to prior generations
of Cisco midrange routing solutions by providing
more than tenfold performance improvement with
services running. Additionally, the routers have
hardware and software redundancy, as well as an
industry-leading high-availability design.
Multiple Services
The Cisco ASR 1000 Series delivers multiple
services embedded in the Cisco QuantumFlow
Processor at wire speeds of up to 20 Gbps.
When to Deploy
Deploy the Cisco ASR 1000 Series when you need:
• Superior application availability at the WAN edge: guarantee high-priority applications by creating a virtual
"glass ceiling" for lower-priority applications.
• Multiservice, scalable, and secure headend: The Cisco ASR 1000 Series offers full-service IP Security
(IPsec) VPN aggregation that scales to meet the new bandwidth demands of service provider IP VPNs.
• Embedded high-speed firewall: With the Zone-Policy Firewall, the Cisco ASR 1000 Series acts as an
implicit complete barrier between any interfaces not members of the same zone.
• Managed CPE: This implementation of branch architecture offers powerful investment protection with
services and scale.
162
The services supported on the Cisco QuantumFlow
Processor include:
• Security services, such as encryption and firewall
• Quality of service (QoS)
• Network Based Application Recognition (NBAR)
• Cisco IOS ® Flexible Packet Matching (FPM)
• Broadband aggregation
• Cisco Unified Border Element for Service Providers
and for Enterprise (formerly referred to as Session
border controller), among others.
Software and Hardware Redundancy
With the separation of the control and data planes
in the Cisco ASR 1000 Series Routers architecture,
software redundancy (on the Cisco ASR 1002-F, ASR
1002 and 1004 Routers) and hardware redundancy
(on the Cisco ASR 1006 Router) are provided.
Nonstop Communications
Additionally, the modular Cisco IOS XE Software
that is introduced with the Cisco ASR 1000 Series
facilitates in-service software upgrade (ISSU).
When to Deploy
continued
• Next-generation voice and multimedia example: Cisco Session Border Controller (SBC): The SBC
implementation performs the voice and video gateway functions simultaneously with regular IP data
services. No appliance or additional service blade is required. The control protocols and media protocols
work transparently within a complex voice architecture.
• Broadband L2TP access concentrator (LAC) or L2TP Network Server (LNS): Layer 2 Tunneling Protocol
(L2TP) endpoint to tunnel Point-to-Point Protocol (PPPoX) or IP sessions with bandwidth demands in the
STM-1 ATM, Fast Ethernet, Gigabit Ethernet, and 20 Gigabit Ethernet range.
• Service provider edge: Layer 3 VPN (L3VPN) provider edge: Example: Distributed provider edge, or
provider edge in global VPN networks for bandwidth demands such as asymmetric DSL (ADSL), T1/E1,
STM-1, STM-4, Fast Ethernet, Gigabit Ethernet, etc.
• Service provider edge: High-end route reflector: As a route reflector for bandwidth support of 10 Gbps.
Application Example
Boardless Networks Secure WAN with ASR 1000
Product Business Technology
ASR1000 Solution • Highly scalable built-in • Based on multi-core
Benefits encryption engine for both
IPsec and SSLVPN based
solutions
• Scalable IOS Firewall • Tighter QoS and HA
solution up to 20Gb
• Support for DMVPN,
Cisco Quantum • Efficient QoS, and • Instant Services turn-on
Flow Processor multicast interaction with
Solution Benefits crypto engine
• IOS Zone-based Firewall • IOS Firewall acceleration
integrated with crypto
solutions • Jumbo frame support
Cisco ASR 1000 Series
Operations
• Ease of provisioning due
encryption engine to seamless crypto engine
supporting both IKE integration into data plane
and IPsec acceleration • Sub-50 ms failover times for
crypto data plane
integration
EasyVPN, and GETVPN
solutions
• Crypto feature consistency
using embedded crypto across all Embedded
engine Services Processors (ESP)
• IOS Firewall CLI consistent
using native QFP off-load with Cisco's Integrated
Services Routers
163