CISCO SMB CLASS MOBILITY AND WIRELESS SOLUTIONS: THE RESPONSIVE WORKFORCE

(1)

Cisco Small and Medium Business Class Solutions

Cisco®_{offers small and medium-sized business customers a suite of intelligent networking} products and solutions that help drive greater employee efficiency, support innovative services, improve customer satisfaction, and reduce business operating costs. Cisco SMB Class Solutions give your employees secure, reliable, and convenient access to the information they need, whether they are located in the main office, at a remote or branch office, at home, or on the road. With enhanced capabilities in the areas of voice, security, and mobility—and investment protection you can count on—Cisco SMB Class Solutions meet your business needs, now and into the future.

By choosing Cisco SMB Class Solutions, you can confidently implement the business applications you need without draining budgets, bandwidth, or staff.

Cisco also provides the following easy-to-use blueprints for extending network functionality to support advanced applications in businesses from fewer than 20 users up to 1000 users. These blueprints are based on our extensive experience in creating networks for

successful SMBs.

Cisco Mobility and Wireless Solutions

Small and medium-sized businesses recognize the benefits of providing access to important resources beyond the limits of wire. Cisco mobility solutions create a tightly integrated wired and wireless network that empowers greater productivity and a more responsive and resilient business environment.

Cisco mobility products include routers, switches, security, IP Communications, wireless access points, and content networking, and offer these advantages

• Cisco mobility solutions extend access to the company network, whether at work, at home, or on the road.

• Cisco integrates wired and wireless networks, simplifying management without sacrificing secure access to resources.

• Cisco mobility solutions are designed for flexibility and scalability to support current requirements and future applications, technologies, and growth.

• Cisco extends intelligent networking features to the wireless LAN (WLAN), including support for quality of service (QoS), VLANs, and proxy mobile IP. Users get the same intelligent services from their Cisco WLANs as they get from their wired networks.

• The Cisco Structured Wireless Aware Network (SWAN) of integrated, “wireless-aware” infrastructure products facilitates the deployment and management of the WLAN in addition to enhancing security and reducing the total cost of ownership of the WLAN.

• Cisco mobility solutions provide increased business resiliency by detecting and preventing security threats. • Cisco mobility solutions are backed by the company’s award-winning technical support services,

which ensure ease of installation, maintenance, and support of your network. Cisco mobility blueprints for SMBs are formulated according to size:

• Mobility Blueprint: Less than 20 user ports per site • Mobility Blueprint: 20 to 50 user ports per site

• Mobility Foundation Blueprint: 50 to 100 user ports per site • Mobility Foundation Blueprint: 100 to 250 user ports per site • Mobility Foundation Blueprint: 250 to 500 user ports per site • Mobility Foundation Blueprint: 500 to 1000 user ports per site

(2)

MOBILITY BLUEPRINT: FEWER THAN 20 USER PORTS PER SITE

Teleworker Private WAN Public Internet Cisco Catalyst Switches Desktops/ Laptops Cisco Security Agent

Desktops/Laptops Cisco VPN Client Cisco Security Agent

Broadband Modem Access Router Firewall 100 Mbps/GbE Remote Site Access Router WAN + Firewall + VPN + IDS Access Router WAN + Firewall + VPN + IDS Cisco Catalyst Switch Desktops/Laptops Cisco Security Agent

Cisco Aironet Access Point Cisco Aironet Access Point 100 Mbps/GbE 100 Mbps/ GbE 100 Mbps/GbE Corporate Servers Cisco Security Agent Main Business Location Fewer than 20 Users

External Servers

802.11-Enabled Laptop Cisco Security Agent

Reference Mobility Blueprint

This network blueprint is intended to be an educational resource and a starting point in planning your network solution; it is not a final recommendation from Cisco. To determine the deployment at appropriate for your company we suggest you work with a Cisco representative, Cisco channel partner, or a solutions provider.

Introduction

This reference blueprint provides a network diagram (Figure 1)

and product table (Table 1) for your main office, remote office,

and teleworkers. This is a suggested blueprint.

Figure 1: Mobility Blueprint: Fewer than 20 User Ports per Site

Product Table

Table 1 describes Cisco solutions for SMBs with fewer than 20 user ports per site and is intended to be a starting point in choosing Cisco products for your main business location, remote offices, and teleworker connectivity.

Table 1: Solution Features for Main Business Location

Fewer than 20 Fewer than 20

(SMB Complete) (SMB Enhanced)

Router Cisco 1760 Cisco 2600XM Series

Modular Access Router Modular Access Routers

WAN services No Yes

Integrated LAN Yes-4 Port Yes-16 Port

switch

Integrated security No Yes

Cisco IOS®_Firewall _{Cisco IOS Firewall} Cisco IOS VPN VPN accelerator Call processing Cisco CallManager Express Cisco CallManager Express

(Integrated call processing) (Integrated call processing) Voice mail Cisco Unity™ (External server) Cisco Unity (External server)

Cisco Unity Express (Single network module slot limits PSTN access with Cisco Unity Express module)

Integrated content Yes Yes

engine

External switch

Access Point

Cisco Catalyst®_{2950 Series} or

Cisco Catalyst 3550 Series Cisco Aironet®_{1100 Series} The Cisco Aironet®_{1100 Series} Access Point provides a high-speed, secure, affordable, and easy-to-use wireless LAN solution that combines the freedom and flexibility of wireless networking with the features and services required in business networks (Figure 1). The Cisco Aironet 1100 Series supports a single radio and is available with IEEE 802.11g. The IEEE 802.11b version of the previous 1100 AP series is field upgradable to 802.11g. The Cisco Aironet 1100 Series is a key component of the Cisco Structured Wireless-Aware Network (SWAN), a comprehensive framework that delivers an integrated, end-to-end wired and wireless network.

Cisco Catalyst 2950 Series or

Cisco Catalyst 3550 Series Cisco Aironet 1200 Series

(3)

Table 1: Solution Features for Remote Sites(continued)

Fewer than 20 Fewer than 20

Access Point

WAN services Yes Yes

Integrated LAN Yes–4 Port Yes–4 Port

switch

Integrated security Yes Yes

Cisco IOS Firewall Cisco IOS Firewall Cisco IOS VPN VPN accelerator Call processing No Cisco CallManager Express

(Integrated call processing)

Voice mail No Cisco Unity

(External server)

Integrated content No Yes

engine

Cisco Aironet®_{1100 Series} The access point offers flexibility and investment protection for wireless networks. With the IEEE 802.11g version, users can enjoy up to 54 Mbps data rates while maintaining full backward compatibility with lega-cy 802.11b devices. Administrators can configure the access point to support both 802.11g and legacy 802.11b clients for investment protec-tion or, for higher performance, it may be configured to support only 802.11g clients. The Cisco Wireless Security Suite provides the strongest enterprise security solution available while the Cisco IOS®_Software operat-ing system delivers enterprise-class services with a familiar user interface. The Cisco Aironet 1100 Series also features integrated diversity dipole antennas and an innovative mounting system for easy installation and reliable coverage in a variety of locations and orientations.

Cisco Aironet 1200 Series

coverage or for tri-mode 802.11a/b/g coverage, the Cisco Aironet 1200 offers the greatest flexibility and investment protection, allowing net-work administrators to deploy a wire-less network optimized for their par-ticular application.

(4)

MOBILITY BLUEPRINT: 20 TO 50 USER PORTS PER SITE

Cisco Aironet Access Point Cisco Aironet Access Point 100 Mbps/GbE 100 Mbps/ GbE 100 Mbps/GbE Corporate Servers Cisco Security Agent Main Business Location 20–50 Users

External Servers

Introduction

This reference blueprint provides a network diagram (Figure 2)

and product table (Table 2) for your main office, remote office,

and teleworkers. This is a suggested blueprint.

Figure 2: Wireless Diagram for SMBs with 20–50 User Ports per Site

Product Table

Table 2 briefly describes Cisco solutions for SMBs with 20 to 50 user ports per site and is intended to be a starting point in choosing Cisco products for your main business location, remote offices, and teleworker connectivity.

Table 2: Solution Features for Main Business Location Site and Remote Site

20–50 Users 20–50 Users

Router Cisco 2600XM Series Cisco 3745 Multiservice

modular access routers Access Router

Integrated switch No Yes/Integrated

52 port

Cisco IOS Firewall Cisco IOS Firewall VPN accelerator VPN accelerator Call processing Cisco CallManager Express Cisco CallManager Express

(Integrated call processing) (Integrated call processing) Voice mail Cisco Unity (External server) Cisco Unity (External server)

Cisco Unity Express Cisco Unity Express (Integrated local voicemail) (Integrated local voice mail)

(Single network module slot limits PSTN access with Cisco Unity Express module)

Content Yes Yes

External switch

Access Point

Cisco Catalyst 2950 Series or

Cisco Catalyst 3550 24 PWR Switch Cisco Aironet 1100 Series

The Cisco Aironet®_{1100 Series} Access Point provides a high-speed, secure, affordable, and easy-to-use wireless LAN solution that combines the freedom and flexibility of wireless networking with the features and services required in business networks (Figure 1). The Cisco Aironet 1100 Series supports a single radio and is available with IEEE 802.11g. The IEEE 802.11b version of the previous 1100 AP series is field upgradable to 802.11g. The Cisco Aironet 1100 Series is a key component of the Cisco Structured Wireless-Aware Network (SWAN), a comprehensive framework that delivers an integrated, end-to-end wired and wireless network.

Cisco Catalyst 3550 24 PWR Switch

(5)

Table 2: Solution Features for Main Business Location Site and Remote Site (continued)

20–50 Users 20–50 Users

Access Point Cisco Aironet 1100 Series

The access point offers flexibility and investment protection for wireless networks. With the IEEE 802.11g version, users can enjoy up to 54 Mbps data rates while maintaining full backward compati-bility with legacy 802.11b devices. Administrators can configure the access point to support both 802.11g and legacy 802.11b clients for investment protection or, for higher performance, it may be configured to support only 802.11g clients. The Cisco Wireless Security Suite provides the strongest security solu-tion available while the Cisco IOS® Software operating system delivers services with a familiar user interface. The Cisco Aironet 1100 Series also features integrated diversity dipole antennas and an innovative mounting system for easy installation and reliable coverage in a variety of locations and orientations.

coverage or for tri-mode 802.11a/b/g coverage, the Cisco Aironet 1200 offers the greatest flexibility and investment protection, allowing net-work administrators to deploy a wireless network optimized for their particular application.

(6)

MOBILITY BLUEPRINT: 50 TO 100 USER PORTS PER SITE

Cisco Aironet Access Point Cisco Aironet Access Point 100 Mbps/GbE 100 Mbps/ GbE 100 Mbps/GbE Corporate Servers Cisco Security Agent Main Business Location 50–100 Users

External Servers

Introduction

This reference blueprint provides a network diagram (Figure 3)

and product table (Table 3) for your main office, remote office,

and teleworkers. This is a suggested blueprint.

Figure 3: Wireless Diagram for SMBs with 50–100 User Ports per Site

Product Table

Table 3: Solution Features for Main Business Location and Remote Site 50–100 Users 50–100 Users

Router Cisco 3725 Multiservice Cisco 3745 Multiservice

Access Router Access Router

Integrated LAN Yes/Integrated Yes/Integrated

switch–ethernet 16 port 52 port

module ports

Cisco IOS Firewall Cisco IOS Firewall VPN accelerator VPN accelerator Call processing Cisco CallManager Express Cisco CallManager Express

(Integrated call processing) (Integrated call processing) Cisco CallManager Cisco CallManager (External Cisco 7815 (External Cisco 7825 Media Convergence Server) Media Convergence Server) Voice mail Cisco Unity Express Cisco Unity Express

(Integrated local voice mail) (Integrated local voice mail) Cisco Unity (External server) Cisco Unity (External server) Integrated content Yes/Network module Yes/Network module

External switch Access Point

Cisco Catalyst 2950 Series or Cisco Catalyst 3550 24 PWR Switch Cisco Aironet 1100 Series

The Cisco Aironet®_{1100 Series Access} Point provides a high-speed, secure, affordable, and easy-to-use wireless LAN solution that combines the freedom and flexibility of wireless networking with the features and services required in business networks (Figure 1). The Cisco Aironet 1100 Series supports a single radio and is available with IEEE 802.11g. The IEEE 802.11b version of the previous 1100 AP series is field upgradable to 802.11g. The Cisco Aironet 1100 Series is a key component of the Cisco Structured Wireless-Aware Network (SWAN), a comprehensive framework that delivers an integrated, end-to-end wired and wireless network.

Cisco Catalyst 3550 24 PWR Switch

(7)

Table 3: Solution Features for Remote Sites (continued)

50–100 Users 50–100 Users

The access point offers flexibility and investment protection for wireless networks. With the IEEE 802.11g version, users can enjoy up to 54 Mbps data rates while maintaining full backward compati-bility with legacy 802.11b devices. Administrators can configure the access point to support both 802.11g and legacy 802.11b clients for investment protection or, for higher performance, it may be configured to support only 802.11g clients. The Cisco Wireless Security Suite provides the strongest security solu-tion available while the Cisco IOS® Software operating system delivers services with a familiar user interface. The Cisco Aironet 1100 Series also features integrated diversity dipole antennas and an innovative mount-ing system for easy installation and reliable coverage in a variety of locations and orientations.

(8)

MOBILITY BLUEPRINT: 100 TO 250 USER PORTS PER SITE

Teleworker

Private

WAN

Public

Internet

Cisco

Catalyst

Switches

Branch

Servers

Desktops/Laptops

Cisco Security Agent

Desktops/Laptops

Cisco VPN Client

Cisco Security Agent

Broadband

Modem

Access Router

Firewall

Remote

Site

Access Router

WAN + VPN +

IDS

Access Router

WAN + Firewall +

VPN + IDS

Cisco

Catalyst Switch

PIX Firewall

External Servers

Desktops/

Laptops

Cisco Security

Agent

100 Mbps/GbE

Corporate Servers

Cisco Security Agent

Cisco Catalyst

Switches

Main Business Location

100–250 Users

Si

100 Mbps/GbE

Cisco Aironet

Access Point

Cisco Aironet

Access Point

802.11-Enabled

Laptop Cisco

Security Agent

Reference Mobility Blueprint

Cisco Catalyst

Switch

802.11-Enabled Laptop

Cisco Security Agent

VPN

Concentrator

ACS Server

Introduction

This reference blueprint provides a network diagram (Figure 4)

and product table (Table 4) for your main office, remote office,

and teleworkers. This is a suggested blueprint.

Figure 4: Wireless Diagram for SMBs with 100–250 User Ports per Site

Product Table

Table 4 briefly describes Cisco solutions for SMBs with 100 to 250 user ports per site and is intended to be a starting point in choosing Cisco products for your main business location, remote offices, and teleworker connectivity. Cisco offers a choice of integrated, all-in-one products and dedicated appliances. This choice gives you the flexibility to create a customized infrastructure that meets your specific business and budget needs.

Table 4: Solution Features for Main Business Location and Branch Sites

Main Location 100–250 Users (SMB Complete) 100–250 Users (SMB Enhanced) (Integrated) (External Firewall, VPN, ACS and

Voice Recommended)

Router Cisco 3745 Multiservice Cisco 2651XM Modular

Access Router Access Router

Content Yes/Network module Yes/Network module

External switch Cisco Catalyst®_{2950 Series or} _{Cisco Catalyst 3550 Series} Cisco Catalyst 3550 Series Cisco Catalyst 4500 Series Cisco Catalyst 3550 PWR Switch Cisco Catalyst 3550 24 PWR Switch Core + Distribution 3550 Core + Distribution 4500 (Layer3) and Access 3550- or and Access 4500 PWR or Core + Distribution 3550 Core + Distribution 3550 (Layer 3)

and Access 2950 and Access 3550 PWR

Solution Features for Remote Sites

Remote Location 100–250 Users (SMB Complete) 100–250 Users (SMB Enhanced) Router Cisco 3725 Multiservice Access Router Cisco 3745 Multiservice Router

Integrated Switch Yes/Integrated Yes/Integrated

16 Ports 52 Ports

External switch Cisco Catalyst 2950 Cisco Catalyst 3550 24 PWR (See above for general product (See above for general product

information) information)

(9)

MOBILITY BLUEPRINT: 250 TO 500 USER PORTS PER SITE

Cisco

Catalyst

Switches

Si

Teleworker

Private

WAN

Public

Internet

Cisco

Catalyst

Switches

Branch

Servers

Desktops/Laptops

Cisco Security Agent

Desktops/Laptops

Cisco VPN Client

Cisco Security Agent

Broadband

Modem

Access Router

Firewall

Remote

Site

Access Router

WAN + VPN +

IDS

Access Router

WAN + Firewall +

VPN + IDS

Cisco

Catalyst Switch

PIX Firewall

External Servers

Desktops/

Laptops

Cisco Security

Agent

100 Mbps/GbE

Corporate Servers

Cisco Security Agent

Main Business Location

250–500 Users

Si

100 Mbps/GbE

Cisco Aironet

Access Point

802.11-Enabled Laptop

Cisco Security Agent

Chassis-based

OR stackables

Cisco Aironet

Access Point

802.11-Enabled

Laptop Cisco

Security Agent

Cisco Catalyst

Switch

Reference Mobility Blueprint

VPN

Concentrator

ACS Server

Introduction

This reference blueprint provides a network diagram (Figure 5)

and product table (Table 5) for your main office, remote office,

and teleworkers. This is a suggested blueprint.

Figure 5: Wireless Diagram for SMBs with 250–500 User Ports per Site

Product Table

Table 5: Solution Features for Main Business Location

Main Location 250–500 Users (SMB Complete) 250–500 Users (SMB Enhanced) (External Hardware Firewall, VPN, (External Firewall, VPN, ACS and ACS and Voice Recommended) Voice Recommended)

Router Cisco 2600XM Series modular Cisco 3745 Multiservice access routers Access Router

External switch Cisco Catalyst 2950 Series Cisco Catalyst 3550 Series Cisco Catalyst 3550 Series Cisco Catalyst 3550 24 PWR Switch Cisco Catalyst 3550 24 PWR Switch Cisco Catalyst 4500 Series Cisco Catalyst 4500 Series

Core + Distribution 4500 (Layer 3) Core + Distribution 4500 (Layer3) and Access 3550 PWR or and Access 4500 PWR or Core + Distribution 3550 (Layer 3) Core + Distribution 3550 (Layer 3)

and Access 2950 and Access 3550 PWR

The Cisco Aironet®_{1100 Series} Access Point provides a high-speed, secure, affordable, and easy-to-use wireless LAN solution that combines the freedom and flexibility of wireless networking with the features and services required in business networks (Figure 1). The Cisco Aironet 1100 Series supports a single radio and is available with IEEE 802.11g. The IEEE 802.11b version of the previous 1100 AP series is field upgradable to 802.11g. The Cisco Aironet 1100 Series is a key component of the Cisco Structured Wireless-Aware Network (SWAN), a comprehensive framework that delivers an integrated, end-to-end wired and wireless network. The access point offers flexibility and investment protection for wire-less networks. With the IEEE 802.11g version, users can enjoy up to 54 Mbps data rates while maintaining full backward compatibility with lega-cy 802.11b devices. Administrators can configure the access point to sup-port both 802.11g and legacy 802.11b

(10)

Table 5: Solution Features for Main Business Location(continued)

Main Location 250–500 Users (SMB Complete) 250–500 Users (SMB Enhanced) (External Hardware Firewall, VPN, (External Firewall, VPN and and Voice Recommended) Voice Recommended) Access Point Cisco Aironet 1100 Series

clients for investment protection or, for higher performance, it may be configured to support only 802.11g clients. The Cisco Wireless Security Suite provides the strongest security solution available while the Cisco IOS®_{Software operating system} delivers services with a familiar user interface. The Cisco Aironet 1100 Series also features integrated diversity dipole antennas and an innovative mounting system for easy installation and reliable coverage in a variety of locations and orientations.

(11)

MOBILITY BLUEPRINT: 500 TO 1000 USER PORTS PER SITE

Cisco Catalyst Switches Teleworker Private WAN Public Internet Cisco Catalyst Switches Branch Servers Desktops/Laptops Cisco Security Agent

Broadband Modem Access Router Firewall Remote Site Access Router WAN + VPN + IDS Access Router WAN + Firewall + VPN + IDS Cisco Catalyst Switch PIX Firewall External Servers Desktops/ Laptops Cisco Security Agent 100 Mbps/GbE 100 Mbps/GbE 100 Mbps/GbE 100 Mbps/GbE Corporate Servers Cisco Security Agent Main Business Location 500–1000 Users Si Si 100 Mbps/GbE Cisco Aironet Access Point 802.11-Enabled Laptop

Cisco Security Agent

Cisco Aironet Access Point 802.11-Enabled Laptop Cisco Security Agent Cisco Catalyst Switch Si Si

VPN Concentrator

ACS Server WLSE

Introduction

This reference blueprint provides a network diagram (Figure 6)

and product table (Table 6) for your main office, remote office,

and teleworkers. This is a suggested blueprint.

Figure 6: Wireless Diagram for SMBs with 500–1000 User Ports per Site

Product Table

Table 6: Solution Features for Main Business Location and Remote Sites

Main Location 500–1000 Users (SMB Complete) 500–1000 Users (SMB Enhanced) (External Hardware Firewall, VPN, (External Firewall, VPN, ACS,WLSE ACS, WLSE and Voice Recommended) and Voice Recommended)

Router Cisco 3745 Multiservice Cisco 7200 Series routers

Access Router

Content Yes/Network module Yes/Cisco 565A Content Engine

External switch Cisco Catalyst 3550 Series Cisco Catalyst 3550 24 PWR Switch Cisco Catalyst 3550 24 PWR Switch Cisco Catalyst 4500 Series Cisco Catalyst 4500 Series Cisco Catalyst 6500 Series Core + Distribution 4500 (Layer 3) Core + Distribution 6500 (Layer 3) and Access 4550 PWR or and Access 4500 PWR or Core + Distribution 4550 (Layer 3) Core + Distribution 6500 (Layer 3)

and Access 3550 PWR and Access 3550 PWR

The Cisco Aironet®_{1100 Series} Access Point provides a high-speed, secure, affordable, and easy-to-use wireless LAN solution that combines the freedom and flexibility of wireless networking with the features and services required in business networks (Figure 1). The Cisco Aironet 1100 Series supports a single radio and is available with IEEE 802.11g. The IEEE 802.11b version of the previous 1100 AP series is field upgradable to 802.11g. The Cisco Aironet 1100 Series is a key component of the Cisco Structured Wireless-Aware Network (SWAN), a comprehensive framework that delivers an integrated, end-to-end wired and wireless network. The access point offers flexibility and investment protection for wire-less networks. With the IEEE 802.11g version, users can enjoy up to 54 Mbps data rates while maintaining full backward compatibility with legacy 802.11b devices. Administrators can configure the access point to support both 802.11g and legacy 802.11b clients for

(12)

Table 6: Solution Features for Main Business Location and Remote Sites (continued) Main Location 500–1000 Users (SMB Complete) 500–1000 Users (SMB Enhanced)

(External Hardware Firewall, VPN, (External Firewall, VPN and and Voice Recommended) Voice Recommended) Access Point Cisco Aironet 1100 Series

investment protection or, for higher performance, it may be configured to support only 802.11g clients. The Cisco Wireless Security Suite pro-vides the strongest security solution available while the Cisco IOS® Software operating system delivers services with a familiar user inter-face. The Cisco Aironet 1100 Series also features integrated diversity dipole antennas and an innovative mounting system for easy installa-tion and reliable coverage in a vari-ety of locations and orientations.

for ease-of-use and familiarity and is a key component of the Cisco Structured Wireless-Aware Network (SWAN), a comprehensive frame-work that delivers an integrated, end-to-end wired and wireless network. The Cisco Aironet 1200 Series provides customers with maximum freedom and flexibility, enabling constant connection to all network resources from virtually anywhere wireless access is deployed.

Copyright 2004 Cisco Systems, Inc. All rights reserved. Cisco, Cisco Systems, the Cisco Systems logo, Catalyst, Cisco IOS, and Cisco Unity are registered trademarks or trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between

Cisco and any other company. (0304R) ETMG 203183—BM 02.04