
Cisco 7301 Series
Security Features continued
Security Solutions
• Network Admission Control (NAC)
• Voice and Video Enabled IPsec VPN (V3PN)
• Group Encrypted Transport VPN (GET VPN)
tunnel-less VPN offering higher scalability
Optional Security Modules
• VPN and Encryption Service Adapters
(SA-VAM2+)
Cisco Router and Security Device Manager (SDM)
• Ships by default with Cisco 7301
security bundles
Certications
• ICSA IPsec
• ICSA Firewall
• Common Criteria IPsec (EAL4)
• Common Criteria Firewall (EAL4+)
• FIPS 140-2, Level 2
Cisco IOS Router Enabled with
Firewall and Easy VPN Remote
Mobile Worker with Cisco
VPN Client Enabled on Laptop
Cisco Router Enabled
with Firewall and
Easy VPN Server
Branch
Office
Teleworker
VPN Tunnels
Internet
Easy VPN Server Application
Security Solutions Example
With its combination of scalable performance, compact architecture, high density, and low price per
port, the Cisco 7301 is ideally suited for a variety of key applications within both the service provider and
enterprise markets
When To Deploy
Cisco 7301 Series
Application Example
AT M
CISCO
10 000
SERIES
RADIUS/AAA
IP NETWORK
DSLAM
IP
PPP oA or PPPo EoA
AT M
IP
SUBSCRIBER
AT M
CISCO
10 000
SERIES
RADIUS/AAA
IP NETWORK
LIIS
DSLAM
IP
PPP oA or PPPo EoA
AT M
IP/PPP
L2TP
SUBSCRIBER
RADIUS/AAA
• Broadband aggregation: PTA/LAC or LNS/TS
(Tunnel Switching) aggregation router capable of
handling up to 8000 subscribers with per sessions
features enabled and up to 16,000 simultaneous
sessions with basic non-CPU intensive features
and allowing for a pay-as-you-grow “rack and stack”
architecture
• Managed services: High-end customer
premises equipment (CPE) or Multiprotocol Label
Switching-customer edge (MPLS-CE) devices
in managed L2 and L3 VPN solutions due to its
high-performance, feature-rich support with both
Gigabit Ethernet LAN connectivity and WAN port
adapter connectivity
• Mesh Wireless and Public Wireless LAN
Solutions: With Intelligent Service Gateway the
Cisco 7301 is ideal platform for these wireless
solutions ISG offers dynamic subscriber
awareness, authentication, authorization,
accounting, billing, and a customized portal
• High-availability design: 100 percent
redundancy via 2 CPEs congured for Hot
Standby Router Protocol (HSRP) or Layer 3
load balancing
• Cost-effective BGP Route Reector: Ideally
suited as a low cost route reector with its ability
to hold one million routes with its
1 GB of memory
Key Application Service Providers
Komentarze do niniejszej Instrukcji