Cisco 891 Gigabit Ethernet security router with SFP and 24-ports Ethernet Switch - CISCO891-K9

CISCO891-K9 Specifications

IP and IP services

● Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2)

● Generic Routing Encapsulation (GRE) and Multipoint GRE (MGRE)

● Cisco Express Forwarding

● Standard 802.1d Spanning Tree Protocol

● Layer 2 Tunneling Protocol (L2TP)

● Layer 2 Tunneling Protocol Version 3 (L2TPv3)

● Network Address Translation (NAT)

● Dynamic Host Configuration Protocol (DHCP) server, relay, and client

● Dynamic Domain Name System (DNS)

● DNS Proxy

● DNS Spoofing

● Access control Lists (ACLs)

● IPv4 and IPv6 Multicast

● Open Shortest Path First (OSPF)

● Border Gateway Protocol (BGP)

● Performance Routing (PfR)

● Enhanced Interior Gateway Routing Protocol (EIGRP)

● Virtual Route Forwarding (VRF) Lite

● Next Hop Resolution Protocol (NHRP)

● Bidirectional Forwarding Detection (BFD)

● Web Cache Communication Protocol (WCCP)

xDSL

● True Multimode VDSL2 and ADSL2+ over Annex A, B, J, and M including traditional G.DMT and T1.413

● World-class interoperability with industry-standard DSL access multiplexer (DSLAM) chipsets

● Highest field reliability with Impulse Noise Protection over REIN/SHINE, Extended INP-Delay, G.INP, Physical Layer Retransmission, SRA, and Bitswap

● VDSL2 Persistent Storage Device (PSD) profiles up to 17a/b with support for Spectral Shaping

● VDSL2 Vectoring to offer blazing fiber speeds over copper

● Support for 4-pair multimode G.SHDSL; that is, ATM and EFM

● Remote management with TR069 and CWMP

● Investment protection with GE and SFP for future fiber that could replace xDSL deployment

Switch features

● Auto Media Device In/Media Device Cross Over (MDI-MDX)

● 25 802.1QVLANs

● MAC filtering

● Four-port 802.3af and Cisco compliant PoE

● Switched Port Analyzer (SPAN)

● Storm Control

● Smart ports

● Secure MAC address

● Internet Group Management Protocol Version 3 (IGMPv3) snooping

● 802.1x

Security features

● Secure connectivity:

● Secure Sockets Layer (SSL) VPN for secure remote access

● Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256

● Public-Key-Infrastructure (PKI) support

● Fifty IPsec tunnels

● Cisco Easy VPN Client and Server

● NAT transparency

● Dynamic Multipoint VPN (DMVPN)

● Tunnel-less Group Encrypted Transport VPN

● VRF-aware IPsec

● IPsec over IPv6

● Adaptive control technology

● Session Initiation Protocol (SIP) application-layer gateway

● Cisco IOS Firewall:

◦ Zone-Based Policy Firewall

◦ VRF-aware stateful inspection routing firewall

◦ Stateful inspection transparent firewall

● Advanced application inspection and control

● Secure HTTP (HTTPS), FTP, and Telnet Authentication Proxy

● Dynamic and static port security

● Firewall stateful failover

● VRF-aware firewall

● Cisco ScanSafe Connector

● Cisco IOS Software blocked and allowed lists

● Integrated threat control:

◦ Intrusion Prevention System (IPS)

● Control Plane Policing

● Flexible Packet Matching

● Network foundation protection

Quality of Service (QoS)

● Low-Latency Queuing (LLQ)

● Weighted Fair Queuing (WFQ)

● Class-Based WFQ (CBWFQ)

● Class-Based Traffic Shaping (CBTS)

● Class-Based Traffic Policing (CBTP)

● Policy-Based Routing (PBR)

● Class-Based QoS MIB

● Class of Service (CoS)-to-Differentiated Services Code Point (DSCP) mapping

● Class-Based Weighted Random Early Detection (CBWRED)

● Network-Based Application Recognition (NBAR)

● Link Fragmentation and Interleaving (LFI)

● Resource Reservation Protocol (RSVP)

● Real-Time Transport Protocol (RTP) header compression (cRTP)

● Differentiated Services (DiffServ)

● QoS preclassify and prefragmentation

● Hierarchical QoS (HQoS)

Management

● Cisco Configuration Professional

● Cisco Configuration Express

● Cisco Configuration Engine support

● Cisco AutoInstall

● Cisco IP Service-Level Agreement (IP SLA)

● Cisco IOS Embedded Event Manager (EEM)

● CiscoWorks

● Cisco Security Manager

● Telnet, Simple Network Management Protocol Version 3 (SNMPv3), Secure Shell (SSH) Protocol, Command-Line Interface (CLI), and HTTP management

● RADIUS and TACACS+

● Out-of-band management with ISDN S/T port or external modem through a virtual auxiliary port on models supporting those interfaces; refer to Table 2 for details

● Cisco Wireless Control System (WCS) for management of unified access points in models supporting WLAN; on models supporting WLAN, refer to Table 2 for details

High availability

● Virtual Router Redundancy Protocol (VRRP) (RFC 2338)

● HSRP

● MHSRP

● Dial backup with external modem through virtual auxiliary port

● Dial backup with ISDN S/T or V.92 Analog modem port

Metro Ethernet

● Ethernet OA&M

● Ethernet Local Management Interface (E-LMI)

● IP SLA for Ethernet

IPv6

● IPv6 addressing architecture

● IPv6 name resolution

● IPv6 statistics

● IPv6 translation: Transport packets between IPv6-only and IPv4-only endpoints (NAT-Protocol Translation)

● Internet Control Message Protocol Version 6 (ICMPv6)

● IPv6 DHCP

● OSPFv3

● BGP4+

● IPv6 Path Maximum Transmission Unit (PMTU)

● IPv6 Neighbor Discovery

● IPv6 Stateless Address Auto Configuration (SLAAC)

● IPv6 Multicast Routing

Unified WLAN management

● Unified access-point features:

● Supported by wireless LAN controller and Cisco WCS

● Configurable local or central switching for Hybrid Remote Edge Access Point (HREAP) mode

● Radio management through Cisco WCS

● Transparent roaming with mobility groups

Application visibility and control

● NBAR2

● Flexible NetFlow (FNF)

● Performance Agent

Number of recommended users

● 50

WLAN Features (Available with Wireless Option)

Standard 802.11 a/g/n access point

● Optional on Cisco 890 Series models

WLAN hardware

● Support for Cisco CleanAir technology on Cisco 897 and 891F

● Automatic rate selection for 802.11a/g/n

● Noncaptive RPTNC omnidirectional dipole antennae; 2-dBi gain @ 2.4 GHz, 5-dBi gain @ 5 GHz

● 2 x 3 Multiple Input, Multiple Output (MIMO) radio operation

● Wi-Fi 802.11n Draft v2.0 certified

WLAN software features

● Autonomous or unified access point

● Cisco WCS support for monitoring of autonomous-mode access points

● Option to maximize throughput or maximize range

● Software-configurable transmit power

● Radio roles, including access point, root bridge, nonroot bridge, and workgroup bridge

● Wi-Fi Multimedia (WMM) certification

● Traffic specifications (TSPEC) Call Admission Control (CAC) to ensure voice quality is maintained

● Unscheduled Automatic Power Save Delivery (UPSD) to reduce latency

WLAN security features

● Standard 802.11i

● Wi-Fi Protected Access (WPA) and AES (WPA2)

● EAP authentication: Cisco Light Extensible Authentication Protocol (LEAP), Protected Extensible Authentication Protocol (PEAP), Extensible Authentication Protocol Transport Layer Security (EAP TLS), Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST), Extensible Authentication Protocol-Subscriber Information Module (EAP-SIM), Extensible Authentication Protocol-Message Digest Algorithm 5 (EAP-MD5), and Extensible Authentication Protocol‑Tunneled TLS (EAP-TTLS)

● Static and dynamic Wired Equivalent Privacy (WEP)

● Temporal Key Integrity Protocol/Simple Security Network (TKIP/SSN) encryption

● MAC authentication and filter

● User database for survivable local authentication using LEAP and EAP-FAST

● Configurable limit to the number of wireless clients

● Configurable RADIUS accounting for wireless clients

● Preshared keys (PSKs) (WPA-small office or home office [WPA-SOHO])