C921-4P-SEC Cisco ISR 921 Security Router, IP Base with SEC license Bundle

Router Cisco C921-4P-SEC ISR 921 2 Wan Ports Gigabit Ethernet (GE), 4 LAN Port GE managed switch, with security license bundle, IP Base

✓ Mã sản phẩm: C921-4P-SEC

Mô tả
Tài liệu kỹ thuật

Router Cisco C921-4P-SEC cung cấp bảo mật và bảo vệ mối đe dọa tích hợp, bảo vệ các mạng khỏi các lỗ hổng và tấn công Internet đã biết và mới. Thiết bị định tuyến Cisco C921-4P-SEC có cấu hình cố định, mạnh mẽ, cung cấp kết nối băng thông rộng và Metro Ethernet an toàn.

Các nhà cung cấp dịch vụ Ethernet có thể triển khai Cisco C921-4P-SEC tại các địa điểm của khách hàng dưới dạng CPE. Khả năng quản lý tập trung hoặc từ xa khả dụng thông qua các công cụ dựa trên nền tảng web và Phần mềm Cisco IOS® để hiển thị và kiểm soát toàn bộ cấu hình mạng tại các chi nhánh từ xa.

Router Cisco C921-4P-SEC được tích hợp sẵn license SEC, cung cấp các tính năng bảo mật như Zone-based firewall, IPsec VPN, DMVPN, FlexVPN, GET VPN, SSL VPN, cung cấp 250-Mbps IPsec

Thông số kỹ thuật Router Cisco C921-4P-SEC

Feature	Specification
Cisco IOS Software
IP and IP services	– Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2) – Generic Routing Encapsulation (GRE) and Multipoint GRE (MGRE) – Cisco Express Forwarding – Standard 802.1d Spanning Tree Protocol – Layer 2 Tunneling Protocol (L2TP) – Network Address Translation (NAT) – Dynamic Host Configuration Protocol (DHCP) server, relay, and client – Dynamic DNS – DNS Proxy – DNS Spoofing – Access Control Lists (ACLs) – IPv4 and IPv6 multicast – Open Shortest Path First (OSPF) – Border Gateway Protocol (BGP) – Performance Routing (PfR) – Enhanced Interior Gateway Routing Protocol (EIGRP) – Virtual Route Forwarding (VRF) Lite – Next Hop Resolution Protocol (NHRP) – Bidirectional Forwarding Detection (BFD) – Web Cache Communication Protocol (WCCP)
Switch features	– Auto Media Device In/Media Device Cross Over (MDI-MDX) – 25 802.1Q VLANs – MAC filtering – Switched Port Analyzer (SPAN) – Storm control – Smart ports – Secure MAC address – Internet Group Management Protocol Version 3 (IGMPv3) snooping – 802.1X
Security features	Secure connectivity: – Secure Sockets Layer (SSL) VPN for secure remote access – Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256 – Public-Key-Infrastructure (PKI) support – 50 IPsec tunnels – Cisco Easy VPN client and server – NAT transparency – Dynamic Multipoint VPN (DMVPN) – Tunnel-less Group Encrypted Transport VPN (GET VPN) – VRF-aware IPsec – IPsec over IPv6 – Adaptive control technology – Session Initiation Protocol (SIP) application-layer gateway – Cisco IOS Firewall: ◦ Zone-based policy firewall ◦ VRF-aware stateful inspection routing firewall ◦ Stateful inspection transparent firewall – Advanced application inspection and control – HTTPS, FTP, and Telnet Authentication Proxy – Dynamic and static port security – Firewall stateful failover – VRF-aware firewall – Cisco IOS Software black and white lists – Integrated threat control: ◦ Intrusion Prevention System (IPS) – Control plane policing – Flexible packet matching – Network foundation protection
Quality of Service (QoS)	– Low-Latency Queuing (LLQ) – Weighted Fair Queuing (WFQ) – Class-Based WFQ (CBWFQ) – Class-Based Traffic Shaping (CBTS) – Class-Based Traffic Policing (CBTP) – Policy-Based Routing (PBR) – Class-Based QoS MIB – Class of Service (CoS)-to-Differentiated Services Code Point (DSCP) mapping – Class-Based Weighted Random Early Detection (CBWRED) – Network-Based Application Recognition (NBAR) – Link Fragmentation and Interleaving (LFI) – Resource Reservation Protocol (RSVP) – Real-Time Transport Protocol (RTP) header compression (cRTP) – Differentiated Services (DiffServ) – QoS preclassify and prefragmentation – Hierarchical QoS (HQoS)
Management	– Cisco Configuration Professional – Cisco Configuration Express – Cisco Configuration Engine support – Cisco AutoInstall – Cisco IP Service-Level Agreement (IP SLA) – Cisco IOS Embedded Event Manager (EEM) – CiscoWorks – Cisco Security Manager – Telnet, Simple Network Management Protocol Version 3 (SNMPv3), Secure Shell (SSH) Protocol, Command-Line Interface (CLI), and HTTP management – RADIUS and TACACS+ – Cisco Next Generation Plug-and-Play (NG PnP) Protocol
High availability	– Virtual Router Redundancy Protocol (VRRP) (RFC 2338) – HSRP – MHSRP
Metro Ethernet	– Ethernet OA&M – Ethernet Local Management Interface (E-LMI) – IP SLA for Ethernet
IPv6	– IPv6 addressing architecture – IPv6 name resolution – IPv6 statistics – IPv6 translation: Transport packets between IPv6-only and IPv4-only endpoints (NAT-Protocol Translation) – Internet Control Message Protocol Version 6 (ICMPv6) – IPv6 DHCP – OSPFv3 – BGP4+ – IPv6 Path Maximum Transmission Unit (PMTU) – IPv6 neighbor discovery – IPv6 stateless address autoconfiguration (SLAAC) – IPv6 multicast routing
Application visibility and control	– NBAR2 – Flexible NetFlow (FNF) – Performance Agent
Number of recommended users	– 50
CPU	Intel^® x86 2.2-GHz
Default and maximum DRAM	– Default 1 GB
Default and maximum flash memory	– 2 GB not upgradable
WAN	– 2 ports Gigabit Ethernet (GE)
LAN switch	– 4-port GE managed switch
Separate console ports	– RJ-45
USB 2.0	– One USB 2.0 Type A port
Physical dimensions and weight	Weight: 2.65 lb (1.20 kg) maximum Dimensions: H x W x D = 1.70 x 9.0 x 9.5 in. (4.32 x 22.86 x 24.13 cm) (includes rubber feet)
Power supply	Power specifications: – AC input voltage: Universal 100 to 240 VAC – Frequency: 50 to 60 Hz – Internal power supply
Approvals and compliance	Safety: – IEC 60950-1 – UL 60950-1 – CAN/CSA C22.2 No. 60950-1 – EN 60950-1 – AS/NZS 60950.1 – Class I Equipment Emissions: – 47 CFR Part 15: 2006 ◦ CISPR22: Edition 6.0: 2008 ◦ CNS13438: 2006 ◦ EN 300 386 V1.6.1 ◦ EN 55032 ◦ EN61000-3-2: 2006 [+ amd 1 & 2] ◦ EN61000-3-3: 2008 ◦ ICES-003 Issue 5: 2012 ◦ KN 22: 2009 – TCVN 7189: 2009 – VCCI: V-3/2012.04 Immunity: – CISPR24: 2010 [+ amd 1 & 2] ◦ EN300386: V1.6.1 ◦ EN55024: 2010 ◦ EN61000-6-1: 2007 ◦ KN24: 2011 ◦ TCVN 7317:2003
Environmental operating range	– Nonoperating temperature: -40° to 158°F (-40° to 70°C) – Nonoperating humidity: 5% to 95% relative humidity (noncondensing) – Nonoperating altitude: 0 to 15,000 ft (0 to 4570 m) – Operating temperature: 0° to 50°C (de-rate 1°C per 1000-ft increase in altitude) – Operating humidity: 5% to 95% relative humidity (noncondensing) – Operating altitude: 0 to 10,000 ft (0 to 3000 m)

License sử dụng cho router Cisco C921-4P-SEC

Part number

Bundle

Features

SL-900-APP(=)

Application Experience (APP)

IP Base + advanced networking protocols: L2TPv3, MPLS

Application Experience: PfRv3, NBAR2, AVC, IP SLA Initiator

Hybrid Cloud Connectivity: LISP, Virtual Private LAN Services (VPLS), Ethernet over MPLS

Software images sử dụng cho C921-4P-SEC

Part number	Description
Router software images
SISR900UK9-1583MB(=)	C900-universalk9-mz: Universal image for C921-4P-SEC, C931-4P, C927-4P, C927-4PM, C926-4P
SISR900NPEUK9-1583MB(=)	Cisco 900 ISR Universal image and non-payload encryption image