Cisco IOS Software & Router solutions for the SMB market

Transcription

1 & Router solutions for the SMB market 1

2 Agenda Market Dynamics and Business Needs Cisco IOS Fundamentals Intelligent Network Services Cisco IOS Releases Selling Cisco IOS Router Portolio in SMB market Selling Cisco Routing Solutions 2

3 E-Business Opportunities and Network Requirements Increase revenues & customer base E-Commerce Self services, decreased costs, knowledge transfer Net Impact of Availability, Security, Scalability High productivity, better resource management Empowered partners, improved timeto-market & intellectual capital Reduced training costs, improved communications, increased competitive edge E-Learning Customer Workforce Care Optimization Partner Care 4

4 Changing Market Drivers Market Drivers: Standardization on IP Multi-service connectivity Intranet applications SP Services/Bandwidth $$ New Market Drivers: E-business applications - web interfaces New Access Technologies Security QoS - Availability Data+Voice Convergence - IP Telephony More IP-based applications distributed to the Branch IP network Either integrated or Stand alone switching Headquarters Internet PSTN Cisco Router 6

5 Convergence to IP 8

6 Full Service Requirements Network is as dependable as traditional business tools Prioritised network traffic to ensure business critical applications receive highest priority Advanced security to protect electronic assets from unauthorised access Simplify device management to free up technical resources Integrated management for voice and data traffic Decrease total cost of ownership Availability QoS Security Manageability Protect equipment investment by growing with business needs. Agility to react to changing business conditions Flexibility Modularity 9

8 Cisco IOS Defined Internetworking Operating System Internet Applications Advanced Services DSL Frame Relay Ethernet Network Platforms IDC: #2 operating system after MS Windows 12

9 Cisco IOS is Everywhere years - 80 plattforms in 25 families - supports more than 1000 RFCs Routers Routers, Switches Routers, Switches Multi-service platforms 13

11 Network Intelligence Intelligent Network Services Availability Security Quality of Service (QoS) ITS ( ) Network Management 19

12 Security Stateful Inspection Firewall Intrusion Detection NAT ACL Firewall - Line sharing - IP Address saving - LAN masking - Line sharing - Access Lists - IP Address saving- L3 packet filtering - LAN masking - Flow direction aware - Line sharing - IP Address saving - LAN masking Access Lists - Access Lists - L3 packet filtering - Flow direction aware - L4 application filtering - Time stamp 21

13 VPN Virtual Private Network Main Office POP Business Partner Remote Office Regional Office Home Office Mobile Worker 22

14 Quality of Service Different applications require different priorities - SMTP Download - FTP Web - HTTP Application - ERP Internet Examples of QoS technologies: Priority Queuing (PQ) Weighted Fair Queuing (WFQ) Custom Queuing (CQ) Policy- Based Routing (PBR) Committed Access Rate (CAR) Class-Based Weighted Fair Queuing (CBWFQ) 23

15 Cisco Multiservice Routing Video PSTN IP Phone Services IP WAN Internet The router becomes the information gateway Uses advanced Cisco features to handle all traffic Network ready for next evolution 25

16 CallManager express (IOS Telephony Svcs) Switch Touch ITS CallManager express PSTN IP WAN 26

17 Availability Router availability Hardware quality ( SmartNet services) Cisco IOS ( SmartNet services) Network availability Hot Standby Router Protocol (HSRP) Virtual Router Redundancy Protocol (VRRP) Router A Router B 27

18 Network Management Management features of Cisco IOS: Remote configuration Remote correction Remote debugging Central NMS workstation New IOS version New configuration Remote router Switch 28

20 Cisco IOS Releases Different Packages depending on needs Flexible Choice Upgradeable Voice Feature Sets IP Only Security ( ) 30

22 Key Cisco IOS Benefits Broad range of functionality Lower cost of ownership Integrated approach Consistent implementation across Widest range of platforms Compliance to Standards Interoperability 32

23 How To Sell Cisco IOS Educate your customers about e-business The importance of the network supporting e-business Demonstrate that a single network OS can save money Availability Connectivity Scalability Explain how IOS upgrades can provide investment protection Emphasize that Cisco has the resources that SMBs need For more information on Cisco IOS check out the following links ABCs of IOS : Feature Navigator: 34

24 Agenda Market Dynamics and Business Needs Cisco IOS Fundamentals Intelligent Network Services Cisco IOS Releases Selling Cisco IOS Cisco Router Portolio in SMB market Selling Cisco Routing Solutions 35

25 Router Evolution Low density Switching Advanced Security Functionality/Integration Routing, INS VoFR, VoIP IOS Firewall/Encryption Multi-Protocol Routing, Access Control, QoS Tools Content Delivery Voice Apps IP Telephony Time Today 36

26 Cisco IOS Router Portfolio Teleworker/SOHO SMB/Small Branch Enterprise Branch Large Branch Corporate and Internet 37

27 What Access Router To Select? Select the platform according to the WAN interfaces Understand features required to run the applications Select required routing protocols Understand the traffic type (bandwidth, volume, ) Calculate the performance needed per application Plan future customer requirements 39

28 Small Office & Home Office Router Cisco SOHO 90 and 830 Series Routers 40

29 Cisco 830 and SOHO 90 Series Secure Broadband Routers Advanced security for data, voice and video access ideal for small offices and teleworkers Four New Models: Cisco 831 Ethernet Broadband Router Cisco 837 ADSL Broadband Router Cisco SOHO 91 Ethernet Broadband Router Cisco SOHO 97 ADSL Broadband Router 41

30 Extending Integrated Security and Advanced Services To the Edge Cisco 830 Series Hardware Acceleration Stateful Firewall 4-Port 10/100 Switch IDS and URL filtering* IPSec 3DES Out-of-Band Management / Dial Back Up QoS for Voice and Video *Available as software upgrade in 03 Cisco SOHO 90 Series 42

31 Cisco 831 Ethernet Broadband Router Features Advanced security for data, voice and video access ideal for small offices and teleworkers Advanced Security and Performance for Enterprise Class VPNs Hardware-Assisted Encryption VPN throughput (2.0 Mbps aggregate with IMIX traffic) 3DES encryption, Cisco Easy VPN remote, AES*, IDS*, TACACS+, RADIUS High Quality Secure Voice and Video Low Latency Queuing (LLQ), QoS (Class-Based Traffic Shaping, CAR, LLQ over VPN*, LFI), Multicast Manageable, Scalable and Reliable Access Virtual AUX via console port for use with analog modem, HSRP, EIGRP, Cisco Router Web Set Up tool (CRWS) Integration with Cisco IE2100 Management Appliance Two Software Images: IP FW/VPN with VPN Hardware Acceleration (Default) PLUS QoS features *Available as software upgrade in 03 43

32 Cisco 831 Router Hardware 10/100 MB Ethernet Switch Connect to Ethernet network devices Console Port/Virtual AUX Port Connects to PC or terminal for configuration Allows external modem to be connected to the router Ethernet WAN Port Connects to DSL or Cable modem or Ethernet Switch 3DES IPSec Hardware Acceleration Processor Motorola RISC Memory Runs from DRAM DRAM Default: 32MB DRAM Max: 48MB FLASH Default: 12 MB FLASH Max: 16 MB 44

33 Cisco 837 ADSL Broadband Router Features Advanced security for data, voice and video access ideal for small offices and teleworkers Advanced Security and Performance for Enterprise Class VPNs Hardware-Assisted Encryption VPN throughput (2.0 Mbps aggregate with IMIX traffic) 3DES encryption, Cisco Easy VPN remote, AES*, IDS*, TACACS+, RADIUS High Quality Secure Voice and Video Low Latency Queuing (LLQ), QoS (Class-Based Traffic Shaping, CAR, LLQ over VPN*, LFI), Multicast Manageable, Scalable and Reliable Access Virtual AUX via console port for use with analog modem, HSRP, EIGRP, Cisco Router Web Set Up tool (CRWS), integration with Cisco IE2100 Two Software Images: IP FW/VPN with VPN (default) PLUS QoS and HW VPN acceleration Management Appliance *Available as software upgrade in 03 45

34 Cisco 837 Router Hardware 10/100 MB Ethernet Switch Connect to Ethernet network devices Console Port/Virtual AUX Port Connects to PC or terminal for configuration Allows external modem to be connected to the router 3DES IPSec Hardware Acceleration ADSL WAN Port Connects to SP network Processor Motorola RISC Memory Runs from DRAM DRAM Default: 32MB DRAM Max: 48MB FLASH Default: 12 MB FLASH Max: 16 MB 46

35 Cisco SOHO 91 Ethernet Broadband Router Features Affordable, secure, easy to use, broadband access for small offices Secure Internet Access Stateful inspection firewall, Software-based 3DES encryption Easy Set Up and Deployment Cisco Router Web Set Up tool One Software Image: IP FW/VPN Advanced Management Features for Low Cost of Ownership Remote management with Cisco IOS Software, integration with Cisco IE2100 Management Appliance 47

36 Cisco SOHO 91 Router Hardware 10/100 MB Ethernet Switch Connect to Ethernet network devices Console Port Connects to PC or terminal for configuration Ethernet WAN Port Connects to DSL or cable modem or Ethernet switch Processor Motorola RISC Memory Runs from DRAM DRAM Default: 32MB DRAM Max: 32MB FLASH Default: 12 MB FLASH Max: 12 MB 48

37 Cisco SOHO 97 ADSL Broadband Router Features Affordable, secure, easy to use, broadband access for small offices Secure Internet Access Stateful inspection firewall, softwarebased 3DES encryption Easy Set Up and Deployment Cisco Router Web Set Up tool Advanced Management Features for Low Cost of Ownership Remote management with Cisco IOS Software, integration with Cisco IE2100 Management Appliance One Software Image: IP FW/VPN 49

38 Cisco SOHO 97 Router Hardware 10/100 MB Ethernet Switch Connect to Ethernet network devices Console Port Connects to PC or terminal for configuration ADSL WAN Port Connects to SP network Processor Motorola RISC Memory Runs from DRAM DRAM Default: 32MB DRAM Max: 32MB FLASH Default: 12 MB FLASH Max: 12 MB 50

39 Cisco Router Web Setup Tool (CRWS) Easy-to-use graphical tool for installation End users/resellers Service-provider technicians unfamiliar with CLI Features and Benefits Quick setup: just add PPP username/password + router name Standard configuration templates with modifiable parameters Router status monitoring and troubleshooting Tool resides on Flash: no CD software required to install Cisco 806 Configuration Tool 51

40 Cisco 1700 Series Routers 53

41 Cisco 1711/12 All-in-One Security Router IP Router, LAN Switch, IPSec VPN, Stateful Firewall, IDS Eases management burden and reduces cost of ownership Hardware IPSec Client Intrusion Detection System Firewall WAN Router with LAN Switch Cisco 1711 and 1712 IOS Security Routers IP Routing + IPSec + Firewall + IDS + LAN Switch 54

42 Introducing Cisco 1711 and 1712 Security Access Routers for Enterprise Small Branch Offices and Small/Medium Sized Businesses Broadband Access with WAN Backup DSL broadband or Ethernet access Analog modem or ISDN backup Comprehensive Network Security Hardware accelerated VPN encryption Stateful firewall with URL filtering Intrusion detection Integrated LAN Connectivity 10/100 switch with VLAN Spanning Tree Protocol Advanced Routing and QoS RIP, OSPF, BGP, EIGRP QoS bandwidth optimization 55

43 Cisco 1711 and 1712 Key Features Cisco 1711 Cisco 1712 Fixed Configuration 1 10/100BaseT Port (WAN) Analog Modem Backup 4 Port 10/100BaseT Switch 802.1Q VLAN 32MB FLASH 64MB DRAM VPN Encryption Module Cisco IOS IP Plus/FW/IDS/ IPSec 3DES Security Device Manager See published price list for pricing Fixed Configuration 1 10/100BaseT Port (WAN) 1 port ISDN (S/T) Backup 4 Port 10/100BaseT Switch 802.1Q VLAN 32MB FLASH 64MB DRAM VPN Encryption Module Cisco IOS IP Plus/FW/IDS/ IPSec 3DES Security Device Manager See published price list for pricing 56

44 Cisco 1711 and 1712 Interfaces Cisco 1711 Cisco Port 10/100 Ethernet Switch Console Port Analog Modem Port 4 Port 10/100 Ethernet Switch Console Port ISDN (S/T) Port Fast Ethernet Port (WAN) AUX Port Telephone Connection Fast Ethernet Port (WAN) AUX Port 57

45 Cisco 1711/1712 Application: DMZ with Firewall 802.1Q VLAN Defined DMZ LAN 10/100BaseT Switch Analog Modem/ ISDN Port DMZ 10/100BaseT Port Cisco IOS Firewall Applied to DMZ and Internet Connection VPN Tunnel to HQ Cable/DSL Modem Internet 58

46 Cisco 1711/1712 Application: Internet Hotspot 802.1Q VLAN Defined Hotspot Segment LAN 10/100BaseT Switch Analog Modem/ ISDN Port Wireless Access Point VPN Tunnel to HQ 10/100BaseT Port Cable/DSL Modem Internet 59

47 Cisco 1711/1712 Application: DDR Backup LAN 10/100BaseT Switch Analog Modem/ ISDN Port 10/100BaseT Port Cisco IOS Firewall Applied to Internet Connection X Internet DDR Initiated failover to Analog Modem/ISDN Port Cable/DSL Modem Internet Connection Failure PSTN 60

48 Cisco 1711/1712 Application: Remote Management LAN 10/100BaseT Switch Analog Modem/ ISDN Port 10/100BaseT Port Cisco IOS Firewall Applied to Internet Connection Internet VPN Tunnel to HQ Cable/DSL Modem PSTN Remote Administrator 61

49 Cisco 1711/1712 Application: ISDN to DSL Migration LAN 10/100BaseT Switch ISDN Port Initial/Temporary ISDN Service Cisco IOS Firewall Applied to Internet Connection Internet Migration to DSL Service DSL Modem PSTN 62

50 Cisco Ordering Information CISCO1711-VPN/K9 Includes: 32MB Flash, 64MB DRAM, 4-Port 10/100BaseT Switch, 10/100 WAN & Analog Modem Port, VPN Hardware Module, Cisco IOS IP Plus/ADSL/Firewall/IDS/IPSEC 3DES CISCO1712-VPN/K9 Includes: 32MB Flash, 64MB DRAM, 4-Port 10/100BaseT Switch, 10/100 and ISDN WAN Port, VPN Hardware Module, Cisco IOS IP Plus/ADSL/Firewall/IDS/IPSEC 3DES GPL:

51 Product Comparison Security devices ADSL WAN Port ISDN Backup Analog Modem Backup Cisco 1701 Cisco 1711/1712 PIX 501 Cisco Port 10/100 Switch AUX Port (DDR) 802.1Q VLAN Stateful Firewall IDS Planned URL Filtering Easy VPN Support VPN Performance Routing Easy VPN Server and Remote Easy VPN Server and Remote Easy VPN Server and Remote Virtual AUX Easy VPN Remote 3 Mbps IMIX (option) 3.4 Mbps IMIX 2 Mbps IMIX 2 Mbps IMIX DMVPN Price RIP, EIGRP, OSPF, BGP RIP, EIGRP, OSPF, BGP RIP, EIGRP, OSPF (Planned) See published price list for pricing RIP, OSPF (Planned) 65

52 Cisco 1760 Architecture WIC/VIC Slots Fast Ethernet Port VIC Slots ConsolePort AUX Port 19 Rack-mount Form Factor (1 RU) High Performance RISC Architecture 4-slot Modular Chassis One Auto-Sensing 10/100 FE Port with IEEE 802.1Q VLAN Internal Expansion Slot for VPN Hardware Encryption Module IPSec 3DES Encryption at T1/E1 speed Two Internal DSP Slots AUX Port up to 115 kbps (async serial) GPL:

53 Cisco 1760 Interface Support LAN Density 1 Fast Ethernet (on-board) PLUS 2 Ethernet (10BaseT) WICs WAN density 5 Asynchronous Serial, 4 Synchronous serial or 2 BRI (ISDN) Analog and Digital Voice Support Up to 8 analog voice calls Up to 30 digital voice calls w/vwic Survivable Remote Site Telephony (SRST) WAN Interface Card (WIC) support Serial and ISDN, Ethernet, Analog Modem ADSL and G.SHDSL Voice Interface Card (VIC) support 2 port FXS, FXO and E&M 2 Port BRI 1 and 2 port Channelized T1/E1 and G

54 Cisco 1700 Series Product Line Cisco 1711/1712 Cisco 1721 Cisco 1751 Cisco 1760 Application Security Router Data Access Data and Voice Data and Voice Form Factor Desktop Desktop Desktop 19 Rack-Mount (1 RU) LAN Ports with 802.1Q VLAN 4-Port 10/100 Fast Ethernet Switch 1 10/100 Autosensing Ethernet Port 1 10/100 Autosensing Ethernet Port 1 10/100 Autosensing Ethernet Port Modular Slots None (1 10/100 WAN Port) 2 WIC Slots 2 VIC/WIC Slots 1 VIC Slot 2 VIC/WIC Slots 2 VIC Slots Integrated Backup WAN Analog Modem/ ISDN BRI Optional Optional Optional Integrated VPN Module, Optional Optional Firewall, IDS Optional Voice over IP US List Price (Chassis) See published price list for pricing 68

55 Cisco 2600XM and Cisco

56 Cisco 2600XM Architecture Network Module WIC Slots ConsolePort/ AUX Port Fast Ethernet Ports Cisco IOS 12.1 Mainline (GD), 12.2(8)T1 & *12.2 Mainline * Scheduled for future support 1RU 1.69 x 17.5 x or 2 Integrated 10/100 FE 1 Network Module Slot, 2 WICs, 1 AIM (internal) Kpps Performance Kbps Console & AUX Port Default 16MB Flash, 32-64MB SDRAM Max. 128MB SDRAM/48MB Flash AC, DC, and RPS versions NEBs Level 3, 12 depth 70

57 Cisco 2600XM Product Comparison Cisco 2610/11XM Cisco 2620/21XM Cisco 2650/51XM Fixed LAN Ports 1FE/2 FE 1 FE/2 FE 1 FE/2 FE Performance (Kpps) DRAM (Default MB) DRAM (Max MB) Flash (Default MB) Flash (Max MB) All platforms have 1 NM, 1 AIM, 2 WICs All platforms have AC/DC, RPS power Uses same Cisco IOS Images offered on the current 2600 platform Support for 12.1 (now) and 12.2 (future) mainlines Same dimensions, same chassis, same layout, same bezel as current

58 Cisco 2691 Architecture Network Module Fast Ethernet Ports WIC Slots Console Port/AUX Port External Flash 2RU 3.46 x 17 x Network module slot 2 Integrated 10/100 FE ports 3 WIC slots, 2 AIM slots (internal) 70 Kpps performance Kbps console port AUX async port Internal and external compact Flash Default 32MB Flash/64MB SDRAM Max. 256MB SDRAM / 128MB compact Flash (Internal) Supported on 12.2(8)T1 RPS version in future release 72

59 Cisco 2600 Series Product Line Cisco 2600 Cisco 2600XM Cisco 2691 Form Factor 19 Rack-Mount (1 RU) 19 Rack-Mount (1 RU) 19 Rack-Mount (2 RU) Modular Slots 1NM, 2 WIC, 1 AIM Slots 1NM, 2 WIC, 1 AIM Slots 1NM, 3 WIC, 2 AIM Slots LAN Ports 1/2 Ethernet and 1/2 10/100 Autosensing Ethernet Port 1/2 10/100 Autosensing Ethernet Port 2, 10/100 Autosensing Ethernet Port Performance 15 37Kpps Kpps 70 Kpps AIM Slots 1 AIM 1 AIM 2 AIMs Default Memory 8 MB Flash 32 MB DRAM 16 MB Flash 32/64(265x) MB DRAM 32 MB Compact Flash 64 MB DRAM Max. Memory Capacity 16/32 MB Flash MB DRAM 48 MB Flash 128 MB DRAM 128 MB Compact Flash 256 MB DRAM US List Price (AC Chassis) US $1,995 $4,195 US $1,995 $4,195 US $6,295 73

60 Cisco 3725/3745 Branch Router 74

61 Cisco Access Routers Meet Requirements for The Full Service Branch Advanced Security Cisco 3700 Content Delivery Voice Availability High Performance Flexible Scaleable Future Low Density Switching Cisco Presentation_ID IOS Software 2003, 2002, Cisco Systems, Inc. All rights reserved. 75

62 Cisco 3725 & 3745 Access Routers Highest Performance Branch Office Routers Integrated Advanced Services: Reduced TCO Cisco 3745: high availability, density and serviceability Cisco 3725: high density in a compact form factor /100 FE ports 2 2 WIC Slots 3 3 AIM Slots 2 2 NM/HDSM Slots 2/1 4/2 HDSM Slots 1 2 Performance - kpps Optional RPS External Internal Optional Phone Power Internal Internal Minimum Cisco IOS 12.2(8)T 12.2(8)T Price $8,500 $12,000 Investment Protection: Shares 1700, 2600, 3600 interfaces Advanced QoS support Management: CiscoWorks2000 RME, CiscoView, SNMP 76

63 Cisco Security Device Manager (SDM) for Cisco Access Routers 77

64 Cisco Security Device Manager: Combining Ease Of Use & Application Intelligence SDM is an intuitive, web-based device management tool embedded within Cisco access routers Security Audit: ICSA, TAC recommended security configuration Intelligent wizards: Autodetect mis-configuration and proposes fixes (e.g., punches hole for DHCP thru firewall if WAN interface is DHCP addressed) Quick Deployment: 1-Step Router Lockdown (Firewall), and VPN Wizard (Site-to-Site, Easy VPN) Tools for Expert Users: ACL Editor, VPN tunnel monitoring 78

65 Cisco SDM Supported Platforms Cisco 830 Series Access Router Cisco 1700 Series Modular Access Routers Cisco 2600XM Series Multiservice Access Routers Cisco 3600/3700 Series Multiservice Access Routers 79

66 Cisco SDM Target Market and Users Ideal for Small, and Medium Businesses In-house network/security management Outsourced network/security management Remote Branch Offices with no on-site security experts 81

67 SDM Modes Wizard Mode Novice Guide mode Advanced Mode User can perform tasks in any order and can view existing configuration Monitor Mode - Router Status - Interface Status - Firewall Status - VPN Status - Logging Status Left Panel displays mode options Overview (first) page displayed 82

68 SDM Wizard Options Overview View IOS version, hardware installed and configuration summary LAN Configuration Configure the LAN interfaces and DHCP WAN Configuration Configure PPP, Frame Relay, HDLC WAN interfaces Firewall Two types of firewall wizard simple inside/outside or more complex inside/outside/dmz with multiple interfaces. VPN Three types of wizards to create a secure site-to-site VPN, Easy VPN and GRE tunnel with IPSec Security Audit Perform a router security audit and provides easy instructions on how to lock down the insecure features found Reset Restore to factory default settings. 83

69 Security Audit SDM provides a check list of security faults found. 84

70 Cisco SDM Summary Web-based tool for non-ios CLI experts, and non-security experts Easy, and reliable management through Wizards, and application intelligence Innovative, industry leading features like Security Audit, and 1-Step Router lockdown Comprehensive coverage of Security, LAN, WAN, and Routing features 85

71 Why Cisco for Routing? Cisco is a pioneer in the area of routing Market leading LAN, WAN and Internet products Common Internetwork Operating System (IOS) across the network Significant savings from a single-vendor solution World-class services and support 86

72 Cisco TradeIn - Router Transition Map Solution Price $9-14K New Platforms Provide High Performance / Similar Price /2 2002/ $6-8K $2-5K 1600, xx xxXM 1711, 21, 51, Performance / Integration 25kpps 50kpps 100kpps 200kpps System Performance and Density 87