Cisco IOS Software & Router solutions for the SMB market

(1)

Cisco IOS Software &

Router solutions for the SMB

market

(2)

Agenda

• Market Dynamics and Business Needs

• Cisco IOS Fundamentals

• Intelligent Network Services

• Cisco IOS Releases

• Selling Cisco IOS

• Router Portolio in SMB market

(3)

E-Business Opportunities

and Network Requirements

Net Impact of …

Availability,

Security,

Scalability

E-Learning

E-Commerce

Increase

revenues &

customer

base

Self services,

decreased

costs,

knowledge

transfer

Empowered

partners,

improved

time-to-market &

intellectual

capital

High

productivity,

better resource

management

Reduced training

costs, improved

communications,

increased

competitive edge

(4)

Changing Market Drivers

New Market Drivers: 2000-2004

• E-business applications - web interfaces

• New Access Technologies

• Security – QoS - Availability

• Data+Voice Convergence - IP Telephony

Market Drivers: 1996-2000

• Standardization on IP

• Multi-service connectivity

• Intranet applications

• SP Services/Bandwidth $$

Either integrated or Stand alone switching

PSTN

IP network

Cisco Router

More IP-based applications distributed to the Branch

(5)

(6)

Full Service Requirements

Network is as dependable as traditional

business tools

Network is as dependable as traditional

business tools

Availability

Advanced security to protect electronic assets

from unauthorised access

Advanced security to protect electronic assets

from unauthorised access

Security

Flexibility

Protect equipment investment by growing

Simplify device management to free up

technical resources

Integrated management for voice

and data traffic

Decrease total cost of ownership

Simplify device management to free up

technical resources

Integrated management for voice

and data traffic

Decrease total cost of ownership

Manageability

Prioritised network traffic to ensure business

critical applications receive highest priority

Prioritised network traffic to ensure business

(7)

Agenda

• Market Dynamics and Business Needs

• Cisco IOS Fundamentals

• Intelligent Network Services

• Cisco IOS Releases

• Selling Cisco IOS

• Router Portolio in SMB market

(8)

Cisco IOS Defined

Internet Applications

Cisco IOS Software

Network Platforms

I

nternetworking

O

perating

S

ystem

DSL _{Frame Relay} Ethernet

(9)

Cisco IOS is Everywhere

1995

1990

2000

2003

- 17 years

- 80 plattforms in 25 families

(10)

Agenda

• Market Dynamics and Business Needs

• Cisco IOS Fundamentals

• Intelligent Network Services

• Cisco IOS Releases

• Selling Cisco IOS

• Router Portolio in SMB market

(11)

Network Intelligence

Security

Quality of

Service (QoS)

Availability

Network Management

ITS

(…)

(12)

Security

- Line sharing

- IP Address saving

NAT

- Line sharing

- IP Address saving

- LAN masking Access Lists

- Access Lists

- L3 packet filtering

- Flow direction aware

- L4 application filtering

- Time stamp

Stateful

Inspection

Firewall

ACL

Firewall

- Line sharing

- IP Address saving

- LAN masking

- Access Lists

- L3 packet filtering

Intrusion

Detection

(13)

VPN

Main

Office

Home

POP

Mobile

Business

Partner

Remote

Regional

Virtual Private

Network

(14)

Quality of Service

• Different applications require different priorities

• Examples of QoS technologies:

Internet

Download - FTP

Web - HTTP

Application - ERP

Email - SMTP

Priority Queuing (PQ)

Weighted Fair Queuing (WFQ)

(15)

Internet

Cisco Multiservice Routing

• The router becomes the “information gateway”

• Uses advanced Cisco features to handle all traffic

• Network ready for next evolution

Services

IP Phone

Video

PSTN

IP

WAN

(16)

CallManager express (IOS Telephony Svcs)

• Touch ITS

PSTN

IP WAN

Switch Switch

CallManager express

(17)

Availability

• Router availability

Hardware quality (– SmartNet services)

Cisco IOS (– SmartNet services)

• Network availability

Hot Standby Router Protocol (HSRP)

Virtual Router Redundancy Protocol (VRRP)

Router A

(18)

Network Management

• Management features of Cisco IOS:

– Remote configuration

– Remote correction

– Remote debugging

Switch Switch Central NMS

workstation Remote router

New IOS version New configuration

(19)

Agenda

• Market Dynamics and Business Needs

• Cisco IOS Fundamentals

• Intelligent Network Services

• Cisco IOS Releases

• Selling Cisco IOS

• Router Portolio in SMB market

(20)

Cisco IOS Releases

• Different Packages

depending on needs

• Flexible Choice

• Upgradeable

(…)

IP Only

Security

Voice

Feature Sets

(21)

Agenda

• Market Dynamics and Business Needs

• Cisco IOS Fundamentals

• Intelligent Network Services

• Cisco IOS Releases

• Selling Cisco IOS

• Router Portolio in SMB market

(22)

Key Cisco IOS Benefits

• Broad range of functionality

• Lower cost of ownership

• Integrated approach…

• Consistent implementation across…

• Widest range of platforms

• Compliance to Standards

(23)

How To Sell Cisco IOS

• Educate your customers about

e-business

The importance of the network supporting e-business

• Demonstrate that a single network OS can save money

Availability

Connectivity

Scalability

• Explain how IOS upgrades can provide investment protection

• Emphasize that Cisco has the resources that SMBs need

• For more information on Cisco IOS check out the following links

ABCs of IOS :

www.cisco.com/go/ios

(24)

Agenda

• Market Dynamics and Business Needs

• Cisco IOS Fundamentals

• Intelligent Network Services

• Cisco IOS Releases

• Selling Cisco IOS

• Cisco Router Portolio in SMB market

(25)

Router Evolution

Functionality/Integration

Multi-Protocol Routing, Access Control, QoS Tools

IOS Firewall/Encryption

VoFR, VoIP

Low density

Switching

IP

Telephony

Voice

Apps

Content

Delivery

Advanced

Security

Routing, INS

(26)

(27)

What Access Router To Select?

• Select the platform according to the WAN interfaces

• Understand features required to run the applications

• Select required routing protocols

• Understand the traffic type (bandwidth, volume, …)

• Calculate the performance needed per application

(28)

Small Office & Home Office Router

(29)

Cisco 830 and SOHO 90 Series –

Secure Broadband Routers

Four New Models:

•Cisco 831 Ethernet Broadband Router

•Cisco 837 ADSL Broadband Router

Advanced security for data, voice

and video access ideal for small

(30)

Extending Integrated Security and

Advanced Services To the Edge

Stateful

Firewall

4-Port

10/100

Switch

IDS and URL

filtering*

IPSec 3DES

_{Management /}

Out-of-Band

Dial Back Up

QoS for Voice

and Video

Cisco 830

Series

Cisco 830

Series

Hardware Acceleration Hardware Acceleration

Cisco

(31)

Cisco 831 Ethernet Broadband

Router Features

Advanced Security and Performance for

Enterprise Class VPNs

Hardware-Assisted Encryption VPN throughput (2.0

Mbps aggregate with IMIX traffic) 3DES encryption,

**Cisco Easy VPN remote, AES, IDS, TACACS+,**

RADIUS

High Quality Secure Voice and Video

Low Latency Queuing (LLQ), QoS (Class-Based

**Traffic Shaping, CAR, LLQ over VPN*, LFI),**

Multicast

Manageable, Scalable and Reliable Access

Two Software Images:

•IP FW/VPN with VPN

Hardware Acceleration

(Default)

•PLUS – QoS features

Advanced security for data, voice and video access ideal

for small offices and teleworkers

(32)

Cisco 831 Router Hardware

10/100 MB Ethernet Switch

Connect to Ethernet network devices

Ethernet WAN Port

Connects to DSL or Cable modem or Ethernet Switch

Console Port/Virtual AUX Port

Connects to PC or terminal for configuration

Allows external modem to be connected to the router

Processor

•Motorola RISC

Memory

•Runs from DRAM

•DRAM Default: 32MB

•DRAM Max: 48MB

3DES IPSec

Hardware

Acceleration

(33)

Cisco 837 ADSL Broadband Router

Cisco 837 ADSL Broadband Router Features

Two Software Images:

•IP FW/VPN with VPN

(default)

•PLUS – QoS and HW VPN

acceleration

Advanced security for data, voice and video access ideal

for small offices and teleworkers

Advanced Security and Performance for

Enterprise Class VPNs

Hardware-Assisted Encryption VPN throughput

(2.0 Mbps aggregate with IMIX traffic) 3DES

**encryption, Cisco Easy VPN remote, AES, IDS,**

TACACS+, RADIUS

High Quality Secure Voice and Video

Low Latency Queuing (LLQ), QoS (Class-Based

**Traffic Shaping, CAR, LLQ over VPN*, LFI), Multicast**

Manageable, Scalable and Reliable Access

(34)

Cisco 837 Router Hardware

10/100 MB Ethernet Switch

ADSL WAN Port

Connects to SP network

Console Port/Virtual AUX Port

Allows external modem to be connected to the router

Processor

•Motorola RISC

Memory

•Runs from DRAM

•DRAM Default: 32MB

•DRAM Max: 48MB

3DES IPSec

Hardware

Acceleration

(35)

Cisco SOHO 91 Ethernet Broadband

Router

Router Features

Secure Internet Access

Stateful inspection firewall,

Software-based 3DES encryption

Easy Set Up and Deployment

Cisco Router Web Set Up tool

Advanced Management Features

for Low Cost of Ownership

Remote management with Cisco IOS

One Software Image:

IP FW/VPN

Affordable, secure, easy to use, broadband access

for small offices

(36)

Cisco SOHO 91 Router Hardware

10/100 MB Ethernet Switch

Ethernet WAN Port

Connects to DSL or cable modem or Ethernet switch

Console Port

Processor

•Motorola RISC

Memory

•Runs from DRAM

•DRAM Default: 32MB

•DRAM Max: 32MB

(37)

Cisco SOHO 97 ADSL Broadband

Router

Router Features

Secure Internet Access

Stateful inspection firewall,

software-based 3DES encryption

Easy Set Up and Deployment

Cisco Router Web Set Up tool

Advanced Management Features

for Low Cost of Ownership

Remote management with Cisco IOS

One Software Image:

IP FW/VPN

Affordable, secure, easy to use, broadband access

for small offices

(38)

Cisco SOHO 97 Router Hardware

10/100 MB Ethernet Switch

ADSL WAN Port

Connects to SP network

Console Port

Processor

•Motorola RISC

Memory

•Runs from DRAM

•DRAM Default: 32MB

•DRAM Max: 32MB

(39)

Cisco Router Web Setup Tool (CRWS)

• Easy-to-use graphical tool for

installation

End users/resellers

Service-provider technicians

unfamiliar with CLI

• Features and Benefits

Quick setup: just add PPP

username/password + router name

Standard configuration templates with

modifiable parameters

Router status monitoring and

trouble-shooting

Tool resides on Flash: no CD software

(40)

(41)

Cisco 1711/12 All-in-One Security Router

• IP Router, LAN Switch, IPSec VPN, Stateful Firewall, IDS

• Eases management burden and reduces cost of ownership

Hardware IPSec

Client

Hardware IPSec

Client

Firewall

WAN Router

with LAN

Switch

WAN Router

with LAN

Switch

Intrusion Detection

System

Intrusion Detection

System

(42)

Introducing Cisco 1711 and 1712

• Broadband Access with WAN Backup

DSL broadband or Ethernet access

Analog modem or ISDN backup

• Comprehensive Network Security

Hardware accelerated VPN encryption

Stateful firewall with URL filtering

Intrusion detection

• Integrated LAN Connectivity

10/100 switch with VLAN

Spanning Tree Protocol

• Advanced Routing and QoS

RIP, OSPF, BGP, EIGRP

QoS bandwidth optimization

Security Access Routers for Enterprise Small Branch Offices

and Small/Medium Sized Businesses

(43)

Cisco 1711

Cisco 1712

Cisco 1711 and 1712 Key Features

• Fixed Configuration

• 1—10/100BaseT Port (WAN)

• Analog Modem Backup

• 4 Port 10/100BaseT Switch

• 802.1Q VLAN

• 32MB FLASH

• 64MB DRAM

• VPN Encryption Module

• Cisco IOS IP Plus/FW/IDS/

IPSec 3DES

• Security Device Manager

• See published price list for

• Fixed Configuration

• 1—10/100BaseT Port (WAN)

• 1 port ISDN (S/T) Backup

• 4 Port 10/100BaseT Switch

• 802.1Q VLAN

• 32MB FLASH

• 64MB DRAM

• VPN Encryption Module

• Cisco IOS IP Plus/FW/IDS/

IPSec 3DES

• Security Device Manager

• See published price list for

(44)

Cisco 1712

Cisco 1711 and 1712 Interfaces

Cisco 1711

Fast Ethernet Port (WAN) Analog Modem Port Analog Analog Modem Port Modem Port Console Port 4 Port 10/100 Ethernet Switch 4 Port 10/100 4 Port 10/100 Ethernet Switch Ethernet Switch AUX Port Fast Ethernet Port (WAN) ISDN (S/T) Port ISDN ISDN (S/T) Port (S/T) Port Console Port 4 Port 10/100 Ethernet Switch 4 Port 10/100 4 Port 10/100 Ethernet Switch Ethernet Switch AUX Port Telephone Connection

(45)

Cisco 1711/1712 Application:

DMZ with Firewall

DMZ

802.1Q VLAN Defined DMZ

Cisco IOS Firewall Applied to DMZ and Internet Connection LAN Analog Modem/ ISDN Port Analog Modem/ Analog Modem/ ISDN Port ISDN Port 10/100BaseT Switch 10/100BaseT 10/100BaseT Switch Switch 10/100BaseT Port 10/100BaseT Port 10/100BaseT Port Cable/DSL Modem VPN Tunnel to HQ VPN Tunnel to HQ VPN Tunnel to HQ

Internet

(46)

802.1Q VLAN Defined Hotspot Segment LAN

Wireless

Access

Point

VPN Tunnel to HQ VPN Tunnel to HQ VPN Tunnel to HQ

Internet

10/100BaseT Switch 10/100BaseT 10/100BaseT Switch Switch Analog Modem/ ISDN Port Analog Modem/ Analog Modem/ ISDN Port ISDN Port 10/100BaseT Port 10/100BaseT Port 10/100BaseT Port

Cisco 1711/1712 Application:

Internet Hotspot

Cable/DSL Modem

(47)

DDR Initiated failover to Analog Modem/ISDN Port

DDR Initiated failover to DDR Initiated failover to Analog Modem/ISDN Port Analog Modem/ISDN Port

LAN

PSTN

Cisco IOS Firewall Applied to Internet Connection

Internet

X

Cisco 1711/1712 Application:

DDR Backup

10/100BaseT Switch 10/100BaseT 10/100BaseT Switch Switch Analog Modem/ ISDN Port Analog Modem/ Analog Modem/ ISDN Port ISDN Port 10/100BaseT Port 10/100BaseT Port 10/100BaseT Port Cable/DSL Modem

(48)

Remote

LAN 10/100BaseT Switch 10/100BaseT 10/100BaseT Switch Switch Analog Modem/ ISDN Port Analog Modem/ Analog Modem/ ISDN Port ISDN Port

PSTN

Cisco IOS Firewall Applied to Internet Connection VPN Tunnel to HQ VPN Tunnel to HQ VPN Tunnel to HQ

Cisco 1711/1712 Application:

Remote Management

10/100BaseT Port 10/100BaseT Port 10/100BaseT Port

Internet

Cable/DSL Modem

(49)

Initial/Temporary ISDN Service

Migration to DSL Service

PSTN

Cisco IOS Firewall Applied to Internet Connection DSL Modem

Cisco 1711/1712 Application:

ISDN to DSL Migration

LAN 10/100BaseT Switch 10/100BaseT 10/100BaseT Switch

(50)

Cisco 1711 1712 Ordering Information

• CISCO1711-VPN/K9

Includes: 32MB Flash, 64MB DRAM, 4-Port 10/100BaseT

Switch, 10/100 WAN &

Analog Modem

Port, VPN Hardware

Module, Cisco IOS IP Plus/ADSL/Firewall/IDS/IPSEC 3DES

• CISCO1712-VPN/K9

Includes: 32MB Flash, 64MB DRAM, 4-Port 10/100BaseT

Switch, 10/100 and

ISDN WAN

Port, VPN Hardware Module,

Cisco IOS IP Plus/ADSL/Firewall/IDS/IPSEC 3DES

(51)

1.295.-Cisco 1711/1712

Cisco 1711/1712

PIX

™™

501

501 Cisco 831

Cisco 831

Cisco 1701

4-Port 10/100 Switch ADSL WAN Port ISDN Backup

P

Analog Modem Backup

802.1Q VLAN

P

1712

P

1712

P

1711

P

1711

AUX Port (DDR)

P

Virtual AUXVirtual AUX

Stateful Firewall

P

IDS

P

PlannedPlanned

URL Filtering

P

Easy VPN Support Easy VPN Server and Remote Easy VPN Server and Remote Easy VPN Server and Remote Easy VPN Server and Remote Easy VPN Server and Remote Easy VPN Server and Remote Easy VPN Remote Easy VPN Remote

VPN Performance 3 Mbps IMIX (option)3 Mbps IMIX (option) 3.4 Mbps IMIX _{3.4 Mbps IMIX} 2 Mbps IMIX2 Mbps IMIX 2 Mbps IMIX2 Mbps IMIX

RIP, EIGRP,

RIP, EIGRP, RIP, EIGRP, RIP, EIGRP, RIP, EIGRP, RIP, EIGRP, RIP, OSPF RIP, OSPF

DMVPN

P

Product Comparison – Security devices

P

(52)

Cisco 1760 Architecture

• 19” Rack-mount Form Factor (1 RU)

• High Performance RISC Architecture

• 4-slot Modular Chassis

• One Auto-Sensing 10/100 FE Port

with IEEE 802.1Q VLAN

• Internal Expansion Slot for

VPN Hardware Encryption Module

• IPSec 3DES Encryption at T1/E1 speed

• Two Internal DSP Slots

• AUX Port up to 115 kbps

(async serial)

• GPL:

1.595.-VIC Slots

WIC/VIC Slots

ConsolePort

AUX Port

Fast Ethernet Port

(53)

Cisco 1760 Interface Support

• LAN Density

1 Fast Ethernet (on-board) PLUS 2 Ethernet (10BaseT) WICs

• WAN density

5 Asynchronous Serial, 4 Synchronous serial or 2 BRI (ISDN)

• Analog and Digital Voice Support

Up to 8 analog voice calls

Up to 30 digital voice calls w/VWIC

Survivable Remote Site Telephony (SRST)

• WAN Interface Card (WIC) support

Serial and ISDN, Ethernet, Analog Modem

ADSL and G.SHDSL

(54)

Cisco 1700 Series Product Line

Cisco 1711/1712

Cisco 1721

Cisco 1751

Modular Slots LAN Ports

with 802.1Q VLAN

Integrated Backup WAN

Voice over IP Desktop Desktop 4-Port 10/100 Fast Ethernet Switch 4-Port 10/100 Fast Ethernet Switch 19” Rack-Mount (1 RU) 19” Rack-Mount (1 RU) Desktop Desktop Desktop Desktop

P

1 10/100 Autosensing Ethernet Port 1 10/100 Autosensing Ethernet Port 1 10/100 Autosensing Ethernet Port 1 10/100 Autosensing Ethernet Port 1 10/100 Autosensing Ethernet Port 1 10/100 Autosensing Ethernet Port 2 VIC/WIC Slots 2 VIC Slots 2 VIC/WIC Slots 2 VIC Slots 2 VIC/WIC Slots 1 VIC Slot 2 VIC/WIC Slots 1 VIC Slot 2 WIC Slots 2 WIC Slots Form Factor Integrated VPN Module,

Firewall, IDS

P

OptionalOptional OptionalOptional OptionalOptional

Cisco 1760

Security Router

Security Router Data and

Voice Data and Voice Data and Voice Data and Voice Data Access Data Access Application

P

Optional Optional Optional Optional Optional Optional Analog Modem/ ISDN BRI Analog Modem/ ISDN BRI None (1 10/100 WAN Port) None (1 10/100 WAN Port)

(55)

(56)

Cisco 2600XM Architecture

• 1RU—1.69” x 17.5” x 11.8”

• 1 or 2 Integrated 10/100 FE

• 1 Network Module Slot ,

2 WICs, 1 AIM (internal)

• 20–40 Kpps Performance

• 115.2 Kbps Console & AUX Port

• Default—16MB Flash, 32-64MB

SDRAM

• Max. 128MB SDRAM/48MB Flash

• AC, DC , and RPS versions

• NEBs Level 3, 12” depth

Network

Module

WIC Slots

ConsolePort/

AUX Port

Cisco IOS 12.1 Mainline (GD), 12.2(8)T1

&

Fast Ethernet

Ports

(57)

Cisco 2600XM Product Comparison

• All platforms have 1 NM, 1 AIM, 2 WICs

• All platforms have AC/DC, RPS power

Cisco 2610/11XM

Fixed LAN Ports

Cisco 2620/21XM

Cisco 2650/51XM

Performance

(Kpps)

DRAM (Default MB)

DRAM (Max MB)

Flash (Default MB)

Flash (Max MB)

1FE/2 FE

1 FE/2 FE

20

30

40

32

64

128

16

48

(58)

Cisco 2691 Architecture

• 2RU–3.46” x 17” x 11.2”

• 1 Network module slot

• 2 Integrated 10/100 FE ports

• 3 WIC slots, 2 AIM slots (internal)

• 70 Kpps performance

• 115.2 Kbps console port

• AUX async port

• Internal and external compact Flash

• Default—32MB Flash/64MB SDRAM

• Max. 256MB SDRAM / 128MB

compact Flash (Internal)

• Supported on 12.2(8)T1

• RPS version in future release

Network

Module

WIC Slots

Fast

Ethernet

Ports

Console

Port/AUX Port

External Flash

(59)

Cisco 2600 Series Product Line

Cisco 2600

Cisco 2600XM

Cisco 2691

Modular Slots LAN Ports Performance Default Memory 15–37Kpps 15–37Kpps 8 MB Flash 32 MB DRAM 8 MB Flash 32 MB DRAM 70 Kpps 70 Kpps 32 MB Compact Flash 64 MB DRAM 32 MB Compact Flash 64 MB DRAM 16 MB Flash 32/64(265x) MB DRAM 16 MB Flash 32/64(265x) MB DRAM 2, 10/100 Autosensing Ethernet Port 2, 10/100 Autosensing Ethernet Port 1/2 10/100 Autosensing Ethernet Port 1/2 10/100 Autosensing Ethernet Port 1NM, 2 WIC, 1 AIM Slots 1NM, 2 WIC, 1 AIM Slots Form Factor 20–40 Kpps 20–40 Kpps

AIM Slots 1 AIM1 AIM 1 AIM1 AIM 2 AIMs2 AIMs 19” Rack-Mount (1 RU) 19” Rack-Mount (1 RU) 19” Rack-Mount (1 RU) 19” Rack-Mount (1 RU) 19” Rack-Mount (2 RU) 19” Rack-Mount (2 RU) 1NM, 2 WIC, 1 AIM Slots 1NM, 2 WIC, 1 AIM Slots 1NM, 3 WIC, 2 AIM Slots 1NM, 3 WIC, 2 AIM Slots 1/2 Ethernet and 1/2 10/100 Autosensing Ethernet Port 1/2 Ethernet and 1/2 10/100 Autosensing Ethernet Port

Max. Memory Capacity 16/32 MB Flash 64128 MB DRAM 16/32 MB Flash 64128 MB DRAM 48 MB Flash 128 MB DRAM 48 MB Flash 128 MB DRAM 128 MB Compact Flash 256 MB DRAM 128 MB Compact Flash 256 MB DRAM

(60)

(61)

Cisco Access Routers Meet Requirements

for “The Full Service Branch”

Availability

High Performance

Flexible

Content Delivery

Low Density

Switching

Voice

Advanced Security

Cisco 3700

(62)

Cisco 3725 & 3745 Access Routers

• Investment Protection: Shares 1700,

2600, 3600 interfaces

• Advanced QoS support

3725

3745

10/100 FE ports

2

2 WIC Slots

3

3 AIM Slots

2

2 NM/HDSM Slots

2/1

4/2

HDSM Slots

1

2 Performance - kpps

100

225 Optional RPS

External

Internal

Optional Phone Power

Internal

Minimum Cisco IOS

12.2(8)T

Price

$8,500

$12,000

• Highest Performance Branch

Office Routers

• Integrated Advanced

Services: Reduced TCO

• Cisco 3745: high availability,

density and serviceability

• Cisco 3725: high density in a

compact form factor

(63)

Cisco Security Device Manager

(SDM) for Cisco Access Routers

(64)

Cisco Security Device Manager:

Combining Ease Of Use & Application Intelligence

• Security Audit: ICSA, TAC

recommended security

configuration

• Intelligent wizards:

Auto-detect mis-configuration

and proposes fixes

(e.g.,

punches hole for DHCP thru’

firewall if WAN interface is

DHCP addressed)

• Quick Deployment: 1-Step

Router Lockdown

(Firewall), and VPN Wizard

(Site-to-Site, Easy VPN)

• Security Audit: ICSA, TAC

recommended security

configuration

• Intelligent wizards:

Auto-detect mis-configuration

and proposes fixes

(e.g.,

punches hole for DHCP thru’

firewall if WAN interface is

DHCP addressed)

• Quick Deployment: 1-Step

Router Lockdown

(Firewall), and VPN Wizard

(Site-to-Site, Easy VPN)

SDM is an intuitive, web-based device management tool

embedded within Cisco access routers

SDM is an intuitive, web-based device management tool

embedded within Cisco access routers

(65)

Cisco SDM Supported Platforms

Cisco 830 Series Access Router

Cisco 1700 Series Modular Access Routers

Cisco 830 Series Access Router

(66)

Cisco SDM Target Market and Users

• Ideal for Small, and Medium Businesses

–In-house network/security management

–Outsourced network/security management

• Remote Branch Offices with no on-site

(67)

SDM Modes

• Wizard Mode

Novice “Guide” mode

• Advanced Mode

User can perform

tasks in any

order and can

view existing

configuration

• Monitor Mode

- Router Status

- Interface Status

- Firewall Status

- VPN Status

- Logging Status

Left Panel displays

mode options

(68)

SDM Wizard Options

• Overview

View IOS version, hardware installed and configuration summary

• LAN Configuration

Configure the LAN interfaces and DHCP

• WAN Configuration

Configure PPP, Frame Relay, HDLC WAN interfaces

• Firewall

Two types of firewall wizard simple inside/outside or more complex

inside/outside/DMZ with multiple interfaces.

• VPN

Three types of wizards to create a secure site-to-site VPN, Easy

VPN and GRE tunnel with IPSec

• Security Audit

Perform a router security audit and provides easy instructions on

how to lock down the insecure features found

(69)

Security Audit

SDM provides a

check list of

security faults

found.

(70)

Cisco SDM Summary

• Web-based tool for non-IOS CLI experts, and

non-security experts

• Easy, and reliable management through Wizards,

and application intelligence

• Innovative, industry leading features like

Security Audit, and 1-Step Router lockdown

• Comprehensive coverage of Security, LAN, WAN,

and Routing features

(71)

Why Cisco for Routing?

• Cisco is a pioneer in the area of routing

• Market leading LAN, WAN and Internet products

• Common Internetwork Operating System (IOS)

across the network

• Significant savings from a single-vendor solution

• World-class services and support

(72)

Cisco TradeIn - Router Transition Map

Solution Price $2-5K $6-8K $9-14K 3620 3640 3660