Cisco s Integrated Services Routers

Transcription

1 Cisco s Integrated Services Routers Secure, Wire-speed Delivery of Concurrent Services and Applications Philipp Hausner Product Manager MCEBU EMEA 1

2 Agenda Reasons for ISR ISR Architecture ISR Portfolio New Interfaces Security Voice Cisco IOS ISR Pricing 2

3 Reasons for ISR 3

4 SMBs and Enterprises Priorities for Branch and Router-Integrated Services More than half of the respondents PREFERRED router-integrated services for their small offices and enterprise branch offices Converged data, security, voice enables customers to protect, optimize, grow their businesses Systems approach maximizes operating efficiencies: More time for network planning, design Improve network monitoring and troubleshooting Offload voice and data staff Leverage better pricing/packaging Functions that SHOULD be router-integrated n=331 Firewall VPN Intrusion Detection Anti-Virus Software IP Telephony Compression Content Filtering Caching QoS Streaming Multicasting Cisco Survey: June 03 4

5 Integrated Systems Approach Redefines Best in Class In Line IPS, NAC DSP s Call Processing Multiservice Access Router Management Voice & Security Acceleration New Intelligent Services Integrated Services Routers Deliver secure, wire-speed, concurrent data, voice, and video Speed application deployment and reduce costs and complexity Unparalleled services, performance, and investment protection 5

6 Cisco s New Integrated Services Routers New Systems Approach For Services Delivery Embedded Security And Voice In Cisco Branch + Small Office Routers CONCURRENT WIRE-SPEED SERVICES Sustained wire-speed performance with concurrent services Up to 5X service density, 7X performance, 4X memory! Backward compatibility with existing router modules for solid investment protection Integrated Services Routers Embedded security, tightly integrated with voice Industry-leading network availability and resilience Plus headroom to grow! 6

7 The Value of a Systems Approach V3PN (IPSec, QoS, GRE) Deliver latency-sensitive data, voice, video traffic across the VPN Converged voice, video and data network reduces cost and eases deployment Tightly Integrated Services For Advanced Applications Voice Security Toll-Quality Secure Voice (Voice, QoS, crtp, srtp) Deliver toll quality IP Telephony over an IP WAN Speeds secure, high-quality IP Telephony deployments across the enterprise DMVPN (IPSec, NHRP, OSPF) Enables on-demand and scalable full VPN mesh Reduces network latency, conserves central bandwidth, and simplifies VPN deployment Routing Services Integrated Services Routers Network Admission Control (ARP, EAP, Radius ACLs) 1st phase of Cisco Self- Defending Network initiative: limits network access to compliant and trusted endpoints Proactively reduces virus and worm infections, protects assets 7

8 ISR Architecture 8

9 Integrated Services Router Architecture Flash CPU DRAM Faster CPU 5x perfomance of existing platforms DDR SDRAM with ECC (Error correcting code) is used for higher performance and greater reliability* Flash is external accessible cardflash (CF) * 2811 and above 9

10 Integrated Services Router Architecture RTC Flash CPU DRAM Real-Time-Clock (RTC) allows to have correct date and time even after reboot or power outages Especialy needed for security (certificates) and voice 10

11 Integrated Services Router Architecture RTC Flash DRAM CPU ASIC newly developed ASICs to allow for higher performance for all applications non-blocking architecture WIC/ control logic TDM switch 32 Streams DSP Packet pump PCI to PCI bridge 2 PCI bridges 11

12 Integrated Services Router Architecture RTC Flash DRAM CPU ASIC GE GE 2 onboard LAN ports 10/100BaseT up to /100/1000BaseT on 2821 and above Support for SFP (Small Formfactor Plugable) on 3800 series for fiber connectivity VLAN and 802.1q support 12

13 Integrated Services Router Architecture Flash DRAM (high speed WIC) RTC CPU ASIC GE GE Higher performance 400Mbps Expanded real estate, double wide form factor will be available by removing a tab between two adjacent slots WIC/VIC Compatible. The new slot can still function as a WIC/VIC slot More Power for DID and inline power 13

14 Integrated Services Router Architecture RTC Flash CPU ASIC DRAM GE GE NME NME = Network Module Enhanced Higher Performance, supports 1.2G connection into the ASIC More Power, NME increases power supply and cooling provided to the module POE Support: Support for Cisco pre-standard inline power and the new POE (802.3af) Legacy NM Compatibility, this will allow NMs to be installed in the NME slots. Increased Real Estate. supporting the new NME-X and NME-XD form factors 14

15 Integrated Services Router Architecture Flash DRAM RTC CPU ASIC AIM AIM GE GE Two AIM slots (Advanced Integration Modules) Voic Higher encryption performance Compression ATM AIM-VOICE are not supported NME 15

16 Integrated Services Router Architecture RTC Flash DRAM CPU ASIC USB USB GE GE USB ports Security Credentials / Tokens Removable storage Not supported in FCS AIM AIM NME 16

17 Integrated Services Router Architecture Flash DRAM RTC CPU ASIC VPN AIM AIM USB USB GE GE Onboard hardware encryption supports IPsec DES, 3DES, and AES128, AES192, and AES 256 encryption perfomance from 14 Mbps to 100 Mbps (IMIX) depending on platform for higher performance AIM is available (disables on-board crypto) NME 17

18 Integrated Services Router Architecture Flash DRAM RTC CPU DSP ASIC VPN AIM AIM USB USB GE GE NME DSP slots on the motherboard PVDM II DSP SIMM support (same as NM-HDV2) Supports voice, transcoding and conferencing enables any slot to be voice ready TDM interconnects b/w DSPs on the motherboard and any other slot on the router 18

19 Integrated Services Router Architecture Flash DRAM RTC CPU DSP ASIC VPN AIM AIM USB USB GE GE EVM NME EVM slot on 2821 and 2851 dedicated slot intended for voice support EVM card (with expansion modules) supports high-density analog FXS, FXO,DID and BRI ports NM/ENM cannot plug into the EVM slot EVM cards supported in 3800 series on any NME slot* * max. 1 EVM in 3825, 2 EVMs in

20 Integrated Services Router Architecture Flash DRAM RTC CPU DSP ASIC VPN AIM AIM USB USB GE GE EVM Integrated in-line power supply delivers Cisco in-line power and IEEE 802.3af PoE two versions of power supply exist, standard or with in-line power support (field upgrade able) In-line Power NME 20

21 ISR Portfolio 21

22 Scalable from Small Business to Large Enterprises Right-Sized Router, Right-Sized Requirements 3800 Series Increased Value Extended to New Markets Performance and Services Density Substantial increase in price/performance ratio! 2800 Series Greater service densities across the portfolio! 1800 Series Highest Density and Performance for Concurrent Services Embedded, Advanced Voice, Video, Data & Security Services Integrated Security & Data Enterprise Branch Office Extension into new markets! Small Branch SMB 22

23 ISR Models Performance and Services Density 3800 Series 2800 Series Cisco 3825 Cisco 3845 Cisco 2801 Cisco 2811 Cisco 2821 Cisco 2851 Enterprise Branch Office 1800 Series Small Branch Cisco 1841 SMB 23

24 Investment Protection and Migration Path for Existing Customers Cisco 3800 Series Cisco 2800 Series Utilize existing platforms and modules for investment protection! Performance and Services Density Cisco 3700 Series Cisco 2600 Series Cisco 1751/1760 Cisco 1800 Series Cisco 1721 Cross compatibility with existing router modules Increased default memory across 1700, 2600, 3700 line Additional DRAM, reduced costs New feature development and additions until IOS 12(5) mainline No end of sale for at least months Continued software support for 5 years after last sale 24

25 18/28/3800 Concurrent Services QOS+FW+IDS+IPSEC+Voice 3825 CME:168 SRST: CME:240 SRST:720 DS CME:96 SRST: CME:48 SRST:48 Multiple T1/E T1/E1 CME:24 SRST: CME:36 SRST:36 T1/E T1/E1 Wan Bandwidth 25

26 New Cisco 1841 Router Secure, Concurrent Services for Small to Medium Business and Small Branch Offices Entry Services and Performance Integration FE 1841 Slots 2 Onboard DSP Slots N/A AIM Slots 1 Form Factor FE Default/Max. Memory Desk Embedded IPSec (Mbps, IMIX) MB / 384MB Security: On-board encryption, up to 800 VPN tunnels (AIM); IOS FW, NAC, IPS in software Performance for security and data services at broadband rates Integrated FE Ports Optional modular layer 2 switching AIM,, and VWIC Modularity Wide range of connectivity options Supports existing WIC/VIC/VWIC interfaces; investment protection Flexibility and Availability Flexible and adaptable services deployment; entry-level availability features 26

27 New Cisco 2801, 2811 Routers Performance and Density for Secure, Concurrent Services for Small to Medium Enterprise Branch Offices Mid/High-Density, High Performance Services FE USB FE FE FE VIC NME VIC NME / EVM Slot 0/0 1/0 Onboard DSP Slots 2 Onboard LAN Embedded IPSec (Mbps, IMIX) 2 2 FE 20 Form Factor 1RU 1RU Default/Max. Memory 2 FE MB/ 384MB 256MB / 760MB USB USB Security: On-board encryption, up to 1500 VPN tunnels (AIM); IOS FW, NAC, IPS, or Content Security Voice: Mid/High-density analog/digital voice with IP Telephony, Voice Mail; CCME support for up to 36 IP phones High-performance concurrent security, voice and advanced services to multiple T1/E1 WAN rates Integrated FE ports with copper support Integrated L2 switching with PoE Enhanced Modularity and Investment Protection Flexible expansion ( NME), additional concurrent services Existing NM, WIC/VIC/VWIC, AIM support Scalability and Availability Scalable services deployment and availability features 27

28 New Cisco 2821, 2851 Routers Performance and Density for Secure, Concurrent Services for Small to Medium Enterprise Branch Offices GE GE NME / EVM Slot 1/ Onboard DSP Slots 3 3 Onboard LAN GE GE 2 GE 30 Form Factor 2RU 2RU Default/Max. Memory NME Embedded IPSec (Mbps, IMIX) NME EVM 256MB / 1G USB USB 1/1 2 GE MB / 1G EVM USB USB Mid/High-Density, High Performance Services Security: On-board encryption, up to 1500 VPN tunnels (AIM); IOS FW, NAC, IPS, or Content Security Voice: Mid/High-density analog/digital voice with IP Telephony, Voice Mail; CCME support for up to 96 IP phones High-performance concurrent security, voice and advanced services to multiple T1/E1 WAN rates Integrated GE ports with copper support Integrated L2 switching with PoE Enhanced Modularity and Investment Protection Flexible expansion ( NME, EVM), additional concurrent services Existing NM, WIC/VIC/VWIC, AIM support Scalability and Availability Scalable services deployment and availability features 28

29 New Cisco 3825 and 3845 Routers Flagship Family to Scale Secure, Concurrent Services In Enterprise Branch Offices Highest-Density, Maximum Performance Services Integration Security: On-board encryption, up to 2500 VPN tunnels (AIM); IOS FW, NAC, IPS in hardware and Content Security USB USB GE GE SFP Voice: Highest densities for analog/digital voice support; CCME support for up to 240 IP phones NME NME NME NME Highest performance for maximum concurrent services at up to T3/E3 rates Integrated GE ports with copper/fiber support Integrated L2 switching with PoE NME Slots 2 4 Onboard DSP Slots 4 4 Dual Internal Power Supplies Embedded IPSec (Mbps, IMIX) Default/Max. Memory N/A Yes MB / 1G 256MB / 1G Maximum Modularity and Investment Protection Up to 4 NME, DSP slots to run unprecedented number of services concurrently Supports existing NM, WIC/VIC/VWIC, AIMs Superior Scalability and Availability Architected for scalable services deployment; advanced availability features minimize network downtime Hot-Swap Modules, integrated redundant power 29

30 Next generation portfolio hardware features On-board HW Encryption On-board DSP Slots On-board Ethernet Ports Optional Power over Ethernet Slots for Interface Cards Slots for Network Modules Slots for Advanced Integration Modules Mb/s 4 2 GE (10/100/1000) + 1 SFP 360W 4 4 NME/EVM 2 AIM Mb/s 4 2 GE (10/100/1000) + 1 SFP 360W 4 1 NME/EVM 1 NMED/EVM 2 AIM Mb/s 3 2 GE (10/100/1000) 360W 4 1 NMED 1 EVM 2 AIM Mb/s 3 2 GE (10/100/1000) 240W 4 1 NME 1 EVM 2 AIM Mb/s 2 2 FE 160W 4 1 NME 2 AIM 2 /VWIC/WIC/VIC Mb/s 2 2 FE 120W 1 VWIC/WIC/VIC 1 VWIC/VIC (voice only) None 2 AIM Mb/s No 2 FE No 2 /VWIC/WIC (data only) None 1 AIM 30

31 New Interfaces 31

32 High-Speed WAN Interfaces New Gigabit Ethernet 4 & 9 Port Etherswitch Low density L2 switching Standards based PoE (802.3af) support delivers 48V DC Power over a standard copper Ethernet cable Offers Optical and Copper connectivity without NM occupancy Support in 2811, 2821, 2851 & 3800 only Hi-Speed WAN Interface Card () Small Form Factor Pluggable (SFP) GE Transceiver 32

33 Extended Voice Module (EVM-HD) New EM 0 EM 1 RJ21 Connector The EVM card (with expansion modules) supports high-density FXS, FXO, Analog-DID and BRI ports Architecturally similar to the NM-HDA and shares one EM Baseboard: EVM-HD-8FXS/DID: High density voice/fax extension module 8FXS/DID Expansion Modules: EM-HDA-8FXS: 8-port voice/fax expansion module 8FXS EM-4BRI-NT/TE: 4-port voice/fax expansion module BRI (NT& TE) EM-HDA-3FXS/4FXO: 7-port voice/fax expansion module 3FXS/4FXO EM-HDA-6FXO: 6-port voice/fax expansion module 6FXO 33

34 Security 34

35 Hardware Innovation Raises Security Leadership Cisco Self-defending Network At Wire-speed! Complete, Preventative, Scalable Security Solutions Endpoint Protection Leverage the network to intelligently protect endpoints Secure Connectivity Secure and scalable network connectivity Network Admission Control 802.1x VPN, DMVPN, V3PN, MPLS-VPN, Secure Voice Network Infrastructure Protection Protect the network infrastructure from attacks and vulnerabilities Threat Response Prevent and respond to network attacks and threats such as worms Control Plane Policing Dynamic Intrusion Protection Firewall Built in VPN HW Encryption Secure Voice GE GE NME/NME-X EVM USB USB USB Secure Token Support High Performance AIM Security & Voice Services 35

36 V3PN: Secure, Toll Quality Voice, Video, Data LLQ before crypto to ensure voice priority VPN Encryption IPSec/GRE Tunnel LLQ before crypto to ensure voice priority srtp Protects LAN Egress Interface QoS Policy Telco/Broadband Service Provider Egress Interface QoS Policy V3PN: IPSec VPN tunnel built over GRE interface for site to site access Data, voice and video traffic delivered with QoS policies for latency sensitive traffic Benefits: LAN and WAN security Higher productivity Toll quality voice and video Lower bandwidth costs srtp Protects LAN VPN QoS V3PN Voice 36

37 Dynamic Multipoint VPN (DMVPN) Secure Meshed Tunnels Automatically! Spoke A Hub VPN = DMVPN Tunnels = Traditional Static Tunnels = Static Known IP Addresses = Dynamic Unknown IP Addresses Spoke B Dynamic Multipoint VPN: Spoke A needs to contact Spoke B, such as: V3PN Call PC Contact to a Server Learns real address of Spoke B via NHRP, OSPF or EIGRP (routing features) IPSec VPN tunnel to Spoke B is dynamically built over mgre interface Benefits: Additional Multicast, video traffic supported with GRE Full Meshed connectivity with configuration simplicity of hub and spoke Preserves (central) bandwidth, minimizes latency No administration required after initial configuration of DMVPN feature 37

38 Network Infrastructure Protection Maintaining Network Availability During DDoS Attacks Control Plane Policing Netflow monitoring Out-of-band management Network-based Application Recognition (NBAR) Protects access to control plane, even during DDoS attacks. Monitors packets, increases infrastructure reliability, and availability Provides early warning while visibility on traffic flows help you optimize network availability Ensures access despite DoS attacks, or congestion Helps identify worms and other attacks by tracking Layer 4-7 applications and protocols Role-based CLI Access Provides partitioned, non-hierarchical, access to CL commands for I secure, logical separation of router users (eg. NetOps and SecOps) Internet Router Netflow Collector or NAM Branch VPN Router Corporate Headquarters 38

39 USB Ports Removable Credentials First Routers in the Industry with USB Ports USB Ports integrated into all 3800, 2800, and 1800 models Initial support for Secure Token and FLASH Memory (Q1CY05) 1. Provisioning Secure configuration distribution Drop-ship router to location Provision boot-strap into Token, send Token to location Plug token into router, turn router on, router loads off bootstrap, router uses configuration on Token or downloads configuration 2. Distribution and Storage of VPN credentials (pre-shared keys and/or certificates) Easy to provision and distribute encryption keys, provides off-platform storage and generation Encryption keys are securely stored and removable 3. Bulk flash for image distribution/storage as alternative to Compact Flash deployment VPN AIM GE GE NME USB USB 2 USB Ports on 3800, 2851, 2821, 2811 Models 1 USB Port on 2801,

40 Router-Integrated Services Network Admission Control (NAC) Companies need to minimize downtime due to viruses and worms, protect network availability and integrity, manage network access, and enforce security policy Solution: Cisco Network Admission Control (NAC) Reduces IT costs by preventing external and internal threats Prevents contagious endpoints from infecting network; reduces downtime Day-zero protection, increases network availability, resilience, and productivity Leverages existing Cisco, antivirus, and endpoint investments Integrated Services Router is one of first network devices to enable NAC Cisco Integrated Services Router Policy (AAA) Svr Credentials Credentials Credentials EAP/UDP, EAP/802.1x Notification RADIUS Access Rights Comply? HTTPS Enforcement 40

41 Performance without Compromise Multiple Services Running Concurrently FW + IDS + VPN with 256 AES (IMIX traffic) % Mbps improvement w/hpii-+ 18% Mbps improvement w/onboard 200% Mbps improvement w/epii-+ 33% Mbps improvement w/onboard 840% Mbps improvement w/epii-+ 200% Mbps improvement w/onboard 900% Mbps improvement w/epii-+ 150% Mbps improvement w/onboard 300% Mbps improvement w/epii-+ 100% Mbps improvement w/onboard 400% Mbps improvement w/bpii-+ 250% Mbps improvement w/onboard 400% Mbps improvement w/bpii-+ 250% Mbps improvement w/onboard Previous AIM VPN Onboard VPN AIM-VPN 41

42 Cisco VPN / FW / IDS HW 1400 bytes H/W Crypto Onboard VPN Module Optional FW/IDS USB Secure Token FW Switch Ports Cisco 1721/1760 NA 10 Mbps 100 Tunnels 20 Mbps NA 4 Port 802.1X NO (3af) Cisco 1841/ Mbps 100 Tunnels 50 Mbps 800 Tunnels 50+ Mbps YES 4 or 8 Port 802.1X YES(3af) Cisco 2600XM/10/20/50 NA 14 Mbps 800 Tunnels 50 Mbps NA 16 Port 802.1X NO (3af) Cisco 2811/21/51 Cisco 3725/45 50/55/60 Mbps 150/250/300 Tunnels NA 70/130/150 Mbps 1800 tunnels 190 Mbps 1800 Tunnels 150+ Mbps 195 Mbps YES NA 4,8,6,16, X YES(3af) X NO (3af) Cisco 3825/45 80/110 Mbps 500/700 Tunnels 180/ Tunnels 200+ Mbps YES 4,8,16,24, X YES (3af) 1800, 2800, 3800 offer up to 4X the Security performance of the 1700,2600,3700s 802.3af is inline Power standard and is only 1800,2800, 3800 support Performance numbers based on max. throughput of large packets (1400-byte)-NOT IMIX 42

43 Cisco Router and Security Device Manager (SDM 2.1) for Simplified Management New! One touch router lock-down, auto secure Implements NSA guidelines, ICSA, and TAC recommendations Built-in GUI available for all series Industry leading router and security management tool for: VPN Firewall Routing LAN/WAN Interfaces WAN QoS 43

44 Voice 44

45 Hardware Innovation Raises Voice Leadership Cisco Services and Applications At Wire-speed! Affordable, Secure, Scalable Voice Solutions Advanced Voice Applications Leverages modularity for integration of voice applications Cisco CallManager Express, Survivable Remote Site Telephony, Cisco Unity Express Integrated Modularity Scales service capabilities and voice densities New extension voice module New high Speed Interface Cards Core Performance The foundation for unmatched voice performance New processor New specialized voice silicon New adaptable interfaces Embedded Modularity Enables embedded conferencing, automated attendant and voice mail New digital signal processor slots Advanced Integration module slots Embedded CME, SRST, Security, TCL and VXML support in IOS Voice/Fax and Conferencing DSPs Extension Voice Modules GE GE NME EVM USB USB Auto Attendant, Voic , AIM 45

46 Over 4 Million Cisco IP Phones Sold Worldwide, more than 17,500 Cisco IP Communications customers More than 60% of the Fortune 500 Cisco displacing 8,000 TDM phones every business day Ship rate increasing: 1st million: 3 years 2nd million: 1 year 3rd million: 8 months 4th million: 6 months Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q

47 IP Communications for the Branch Office Affordable and robust IP Communications for enterprise branches and small to medium sized businesses Solution: Cisco CallManager Express (CCME) with Cisco Unity Express (CUE) and SRST with CallManager Localized call processing with Cisco CallManager Express (CCME) for up to 240 phones! Failover localized call processing with Cisco Survivable Remote Site Telephony (SRST) for up to 720 phones! Distributed Voic via Cisco Unity Express (NM-CUE, or AIM-CUE) new 14 hour AIM Flash! Etherswitch Module for Line Powering IP Phones Centralized DSP resources for voice connectivity Higher digital and analog voice densities IP WAN Remote Users Data Center CCM Cisco Integrated Services Router CCME/SRST and NM- CUE or AIM-CUE 47

48 IP Communications Express Application: Small Standalone Office Deployment PSTN CO Line1, 2, 3, 4 Dial backup and POS DSL Public Internet Fax Analog phones GUI Management station Cisco Integrated Services Router with Cisco CallManager Express, Cisco Unity Express and IOS Firewall Catalyst PWR Access Switch Cisco IP Phone 7905 in lobby, break room, or conference room Printer Employee PC, Cisco IP Phone 7960G and voice mail Cisco IP Phone as the Attendant Console Application server IP Connected Land Mobile Radio Device Cisco IP Phone 7920 for roaming employees Wireless access point 48

49 Summary Voice Comparison Up to 40% improvement Up to 100% improvement Up to 60% improvement Up to 140% improvement Up to 115% improvement Up to 6 % improvement; also now supports CUE voice mail in AIM module Simultaneously active voice calls 1700/2600XM/ /

50 DS0 Connectivity Summary XM VG FXS FXO E&M Analog-DID CAMA BRI Ports BRI Channels Total T1/E1 Ports Onboard T1/E1 Ports NM/AIM-based T1/E1 Ports T1 Channels: DS0 Connectivity Onboard T1 DS0 Connectivity NM/AIM-based T1 DS0 Con tivity E1 Channels: DS0 Connectivity Onboard E1 DS0 Connectivity NM/AIM-based E1 DS0 Con tivity

51 CME 3.2 Platform Density Platform Max. Phone Max. DN CUE 1751, , 261xXM, 262xXM , 265xXM No AIM Only AIM/NM AIM/NM AIM/NM AIM/NM AIM/NM AIM/NM AIM/NM AIM/NM 51

52 SRST 3.2 Platform Density Platform Max. Phone Max. DN 1751, , 261xXM, 262xXM 2821, 265xXM

53 Cisco IOS 53

54 Cisco IOS Images One image for 1800 and 2800 series One image for 3800 series Starts with T train release 1800 / (8)T (11)T Cross-Platform Image Support 54

55 New IOS Software Architecture in 12.3 Simplified Image Selection SSH SSH SSH Advanced Enterprise Services Advanced IP Services Advanced Security NAC NAC SP Services IP Voice IP Base SSH Enterprise Services Enterprise Base NAC NEW SSH Simplifies feature set options (from 44 to 8) Advanced Security replaces: IP/FW/IDS IP Plus IPSec Security highlights IP FW Network Admission Control IP/FW/IDS/IPSec IOS Firewall, Intrusion Prevention Dynamic Multipoint VPN, AES SSH and SNMPV3 (DES) Voice highlights (IP Voice) H.323, SIP and MGCP, H.323 GK SRST, Call Manager Express, srtp Voice QoS features As you advance, all features below follow Router and Security Device Manager (SDM) ships with IOS IP Base image for all Integrated Services Routers 55

56 ISR Pricing 56

57 ISR Pricing Performance and Services Density 3800 Series 2800 Series Cisco 3825 $ 9500 Cisco 3845 $ Enterprise Branch Office 1800 Series Cisco 2801 $ 1995 Cisco 2811 $ 2495 Cisco 2821 $ 4495 Cisco 2851 $ 6495 Small Branch Cisco 1841 $ 1395 SMB 57

58 Example: VPN-Service Existing Platforms List Price ISR Platforms List Price Cisco 1721 $1 195 Cisco 1841 $1 395,00 Cisco 1760 $1 595 Cisco 2801 $1 995,00 Cisco 2611XM $2 495 Cisco 2811 $2 495,00 Cisco 2621XM $3 095 Cisco 2811 $2 495,00 Cisco 2650XM $3 295 Cisco 2821 $3 895,00 Cisco 2651XM $4 195 Cisco 2821 $3 895,00 Cisco 2691 $6 295 Cisco 2851 $6 495,00 Cisco 3725 $8 500 Cisco 3825 $9 500,00 Cisco 3745 $ Cisco 3845 $13 000,00 58

59 Example: VPN-Service Existing Platforms List Price VPN Module Total Price ISR Platforms List Price Delta % Cisco 1721 $1 195 $800 $1 995 Cisco 1841 $1 395,00 -$600,00-30% Cisco 1760 $1 595 $800 $2 395 Cisco 2801 $1 995,00 -$400,00-17% Cisco 2611XM $2 495 $1 750 $4 245 Cisco 2811 $2 495,00 -$1 750,00-41% Cisco 2621XM $3 095 $1 750 $4 245 Cisco 2811 $2 495,00 -$1 750,00-49% Cisco 2650XM $3 295 $1 750 $5 045 Cisco 2821 $3 895,00 -$1 150,00-23% Cisco 2651XM $4 195 $1 750 $5 945 Cisco 2821 $3 895,00 -$2 050,00-34% Cisco 2691 $6 295 $2 500 $8 795 Cisco 2851 $6 495,00 -$2 300,00-26% Cisco 3725 $8 500 $2 500 $ Cisco 3825 $9 500,00 -$1 500,00-14% Cisco 3745 $ $3 500 $ Cisco 3845 $13 000,00 -$2 500,00-16% 59

60 ISR VPN Bundles ISR Base Onboard AIM Current Base AIM C1841 $1,395 $2,495 $2,995 C1721 $1,195 $2,495 C2801 $1,995 $2,895 $3,595 C1760 $1,595 $2,895 C2811 $2,495 $3,395 $4,095 C2611 $2,495 $4,995 C2821 $3,895 $4,795 $5,495 C2621 $3,095 $5,395 C2851 $6,495 $7,395 $8,095 C2651 $4,195 $5,995 C2691 $6,195 $8,995 C3825 $9,500 $10,895 $12,395 C3725 $8,500 $10,995 C3845 $13,000 $14,395 $15,895 C3745 $12,000 $14,995 Generally the same or lower list prices for next generation with much more value and performance. 60

61 ISR Voice Gateway Bundles ISR Base G.711 DS0s Bundle Current Base G.711 DS0s Bundle C2801 $1,995 8 $2,695 C1760 $1,595 6 $2,595 C2811 $2, $3,195 C2611 $2,495 NA NA C2821 $3, $4,695 C2621 $3,095 NA NA C2851 $6, $7,395 C2651 $4, $5,995 C2691 $6,195 NA NA C3825 $9, $10,495 C3725 $8,500 NA NA C3845 $13, $13,995 C3745 $12,000 NA NA C2801: more value and performance for a slightly higher list price. C2851: price/performance sweet spot - moderately higher list price for more value and performance 61

62 ISR CCME / SRST Bundles ISR Base G.711 DS0s CCME Phones Bundle Curre nt Base G.711 DS0s CCME Phones Bundle C2801 $1, $3,095 C1760 $1, $2,995 C2811 $2, $3,695 C2611 $2, $4,395 C2821 $3, $5,395 C2621 $3,095 NA NA NA C2851 $6, $8,595 C2651 $4, $6,595 C2691 $6,195 NA NA NA C3825 $9, $12,295 C3725 $8, $12,995 C3845 $13, $16,495 C3745 $12, $16,495 C2801, C2811, C3800s: more value and performance for about the same list price C2851: price/performance sweet spot - moderately higher list price for more value and performance 62

63 Summary Redefining best in class routing: unique systems approach Complete new family for today s and tomorrow s needs Secure, data, voice, video services at wire speed More value, headroom for growth Industry and technology leadership Maximum investment protection Comprehensive support and services, global partnerships 63

64