All contents are Copyright © 1992–2006 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 3 of 7
Q. How are these features processed on Cisco 1841 and Cisco 2800 and 3800 Series Integrated Services Routers and their VPN
modules?
A. Table 1 shows the processing capabilities of these features on the modular integrated services routers.
Table 1. Feature Processing on ISRs
IPsec
3DES
IPsec AES
(256)
IP Payload Compression
Protocol (IPPCP)
Hardware Acceleration
IPv6 IPsec Cisco IOS
WebVPN
or SSL
VPN
Cisco IOS
Secure
Multicast
Cisco 1841 onboard crypto
accelerator
X X – – – –
Cisco 2800 Series onboard
crypto accelerator
X X – – – –
Cisco 3800 Series onboard
crypto accelerator
X X – – – –
AIM-VPN-II-PLUS Series X X X – – –
Cisco AIM-VPN/SSL Series X X X X X X
SSL VPN processing is different from that of the other features in that SSL VPN involves both termination of the SSL tunnel and the use
of an application proxy. The Cisco AIM-VPN/SSL terminates the SSL tunnel, and the router CPU provides the application proxy services
for the published applications. Without the Cisco AIM-VPN/SSL, the router CPU also terminates the SSL tunnel.
Q. What encryption modules are available for the Cisco Integrated Services Routers?
A. Table 2 lists the VPN modules supported in Cisco Integrated Services Routers.
Table 2. VPN Modules Supported in Cisco Integrated Services Routers
Cisco 1841 Cisco 2801-51 Cisco 3825 Cisco 3845
AIM-VPN/BPII-PLUS AIM-VPN/EPII-PLUS AIM-VPN/EPII-PLUS AIM-VPN/HPII-PLUS
AIM-VPN/SSL-1 AIM-VPN/SSL-2 AIM-VPN/SSL-3 AIM-VPN/SSL-3
Q. What functions do the VPN modules perform?
A. Table 3 lists the features of each VPN module.
Table 3. VPN Module Features
Module Features Supported Platform
AIM-VPN/BP II-PLUS, AIM-VPN/EP
II-PLUS, and AIM-VPN/HPII-PLUS
DES, 3DES, AES (256), Layer 3 compression
(IPPCP), hashing, key exchange, and SA storage
Cisco 1841, Cisco 2800 Series, Cisco 3800 Series,
Cisco 2600XM, Cisco 2691 Multiservice Platform,
and Cisco 3700 Series Multiservice Access Routers
AIM-VPN/SSL-1, AIM-VPN/SSL-2,
and AIM-VPN/SSL-3
Cisco IOS WebVPN (SSL) termination, IPv6
IPsec, Cisco IOS Secure Multicast (GDOI), DES,
3DES, AES (256), Layer 3 compression (IPPCP),
hashing, key exchange, and SA storage
Cisco 1841, Cisco 2800 Series, Cisco 3800 Series,
and Cisco 3700 Series
Q. With the introduction of the new Cisco AIM-VPN/SSL cards, will the Cisco AIM-VPN-II-PLUS Series move to end-of-sale
status?
A. There are no current plans to stop selling the Cisco AIM-VPN-II-PLUS cards; however, Cisco encourages customers to switch to the
newer cards for their enhanced functions and performance.
(7 stránky)
(109 stránky)
(35 stránky)
(5 stránky)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce