|
Cisco® 890 Series Integrated Services Routers combine Internet access, comprehensive security, and wireless services in a single, secure device that is easy to deploy and manage (Figure 1). The best-in-class Cisco 890 Series architecture has been specifically designed to deliver high performance with concurrent services, business continuity, and investment protection for enterprise small branch offices and service provider managed services applications.
Figure 1. Cisco 890 Series Integrated Services Router with Integrated 802.11n Access Point
Product Overview
Cisco 890 Series Integrated Services Routers are fixed-configuration routers that provide collaborative business solutions for secure voice and data communications to enterprise small branch offices (Figure 2). They are designed to deliver secure broadband, Metro Ethernet, wireless LAN (WLAN) connectivity, and business continuity. The routers also come with powerful management tools, such as the web-based Cisco Configuration Professional configuration management tool, which simplifies setup and deployment. Centralized management capabilities give network managers visibility and control of the network configurations at the remote site.
Cisco 890 Series Integrated Services Routers offer:
• High performance for secure broadband and Metro Ethernet access with concurrent services for enterprise small branch offices
• Business continuity and WAN diversity with redundant WAN links: Fast Ethernet, V.92, and ISDN Basic Rate Interface (BRI)
• Integrated secure 802.11a/g/n access point (optional) based on the draft 802.11n standard; dual-band radios for mobility and support for autonomous or Cisco Unified WLAN architectures
• Enhanced security including:
– Firewall with advance application and control for email, instant messaging (IM), and HTTP traffic
– Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN [DMVPN], Group Encrypted Transport VPN [GET VPN] with onboard acceleration, and Secure Sockets Layer [SSL] VPN
– Intrusion prevention system (IPS): An inline, deep-packet-inspection feature that mitigates a wide range of network attacks
– Content filtering: A subscription-based integrated security solution that offers category-based reputation rating, keyword blocking, and protection against adware, malware, spyware, and URL blocking
• An 8-port 10/100 Fast Ethernet managed switch with VLAN support and 4-port support for Power over Ethernet (PoE) (optional) to power IP phones or external access points
• Metro Ethernet features include:
– One 1000 BASE-T Gigabit Ethernet WAN port
– One 10/100 BASE-T Fast Ethernet WAN port
– Intelligent hierarchical quality of service (HQoS): Supports hierarchical queuing and shaping
– Connectivity Fault Management (CFM), based on 802.1ag
– 802.3ah standard based Link operational administration and maintenance (OAM)
– Ethernet Local Management Interface (E-LMI) for the Customer Edge
– CFM Interworking and backwards compatibility
– Performance Management based on IP service-level agreement (SLA) for Ethernet
• Dedicated console and auxiliary ports for configuration and management
• Two USB 2.0 ports for security eToken credentials, booting, and loading configuration from USB
• Easy setup, deployment, and centralized and remote-management capabilities through web-based tools and Cisco IOS® Software
Table 1 summarizes the Cisco 890 Series models.
Table 1. Cisco 890 Series Models
|
Models |
WAN Interface |
LAN Interfaces |
802.11a/g/n Option |
Integrated USB 2.0/AUX/Console |
Integrated Dial Backup |
|
Cisco 891 |
1-port GE
1-port FE |
8-port 10/100-Mbps managed switch |
Yes |
Yes/Yes/Yes |
V.92 analog modem |
|
Cisco 892 |
1-port GE
1-port FE |
8-port 10/100-Mbps managed switch |
Yes |
Yes/Yes/Yes |
ISDN BRI |
Figure 2. Typical Two-box Enterprise Small Branch-Office Deployment
Architecture Features and Benefits
Secure Network Connectivity
Cisco 890 Series routers deliver high performance with integrated security and threat defense. Network security has become a fundamental building block of any network, and Cisco routers play an important role in embedding security at the customer's access edge. Cisco recognizes this requirement, so Cisco 890 Series routers are equipped with security hardware acceleration and Cisco IOS Software (by default, a universal image with Advanced IP Services feature license). This Cisco IOS Software feature set facilitates hardware-based IPsec encryption on the motherboard and provides a robust array of security capabilities such as Cisco IOS Firewall, content filtering, IPS support, IPsec VPNs (DES, 3DES, and AES), SSL VPN, tunnel-less Group Encrypted Transport VPN, DMVPN, Easy VPN server and client support, Secure Shell (SSH) Protocol Version 2.0, and Simple Network Management Protocol (SNMP) in one solution set. Cisco IOS Content Filtering uses an innovative website caching and rating architecture to deliver the scalability and flexibility of an enterprise-class filtering solution, at a breakthrough price point (Figure 3). This solution is scalable and easy to maintain, ideally suited for small businesses and enterprise small branch offices. Cisco 890 Series routers come with a comprehensive security solution that protects organizations' networks from known and new Internet vulnerabilities and attacks, while improving employee productivity.
Figure 3. Cisco IOS Content Filtering with a Cisco 890 Series Router
Metro Ethernet Connectivity
Cisco 890 Series routers are ideal for service provider deployments as Metro Ethernet customer premises equipment (CPE). Cisco 891 and 892 Integrated Services Routers include two onboard WAN interfaces, one Gigabit Ethernet WAN port, and one Fast Ethernet WAN port to support the high-bandwidth demands of Metro Ethernet deployments. The router also provides failover protection and load balancing. The 8-port managed switch provides enough LAN ports for connecting multiple devices, and the optional PoE capability can supply power to IP phones or other devices. The Cisco 890 Series provides significant value to customers by simplifying deployment of Ethernet WAN services with end-to-end OAM, SLA monitoring and verification, and configuration management, resulting in increased operational efficiency and reduced operating expenses (OpEx).
The following Metro Ethernet features are supported for the Cisco 890 Series:
• E-LMI: Basic configuration for detection and isolation of connectivity in the Metro Ethernet network
• E-LMI: Automated configuration of customer edge based on profiles configured:
– Layer 2 connectivity management
– Ethernet LMI for the customer edge
• Metro Ethernet OAM:
– Debugging hierarchy of Ethernet networks
– Layer 2 service performance monitoring
• 802.1ag CFM:
Uses domains to contain OAM flows and bound OAM responsibilities
• 802.3ah: Ethernet in the First Mile (EFM)
– Three types of packets: Continuity Check, Layer 2 Ping, and Layer 2 Traceroute
• IP SLA for Ethernet | 
