Cisco 2811 - Voice Security Bundle Router Manual page 15

Cisco 880 Series
Benefits and Advantages
continued
Cisco SDM and Cisco IOS Software
for Remote Management
Using smart wizards and task-based tutorials,
Cisco Security Device Manager (SDM) helps
resellers and customers quickly and easily
deploy, configure, and monitor a Cisco access
router without requiring knowledge of the Cisco
IOS Software Command-Line Interface (CLI).
Dial backup and out-of-band management allow IT
managers to remotely manage the router at small
office and teleworker sites. Cisco Configuration
Express Service supports factory-loaded
configurations in high-volume deployments.
Support for the Cisco Configuration Engine
enables plug-and-play installations with centralized
configuration management.
SRST (supported on SRST models)
SRST provides business continuity for voice when
the WAN link fails by switching calls to the PSTN.
Security Features
Cisco 880 Security Connectivity
• Secure Sockets Layer (SSL) VPN for secure
remote access
• Hardware-accelerated DES, 3DES, AES 128, AES
192, and AES 256
• Public-key-infrastructure (PKI) support
• 20 IPsec tunnels
• Cisco Easy VPN Client and Server
• NAT transparency
• DMVPN
• Tunnel-less Group Encrypted Transport VPN
(GETVPN)
• IPsec stateful failover
• VRF-aware IPsec
• IPsec over IPv6
• Adaptive control technology
• Session Initiation Protocol (SIP) application layer
gateway
26
Cisco Configuration Professional
Cisco Configuration Professional uses smart
wizards and task-based tutorials, which resellers
and customers can use to quickly and easily
deploy, configure, and monitor a Cisco access
router without requiring knowledge of the Cisco
IOS Software command-line interface (CLI).
Unified Wireless Management
• Configuration and management of access points
is automated and simplified without manual
intervention.
• A unified hybrid remote-edge access point
(HREAP) provides the following:
- WLAN services to remote and branch offices
without deploying a wireless LAN controller at
each location.
- Central configuration and control of unified
WLAN services for remote offices through a
WAN link.
- Flexibility in setting up wireless access at
remote locations by specifying how traffic is to
be bridged or tunneled.
Zone-based Policy Firewall
• Stateful inspection transparent firewall
• Advanced application inspection and control
• HTTPS, FTP, and Telnet authentication proxy
• Dynamic and static port security
• Firewall stateful failover
• VRF-aware firewall
• Cisco Easy VPN Client and Server
• IPsec 3DES termination/initiation
• IPsec pass-through
• Point-to-Point Tunneling Protocol (PPTP)
pass-through
• L2TP pass-through
• 802. 1 X
• Secure HTTP (HTTPS), FTP, and Telnet
authentication proxies
• Dynamic Multipoint VPN (DMVPN), SSL VPN, and
Group Encrypted Transport (GET VPN)
Security Features
continued
Content Filtering
• Subscription-based content filtering with Trend
Micro
• Support for Websense and Smartfilter
• Cisco IOS Software black and white lists
WLAN Features
WLAN Hardware
• IEEE 802. 1 1n draft 2.0 standards-based access
point with 802. 1 1 b/g compatibility
• Automatic rate selection for 802. 1 1g/n
• Captive omnidirectional 2-dBi gain dipole
antennas
• 2 x 3 MIMO radio operation
• Removable antennas on Cisco 881W models
• WiFi 802. 1 1n Draft v2.0 certified
WLAN Software Features
• Autonomous or unified access point
• Cisco WCS support for monitoring of
autonomous-mode access points
• Option to maximize throughput or maximize range
• Software-configurable transmit power
• Radio roles, including access point, root bridge,
nonroot bridge, and workgroup bridge
• WiFi Multimedia (WMM) certification
• Traffic specifications (TSPEC) Call Admission
Control (CAC) to ensure voice quality is
maintained
• Unscheduled Automatic Power Save Delivery
(UPSD) to reduce latency
WLAN Security Features
• Standard 802. 1 1i
• WPA and AES (WPA2)
• EAP authentication: Cisco LEAP, PEAP, Extensible
Authentication Protocol Transport Layer Security
(EAP TLS), Extensible Authentication Protocol-
Flexible Authentication via Secure Tunneling
(EAP-FAST), Extensible Authentication Protocol-
Subscriber Information Module (EAP-SIM),
Extensible Authentication Protocol-Message
Digest Algorithm 5 (EAP-MD5), and Extensible
Authentication Protocol-Tunneled TLS (EAP-TTLS)
• Static and dynamic Wired Equivalent Privacy
(WEP)
• Temporal Key Integrity Protocol/Simple Security
Network (TKIP/SSN) encryption
Cisco 880 Series
Integrated Threat Control
• IPS
• Control Plane Policing
• Flexible Packet Matching
•Network foundation protection
• MAC authentication and filter
• User database for survivable local authentication
using LEAP and EAP-FAST
• Configurable limit to the number of wireless
clients
• Configurable RADIUS accounting for wireless
clients
• Pre-Shared Keys (PSKs) (WPA-small office or
home office [WPA-SOHO])
Features on Cisco 880 SRST Series
• SRST 7.0 and later
• Up to 4 voice channels
• H.323 Versions 1, 2, 3, and 4, Media Gateway
Control Protocol (MGCP) 0. 1 and 1.0, Skinny Client
Control Protocol (SCCP), and SIP call-control
protocols
• G.711, G.729, G.729a/b, G.723. 1 , G.726, and G.728
• Cisco Unified Communications Manager support
for analog and digital ports with Releases 6. 1 (3),
7.0(2), and 7. 1 (3)
• FXS loop-start and ground-start signaling
• FXO
• Inbound signaling (such as dual-tone
multifrequency [DTMF] and multifrequency
support)
• BRI QSIG
• Echo cancellation
• Silence suppression and voice activity detection
(VAD)
• Comfort-noise generation
• Caller ID support
• Dial-plan mapping
• Fax and modem pass-through
• Fax Relay
• T.37 and T.38 fax protocols
27