Used Cisco 1720 - Modular Access Router

Product Overview

Secure Internet, Intranet and Extranet Access

The Power of Cisco IOS Software
Security
QoS (Traffic Management)
Management and Ease of Installation.
Cisco IOS Software Features for Internet and Intranet Access

Key Features and Benefits

Full Cisco IOS support:
Firewall
Encryption
Device Authentication and Key Management
User Authentication
Tunneling IPSec, GRE, L2F, L2TP
Management
Ease of Use and Installation
Network Address Translation and Easy IP
Quality of Service (QoS)
Reliability and Scalability
Flexibility
Device Integration

Specifications

Cisco IOS Software Feature Sets

Product Overview

The Cisco 1720 Modular Access Router delivers a flexible, integrated data access solution for small branch offices and small and medium-sized businesses providing a tailored access solution. Preparing a small or medium-sized business or small branch office for the future means implementing networking equipment with three critical characteristics: flexibility to adapt to changing requirements, features and performance to support new WAN services, and integration of multiple network functions to simplify deployment and management operations.

The Cisco 1720 access router delivers all of these capabilities in a modular, integrated and platform. With the 1720, customers can build an access solution that offers the flexibility and performance they need to maintain a competitive edge in today`s Internet driven economy

The Cisco 1720 access router offers the following components:

• One autosensing 10/100 Fast Ethernet LAN port

• Two modular WAN interface card slots that support a wide array of WAN interfaces

• One auxiliary (AUX) port (up to 115.2 Kbps asynchronous serial)

• One console port

• RISC processor for high-performance encryption

• One internal expansion slot for VPN Hardware Encryption Module which provides wire speed VPN performance at T1/E1 speeds

• Broadband xDSL and cable connectivity

The Cisco 1720 supports any combination of two WAN interface cards listed in the following Table, which are also supported by the Cisco 1600, 2600 and 3600 routers. These cards support all common WAN technologies:

• Integrated Service Digital Network (ISDN)

• Asynchronous serial

• Synchronous serial

• Leased lines

• Frame Relay

• Switched 56

• X.25

• Switched Multimegabit Data Service (SMDS)

• ADSL (not supported on 1600)

• Dual-Ethernet (only one WIC-1ENET is supported)

Also available are WAN interface cards with an integrated, manageable data service unit/channel service unit (DSU/CSU) in the Cisco 1720 router, eliminating the support costs and complexity of deploying and managing external devices.

Secure Internet, Intranet and Extranet Access

The Power of Cisco IOS Software

Cisco IOS software, the de facto standard networking software for the Internet and private WANs, delivers the an extensive set of features for Internet and Intranet access that differentiate the Cisco 1720 router from the competition. These features include Multiprotocol routing, Network Address Translation to enhance network security; Easy IP to simplify deployment; Wan Optimization features to reduce WAN costs; and support for PPP over Ethernet (PPPoE) enabling the router to be authenticated on service provider networks.

Security

Cisco IOS software supports an extensive set of basic and advanced network security features which includes access control lists (ACLs), user authentication, authorization and accounting (such as PAP/CHAP, TACACS+, and RADIUS), and data encryption. To increase security, the integrated Cisco IOS firewall protects internal LANs from attacks with dynamic access control, while IPSec tunneling with DES (data encryption standard) and Triple DES encryption provide standards-based data privacy, integrity and authenticity as data travels through a public network. Layer 2 Forwarding (L2F) and Layer 2 Tunneling Protocol (L2TP) combine with IPSec encryption to provide a secure multiprotocol solution (such as IP, IPX, AppleTalk, and more) for remote access VPN. Mobile users dial in to a service provider`s local points of presence (POPs) and data is "tunneled" (for example, encapsulated inside a second protocol such as L2TP) back to the Cisco 1720 router in order to securely access the corporate network via the Internet.

The optional VPN Module for the Cisco 1700 series routers optimizes the platform for virtual private networks (VPNs) performing at T1/E1 speeds. The VPN module, which fits in an expansion slot inside the Cisco 1720 or 1750 chassis, encrypts data using the Data Encryption Standard (DES) and 3DES algorithms at speeds suitable for a full-duplex T1/E1 serial connection (4 megabits per second [Mbps] for 1514-byte packets). The module, together with the platform, supports as many as 100 encrypted tunnels (400 security associations) for concurrent sessions with mobile users or other sites.

QoS (Traffic Management)

Cisco IOS features for QoS control the allocation of VPN bandwidth to mission-critical applications. The Cisco 1720 supports leadership QoS features such as committed access rate (CAR), policy routing, Priority Queuing/Class-Based Weighted Fair Queuing (PQ/CBWFQ) generic traffic shaping (GTS), and resource reservation protocol (RSVP).

Management and Ease of Installation.

The Cisco 1720 router supports a range of network management and ease of installation tools:

• Cisco ConfigMaker is a Windows Wizards-based tool designed to configure a small network of Cisco routers, switches, hubs and other network devices from a single PC. This tool makes it simple to configure value-add security features such as the Cisco IOS Firewall Feature Set, IPSec encryption, and NAT; establish VPN policies (including QoS and security); and configure the DHCP Server.

• CiscoView, a GUI-based device management software application for UNIX platforms, provides dynamic status, statistics, and comprehensive configuration information

• CiscoWorks2000, the industry-leading Web-based network management suite from simplifies tasks such as network inventory management and device change, configuration change, rapid software image deployment, and troubleshooting

• For service providers, Cisco Service Management (CSM) provides an extensive suite of service management solutions to enable service providers to quickly plan, provision, monitor, and bill for VPNs.

• Configuration Express, available for customers who order directly from Cisco through Cisco Connection Online (CCO), provides preconfigured routers for plug-and-play installation. The process is easy:

  • Customer supplies a custom router software configuration using CCO`s Web-based interface optional color-coded cables that match the Cisco 1720 color-coded ports can also be ordered

  • Cisco loads the custom software configuration in the factory and drop ships directly to end users

  • End user plugs in color-coded cables, turns on power switch, and the router is up and running

• Customers can also specify asset tagging for inventory control, labeling, and custom documentation to accompany each router shipment. Configuration Express can help service provider customers dramatically streamline their ordering and fulfillment processes.

• Reliability and Scalability

  Cisco IOS software is the de facto industry standard networking software with proven reliability. Cisco IOS technologies ensure that a VPN can scale reliably to very large networks through the support of Internet key exchange (IKE) and digital certificates with leading certificate authorities, scalable routing protocol features such as Open Shortest Path First (OSPF) protocol and Enhanced Interior Gateway Routing Protocol (EIGRP), and reliability services such as Hot Standby Router Protocol (HSRP).

• Encryption Performance

  Powered by a RISC processor, the Cisco 1720 supports IPSec software-based encryption at 512 Kbps for 256-byte packets, which is typical for most networks. (Performance may vary depending on the encryption algorithm used, network packet sizes, and more.) An expansion slot on the Cisco 1720 motherboard allows for support of future hardware-assisted services such as encryption (up to T1/E1) and compression (MOD1700-VPN).

• Flexibility

  The Cisco 1720 router offers a flexible solution for small offices in several ways. Interchangeable WAN interface cards enable easy upgrades or change of WAN technologies to keep pace with office needs. The ability to use the same WAN interface cards in Cisco 1600, 2600, and 3600 routers reduces requirements for spare parts inventory and protects investments in existing routers. As demand for LAN network performance increases, the Cisco 1720 router`s 10/100 autosensing Fast Ethernet port allows for easy migration to Fast Ethernet networks. Due to its RISC architecture, the Cisco 1720 has the performance necessary to support digital subscriber line (DSL) and other broadband access technologies as they become ubiquitous.

• Device Integration

  The Cisco 1720 router provides a complete access solution in a single product, with options to combine a router, DSU/CSU, ISDN network termination-1device (NT1) as well as dynamic firewall, VPN tunnel server (home gateway), and encryption functionality. This integration reduces deployment and management time and expense because fewer devices and cables need to be installed and configured. An integrated product also saves space and increases reliability because fewer components are required. The Cisco 1720 router simplifies ongoing support of small offices from a central site through remote configuration, monitoring and troubleshooting of all integrated functions in the router.

Cisco IOS Software Features for Internet and Intranet Access

In addition to the above features, extensive Cisco IOS software features for Internet and intranet access differentiate the Cisco 1720 router from the competition:

• Multiprotocol routing (IP, IPX, AppleTalk), IBM/SNA, and transparent bridging over ISDN, asynchronous serial, and synchronous serial such as leased lines, Frame Relay, SMDS, Switched 56, X.25, and X.25 over D

• Network address translation (NAT) reduces the cost of Internet access by eliminating the need to readdress all hosts with existing private network addresses (one-to-one translation) or by enabling all internal hosts to share a single registered IP address (many-to-one translation, also known as port address translation [PAT]). NAT also enhances network security by hiding internal addresses from public view

• Easy IP simplifies deployment and minimizes Internet access costs by combining:

  • PAT to conserve IP addresses

  • Point-to-Point Protocol/Internet Protocol Control Protocol (PPP/IPCP), enabling the router to dynamically negotiate and configure its own IP address

  • DHCP Server to dynamically and transparently assign reusable IP addresses to clients

• Reduced WAN costs with WAN optimization features such as dial-on-demand routing (DDR), bandwidth-on-demand (BOD) and Open Shortest Path First (OSPF)-on-demand circuit, snapshot routing, compression, filtering, and spoofing.

• Support for PPP over Ethernet (PPPoE) on the Cisco 1720 router, which enables the router to be authenticated on a service proficer`s network using PPP; by requiring a password handshaking process to take place in order for a network configuration to be granted, PPPoE inherently supports the authentication process required to track usage and bill for service

Key Features and Benefits

Full Cisco IOS support:

• Provides industry`s most robust, scalable and feature-rich internetworking software support using the accepted standard networking software for the Internet and private WANs

• Part of the Cisco end-to-end network solution

Firewall

The 1700 supports an integrated firewall and intrusion detection with Cisco Secure Integrated Software. Cisco Secure Integrated Software (formerly the Cisco IOS Firewall) includes context based access control for dynamic firewall filtering, intrusion detection, denial of service detection and prevention, Java blocking, and real-time alerts. Internal users can access the Internet with secure, per-application-based dynamic access control. Unauthorized, Internet users are prevented from accessing the internal LAN.

Encryption

The Cisco 1720 supports IPSec DES and Triple DES (3DES) encryption, as well as an expansion slot on the motherboard for an optional VPN Module that delivers hardware-based wire-speed encryption. Enables creation of secure VPNs by providing all the components necessary to deliver a VPN solution: integrated VPN tunneling, encryption, firewall and intrusion detection. Optional high-speed hardware-assisted encryption to deliver triple DES encryption at full duplex T1/E1 speeds

Device Authentication and Key Management

IKE, X.509v3 digital certificate, support for certificate enrollment protocol (CEP) with certificate authorities (CAs) such as Verisign and Entrust:

• Ensures proper identity and authenticity of devices and data

• Enables scalability to very large IPSec networks through automated key management

User Authentication

• PAP/CHAP

• RADIUS

• TACACS+

• Complete VPN support including encryption

Tunneling IPSec, GRE, L2F, L2TP

• Choice of standards-based tunneling methods to create VPNs for IP and non IP traffic

• Allows any standards-based IPSec or L2TP client to interoperate with Cisco IOS tunneling technologies

Management

• Manageable via SNMP (CiscoView, CiscoWorks2000), telnet and console port

• Allows central monitoring, configuration, and diagnostics for all functions integrated in the Cisco 1720 router, reducing management time and costs

Ease of Use and Installation

• Cisco ConfigMaker, Configuration Express, SETUP configuration utility, AutoInstall, Color coded ports/cables, LED status indicators

• Simplifies and reduces deployment time and costs with graphical LAN/VPN policy configurator, command-line context sensitive configuration questions, and straight-forward cabling

• LEDs allows quick diagnostics and troubleshooting

Network Address Translation and Easy IP

• Simplifies deployment and reduces Internet access costs

Quality of Service (QoS)

• Allocates WAN bandwidth to priority applications for improved performance

Reliability and Scalability

• Cisco IOS Software, dial-on-demand routing; dual bank Flash memory, scalable routing protocols such as OSPF and EIGRP, HSRP

• Improves network reliability and enables scalability to large networks

Flexibility

The Cisco 1720 router offers a flexible solution. Interchangeable WAN interface cards enable easy upgrades or change of WAN technologies to keep pace with office needs. The ability to use the same WAN interface cards in Cisco 1600, 2600, and 3600 routers reduces requirements for spare parts inventory and protects investments in existing routers. As demand for LAN network performance increases, the Cisco 1720 autosensing 10/100 Fast Ethernet port allows for easy deployment in mixed Ethernet networks. Because of its RISC architecture, the Cisco 1720 has the performance capability necessary to support xDSL and other broadband access technologies as they become more widely deployed.

Device Integration

The Cisco 1720 router provides a complete access solution in a single product, with options to combine a router, DSU/CSU, ISDN Network Termination 1 device (NT1), as well as a dynamic firewall, VPN tunnel server (home gateway), and encryption functionality. This integration reduces deployment and management time and expense because fewer devices and cables need to be installed and configured. An integrated product also saves space and increases reliability because fewer standalone devices are required to build the solution. The Cisco 1720 router simplifies ongoing support of small branch offices from a central site through remote configuration, monitoring, and troubleshooting of all integrated functions in the router

Specifications

Cisco IOS Software Feature Sets

The Cisco 1720 router supports a choice of Cisco IOS software feature sets, as shown in Table 18-133: Cisco 1720 Software Feature Sets and Memory Requirements for Cisco IOS Release 12.1 MainlineT below. Each feature set requires specific amounts of RAM and Flash memory in the router, as indicated in the table.

The Cisco 1720 feature sets share the same feature definitions as the Cisco 1600 series. Starting with Cisco IOS Release 12.0, the base feature sets include some features formerly in Plus: NAT, OSPF, RADIUS, and NHRP. Plus feature sets contain L2TP, L2F, Border Gateway Protocol (BGP), IP Multicast, Frame Relay SVC, RSVP, NetWare Link Services Protocol (NLSP), AppleTalk SMRP, and Network Timing Protocol (NTP). Encryption is offered in special encryption feature sets (Plus 40, Plus IPSec 56, and Plus IPSec 3DES).

New! Security Software Feature Sets are available to simplify the process of adding security features to the Cisco 1720 platform. These security bundles make it more cost-effective for customers to take advantage of the optional firewall and VPN services that the 1700 offers to insure that customer data and communication is fully protected. The security packages for the Cisco 1700 series include Cisco IOS software images and required memory, with an option for adding the new VPN Module. Customers or partners buying from Cisco will be able to order a Cisco 1720 or Cisco 1750 and then select one of the security packages as an integrated option (instead of having to order software and the required memory in piece parts). Customers buying through distribution will be able to order the security packages as standalone upgrade kits.

1. Satisfies memory requirements for 12.1T

IP

4

16

IP/Firewall

4

20

IP Plus

8

24

IP Plus IPSec 56

8

32

IP Plus IPSec 3DES

8

32

IP/Firewall Plus IPSec 56

8

32

IP/Firewall Plus IPSec 3DES

8

32

IP/IPX

4

20

IP/IPX/Firewall Plus

8

24

IP/IPX/AppleTalk/IBM

8

24

IP/IPX/AppleTalk/IBM Plus

8

32

IP/IPX/AppleTalk/IBM/Firewall Plus IPSec 56

8

32

IP/IPX/AppleTalk/IBM/Firewall Plus IPSec 3DES

8

32

IP

4

16

IP ADSL

8

20

IP Plus ADSL

8

24

IP/Voice Plus ADSL

8

32

IP Plus IPSec 56 (DES) ADSL

8

32

IP/Voice Plus IPSec 56 (DES) ADSL

8

32

IP/FW/IDS

4

20

IP/FW/Voice Plus IPSec 56 (DES) ADSL

8

32

IP/FW Plus IPSec 56 (DES) ADSL

8

32

IP/Voice/FW/IDS Plus IPSec 56 ADSL

8

32

IP/IPX

4

20

IP/IPX/FW/IDS Plus ADSL

8

24

IP/IPX/Voice/FW/IDS Plus ADSL

8

32

IP Plus IPSec 3DES ADSL

8

32

IP/Voice Plus IPSec 3DES ADSL

8

32

IP/FW Plus IPSec 3DES ADSL

8

32

IP/FW/Voice Plus IPSec 3DES ADSL

8

32

IP/IPX/AT/IBM

8

24

IP/IPX/AT/IBM Plus ADSL

8

32

IP/IPX/AT/IBM/FW Plus IPSec 56 (DES) ADSL

8

32

IP/IPX/AT/IBM/FW/Voice Plus IPSec 56 (DES) ADSL

16

48

IP/IPX/AT/IBM/FW Plus IPSec 3DES ADSL

8

32

IP/IPX/AT/IBM/FW/Voice Plus IPSec 3DES ADSL

16

48