Interoperability/Multiprotocol Support

AIM-VPN module

Multiprotocol Label Switching (MPLS) VPN Support

• Speciﬁc provider edge capabilities

• Virtual routing and forwarding (VRF) ﬁrewall and VRF IPSec

Cisco IOS IPS

• Inline ability to drop packet, reset connection, locally shun, or send an alarm

• Dynamically load and enable selected attack signa-tures in the same manner as Cisco IPS Appliances Cisco IOS Firewall

• Feature rich, stateful ﬁrewall

• VRF-Aware ﬁrewall

• Advanced Application Inspection and Control – HTTP inspection engine

– Email inspection engines (SMTP, ESMTP, IMAP, POP) Network Foundation Protection

• Control Plane Policing (CPP)

• AutoSecure

• CPU/Memory Threshold

• Secure Shell (SSH)

• Access Control List (ACL)

• Command Line Interface (CLI)

• Committed Access Rate (CAR) URL Filtering

• Onboard with an optional content-engine network module

• Local URL ﬁltering in Cisco IOS software based on external server

Security Solutions

• Network Admission Control (NAC)

• Voice & Video Enabled IPSec VPN (V3PN) Secure RTP

• Encryption AES (Advanced Encryption Standard)

• Authentication HMAC (Hashed Message Authentication Code)

• Integrity Secure Hash Algorithm (SHA)

Security Features Integration/Manageability

Provides a single-platform solution for security, branch ofﬁce IP telephony, voice gateway services, and additional enhanced services, lowering costs of ownership, simplifying management, and allowing ﬂexible, incremental migration. Integrated Layer 3-7 network analysis.

Incremental Migration to IP Telephony

Supports a wide range of traditional telephony devices and IP telephony solutions to enable immediate or gradual migration. Analog telephony connectivity options start at two analog ports and scale to 16, 32, 48, or 64

analog ports. Digital telephony connectivity is increasingly scalable, with options from 12 to 300 voice channels. IP telephony is delivered in a completely integrated package on the Cisco 3700 Series through its powerful set of features. These include line-powered IP phone

connectivity and appropriate quality of service support that begins with 16 ports and scales to 36, 52, or 72 ports. Immediate IP Telephony insurance via Survivable Remote Site Telephony (SRST) or persistent remote site call processing via Cisco CallManager Express (CCME), integrates Cisco Unity Express (CUE) for Auto Attendant and Voice Mail, offers remote site Audioconferencing and Transcoding for IP Telephony solutions.

Power

High-speed routing performance up to 225,000 packets per second, providing the scalability to support more concurrent services.

Offers a comprehensive set of protocols and services, including virtual private networking, ﬁrewall protection, encryption, WAN optimization, and enhanced multimedia support features.

Cisco IOS Router Enabled with Firewall and Easy VPN Remote

Mobile Worker with Cisco VPN Client Enabled on Laptop Cisco Router Enabled

with Firewall and Easy VPN Server Branch

Office Teleworker

VPN Tunnels Internet

Security Features Example

When To Deploy

Cisco 3700 Series

Deploy the Cisco 3700 Series when you need:

• New levels of branch ofﬁce service density in a compact form factor

• Integrated ﬂexible routing and low-density switching (16 or 36 ports)

• Flexible, incremental, and scalable migration to a converged branch ofﬁce network • Compatibility with more than 90 percent of the

world’s legacy analog and digital TDM PBXs • Survivable Remote Site Telephony (SRST)

features that enable branch ofﬁces to leverage centralized call processing while providing local branch IP Telephony redundancy • IP Telephony and Voice Gateway Router

integration for analog and digital telephony interfaces

• Complete small ofﬁce telephony solution using Cisco CallManager Express and Cisco Unity^™ Express

• Audioconferencing and transcoding in conjunction with Cisco CallManager Express • VoIP, VoFR, or VoATM toll bypass for all TDM

PBXs, key systems, analog telephony devices and the PSTN

• Support for advanced quality of service (QoS), bandwidth optimization, and data fragmenta-tion, as well as voice call admission control, call control, and queuing mechanisms, without sacriﬁcing the expected data performance needed for future growth • Availability features (Cisco 3745 only) such as

redundant power, online insertion and removal components, and ﬁeld-replaceable components

Easy VPN Server Application Security Features

continued

Optional Security Modules

• IDS/IPS Network Modules (NM-CIDS portfolio)

• VPN and Encryption Advanced Integration Modules (AIM-VPN portfolio)

• Content Engine Network Modules (NM-CE portfolio)

Certiﬁcations

• ICSA IPSec

• ICSA Firewall

• Common Criteria IPSec (EAL4)

• Common Criteria Firewall (EAL4+)

• FIPS 140-2, Level 2

Application Example

Platform Overview

Series Specifications

Processor MIPS RISC Processor

Dimensions (Height x Width x Depth)

Cisco 3725 3.5 x 17.1 x 15 in. (88 x 434 x 381 mm); 2 RU-height Cisco 3745 5.25 x 17.25 x 15 in. (133 x 438 x 381 mm); 3 RU-height

Console Port 1 (up to 115.2 Kbps)

Auxiliary Port 1 (up to 115.2 Kbps)

Integrated CSU/DSU Yes, with optional T1/E1, Fractional T1/E1, 56k/64k support

Voice/Data Support Yes

Cisco CallManager Express (CCME) Up to 192 phones for the Cisco 3745; up to 144 phones for the Cisco 3725

Cisco SRST Up to 480 phones for the Cisco 3745; up to 144 phones for the Cisco 3725

Compression SW + HW

Encryption Hardware encryption via AIM-VPN module

Options

• Complete Cisco Voice Gateway Router functionality • Cisco Survivable Remote Site Telephony (SRST) • Cisco CallManager Express (CCME)

• Cisco Unity^™ Express (CUE) for Auto Attendant and Voice Mail • VPN-enabled routers

• Integrated stateful ﬁrewall

• Cisco IOS intrusion prevention • WCCP for content networking • Integrated content networking • Dial access

• Integrated low-density switching

Fixed DRAM (MB) Flash (MB) Power

NMs AIM WICs LAN Ports default max default max Supply

Cisco 3725 2 2 3 2 FE 256 256 32 128 AC, DC, RPS

Cisco 3745 4 2 3 2 FE 256 512 32 128 AC, DC, RPS

��

IP IP IP

��

��

IP IP IP

M M

M M M

��

Series Specifications

continued

Cisco IOS Memory Requirements

Cisco 3700 Series

Support for Cisco 3700 Series Routers starts in Cisco IOS release 12.2(8)T Cisco IOS Release 12.2 T Memory Recommendations for the Cisco 3725 Router

Feature Set Software Image Flash Memory DRAM Memory

IP c3725-i-mz 32 MB 128 MB

IP Plus c3725-is-mz 32 MB 128 MB

IP Plus IPsec 3Des c3725-ik9s-mz 32 MB 128 MB

IP/FW/IDS c3725-io3-mz 32 MB 128 MB

IP/FW/IDS Plus IPsec 3Des c3725-ik9o3s-mz 32 MB 128 MB

Enterprise Plus c3725-js-mz 32 MB 128 MB

Enterprise Plus IPsec 3Des c3725-jk9s-mz 32 MB 128 MB

Enterprise/FW/IDS Plus IPsec 3Des c3725-jk9o3s-mz 32 MB 128 MB

Enterprise Plus/H323 MCM c3725-jsx-mz 32 MB 128 MB

IP/H323 c3725-ix-mz 32 MB 128 MB

Cisco IOS Release 12.2 T Memory Recommendations for the Cisco 3745 Router

Feature Set Software Image Flash Memory DRAM Memory

IP c3745-i-mz 32 MB 128 MB

IP Plus c3745-is-mz 32 MB 128 MB

IP Plus IPsec 3Des c3745-ik9s-mz 32 MB 128 MB

IP/FW/IDS c3745-io3-mz 32 MB 128 MB

IP/FW/IDS Plus IPsec 3Des c3745-ik9o3s-mz 32 MB 128 MB

Enterprise Plus c3745-js-mz 32 MB 128 MB

Enterprise Plus IPsec 3Des c3745-jk9s-mz 32 MB 128 MB

Enterprise/FW/IDS Plus IPsec 3Des c3745-jk9o3s-mz 32 MB 128 MB

Enterprise Plus/H323 MCM c3745-jsx-mz 32 MB 128 MB

IP/H323 c3745-ix-mz 32 MB 128 MB

Maximum High-speed Serial (up to 2 Mbps) 22

Maximum Low-speed Serial (up to 128 Kbps) 70 sync, 134 async Maximum Integrated Modems 70 Analog, 60 Digital Maximum Number of ISDN BRI Ports 35

Maximum Number of ISDN PRI Ports 8 Availability Features

Support for optional redundant power supply Supported on Cisco 3745 (internal) and Cisco 3725 (external) Online insertion and removal (Cisco 3745 only) Network modules, redundant power supply, fan tray Field-replaceable components (Cisco 3745 only) Motherboard, I/O board, power supplies, fan tray Minimum Cisco IOS Release

Cisco 3725 IOS 12.2(8) T

Cisco 3745 IOS 12.2(8) T

BENEFITS AND ADVANTAGES

continued

Ordering Information

Product Bundles

The Cisco 3700 is ordered from components. You must specify:

• A 3700 Series chassis: All chassis ship with the minimum recommended memory for the most recent default Cisco IOS IP feature set, documentation, console, auxiliary and LAN cables, 19-inch rack-mount brackets, and blank panels that cover unused WAN interface card and or network module slots

• A CD software pack with desired software release • A power cord

Optional items:

• A Cisco IOS feature set upgrade or revision;

the IP feature set is the default and included with the chassis

• WAN interface cards

• Network modules with onboard voice/WAN interface cards

• Optional MFT Dedicated Echo Cancellation Modules for select voice/WAN interface cards on select network modules

• Up to two advanced integration modules • EtherSwitch modules

• Up to two integrated EtherSwitch power supplies

• Flash memory upgrade • DRAM memory upgrade • Cables

• Feature license for IP Telephony

VPN PRODUCT BUNDLES

Product Number Product Description

CISCO3725-VPN/K9 3725 VPN Bundle, AIM-VPN/EPII-PLUS, Advanced IP, 64 MB Flash, 256 MB SDRAM CISCO3745-VPN/K9 3745 VPN Bundle, AIM-VPN/HPII-PLUS, Advanced IP, 64 MB Flash, 256 MB SDRAM

VOICE BUNDLES

Product Number Product Description

CISCO3725-V-CCME 48-phone CCME licence, AIM-ATM-VOICE-30, 64 MB Flash/256 MB DRAM CISCO3725-V-CCME-A 48-phone CCME licence, NM-HD-2V, 64 MB Flash/256 MB DRAM CISCO3745-V-CCME 120-phone CCME licence, AIM-ATM-VOICE-30, 64 MB Flash/256 MB DRAM CISCO3745-V-CCME-A 120-phone CCME licence, NM-HD-2V, 64 MB Flash/256 MB DRAM

In document How To Use Cisco Vpn On A Network With A Network Box (Cisco) For A Small Business (Cio) Or Large Business (Cycos) For An Enterprise (Networking) Or Small Business For A Large Business Recipe (Page 86-91)