Router Cisco C921-4P-SEC cung cấp bảo mật và bảo vệ mối đe dọa tích hợp, bảo vệ các mạng khỏi các lỗ hổng và tấn công Internet đã biết và mới. Thiết bị định tuyến Cisco C921-4P-SEC có cấu hình cố định, mạnh mẽ, cung cấp kết nối băng thông rộng và Metro Ethernet an toàn.
Các nhà cung cấp dịch vụ Ethernet có thể triển khai Cisco C921-4P-SEC tại các địa điểm của khách hàng dưới dạng CPE. Khả năng quản lý tập trung hoặc từ xa khả dụng thông qua các công cụ dựa trên nền tảng web và Phần mềm Cisco IOS® để hiển thị và kiểm soát toàn bộ cấu hình mạng tại các chi nhánh từ xa.
Router Cisco C921-4P-SEC được tích hợp sẵn license SEC, cung cấp các tính năng bảo mật như Zone-based firewall, IPsec VPN, DMVPN, FlexVPN, GET VPN, SSL VPN, cung cấp 250-Mbps IPsec
Thông số kỹ thuật Router Cisco C921-4P-SEC
|
Feature |
Specification |
|
Cisco IOS Software |
|
|
IP and IP services |
– Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2) – Generic Routing Encapsulation (GRE) and Multipoint GRE (MGRE) – Cisco Express Forwarding – Standard 802.1d Spanning Tree Protocol – Layer 2 Tunneling Protocol (L2TP) – Network Address Translation (NAT) – Dynamic Host Configuration Protocol (DHCP) server, relay, and client – Dynamic DNS – DNS Proxy – DNS Spoofing – Access Control Lists (ACLs) – IPv4 and IPv6 multicast – Open Shortest Path First (OSPF) – Border Gateway Protocol (BGP) – Performance Routing (PfR) – Enhanced Interior Gateway Routing Protocol (EIGRP) – Virtual Route Forwarding (VRF) Lite – Next Hop Resolution Protocol (NHRP) – Bidirectional Forwarding Detection (BFD) – Web Cache Communication Protocol (WCCP) |
|
Switch features |
– Auto Media Device In/Media Device Cross Over (MDI-MDX) – 25 802.1Q VLANs – MAC filtering – Switched Port Analyzer (SPAN) – Storm control – Smart ports – Secure MAC address – Internet Group Management Protocol Version 3 (IGMPv3) snooping – 802.1X |
|
Security features |
Secure connectivity: – Secure Sockets Layer (SSL) VPN for secure remote access
– Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256
– Public-Key-Infrastructure (PKI) support
– 50 IPsec tunnels
– Cisco Easy VPN client and server
– NAT transparency
– Dynamic Multipoint VPN (DMVPN)
– Tunnel-less Group Encrypted Transport VPN (GET VPN)
– VRF-aware IPsec
– IPsec over IPv6
– Adaptive control technology
– Session Initiation Protocol (SIP) application-layer gateway
– Cisco IOS Firewall:
◦ Zone-based policy firewall
◦ VRF-aware stateful inspection routing firewall
◦ Stateful inspection transparent firewall
– Advanced application inspection and control
– HTTPS, FTP, and Telnet Authentication Proxy
– Dynamic and static port security
– Firewall stateful failover
– VRF-aware firewall
– Cisco IOS Software black and white lists
– Integrated threat control:
◦ Intrusion Prevention System (IPS)
– Control plane policing
– Flexible packet matching
– Network foundation protection
|
|
Quality of Service (QoS) |
– Low-Latency Queuing (LLQ) – Weighted Fair Queuing (WFQ) – Class-Based WFQ (CBWFQ) – Class-Based Traffic Shaping (CBTS) – Class-Based Traffic Policing (CBTP) – Policy-Based Routing (PBR) – Class-Based QoS MIB – Class of Service (CoS)-to-Differentiated Services Code Point (DSCP) mapping – Class-Based Weighted Random Early Detection (CBWRED) – Network-Based Application Recognition (NBAR) – Link Fragmentation and Interleaving (LFI) – Resource Reservation Protocol (RSVP) – Real-Time Transport Protocol (RTP) header compression (cRTP) – Differentiated Services (DiffServ) – QoS preclassify and prefragmentation – Hierarchical QoS (HQoS) |
|
Management |
– Cisco Configuration Professional – Cisco Configuration Express – Cisco Configuration Engine support – Cisco AutoInstall – Cisco IP Service-Level Agreement (IP SLA) – Cisco IOS Embedded Event Manager (EEM) – CiscoWorks – Cisco Security Manager – Telnet, Simple Network Management Protocol Version 3 (SNMPv3), Secure Shell (SSH) Protocol, Command-Line Interface (CLI), and HTTP management – RADIUS and TACACS+ – Cisco Next Generation Plug-and-Play (NG PnP) Protocol |
|
High availability |
– Virtual Router Redundancy Protocol (VRRP) (RFC 2338) – HSRP – MHSRP |
|
Metro Ethernet |
– Ethernet OA&M – Ethernet Local Management Interface (E-LMI) – IP SLA for Ethernet |
|
IPv6 |
– IPv6 addressing architecture – IPv6 name resolution – IPv6 statistics – IPv6 translation: Transport packets between IPv6-only and IPv4-only endpoints (NAT-Protocol Translation) – Internet Control Message Protocol Version 6 (ICMPv6) – IPv6 DHCP – OSPFv3 – BGP4+ – IPv6 Path Maximum Transmission Unit (PMTU) – IPv6 neighbor discovery – IPv6 stateless address autoconfiguration (SLAAC) – IPv6 multicast routing |
|
Application visibility and control |
– NBAR2 – Flexible NetFlow (FNF) – Performance Agent |
|
Number of recommended users |
– 50 |
|
CPU |
Intel® x86 2.2-GHz |
|
Default and maximum DRAM |
– Default 1 GB |
|
Default and maximum flash memory |
– 2 GB not upgradable |
|
WAN |
– 2 ports Gigabit Ethernet (GE) |
|
LAN switch |
– 4-port GE managed switch |
|
Separate console ports |
– RJ-45 |
|
USB 2.0 |
– One USB 2.0 Type A port |
|
Physical dimensions and weight |
Weight: 2.65 lb (1.20 kg) maximum Dimensions: H x W x D = 1.70 x 9.0 x 9.5 in. (4.32 x 22.86 x 24.13 cm) (includes rubber feet) |
|
Power supply |
Power specifications: – AC input voltage: Universal 100 to 240 VAC – Frequency: 50 to 60 Hz – Internal power supply |
|
Approvals and compliance |
Safety: – IEC 60950-1 – UL 60950-1 – CAN/CSA C22.2 No. 60950-1 – EN 60950-1 – AS/NZS 60950.1 – Class I Equipment Emissions: – 47 CFR Part 15: 2006 ◦ CISPR22: Edition 6.0: 2008 ◦ CNS13438: 2006 ◦ EN 300 386 V1.6.1 ◦ EN 55032 ◦ EN61000-3-2: 2006 [+ amd 1 & 2] ◦ EN61000-3-3: 2008 ◦ ICES-003 Issue 5: 2012 ◦ KN 22: 2009 – TCVN 7189: 2009 – VCCI: V-3/2012.04 Immunity: – CISPR24: 2010 [+ amd 1 & 2] ◦ EN300386: V1.6.1 ◦ EN55024: 2010 ◦ EN61000-6-1: 2007 ◦ KN24: 2011 ◦ TCVN 7317:2003 |
|
Environmental operating range |
– Nonoperating temperature: -40° to 158°F (-40° to 70°C) – Nonoperating humidity: 5% to 95% relative humidity (noncondensing) – Nonoperating altitude: 0 to 15,000 ft (0 to 4570 m) – Operating temperature: 0° to 50°C (de-rate 1°C per 1000-ft increase in altitude) – Operating humidity: 5% to 95% relative humidity (noncondensing) – Operating altitude: 0 to 10,000 ft (0 to 3000 m) |
License sử dụng cho router Cisco C921-4P-SEC
|
Part number |
Bundle |
Features |
|
SL-900-APP(=) |
Application Experience (APP) |
IP Base + advanced networking protocols: L2TPv3, MPLS Application Experience: PfRv3, NBAR2, AVC, IP SLA Initiator Hybrid Cloud Connectivity: LISP, Virtual Private LAN Services (VPLS), Ethernet over MPLS |
Software images sử dụng cho C921-4P-SEC
|
Part number |
Description |
|
Router software images |
|
|
SISR900UK9-1583MB(=) |
C900-universalk9-mz: Universal image for C921-4P-SEC, C931-4P, C927-4P, C927-4PM, C926-4P |
|
SISR900NPEUK9-1583MB(=) |
Cisco 900 ISR Universal image and non-payload encryption image |
Mouting kit sử dụng cho router Cisco C921-4P-SEC
|
Mount kits |
|
|
ACS-900-RM-19 |
Rack-mount kit for 900 Series ISRs |
|
ACS-900-DM |
Under-the-desk mount kit for all 900 Series ISRs |
Có thể bạn quan tâm
