& Router solutions for the SMB market msalat@cisco.com 1
Agenda Market Dynamics and Business Needs Cisco IOS Fundamentals Intelligent Network Services Cisco IOS Releases Selling Cisco IOS Router Portolio in SMB market Selling Cisco Routing Solutions 2
E-Business Opportunities and Network Requirements Increase revenues & customer base E-Commerce Self services, decreased costs, knowledge transfer Net Impact of Availability, Security, Scalability High productivity, better resource management Empowered partners, improved timeto-market & intellectual capital Reduced training costs, improved communications, increased competitive edge E-Learning Customer Workforce Care Optimization Partner Care 4
Changing Market Drivers Market Drivers: 1996-2000 Standardization on IP Multi-service connectivity Intranet applications SP Services/Bandwidth $$ New Market Drivers: 2000-2004 E-business applications - web interfaces New Access Technologies Security QoS - Availability Data+Voice Convergence - IP Telephony More IP-based applications distributed to the Branch IP network Either integrated or Stand alone switching Headquarters Internet PSTN Cisco Router 6
Convergence to IP 8
Full Service Requirements Network is as dependable as traditional business tools Prioritised network traffic to ensure business critical applications receive highest priority Advanced security to protect electronic assets from unauthorised access Simplify device management to free up technical resources Integrated management for voice and data traffic Decrease total cost of ownership Availability QoS Security Manageability Protect equipment investment by growing with business needs. Agility to react to changing business conditions Flexibility Modularity 9
Agenda Market Dynamics and Business Needs Cisco IOS Fundamentals Intelligent Network Services Cisco IOS Releases Selling Cisco IOS Router Portolio in SMB market Selling Cisco Routing Solutions 11
Cisco IOS Defined Internetworking Operating System Internet Applications Advanced Services DSL Frame Relay Ethernet Network Platforms IDC: #2 operating system after MS Windows 12
Cisco IOS is Everywhere 1990 1995 2000 2003-17 years - 80 plattforms in 25 families - supports more than 1000 RFCs Routers Routers, Switches Routers, Switches Multi-service platforms 13
Agenda Market Dynamics and Business Needs Cisco IOS Fundamentals Intelligent Network Services Cisco IOS Releases Selling Cisco IOS Router Portolio in SMB market Selling Cisco Routing Solutions 18
Network Intelligence Intelligent Network Services Availability Security Quality of Service (QoS) ITS ( ) Network Management 19
Security Stateful Inspection Firewall Intrusion Detection NAT ACL Firewall - Line sharing - IP Address saving - LAN masking - Line sharing - Access Lists - IP Address saving- L3 packet filtering - LAN masking - Flow direction aware - Line sharing - IP Address saving - LAN masking Access Lists - Access Lists - L3 packet filtering - Flow direction aware - L4 application filtering - Time stamp 21
VPN Virtual Private Network Main Office POP Business Partner Remote Office Regional Office Home Office Mobile Worker 22
Quality of Service Different applications require different priorities Email - SMTP Download - FTP Web - HTTP Application - ERP Internet Examples of QoS technologies: Priority Queuing (PQ) Weighted Fair Queuing (WFQ) Custom Queuing (CQ) Policy- Based Routing (PBR) Committed Access Rate (CAR) Class-Based Weighted Fair Queuing (CBWFQ) 23
Cisco Multiservice Routing Video PSTN IP Phone Services IP WAN Internet The router becomes the information gateway Uses advanced Cisco features to handle all traffic Network ready for next evolution 25
CallManager express (IOS Telephony Svcs) Switch Touch ITS CallManager express PSTN IP WAN 26
Availability Router availability Hardware quality ( SmartNet services) Cisco IOS ( SmartNet services) Network availability Hot Standby Router Protocol (HSRP) Virtual Router Redundancy Protocol (VRRP) Router A Router B 27
Network Management Management features of Cisco IOS: Remote configuration Remote correction Remote debugging Central NMS workstation New IOS version New configuration Remote router Switch 28
Agenda Market Dynamics and Business Needs Cisco IOS Fundamentals Intelligent Network Services Cisco IOS Releases Selling Cisco IOS Router Portolio in SMB market Selling Cisco Routing Solutions 29
Cisco IOS Releases Different Packages depending on needs Flexible Choice Upgradeable Voice Feature Sets IP Only Security ( ) 30
Agenda Market Dynamics and Business Needs Cisco IOS Fundamentals Intelligent Network Services Cisco IOS Releases Selling Cisco IOS Router Portolio in SMB market Selling Cisco Routing Solutions 31
Key Cisco IOS Benefits Broad range of functionality Lower cost of ownership Integrated approach Consistent implementation across Widest range of platforms Compliance to Standards Interoperability 32
How To Sell Cisco IOS Educate your customers about e-business The importance of the network supporting e-business Demonstrate that a single network OS can save money Availability Connectivity Scalability Explain how IOS upgrades can provide investment protection Emphasize that Cisco has the resources that SMBs need For more information on Cisco IOS check out the following links ABCs of IOS : www.cisco.com/go/ios Feature Navigator: www.cisco.com/go/fn 34
Agenda Market Dynamics and Business Needs Cisco IOS Fundamentals Intelligent Network Services Cisco IOS Releases Selling Cisco IOS Cisco Router Portolio in SMB market Selling Cisco Routing Solutions 35
Router Evolution Low density Switching Advanced Security Functionality/Integration Routing, INS VoFR, VoIP IOS Firewall/Encryption Multi-Protocol Routing, Access Control, QoS Tools Content Delivery Voice Apps IP Telephony Time Today 36
Cisco IOS Router Portfolio Teleworker/SOHO SMB/Small Branch Enterprise Branch Large Branch Corporate and Internet 37
What Access Router To Select? Select the platform according to the WAN interfaces Understand features required to run the applications Select required routing protocols Understand the traffic type (bandwidth, volume, ) Calculate the performance needed per application Plan future customer requirements 39
Small Office & Home Office Router Cisco SOHO 90 and 830 Series Routers 40
Cisco 830 and SOHO 90 Series Secure Broadband Routers Advanced security for data, voice and video access ideal for small offices and teleworkers Four New Models: Cisco 831 Ethernet Broadband Router Cisco 837 ADSL Broadband Router Cisco SOHO 91 Ethernet Broadband Router Cisco SOHO 97 ADSL Broadband Router 41
Extending Integrated Security and Advanced Services To the Edge Cisco 830 Series Hardware Acceleration Stateful Firewall 4-Port 10/100 Switch IDS and URL filtering* IPSec 3DES Out-of-Band Management / Dial Back Up QoS for Voice and Video *Available as software upgrade in 03 Cisco SOHO 90 Series 42
Cisco 831 Ethernet Broadband Router Features Advanced security for data, voice and video access ideal for small offices and teleworkers Advanced Security and Performance for Enterprise Class VPNs Hardware-Assisted Encryption VPN throughput (2.0 Mbps aggregate with IMIX traffic) 3DES encryption, Cisco Easy VPN remote, AES*, IDS*, TACACS+, RADIUS High Quality Secure Voice and Video Low Latency Queuing (LLQ), QoS (Class-Based Traffic Shaping, CAR, LLQ over VPN*, LFI), Multicast Manageable, Scalable and Reliable Access Virtual AUX via console port for use with analog modem, HSRP, EIGRP, Cisco Router Web Set Up tool (CRWS) Integration with Cisco IE2100 Management Appliance Two Software Images: IP FW/VPN with VPN Hardware Acceleration (Default) PLUS QoS features *Available as software upgrade in 03 43
Cisco 831 Router Hardware 10/100 MB Ethernet Switch Connect to Ethernet network devices Console Port/Virtual AUX Port Connects to PC or terminal for configuration Allows external modem to be connected to the router Ethernet WAN Port Connects to DSL or Cable modem or Ethernet Switch 3DES IPSec Hardware Acceleration Processor Motorola RISC Memory Runs from DRAM DRAM Default: 32MB DRAM Max: 48MB FLASH Default: 12 MB FLASH Max: 16 MB 44
Cisco 837 ADSL Broadband Router Features Advanced security for data, voice and video access ideal for small offices and teleworkers Advanced Security and Performance for Enterprise Class VPNs Hardware-Assisted Encryption VPN throughput (2.0 Mbps aggregate with IMIX traffic) 3DES encryption, Cisco Easy VPN remote, AES*, IDS*, TACACS+, RADIUS High Quality Secure Voice and Video Low Latency Queuing (LLQ), QoS (Class-Based Traffic Shaping, CAR, LLQ over VPN*, LFI), Multicast Manageable, Scalable and Reliable Access Virtual AUX via console port for use with analog modem, HSRP, EIGRP, Cisco Router Web Set Up tool (CRWS), integration with Cisco IE2100 Two Software Images: IP FW/VPN with VPN (default) PLUS QoS and HW VPN acceleration Management Appliance *Available as software upgrade in 03 45
Cisco 837 Router Hardware 10/100 MB Ethernet Switch Connect to Ethernet network devices Console Port/Virtual AUX Port Connects to PC or terminal for configuration Allows external modem to be connected to the router 3DES IPSec Hardware Acceleration ADSL WAN Port Connects to SP network Processor Motorola RISC Memory Runs from DRAM DRAM Default: 32MB DRAM Max: 48MB FLASH Default: 12 MB FLASH Max: 16 MB 46
Cisco SOHO 91 Ethernet Broadband Router Features Affordable, secure, easy to use, broadband access for small offices Secure Internet Access Stateful inspection firewall, Software-based 3DES encryption Easy Set Up and Deployment Cisco Router Web Set Up tool One Software Image: IP FW/VPN Advanced Management Features for Low Cost of Ownership Remote management with Cisco IOS Software, integration with Cisco IE2100 Management Appliance 47
Cisco SOHO 91 Router Hardware 10/100 MB Ethernet Switch Connect to Ethernet network devices Console Port Connects to PC or terminal for configuration Ethernet WAN Port Connects to DSL or cable modem or Ethernet switch Processor Motorola RISC Memory Runs from DRAM DRAM Default: 32MB DRAM Max: 32MB FLASH Default: 12 MB FLASH Max: 12 MB 48
Cisco SOHO 97 ADSL Broadband Router Features Affordable, secure, easy to use, broadband access for small offices Secure Internet Access Stateful inspection firewall, softwarebased 3DES encryption Easy Set Up and Deployment Cisco Router Web Set Up tool Advanced Management Features for Low Cost of Ownership Remote management with Cisco IOS Software, integration with Cisco IE2100 Management Appliance One Software Image: IP FW/VPN 49
Cisco SOHO 97 Router Hardware 10/100 MB Ethernet Switch Connect to Ethernet network devices Console Port Connects to PC or terminal for configuration ADSL WAN Port Connects to SP network Processor Motorola RISC Memory Runs from DRAM DRAM Default: 32MB DRAM Max: 32MB FLASH Default: 12 MB FLASH Max: 12 MB 50
Cisco Router Web Setup Tool (CRWS) Easy-to-use graphical tool for installation End users/resellers Service-provider technicians unfamiliar with CLI Features and Benefits Quick setup: just add PPP username/password + router name Standard configuration templates with modifiable parameters Router status monitoring and troubleshooting Tool resides on Flash: no CD software required to install Cisco 806 Configuration Tool 51
Cisco 1700 Series Routers 53
Cisco 1711/12 All-in-One Security Router IP Router, LAN Switch, IPSec VPN, Stateful Firewall, IDS Eases management burden and reduces cost of ownership Hardware IPSec Client Intrusion Detection System Firewall WAN Router with LAN Switch Cisco 1711 and 1712 IOS Security Routers IP Routing + IPSec + Firewall + IDS + LAN Switch 54
Introducing Cisco 1711 and 1712 Security Access Routers for Enterprise Small Branch Offices and Small/Medium Sized Businesses Broadband Access with WAN Backup DSL broadband or Ethernet access Analog modem or ISDN backup Comprehensive Network Security Hardware accelerated VPN encryption Stateful firewall with URL filtering Intrusion detection Integrated LAN Connectivity 10/100 switch with VLAN Spanning Tree Protocol Advanced Routing and QoS RIP, OSPF, BGP, EIGRP QoS bandwidth optimization 55
Cisco 1711 and 1712 Key Features Cisco 1711 Cisco 1712 Fixed Configuration 1 10/100BaseT Port (WAN) Analog Modem Backup 4 Port 10/100BaseT Switch 802.1Q VLAN 32MB FLASH 64MB DRAM VPN Encryption Module Cisco IOS IP Plus/FW/IDS/ IPSec 3DES Security Device Manager See published price list for pricing Fixed Configuration 1 10/100BaseT Port (WAN) 1 port ISDN (S/T) Backup 4 Port 10/100BaseT Switch 802.1Q VLAN 32MB FLASH 64MB DRAM VPN Encryption Module Cisco IOS IP Plus/FW/IDS/ IPSec 3DES Security Device Manager See published price list for pricing 56
Cisco 1711 and 1712 Interfaces Cisco 1711 Cisco 1712 4 Port 10/100 Ethernet Switch Console Port Analog Modem Port 4 Port 10/100 Ethernet Switch Console Port ISDN (S/T) Port Fast Ethernet Port (WAN) AUX Port Telephone Connection Fast Ethernet Port (WAN) AUX Port 57
Cisco 1711/1712 Application: DMZ with Firewall 802.1Q VLAN Defined DMZ LAN 10/100BaseT Switch Analog Modem/ ISDN Port DMZ 10/100BaseT Port Cisco IOS Firewall Applied to DMZ and Internet Connection VPN Tunnel to HQ Cable/DSL Modem Internet 58
Cisco 1711/1712 Application: Internet Hotspot 802.1Q VLAN Defined Hotspot Segment LAN 10/100BaseT Switch Analog Modem/ ISDN Port Wireless Access Point VPN Tunnel to HQ 10/100BaseT Port Cable/DSL Modem Internet 59
Cisco 1711/1712 Application: DDR Backup LAN 10/100BaseT Switch Analog Modem/ ISDN Port 10/100BaseT Port Cisco IOS Firewall Applied to Internet Connection X Internet DDR Initiated failover to Analog Modem/ISDN Port Cable/DSL Modem Internet Connection Failure PSTN 60
Cisco 1711/1712 Application: Remote Management LAN 10/100BaseT Switch Analog Modem/ ISDN Port 10/100BaseT Port Cisco IOS Firewall Applied to Internet Connection Internet VPN Tunnel to HQ Cable/DSL Modem PSTN Remote Administrator 61
Cisco 1711/1712 Application: ISDN to DSL Migration LAN 10/100BaseT Switch ISDN Port Initial/Temporary ISDN Service Cisco IOS Firewall Applied to Internet Connection Internet Migration to DSL Service DSL Modem PSTN 62
Cisco 1711 1712 Ordering Information CISCO1711-VPN/K9 Includes: 32MB Flash, 64MB DRAM, 4-Port 10/100BaseT Switch, 10/100 WAN & Analog Modem Port, VPN Hardware Module, Cisco IOS IP Plus/ADSL/Firewall/IDS/IPSEC 3DES CISCO1712-VPN/K9 Includes: 32MB Flash, 64MB DRAM, 4-Port 10/100BaseT Switch, 10/100 and ISDN WAN Port, VPN Hardware Module, Cisco IOS IP Plus/ADSL/Firewall/IDS/IPSEC 3DES GPL: 1.295.- 64
Product Comparison Security devices ADSL WAN Port ISDN Backup Analog Modem Backup Cisco 1701 Cisco 1711/1712 PIX 501 Cisco 831 1712 1711 4-Port 10/100 Switch AUX Port (DDR) 802.1Q VLAN Stateful Firewall IDS Planned URL Filtering Easy VPN Support VPN Performance Routing Easy VPN Server and Remote Easy VPN Server and Remote Easy VPN Server and Remote Virtual AUX Easy VPN Remote 3 Mbps IMIX (option) 3.4 Mbps IMIX 2 Mbps IMIX 2 Mbps IMIX DMVPN Price RIP, EIGRP, OSPF, BGP RIP, EIGRP, OSPF, BGP RIP, EIGRP, OSPF (Planned) See published price list for pricing RIP, OSPF (Planned) 65
Cisco 1760 Architecture WIC/VIC Slots Fast Ethernet Port VIC Slots ConsolePort AUX Port 19 Rack-mount Form Factor (1 RU) High Performance RISC Architecture 4-slot Modular Chassis One Auto-Sensing 10/100 FE Port with IEEE 802.1Q VLAN Internal Expansion Slot for VPN Hardware Encryption Module IPSec 3DES Encryption at T1/E1 speed Two Internal DSP Slots AUX Port up to 115 kbps (async serial) GPL: 1.595.- 66
Cisco 1760 Interface Support LAN Density 1 Fast Ethernet (on-board) PLUS 2 Ethernet (10BaseT) WICs WAN density 5 Asynchronous Serial, 4 Synchronous serial or 2 BRI (ISDN) Analog and Digital Voice Support Up to 8 analog voice calls Up to 30 digital voice calls w/vwic Survivable Remote Site Telephony (SRST) WAN Interface Card (WIC) support Serial and ISDN, Ethernet, Analog Modem ADSL and G.SHDSL Voice Interface Card (VIC) support 2 port FXS, FXO and E&M 2 Port BRI 1 and 2 port Channelized T1/E1 and G.703 67
Cisco 1700 Series Product Line Cisco 1711/1712 Cisco 1721 Cisco 1751 Cisco 1760 Application Security Router Data Access Data and Voice Data and Voice Form Factor Desktop Desktop Desktop 19 Rack-Mount (1 RU) LAN Ports with 802.1Q VLAN 4-Port 10/100 Fast Ethernet Switch 1 10/100 Autosensing Ethernet Port 1 10/100 Autosensing Ethernet Port 1 10/100 Autosensing Ethernet Port Modular Slots None (1 10/100 WAN Port) 2 WIC Slots 2 VIC/WIC Slots 1 VIC Slot 2 VIC/WIC Slots 2 VIC Slots Integrated Backup WAN Analog Modem/ ISDN BRI Optional Optional Optional Integrated VPN Module, Optional Optional Firewall, IDS Optional Voice over IP US List Price (Chassis) See published price list for pricing 68
Cisco 2600XM and Cisco 2691 69
Cisco 2600XM Architecture Network Module WIC Slots ConsolePort/ AUX Port Fast Ethernet Ports Cisco IOS 12.1 Mainline (GD), 12.2(8)T1 & *12.2 Mainline * Scheduled for future support 1RU 1.69 x 17.5 x 11.8 1 or 2 Integrated 10/100 FE 1 Network Module Slot, 2 WICs, 1 AIM (internal) 20 40 Kpps Performance 115.2 Kbps Console & AUX Port Default 16MB Flash, 32-64MB SDRAM Max. 128MB SDRAM/48MB Flash AC, DC, and RPS versions NEBs Level 3, 12 depth 70
Cisco 2600XM Product Comparison Cisco 2610/11XM Cisco 2620/21XM Cisco 2650/51XM Fixed LAN Ports 1FE/2 FE 1 FE/2 FE 1 FE/2 FE Performance (Kpps) DRAM (Default MB) DRAM (Max MB) Flash (Default MB) Flash (Max MB) 20 30 40 32 32 64 128 128 128 16 16 16 48 48 48 All platforms have 1 NM, 1 AIM, 2 WICs All platforms have AC/DC, RPS power Uses same Cisco IOS Images offered on the current 2600 platform Support for 12.1 (now) and 12.2 (future) mainlines Same dimensions, same chassis, same layout, same bezel as current 2600 71
Cisco 2691 Architecture Network Module Fast Ethernet Ports WIC Slots Console Port/AUX Port External Flash 2RU 3.46 x 17 x 11.2 1 Network module slot 2 Integrated 10/100 FE ports 3 WIC slots, 2 AIM slots (internal) 70 Kpps performance 115.2 Kbps console port AUX async port Internal and external compact Flash Default 32MB Flash/64MB SDRAM Max. 256MB SDRAM / 128MB compact Flash (Internal) Supported on 12.2(8)T1 RPS version in future release 72
Cisco 2600 Series Product Line Cisco 2600 Cisco 2600XM Cisco 2691 Form Factor 19 Rack-Mount (1 RU) 19 Rack-Mount (1 RU) 19 Rack-Mount (2 RU) Modular Slots 1NM, 2 WIC, 1 AIM Slots 1NM, 2 WIC, 1 AIM Slots 1NM, 3 WIC, 2 AIM Slots LAN Ports 1/2 Ethernet and 1/2 10/100 Autosensing Ethernet Port 1/2 10/100 Autosensing Ethernet Port 2, 10/100 Autosensing Ethernet Port Performance 15 37Kpps 20 40 Kpps 70 Kpps AIM Slots 1 AIM 1 AIM 2 AIMs Default Memory 8 MB Flash 32 MB DRAM 16 MB Flash 32/64(265x) MB DRAM 32 MB Compact Flash 64 MB DRAM Max. Memory Capacity 16/32 MB Flash 64128 MB DRAM 48 MB Flash 128 MB DRAM 128 MB Compact Flash 256 MB DRAM US List Price (AC Chassis) US $1,995 $4,195 US $1,995 $4,195 US $6,295 73
Cisco 3725/3745 Branch Router 74
Cisco Access Routers Meet Requirements for The Full Service Branch Advanced Security Cisco 3700 Content Delivery Voice Availability High Performance Flexible Scaleable Future Low Density Switching Cisco Presentation_ID IOS Software 2003, 2002, Cisco Systems, Inc. All rights reserved. 75
Cisco 3725 & 3745 Access Routers Highest Performance Branch Office Routers Integrated Advanced Services: Reduced TCO Cisco 3745: high availability, density and serviceability Cisco 3725: high density in a compact form factor 3725 3745 10/100 FE ports 2 2 WIC Slots 3 3 AIM Slots 2 2 NM/HDSM Slots 2/1 4/2 HDSM Slots 1 2 Performance - kpps 100 225 Optional RPS External Internal Optional Phone Power Internal Internal Minimum Cisco IOS 12.2(8)T 12.2(8)T Price $8,500 $12,000 Investment Protection: Shares 1700, 2600, 3600 interfaces Advanced QoS support Management: CiscoWorks2000 RME, CiscoView, SNMP 76
Cisco Security Device Manager (SDM) for Cisco Access Routers 77
Cisco Security Device Manager: Combining Ease Of Use & Application Intelligence SDM is an intuitive, web-based device management tool embedded within Cisco access routers Security Audit: ICSA, TAC recommended security configuration Intelligent wizards: Autodetect mis-configuration and proposes fixes (e.g., punches hole for DHCP thru firewall if WAN interface is DHCP addressed) Quick Deployment: 1-Step Router Lockdown (Firewall), and VPN Wizard (Site-to-Site, Easy VPN) Tools for Expert Users: ACL Editor, VPN tunnel monitoring 78
Cisco SDM Supported Platforms Cisco 830 Series Access Router Cisco 1700 Series Modular Access Routers Cisco 2600XM Series Multiservice Access Routers Cisco 3600/3700 Series Multiservice Access Routers 79
Cisco SDM Target Market and Users Ideal for Small, and Medium Businesses In-house network/security management Outsourced network/security management Remote Branch Offices with no on-site security experts 81
SDM Modes Wizard Mode Novice Guide mode Advanced Mode User can perform tasks in any order and can view existing configuration Monitor Mode - Router Status - Interface Status - Firewall Status - VPN Status - Logging Status Left Panel displays mode options Overview (first) page displayed 82
SDM Wizard Options Overview View IOS version, hardware installed and configuration summary LAN Configuration Configure the LAN interfaces and DHCP WAN Configuration Configure PPP, Frame Relay, HDLC WAN interfaces Firewall Two types of firewall wizard simple inside/outside or more complex inside/outside/dmz with multiple interfaces. VPN Three types of wizards to create a secure site-to-site VPN, Easy VPN and GRE tunnel with IPSec Security Audit Perform a router security audit and provides easy instructions on how to lock down the insecure features found Reset Restore to factory default settings. 83
Security Audit SDM provides a check list of security faults found. 84
Cisco SDM Summary Web-based tool for non-ios CLI experts, and non-security experts Easy, and reliable management through Wizards, and application intelligence Innovative, industry leading features like Security Audit, and 1-Step Router lockdown Comprehensive coverage of Security, LAN, WAN, and Routing features 85
Why Cisco for Routing? Cisco is a pioneer in the area of routing Market leading LAN, WAN and Internet products Common Internetwork Operating System (IOS) across the network Significant savings from a single-vendor solution World-class services and support 86
Cisco TradeIn - Router Transition Map Solution Price $9-14K New Platforms Provide High Performance / Similar Price 3660 2001/2 2002/3 3745 $6-8K 3640 3725 $2-5K 1600, 1700 26xx 3620 26xxXM 1711, 21, 51, 60 2691 Performance / Integration 25kpps 50kpps 100kpps 200kpps System Performance and Density 87
88 2002, Cisco Systems, Inc. All rights reserved.