The modular Cisco 3700 Series Multiservice Access Routers leverage network modules (NMs),WAN Interface Cards (WICs), and Advanced Integration Modules (AIMs) from the Cisco 1700, 2600, and 3600 Series Routers for WAN Access, Voice Gateway, Security, Content, Circuit Emulation, and Dial applications. In addition, the Cisco 3725 and Cisco 3745 introduce a new, doublewide form factor, that provides support for the high density services modules (HDSM’s). The Cisco 3745 with four network module slots can accept up to two HDSM’s by removing the center guides between each pair of adjacent NM slots. The Cisco 3725, with two network module slots can accept a single HDSM in the upper network module slot by removing the blank panel and still have an available network module slot. By utilizing the new HDSM capability the Cisco 3700 Series routers are able to integrate higher port density and new, high performance services.
3745 Multiservice Access Router (shown with optional interfaces)
Also new in the Cisco 3700 Series is the ability to support integrated In-Line Power on optional 10/100 switching modules for IP Telephony and/or Aironet Wireless LAN applications. By integrating the connectivity slots and ports on the base chassis, the Cisco 3700 Series enables the NM slots to integrate additional services in a small footprint. Both Cisco 3700 platforms offer increased Flash and DRAM default memory to accelerate and simplify future service and feature additions. In addition, the Cisco 3745 router offers additional availability features that may be required in high density, multiple services configurations.
Key features for the Cisco 3725 and 3745:
• Two Integrated 10/100 LAN ports
• Two Integrated Advanced Integration Modules (AIM) slots
• Three Integrated WAN Interface Card (WIC) slots
• Two (Cisco 3725) or four (Cisco 3745) Network Module (NM) slots
• One (Cisco 3725) or two (Cisco 3745) High Density Service Module (HDSM)-capable slots
• 32MB Compact Flash/256MB DRAM default
• Cisco 3725 has two 128 MB SDRAM DIMM module and a single 32 MB Compact Flash module by default
• Cisco 3745 has two 128 MB SDRAM SODIMM module and a single 32 MB Compact Flash module by default
• Optional In-Line Power for 16-port EtherSwitch NM, 36-port EtherSwitch HDSM and wireless access points
• Support for all major WAN protocols and media: leased line, Frame Relay, ISDN, X.25, ATM, fractional T1/E1, T1/E1, xDSL, T3/E3, HSSI
• Support for selected NMs, WICs and AIMs from the Cisco 1700, 2600 and 3600 Series
• 2 RU (Cisco 3725) or 3 RU (Cisco 3745) Rack-mountable chassis
• 24V to 60V Universal DC power supply
• NEBS Level 3 compliance
• Additional Key Features for the Cisco 3745:
• Field-replaceable motherboard, I/O board and fan tray
• Passive backplane
• Optional internal redundant power supplies (RPS-AC, DC and inline power)
• Online Insertion and Removal (OIR) of NMs and power supplies
Table 1. Cisco 3700 Series Key Features and Benefits
Feature
|
Benefit
|
Investment Protection
|
Modular platform which shares interfaces with Cisco 1700, 2600, 3600
|
· Network interfaces are field-upgradable to accommodate future technologies
· Additional services can be added on an “integrate as you grow” basis
· Leverages the large existing portfolio of WICs, VICs, NMs and AIMs to reduce sparing, training, configuration and installation and maintenance costs
|
LAN/WAN Connectivity integrated into chassis
|
· More NM and HDSM slots available to add services in the future
· Combination of AIMs and WICs along with NMs/HDSMs gives greater flexibility to create new configurations as requirements change
|
VPN and Security configurations
|
· Add intrusion prevention (IPS) and VPN connectivity to the router through Cisco IOS software and optional performance-enhancing data encryption AIMs.
· Provides secure connectivity and perimeter security throughout the network.
|
Flexible voice gateway and IP Telephony configurations
|
· Incremental or full scale migration from legacy infrastructure to IP Telephony
· An extensive set of business class IP Telephony features for the small and medium business or branch office are provided through inherent support for Cisco CallManager Express.
· Cisco Unity Express voice mail support complements Cisco CallManager Express
· Supports numerous standards-based analog and digital interfaces to PBXs and the PSTN
· Sliding scale options for higher density mixed analog and digital voice gateway configurations
|
Cisco IOS Software
|
· Supports Cisco IOS feature sets common with the Cisco 2600 routers
· Enables end to end solutions with full support for Cisco IOS-based QoS, bandwidth management and Security mechanisms
|
Scalability
|
Increased AIM (2) and WIC density (3)
|
· Services and WAN connectivity and backup can be supported without consuming an NM slot
· Increased density per RU of voice, switching, WAN connectivity
|
Increased default memory of 32MB Compact Flash and256 MB DRAM
|
· A greater number of new Cisco IOS releases may be added without the need to purchase/install additional memory
|
New High Density Service Modules (HDSM)
|
· Enables higher port density and new, high performance services
|
Availability
|
Support for Optional Redundant Power
|
· Accommodates optional RPS (external for Cisco 3725, internal for Cisco 3745) and minimizes network downtime
|
Survivable Remote Site Telephony
|
· Branch offices can leverage centralized call control while cost-effectively providing local branch backup redundancy for IP Telephony
|
Online Insertion and Removal-capable (3745 only)
|
· Allows network modules to be swapped or serviced with minimal impact to network availability
· Allows servicing of online replacement of RPS
· Online replacement of fan tray
|
Field-replaceable motherboard, I/O board, power supplies and fan tray (3745 only)
|
· High serviceability design
· Additional operations and maintenance flexibility
|
ADVANCED INTEGRATION MODULE OPTIONS
The Cisco 3700 Series are equipped with two internal slots to support one or two field-installable AIMs. AIMs use function-specific hardware to off-load the main router CPU and accelerate processor- or resource-intensive services, yielding dramatically higher throughput and higher performance than a software-only implementation. The AIM slot has access to virtually all of the router’s resources, including the main system bus. The TDM bus and the serial communications controllers make this a very flexible and powerful feature. Since the AIM is internally mounted, external slots remain available for integration of other modular components such as CSU/DSUs, WAN interfaces, or other devices such as modems, or packetized voice/fax processors.
The Data Compression AIM provides a cost-effective option for reducing recurring WAN costs and maximizes the benefit of the advanced bandwidth management features of the Cisco IOS software. With compression ratios of up to 4:1, each integrated Data Compression AIM supports 4 T1/E1s of compressed data throughput with one AIM and up to 8 T1/E1 with two AIMs. The Data Compression AIM supports industry standard LZS and Microsoft Point-to-Point Compression (MPPC) algorithms and ensures compatibility with all Cisco products supporting hardware- or software-based compression.
Three combination Voice + ATM AIM modules are available on the Cisco 3700 Series. The AIM-ATM provides asynchronous transfer mode (ATM) services to the WAN. The AIM-VOICE-30 provides digital signal processor (DSP) services, which can support up to 30 medium-complexity voice channels. The AIM-ATM-VOICE-30 combines the features from the AIM-ATM and AIM-VOICE-30 modules onto a single AIM module. These AIM modules supplement the broad portfolio of Cisco voice solutions and allow enterprises and service providers the flexibility of implementing ATM and voice solutions on the routers. These three Voice and ATM AIM modules provide a cost-effective option for reducing recurring cost and maximizing the benefits of the advanced bandwidth management features of the Cisco IOS software.
The AIM-ATM offers ATM adaptation layer 2 (AAL2), and ATM adaptation layer 5 (AAL5) support for low-density T1/E1 data and voice connections over ATM networks. It supports up to 4 T1/E1 of IMA with a single AIM-ATM, and 8 T1/E1 of IMA with two AIM-ATM’s (maximum 4 T1/E1 IMA bundle). This AIM module allows service providers and enterprise customers to take advantage of the reliability and quality of service (QoS) available with ATM connectivity. The AIM-VOICE-30 contains DSPs that can support up to 30 medium-complexity voice channels when used with the Voice/WAN (VWIC-MFT) interface card. When the AIM-VOICE-30 can be used in a Cisco 3700, for voice over IP (VoIP) or voice over Frame Relay (VoFR) connectivity while freeing up the network module slot for other applications. The AIM-ATM-VOICE-30 combines the ATM features of AIM-ATM and voice features of AIM-VOICE-30 in a single AIM.
The Data Encryption AIM’s available for the Cisco 3700 Series offloads encryption processing from the CPU, providing over 10 times the performance over software-only encryption. The AIM-VPN/EP on the Cisco 3725 supports a maximum of 800 tunnels. On the Cisco 3745, the AIM-VPN/HP supports a maximum of 1,800 tunnels. The AIM-VPN/EPII and AIM-VPN/HPII further extend the encryption performance of the Cisco 3700. These modules offers hardware accelerated DES/3DES and the new AES (Advanced Encryption standard) encryption at speeds up to 90-Mbps on the Cisco 3745 (max based on 1400 byte packet size). In addition the AIM-VPN/EPII and AIM-VPN/HPII support hardware-assisted layer-3 compression services where bandwidth conservation may lower network connection costs. The AIM-VPN/EPII on the Cisco 3725 and Cisco 3745 supports a maximum of2,000 tunnels. The AIM-VPN/EPII Plus and AIM-VPN/HPII Plus modules add native support for AES 192 and 256 bit encryption.
KEY APPLICATIONS AND BENEFITS
The Cisco 3700 platforms are designed for the Full Service Branch office that are deploying advanced applications, that require higher performance for voice, security, QoS, content acceleration and delivery, and high availability at the network edge by integrating functions previously addressed by a combination of platforms.
ADVANCED SECURITY SERVICES AND VPNS
The Security and VPN features of the Cisco 3700 offer customers the ability to deploy proven security features such as secure VPNs, Intrusion Prevention Systems (IPS), and firewalls, as well as high-speed Internet access and the ability to create extranets or demilitarized zones (DMZs). Cisco access routers deliver a rich, integrated package of routing, firewall, intrusion detection, and VPN functions for multiservice applications.
VPNs help companies reap benefits such as dramatically lowered WAN costs, improved global connectivity, and better reliability, while enabling capabilities such as secure extranet communications. Remote dial, Internet, intranet, and extranet access can all be consolidated over a single WAN connection to the Internet. The Cisco 3700 VPN solution supports the features essential to VPNs-IPSec data encryption, tunneling, broad certificate authority support for public key infrastructure (PKI)-and advanced features such as stateful VPN failover, certificate auto-enrollment, stateful firewall, intrusion detection, and service-level validation. The Cisco 3700 Series works with optional Virtual Private Network Modules (VPN Modules) to optimize the platforms for virtual private networks (VPNs). The Cisco 3700 Series VPN Modules provide up to 10 times the performance over software-only encryption by offloading the encryption processing from the router central processing unit (CPU). The Cisco 3700 series together with the VPN module are the perfect IPSec VPN solution for connecting medium, and large branch offices to other remote locations, corporate headquarters, central-office intranets, or partner extranets.
As network security becomes increasingly critical to securing business transactions, businesses must integrate security into the network design and infrastructure. The Cisco IOS Firewall is a security-specific option for Cisco IOS software which runs on the Cisco 3700 platform. It integrates robust firewall functionality and intrusion prevention for every network perimeter and enriches existing Cisco IOS security capabilities. It adds greater depth and flexibility to existing Cisco IOS security solutions-such as authentication, encryption, and failover-by delivering state-of-the-art security features such as stateful, application-based filtering; dynamic per-user authentication and authorization; defense against network attacks; Java blocking; and real-time alerts.
VPN SECURITY FEATURES AND VOICE AND VIDEO-ENABLED IPSEC VPN
The Cisco 3700 VPN security features are all voice and video-enabled IPSec VPN ready. The Cisco 3700 offers a VPN infrastructure capable of transporting converged voice, video, and data traffic across a secure IPSec network. The Cisco 3700 VPN platforms are able to accommodate the diverse network topologies and traffic types characteristic of multiservice IPSec VPNs, and ensure that the VPN infrastructure does not break multiservice applications deployed now or in the future. The network architecture of the Cisco Voice and Video-Enabled IPSec VPN (V3PN) Solution takes advantage of Cisco VPN routers with Cisco IOS Software, Cisco CallManager, and IP phones. Furthermore, Cisco provides an overall deployment model for these products through Cisco AVVID (Architecture for Voice, Video and Integrated Data) for converged networking and the SAFE Blueprint for VPNs. These deployment models ensure a secure, interoperable, reliable network solution with end-to-end product support.
CONTENT ACCELERATION AND DELIVERY
Cisco 3700 Series enables key services critical to supporting the needs of today’s enterprise networks. By enabling efficient delivery of rich media and web content, content acceleration and delivery services enhance user productivity while optimizing WAN bandwidth. Cisco 3700 supports the integrated Content Engine Network Module, which leverages the advanced content acceleration features of the Cisco Content Engine 5xx Series into the industry’s first router-integrated content delivery system.
As enterprises learn to capitalize on the capabilities of web-based applications, HTTP traffic is assuming a larger proportion of WAN bandwidth. The Content Engine Network Module effectively accelerates applications by optimizing the delivery of bandwidth-intensive and frequently accessed content. Caching alone can offer a 40-60% savings in WAN bandwidth usage by a branch site, and the content delivery capabilities of the module enables enterprise services which maximize the productivity and efficiency of a global enterprise. Integration of the application layer services of the Content Engine Network Module with intelligent network services such as QoS, compression and IPSec offer a superior bandwidth optimization solution for the enterprise branch.
Combining intelligent caching, content filtering and content delivery capabilities with robust branch office routing helps users optimize their networks for important branch IP services such as VOIP, while greatly simplifying configuration, deployment, and operation of network services. Running Cisco Application and Content Networking System (ACNS) software, the Content Engine Network Module enables customers to extend the value of their branch router infrastructure to deliver strategic new application services-such as Employee Internet Management, Streaming Media, live and on-demand e-communications and e-learning, with no performance degradation of core routing services. Further, the Content Engine Network Module interoperates with all Cisco devices, and leverages key Cisco IOS features such as multicast and WCCP while supporting key management solutions such as CiscoWorks.