Cisco 2811 - Voice Security Bundle Router Manual page 21

Cisco 890 Series
Benefits and Advantages
continued
Unified Wireless Management
• Configuration and management of access points
is automated and simplified without manual
intervention.
• A unified hybrid remote-edge access point (HREAP)
provides the following:
- WLAN services to remote and branch offices
without deploying a wireless LAN controller at
each location
- Central configuration and control of unified
WLAN services for remote offices through a
WAN link
- Flexibility in setting up wireless access at remote
locations by specifying how traffic is to be
bridged or tunneled
Security Features
Cisco 890 Security Connectivity
• Secure Sockets Layer (SSL) VPN for secure
remote access
• Hardware-accelerated DES, 3DES, AES 128, AES
192, and AES 256
• Public-key-infrastructure (PKI) support
• 20 IPsec tunnels
• Cisco Easy VPN Client and Server
• NAT transparency
• DMVPN
• Tunnel-less Group Encrypted Transport VPN
(GETVPN)
• IPsec stateful failover
• VRF-aware IPsec
• IPsec over IPv6
• Adaptive control technology
• Session Initiation Protocol (SIP) application layer
gateway
38
Cisco Configuration Professional
Cisco Configuration Professional uses smart
wizards and task-based tutorials, which reseller and
customers can use to quickly and easily deploy,
configure, and monitor a Cisco access router without
requiring knowledge of the Cisco IOS Software CLI.
Zone-based Policy Firewall
• Stateful inspection transparent firewall
• Advanced application inspection and control
• HTTPS, FTP, and Telnet authentication proxy
• Dynamic and static port security
• Firewall stateful failover
• VRF-aware firewall
Content Filtering
• Subscription-based content filtering with Trend
Micro
• Support for Websense and Smartfilter
• Cisco IOS Software black and white lists
Integrated Threat Control
• IPS
• Control Plane Policing
• Flexible Packet Matching
• Network foundation protection
WLAN Features
WLAN Hardware
• IEEE 802. 1 1n draft v2.0 standards-based access
point with 802. 1 1 a/g compatibility
• Automatic rate selection for 802. 1 1a/g/n
• Noncaptive RPTNC omnidirectional dipole
antennae; 2 dBi gain @ 2.4 GHz, 5 dBi gain @
5GHz
• 2x3 MIMO radio operation
• WiFi 802. 1 1n Draft v2.0 certified
WLAN Software Features
• Autonomous or unified access point
• Cisco WCS support for monitoring of
autonomous-mode access points
• Option to maximize throughput or maximize range
• Software-configurable transmit power
• Radio roles, including access point, root bridge,
nonroot bridge, and workgroup bridge
• WiFi Multimedia (WMM) certification
• Traffic specifications (TSPEC) Call Admission
Control (CAC) to ensure voice quality is
maintained
• Unscheduled Automatic Power Save Delivery
(UPSD) to reduce latency
WLAN Security Features
• Standard 802. 1 1i
• WPA and AES (WPA2)
• EAP authentication: Cisco LEAP, PEAP, Extensible
Authentication Protocol Transport Layer Security
(EAP TLS), Extensible Authentication Protocol-
Flexible Authentication via Secure Tunneling
(EAP-FAST), Extensible Authentication Protocol-
Subscriber Information Module (EAP-SIM),
Extensible Authentication Protocol-Message
Digest Algorithm 5 (EAP-MD5), and Extensible
Authentication Protocol-Tunneled TLS (EAP-TTLS)
• Static and dynamic Wired Equivalent Privacy
(WEP)
• Temporal Key Integrity Protocol/Simple Security
Network (TKIP/SSN) encryption
• MAC authentication and filter
• User database for survivable local authentication
using LEAP and EAP-FAST
• Configurable limit to the number of wireless
clients
• Configurable RADIUS accounting for wireless
clients
• Preshared keys (PSKs) (WPA-small office or home
office [WPA-SOHO])
Cisco 890 Series
Metro Ethernet Features
• One 1000 BASE-T Gigabit Ethernet WAN port
• One 10/100 BASE-T Fast Ethernet WAN port
• Intelligent hierarchical quality of service (HQoS):
Supports hierarchical queuing and shaping
• Connectivity Fault Management (CFM), based on
802. 1 ag
• 802.3ah standard based Link operational
administration and maintenance (OAM)
• Ethernet Local Management Interface (E-LMI) for
the Customer Edge
• CFM Interworking and backwards compatibility
• Performance Management based on IP service-
level agreement (SLA) for Ethernet
39