Guest

Cisco 800 Series Routers

Cisco 880 Series Integrated Services Routers

The Cisco® 880 Series Integrated Services Routers combine Internet access, security and wireless services onto a single, secure device that is simple to use and manage for small businesses and enterprise small branch and teleworkers. The Cisco 880 Series delivers features, including firewall, content filtering, VPNs, and WLANs, at broadband speeds to small offices. Easy deployment and centralized management features enable the Cisco 880 Series to be deployed by enterprises or service providers in small branch offices or small businesses.

Product Overview

Cisco 880 Series Integrated Services Routers are fixed-configuration routers that provide collaborative business solutions for secure data communication to small businesses and enterprise teleworkers. The Cisco 880 Series offers concurrent broadband services over 3G1, Metro Ethernet, and multiple types of DSL and provides business continuity. Wireless 802.11n and 3G offer LAN and WAN mobility. The Cisco 880 Series provides the performance required for concurrent services, including firewall, intrusion prevention, content filtering, and encryption for VPNs; optional 802.11g/n for mobility; and quality of service (QoS) features for optimizing voice and video applications. In addition, Cisco Configuration Professional is a Web-based configuration tool that simplifies setup and deployment. Centralized management capabilities give network managers visibility and control of the network configurations at the remote site.
Cisco 880 Series Integrated Services Routers offer:

• High performance for broadband access in small offices and small branch and teleworker sites

• Collaborative services and data communication

• Business continuity and WAN diversity with redundant WAN links: Fast Ethernet, G.SHDSL, 3G, and ISDN

• Enhanced security, including:

– Firewall with advance application and control for e-mail, IM instant messaging and HTTP traffic

– Site-to-site remote access and dynamic VPN services: IP Security (IPSec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN [DMVPN], Group Encrypted Transport VPN with onboard acceleration, and Secure Sockets Layer (SSL) VPN.

– Intrusion prevention system (IPS): an inline, deep-packet inspection feature that effectively mitigates a wide range of network attacks.

– Content filtering: a subscription-based integrated security solution that offers category-based reputation rating; keyword blocking; and protection against adware, malware, spyware, and URL blocking.

• 4-port 10/100 Fast Ethernet managed switch with VLAN support; two ports support Power over Ethernet (PoE) for powering IP phones or external access points

• Secure 802.11g/n access point option based on draft 802.11n standard with support for Autonomous or Cisco Unified WLAN architectures

• CON/AUX port for console or external modem

• 1 USB1.1 port for security e-token credentials, booting from USB, loading configuration

• Easy setup, deployment, and remote management capabilities through Web-based tools and Cisco IOS® Software

Figure 1 shows a Cisco 881 Integrated Services Router.

Figure 1. Cisco 881 Integrated Services Router with Integrated 802.11n Access Point

Table 1 lists the routers that currently make up the Cisco 880 Data Series.

Table 1. Cisco 880 Series Data Models

Models

WAN Interface

LAN Interfaces

802.11g/n Option

Integrated 3G*

Integrated ISDN Dial Backup

Cisco 881

10/100-Mbps Fast Ethernet

4-port 10/100-Mbps managed switch

Yes (Cisco 881W)

Yes (Cisco 881G)

-

Cisco 888

G.SHDSL

4-port 10/100-Mbps managed switch

Yes (Cisco 888W)

Yes (Cisco 888G)

Yes

* Availability 2Half Calendar 2008
The Cisco 880 Series is ideal for small branch offices and teleworkers who need to be connected to larger enterprise networks as well as small businesses. The Cisco 880 Series helps extend corporate networks to secure remote sites, while giving users access to the same applications found in a corporate office. This applies to both data and voice applications, where IP phones can be used to extend a corporate voice extension to the remote office. When users require WLAN access, visibility and control of network security are even more critical at the remote site. The Cisco 880 Series meets this need with a single device that combines integrated 802.11g/n capabilities with security features such as Wi-Fi Protected Access (WPA), including authentication with IEEE 802.1X with Cisco Extensible Authentication Protocol (LEAP) and Protected EAP (PEAP) and encryption with WPA Temporal Key Integrity Protocol (TKIP). (See wireless solution overview and security data sheet for more information.) The Cisco 880 Series models that include the integrated Access Point can utilize both Autonomous or Cisco Unified WLAN modes. In Cisco Unified Mode, as part of an Enterprise WLAN architecture, all WLAN functionality is centrally managed through Cisco WLAN Controllers and the Cisco Wireless Control System.
Service providers and value-added resellers can take advantage of the Cisco 880 Series to provide a true business-class broadband service. Business customers are using broadband access to connect to the Internet or to connect offices together and require a platform that incorporates security without sacrificing performance. Many of these customers are connecting computers in offices through WLANs; having a single device for both WAN and WLAN access provides a new option for managed services. These customers also require a higher level of support to keep their networks up and running. Services with these customers should be simple to set up, while allowing a level of remote management and troubleshooting to quickly address support inquiries. The Cisco 880 Series meets the requirements of small offices and managed services providers.
Figure 2 shows deployment scenarios.

Figure 2. Deployment Scenarios

Applications

The Cisco 880 Series is ideally suited to be deployed in a small office or in a small office that is part of a large network, most often with a secure VPN connection. These types of offices can include the following:

Small remote office: Connects users in a small remote office, such as insurance agents, lawyer offices, or sales offices. When connecting to the main office, VPN encryption and integrated security such as firewall and intrusion prevention protect the network at every perimeter. IT managers can centrally manage the remote site to quickly troubleshoot any network issues. For added reliability, customers can also use the integrated 3G or ISDN backup or through an external modem, should the primary broadband link fail. Integrated secure unified WLAN connectivity simplifies the deployment and management devices at the remote site. Redundant WAN links offer business continuity, enabling nondisruptive business operation.

Virtual office: The Cisco 880 Series is ideal for corporate teleworkers, who might have a mix of broadband connection types such as DSL, 3G, and Metro Ethernet. The Cisco 880 Series provides a secure virtual office with all the collaborative services such as data, voice and video. Redundant WAN links help ensure business continuity. QoS features in the Cisco 880 Series allow an IP phone to be connected to the router, giving voice traffic precedence over data applications. Integrated WLAN support in the Cisco 880 Series helps ensure that if wireless connectivity is to be used, it can be done securely. (See Cisco Business-Ready Teleworker Solutions for more information.)

Remote call center agent: Similar to teleworking applications, this solution extends the Cisco IP Contact Center solution for telephone call center agents to remote sites. With a high-quality, secure connection through the Cisco 880 Series, the call center agent can be dispersed away from costly call center facilities while maintaining secure and productive voice and data access in the home. Business continuity solutions in the Cisco 880 Series provide reliability and continuous business operation.

Retail VPN: Retail stores migrating from dialup connections for point-of-sale transactions can use the Cisco 880 Series to take advantage of low-cost broadband access with the required security to comply with payment card industry (PCI) and other data security requirements. Multiple devices and applications can then be added to the store network to take advantage of the increased bandwidth and also incorporate optional WLAN support to enable secure mobility and enhance productivity.

Managed services: Service providers and value-added resellers can use the Cisco 880 Series as a platform to offer differentiated business-class security and WLAN services for small to medium-sized business customers.

Features and Benefits

Table 3 lists the features and benefits of the Cisco 880 Series Integrated Services Routers.

Table 2. Features and Benefits

Feature

Benefit

Increased Performance to Run Concurrent Services

• The performance in a Cisco 880 Series router allows customers to take advantage of broadband network speeds while running secure, concurrent data, voice, video, and wireless services.

Enhanced Security

• Integrated stateful inspection firewall for network perimeter security
• High-speed IPSec 3DES and AES encryption for data privacy over the Internet
• Intrusion prevention to enforce security policy in a larger enterprise or service provider network
• Content filtering offers category-based URL classification and blocking, thus providing increased productivity and better use of company resources.

Redundant WAN Links

• Provides business continuity and WAN diversity with multiple WAN links: Fast Ethernet, G.SHDSL, 3G, ISDN.

4-Port 10/100-Mbps Managed Switch

• Allows multiple devices to be connected in a small office, with the ability to designate a port as network edge.
• Optional external PoE adapter for powering IP phones and external access points, to avoid individual power supplies or power injectors.
• VLANs allow for secure segmentation of network resources.

AUX/CONS Port

• Single dual-purpose port provides direct connection to a console or external modem for management or backup access point.

Optional 802.11g/n Access Point

• Broadband router with secure integrated access point in a single device.
• Integrated Wi-Fi Access Point with IEEE 802.11n draft 2.0 standard support for mobile access to high-bandwidth data, voice and video applications through the use of multiple-input multiple-output (MIMO) technology that provides increased throughput, reliability and predictability. 
• Supports both autonomous and unified modes.

Real Time Clock

• Built-in real-time clock maintains an accurate date and time for applications that require an accurate time stamp, such as logging and digital certificates.

Cisco Configuration Professional

• Cisco Configuration Professional uses smart wizards and task-based tutorials, which can be used by resellers and customers to quickly and easily deploy, configure, and monitor a Cisco access router without requiring knowledge of the Cisco IOS Software command-line interface (CLI).

Unified Wireless Management

• Provides automated and simplified configuration and management of APs without manual intervention
• Unified HREAP provides the following:
• WLAN services to remote and branch offices without deploying a wireless LAN controller at each location
• Centrally configure and control unified WLAN services for remote offices through a wide area network (WAN) link
• Allows flexibility in setting up wireless access at remote locations by specifying how traffic is to be bridged or tunneled

Summary

Cisco 880 Series Integrated Services Routers combine increased network performance with advanced security to allow small office customers to get the most from their broadband connections. With models supporting different broadband technologies such as DSL, 3G, and Metro Ethernet, the Cisco 880 Series can be deployed at any small office location. Optional integrated 802.11g/n wireless capabilities provide true business-class WAN and WLAN access in a single solution. With the Cisco 880 Series, enterprise IT managers and service providers can take advantage of a solution that can be easily set up at the remote site and can be centrally managed to reduce ongoing operational costs.

Product Specifications

Tables 3 through 5 list software and hardware features of the Cisco 880 Series.

Table 3. Cisco IOS Software Features on Cisco 880 Series: Advanced Security Feature Set (Default)

Feature

Description

IP and IP Services Features

• Routing Information Protocol (RIPv1 and RIPv2)
• Generic routing encapsulation (GRE)/MGRE
• Cisco Express Forwarding
• 802.1d Spanning Tree Protocol
• Layer 2 Tunneling Protocol (L2TP)
• Layer 2 Tunneling Protocol Version 3 (L2TPv3)
• Network Address Translation (NAT)
• Dynamic Host Configuration Protocol (DHCP) server/relay/client
• Dynamic DNS
• DNS Proxy
• DNS Spoofing
• Access control lists (ACLs)

DSL and ATM Features (DSL Models Only)

• ATM Variable Bit Rate/real-time (VBR-rt)
• ATM Unspecified Bit Rate (UBR), Constant Bit Rate (CBR), and Variable Bit Rate/non-real-time (VBR-nrt)
• ATM Operation, Administration, and Maintenance (OAM) Support for F5 Continuity Check; segment and end-to-end loopback; and Interim Local Management Interface (ILMI) support
• Dying Gasp support
• TX ring adjustment
• VC bundling
• Per-VC queuing
• Per-VC traffic shaping
• 20 ATM virtual circuits
• RFC 1483/2684
• Point-to-Point Protocol over ATM (PPPoA)
• PPP over Ethernet (PPPoE)

Switch Features

• Auto MDI-MDX
• 8 802.1Q VLANs
• MAC Filtering
• 2-port 802.3af and Cisco compliant PoE
• Switch Port Analyzer (SPAN)
• Storm Control
• Smartports

Security Features

• Secure Connectivity:
• SSL VPN for secure remote access
• Hardware-accelerated DES, 3DES, AES128, AES192, AES256
• Public Key Infrastructure (PKI) support
• 20 IPSec Tunnels
• Cisco Easy VPN Client and Server
• NAT transparency
• Zone-Based Policy Firewall
• VRF-aware stateful Inspection Routing Firewall
• Stateful Inspection Transparent Firewall
• Advanced Application Inspection and Control
• Secure HTTP (HTTPS), FTP, and Telnet Authentication Proxy

QoS Features

• Weighted Fair Queuing (WFQ)
• Class-Based WFQ (CBWFQ)
• Policy-based routing (PBR)
• Class-Based QoS MIB
• CoS to DSCP mapping

Management Features

• Cisco Configuration Professional
• Cisco Configuration Express
• Cisco Configuration Engine support
• Cisco AutoInstall
• IP SLA
• Embedded Event Manager (EEM)
• CiscoWorks
• Cisco Security Manager
• Telnet, Simple Network Management Protocol (SNMPv3), SSH, CLI and HTTP management
• RADIUS and TACACS+
• Out-of-band management with ISDN S/T port or external modem through virtual auxiliary port
• WCS for management of Unified APs in models supporting WLAN

High-Availability Features

• Virtual Router Redundancy Protocol (VRRP) (RFC 2338)
• Hot Standby Router Protocol (HSRP)
• MHSRP
• Dial backup with external modem through virtual auxiliary port
• Dial backup with ISDN S/T port (DSL models only)
• 3G backup

Number of Recommended Users

20

Table 4. Cisco IOS Software Features on Cisco 880 Series: WLAN Features (Available with Wireless Option)

Feature

Description

WLAN Hardware

• IEEE 802.11n draft 2.0 standard based access point with 802.11 b/g compatibility
• Automatic rate selection for 802.11g/n
• Captive omnidirectional 2dBi gain dipole antennas
• 2x3 MIMO radio operation
• Wi-Fi 802.11n Draft v2.0 certified

WLAN Software Features

• Autonomous Access Point
• WCS support for monitoring of autonomous mode access points
• Maximize throughput or maximize range option
• Software-configurable transmit power
• Radio roles include access point, root bridge, non-root bridge, and workgroup bridge
• Wireless Multi Media Certification (WMM)
• TSPEC Call Admission Control to ensure voice quality is maintained
• Unscheduled Automatic Power Save Delivery (UPSD) to reduce latency

WLAN Security Features

• 802.11i
• Wi-Fi Protected Access (WPA) and AES (WPA2)
• EAP Authentication: Cisco LEAP, PEAP, EAP-TLS, EAP-FAST, EAP-SIM, EAP-MD5, EAP-TTLS
• Static and dynamic Wired Equivalent Privacy (WEP)
• Temporal Key Integrity Protocol/Simple Security Network (TKIP/SSN) encryption
• MAC authentication/filter
• User database for survivable local authentication using LEAP and EAP-FAST
• Configurable limit to the number of wireless clients
• Configurable RADIUS accounting for wireless clients
• PSK (Pre Shared Keys) (WPA-SOHO)

Certifications

SSIDs

16

Wireless VLANs

8

Encrypted Wireless VLANs

8

MBSSIDs

16

Cisco IOS Software Advanced IP Services Feature Set (Optional Software Upgrade)

The Advanced IP Services software image has all the features of the Advanced Security software image, with the addition of the following features.

Table 5. Cisco IOS Software Features on Cisco 880 Series: Advanced IP Services Feature Set (Optional Software Upgrade)

Feature

Description

IP and IP Services Features

• Open Shortest Path First (OSPF)
• Border Gateway Protocol (BGP)
• Enhanced Interior Gateway Routing Protocol (EIGRP)
• VRF Lite
• NHRP
• BFD
• WCCP

Switch Features

• Dynamic and static port security
• Secure MAC address
• IGMPv3 snooping
• 802.1x

Security Features

• Secure Connectivity
• DMVPN
• Tunnel-less Group Encrypted Transport VPN
• VRF-aware IPSec
• SSL VPN
• IPSec over IPv6
• Adaptive Control Technology
• SIP Application Layer Gateway
• Cisco IOS Firewall
• VRF-aware Firewall
• Content Filtering
• Subscription based Content Filtering
• Websense and Smartfilter using WCCP
• Cisco IOS Software black and white lists
• Integrated Threat Control
• Intrusion prevention system (IPS)
• Control Plane Policing
• Flexible Packet Matching
• Network Foundation Protection

QoS Features

• Low-Latency Queuing (LLQ)
• Class-Based Traffic Shaping (CBTS)
• Class-Based Traffic Policing (CBTP)
• Class-Based Weighted Random Early Detection (CBWRED)
• Network-Based Application Recognition (NBAR)
• Link Fragmentation and Interleaving (LFI)
• Resource Reservation Protocol (RSVP)
• RTP Header compression (cRTP)
• Differentiated Services (DiffServ)
• QoS Preclassify and Pre-fragmentation
• HQoS

Metro Ethernet Features

• Ethernet Operations, Administration, and Maintenance (Ethernet OAM)
• Ethernet Local Management Interface (Ethernet LMI)
• Hierarchical QoS (HQoS)

IPv6 Features

• IPv6 addressing architecture
• IPv6 name resolution
• IPv6 statistics
• IPv6 translation-transport packets between IPv6-only and IPv4-only endpoints (NAT-PT)
• ICMPv6
• IPv6 DHCP

IPv6 Multicast Features

• Protocol Independent Multicast (PIM) Sparse Mode
• PIM Sparse-Dense Mode
• Auto Route Processing (Auto-RP)

Unified WLAN Management

• Unified access point features:
• Supported by wireless LAN controller and WCS
• Configurable local or central switching for HREAP mode
• Radio management via WCS
• Seamless roaming with Mobility Groups

System Specifications

Table 6 lists the system specifications for the Cisco 880 Series Routers.

Table 6. System Specifications

Feature

Specification

Default DRAM

256 MB on Cisco 880 Series Data Models

Maximum DRAM

768 MB

Default and Maximum Flash Memory

128 MB on Cisco 880 Series Data Models

WAN

• Fast Ethernet
• G.SHDSL (2- and 4-wire support) with ISDN backup
• FE and 3G WAN for CDMA and GSM/UMTS
• G.SHDSL and 3G WAN for CDMA and GSM/UMTS
3G WAN types supported:
• CDMA-EVDO RevA / EVDO Rel0 / 1xRTT
• GSM/UMTS-HSDPA / UMTS / EDGE / GPRS

LAN Switch

Managed 4-port 10/100BASE-T with autosensing Media Device In/Media Device Cross Over (MDI/MDX) for autocrossover

802.11g/n AP based on IEEE 802.11n draft 2.0 standard

Optional on all models

Console/Auxiliary Port

RJ-45

1 USB 1.1 Port for Advanced Security Features Such as Security Tokens, or USB Flash

• 1 USB 1.1 port on Cisco 881 and Cisco 888 Series
• USB devices supported:
• USB eTokens
• USB Flash
• USB 1.1 port cannot be used for connecting external devices other than those specified at: http://www.cisco.com/en/US/partner/prod/collateral/modules/ps6247/product_data_sheet0900aecd80232473.htm

ISDN Basic Rate Interface (BRI) S/T

• Available on:
• Cisco 888 for out-of-band management and dial backup or primary
• Supports point to point and point-to-multipoint configurations

3G Express Card Modem1

• Available on:
• Cisco 881G for backup or primary
• Cisco 888G for backup or primary

External Power Supply

Universal 100 to 240 VAC input; 60W, 12VDC output

Inline PoE

Optional internal adapter for inline PoE on 2 switch ports for IP phones or external wireless access points, 802.3af compliant and Cisco PoE compliant

G.SHDSL Specifications

• Conexant Chipset
• 2-wire and 4-wire modes supported
• Annex A and Annex B are supported starting with Cisco IOS Software Release 12.4(15)XZ
• Support for wetting current (Section A.5.3.3 of G.991.2)
• Support for dying gasp; uses power status bit (Section 7.1.2.5.3 of G.991.2) for signaling
• Symmetrical WAN speeds of 2.304 Mbps per pair

Wireless Specifications

• 2.4 GHz

Data Rates Supported

• 802.11b: 1, 2, 5.5, 6, 9, 11 Mbps
• 802.11g: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, and 54 Mbps
• 802.11n: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54, m0-m15

Maximum Transmit Power (2 Channel Aggregate)

Note: Maximum power setting subject to changes by channel and by region depending on regulations
• 802.11b 20 dBm
• 802.11g 17 dBm
• 802.11n 16 dBm

3G Specifications

Frequency Bands

• 850/1900 MHz for CDMA 2000 Rev A/ Rev 0 and CDMA 1xRTT
• 850/1900/2100 MHz for HSPA/UMTS/EDGE/GPRS
• 900/1800 MHz for EDGE/GPRS

Physical Dimensions and Weight

• Product dimensions:
• Nonwireless models:
• W X D X H = 12.8" x 9.8" x 1.9" (325mm x 249mm x 48mm) (includes rubber feet)
• W X D X H = 12.8" x 9.8" x 1.75" (325mm x 249mm x 44mm) (without rubber feet)
• Wireless models:
• W X D X H = 12.8" x 10.4" x 1.9" (325mm x 264mm x 48mm) (includes rubber feet)
• W X D X H = 12.8" x 10.4" x 1.75" [325mm x 264mm x 44mm) (without rubber feet; excludes antennas)
• Weight: 5.5 lb (2.5 kg) maximum

Power

• Product power specifications:
• AC input voltage: 100 to 240 VAC
• Frequency: 50 to 60 Hz
• Maximum output power: 60W
• Output voltages: 12V DC
• Optional internal PoE with external adapter:
• Maximum output power: 80W
• Output voltage-external 48V DC

Approvals and Compliance

• ·IEC 60950-1:2005, Second Edition, with all country deviations
• AS/NZS 60950-1:2003, First Edition