CISCO891-K9

CISCO891-K9 Specifications

IP and IP services

●  Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2)

●  Generic Routing Encapsulation (GRE) and Multipoint GRE (MGRE)

●  Cisco Express Forwarding

●  Standard 802.1d Spanning Tree Protocol

●  Layer 2 Tunneling Protocol (L2TP)

●  Layer 2 Tunneling Protocol Version 3 (L2TPv3)

●  Network Address Translation (NAT)

●  Dynamic Host Configuration Protocol (DHCP) server, relay, and client

●  Dynamic Domain Name System (DNS)

●  DNS Proxy

●  DNS Spoofing

●  Access control Lists (ACLs)

●  IPv4 and IPv6 Multicast

●  Open Shortest Path First (OSPF)

●  Border Gateway Protocol (BGP)

●  Performance Routing (PfR)

●  Enhanced Interior Gateway Routing Protocol (EIGRP)

●  Virtual Route Forwarding (VRF) Lite

●  Next Hop Resolution Protocol (NHRP)

●  Bidirectional Forwarding Detection (BFD)

●  Web Cache Communication Protocol (WCCP)

xDSL

●  True Multimode VDSL2 and ADSL2+ over Annex A, B, J, and M including traditional G.DMT and T1.413

●  World-class interoperability with industry-standard DSL access multiplexer (DSLAM) chipsets

●  Highest field reliability with Impulse Noise Protection over REIN/SHINE, Extended INP-Delay, G.INP, Physical Layer Retransmission, SRA, and Bitswap

●  VDSL2 Persistent Storage Device (PSD) profiles up to 17a/b with support for Spectral Shaping

●  VDSL2 Vectoring to offer blazing fiber speeds over copper

●  Support for 4-pair multimode G.SHDSL; that is, ATM and EFM

●  Remote management with TR069 and CWMP

●  Investment protection with GE and SFP for future fiber that could replace xDSL deployment

Switch features

●  Auto Media Device In/Media Device Cross Over (MDI-MDX)

●  25 802.1QVLANs

●  MAC filtering

●  Four-port 802.3af and Cisco compliant PoE

●  Switched Port Analyzer (SPAN)

●  Storm Control

●  Smart ports

●  Secure MAC address

●  Internet Group Management Protocol Version 3 (IGMPv3) snooping

●  802.1x

Security features

●  Secure connectivity:

●  Secure Sockets Layer (SSL) VPN for secure remote access

●  Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256

●  Public-Key-Infrastructure (PKI) support

●  Fifty IPsec tunnels

●  Cisco Easy VPN Client and Server

●  NAT transparency

●  Dynamic Multipoint VPN (DMVPN)

●  Tunnel-less Group Encrypted Transport VPN

●  VRF-aware IPsec

●  IPsec over IPv6

●  Adaptive control technology

●  Session Initiation Protocol (SIP) application-layer gateway

●  Cisco IOS Firewall:

◦    Zone-Based Policy Firewall

◦    VRF-aware stateful inspection routing firewall

◦    Stateful inspection transparent firewall

●  Advanced application inspection and control

●  Secure HTTP (HTTPS), FTP, and Telnet Authentication Proxy

●  Dynamic and static port security

●  Firewall stateful failover

●  VRF-aware firewall

●  Cisco ScanSafe Connector

●  Cisco IOS Software blocked and allowed lists

●  Integrated threat control:

◦    Intrusion Prevention System (IPS)

●  Control Plane Policing

●  Flexible Packet Matching

●  Network foundation protection

Quality of Service (QoS)

●  Low-Latency Queuing (LLQ)

●  Weighted Fair Queuing (WFQ)

●  Class-Based WFQ (CBWFQ)

●  Class-Based Traffic Shaping (CBTS)

●  Class-Based Traffic Policing (CBTP)

●  Policy-Based Routing (PBR)

●  Class-Based QoS MIB

●  Class of Service (CoS)-to-Differentiated Services Code Point (DSCP) mapping

●  Class-Based Weighted Random Early Detection (CBWRED)

●  Network-Based Application Recognition (NBAR)

●  Link Fragmentation and Interleaving (LFI)

●  Resource Reservation Protocol (RSVP)

●  Real-Time Transport Protocol (RTP) header compression (cRTP)

●  Differentiated Services (DiffServ)

●  QoS preclassify and prefragmentation

●  Hierarchical QoS (HQoS)

Management

●  Cisco Configuration Professional

●  Cisco Configuration Express

●  Cisco Configuration Engine support

●  Cisco AutoInstall

●  Cisco IP Service-Level Agreement (IP SLA)

●  Cisco IOS Embedded Event Manager (EEM)

●  CiscoWorks

●  Cisco Security Manager

●  Telnet, Simple Network Management Protocol Version 3 (SNMPv3), Secure Shell (SSH) Protocol, Command-Line Interface (CLI), and HTTP management

●  RADIUS and TACACS+

●  Out-of-band management with ISDN S/T port or external modem through a virtual auxiliary port on models supporting those interfaces; refer to Table 2 for details

●  Cisco Wireless Control System (WCS) for management of unified access points in models supporting WLAN; on models supporting WLAN, refer to Table 2 for details

High availability

●  Virtual Router Redundancy Protocol (VRRP) (RFC 2338)

●  HSRP

●  MHSRP

●  Dial backup with external modem through virtual auxiliary port

●  Dial backup with ISDN S/T or V.92 Analog modem port

Metro Ethernet

●  Ethernet OA&M

●  Ethernet Local Management Interface (E-LMI)

●  IP SLA for Ethernet

IPv6

●  IPv6 addressing architecture

●  IPv6 name resolution

●  IPv6 statistics

●  IPv6 translation: Transport packets between IPv6-only and IPv4-only endpoints (NAT-Protocol Translation)

●  Internet Control Message Protocol Version 6 (ICMPv6)

●  IPv6 DHCP

●  OSPFv3

●  BGP4+

●  IPv6 Path Maximum Transmission Unit (PMTU)

●  IPv6 Neighbor Discovery

●  IPv6 Stateless Address Auto Configuration (SLAAC)

●  IPv6 Multicast Routing

Unified WLAN management

●  Unified access-point features:

●  Supported by wireless LAN controller and Cisco WCS

●  Configurable local or central switching for Hybrid Remote Edge Access Point (HREAP) mode

●  Radio management through Cisco WCS

●  Transparent roaming with mobility groups

Application visibility and control

●  NBAR2

●  Flexible NetFlow (FNF)

●  Performance Agent

Number of recommended users

●  50

WLAN Features (Available with Wireless Option)

Standard 802.11 a/g/n access point

●  Optional on Cisco 890 Series models

WLAN hardware

●  Support for Cisco CleanAir technology on Cisco 897 and 891F

●  Automatic rate selection for 802.11a/g/n

●  Noncaptive RPTNC omnidirectional dipole antennae; 2-dBi gain @ 2.4 GHz, 5-dBi gain @ 5 GHz

●  2 x 3 Multiple Input, Multiple Output (MIMO) radio operation

●  Wi-Fi 802.11n Draft v2.0 certified

WLAN software features

●  Autonomous or unified access point

●  Cisco WCS support for monitoring of autonomous-mode access points

●  Option to maximize throughput or maximize range

●  Software-configurable transmit power

●  Radio roles, including access point, root bridge, nonroot bridge, and workgroup bridge

●  Wi-Fi Multimedia (WMM) certification

●  Traffic specifications (TSPEC) Call Admission Control (CAC) to ensure voice quality is maintained

●  Unscheduled Automatic Power Save Delivery (UPSD) to reduce latency

WLAN security features

●  Standard 802.11i

●  Wi-Fi Protected Access (WPA) and AES (WPA2)

●  EAP authentication: Cisco Light Extensible Authentication Protocol (LEAP), Protected Extensible Authentication Protocol (PEAP), Extensible Authentication Protocol Transport Layer Security (EAP TLS), Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST), Extensible Authentication Protocol-Subscriber Information Module (EAP-SIM), Extensible Authentication Protocol-Message Digest Algorithm 5 (EAP-MD5), and Extensible Authentication Protocol‑Tunneled TLS (EAP-TTLS)

●  Static and dynamic Wired Equivalent Privacy (WEP)

●  Temporal Key Integrity Protocol/Simple Security Network (TKIP/SSN) encryption

●  MAC authentication and filter

●  User database for survivable local authentication using LEAP and EAP-FAST

●  Configurable limit to the number of wireless clients

●  Configurable RADIUS accounting for wireless clients

●  Preshared keys (PSKs) (WPA-small office or home office [WPA-SOHO])