ISM-VPN-19 Cisco Router Modules , Cisco Network Module CE Certification

Description

Physical

The Cisco VPN ISM fits in the ISM slot in the Cisco ISR G2.

Platform support

The Cisco VPN ISM supports the Cisco 1941 and the Cisco 2900 and 3900 Series Integrated Services Routers (ISRs).

Hardware prerequisites

An ISM slot for the Cisco 1941 and the Cisco 2900 and 3900 Series is required.

IP Security (IPsec) encryption supported

Authentication:

Key exchange:

Data integrity:

Encryption:

Hardware Secure Sockets Layer (SSL) encryption supported

The Cisco VPN ISM supports SSL VPN encryption with DES, 3DES and AES.

Note: VPN ISM does not support DTLS.

Number of encryption modules per router

The Cisco VPN ISM uses one encryption module per router.

Minimum Cisco IOS Software version required

The Cisco VPN ISM requires Cisco IOS Software Version 15.2(1)T1 or later. The SEC-K9 and HSEC-K9 licenses are required.

Maximum number of IPsec encrypted tunnels

The Cisco VPN ISM supports up to 500 tunnels on the Cisco 1941, up to 2000 tunnels on the Cisco 2900 Series, and up to 3000 tunnels on the Cisco 3900 Series.

Standards supported

The Cisco VPN ISM supports the IPsec Internet Key Exchange (IKE): RFCs 2401 to 2410, 2411, 2451, 4306, 4718, 4869, and 5996.

Features

Benefits

Ability to offload encryption to a dedicated service module

Dedicated encryption protects performance while using CPU for other services.

Small physical, energy, and carbon footprint

You can save on energy bills, hardware support contracts, and onsite visits.

Maximum performance while also maintaining strong encryption protection

You have two to three times better onboard performance with the strongest Suite B encryption support.

High-overhead IPsec processing from the main processor

Critical processing resources are reserved for other services such as routing, firewall, and voice.

IPsec MIB

Cisco IPsec configuration can be monitored and can be integrated into a variety of VPN management solutions.

Certificate support to facilitate automatic authentication using digital certificates

Encryption use scales for large networks requiring secure connections between multiple sites.

Easy integration of VPN modules into existing Cisco 1941 and Cisco 2900 and 3900 Series Routers

System costs, management complexity, and deployment effort are reduced significantly compared to multiple-device solutions.

Confidentiality, data integrity, and data origin authentication through IPsec

Secure use of public switched networks and the Internet for WANs is facilitated.

Cisco IOS SSL VPN

Businesses can securely and transparently extend their networks to any Internet-enabled location using SSL VPN. The Cisco