Table of Contents

Product Overview

Secure Internet, Intranet and Extranet Access

The Power of Cisco IOS Software
Security
QoS (Traffic Management)
Management and Ease of Installation.
Cisco IOS Software Features for Internet and Intranet Access

Key Features and Benefits

Full Cisco IOS support:
Firewall
Encryption
Device Authentication and Key Management
User Authentication
Tunneling IPSec, GRE, L2F, L2TP
Management
Ease of Use and Installation
Network Address Translation and Easy IP
Quality of Service (QoS)
Reliability and Scalability
Flexibility
Device Integration

Specifications

Cisco IOS Software Feature Sets

Ordering Information

Cisco 1720 — Modular Access Router

Product Overview

The Cisco 1720 Modular Access Router delivers a flexible, integrated data access solution for small branch offices and small and medium-sized businesses that want to deploy secure Internet/Intranet and Extranet access. Preparing a small or medium-sized business or small branch office for the future means implementing networking equipment with three critical characteristics: flexibility to adapt to changing requirements, features and performance to support new WAN services, and integration of multiple network functions to simplify deployment and management operations.

The Cisco 1720 access router delivers all of these capabilities in a modular, integrated and secure platform.extranet access, including VPN. With the 1720, customers can build a secure access solution to meet their requirements today, and cost-effectively add new services — including VPNs, xDSL and cable — when needed.

The Cisco 1720 access router offers the following components:

• One autosensing 10/100 Fast Ethernet LAN port

• Two modular WAN interface card slots that support a wide array of WAN interfaces

• One auxiliary (AUX) port (up to 115.2 Kbps asynchronous serial)

• One console port

• RISC processor for high-performance encryption

• One internal expansion slot for VPN Hardware Encryption Module

The Cisco 1720 supports any combination of two WAN interface cards listed in the following Table, which are also supported by the Cisco 1600, 2600 and 3600 routers. These cards support all common WAN technologies:

• Integrated Service Digital Network (ISDN)

• Asynchronous serial

• Synchronous serial

• Leased lines

• Frame Relay

• Switched 56

• X.25

• Switched Multimegabit Data Service (SMDS)

Also available are WAN interface cards with an integrated, manageable data service unit/channel service unit (DSU/CSU) in the Cisco 1720 router, eliminating the support costs and complexity of deploying and managing external devices.

Secure Internet, Intranet and Extranet Access

The Power of Cisco IOS Software

Cisco IOS software, the de facto standard networking software for the Internet and private WANs, delivers the most comprehensive set of security, quality of service (QOS), and management; plus scalable and reliable VPN features. The Cisco 1720 router with Cisco IOS software enables practical, cost-effective, and wide-scale VPN deployment.

Security

Cisco IOS software supports an extensive set of basic and advanced network security features which includes access control lists (ACLs), user authentication, authorization and accounting (such as PAP/CHAP, TACACS+, and RADIUS), and data encryption. To increase security, the integrated Cisco IOS firewall protects internal LANs from attacks with dynamic access control, while IPSec tunneling with DES (data encryption standard) and Triple DES encryption provide standards-based data privacy, integrity and authenticity as data travels through a public network. Layer 2 Forwarding (L2F) and Layer 2 Tunneling Protocol (L2TP) combine with IPSec encryption to provide a secure multiprotocol solution (such as IP, IPX, AppleTalk, and more) for remote access VPN. Mobile users dial in to a service provider`s local points of presence (POPs) and data is "tunneled" (for example, encapsulated inside a second protocol such as L2TP) back to the Cisco 1720 router in order to securely access the corporate network via the Internet.

The optional VPN Module for the Cisco 1700 series routers optimizes the platform for virtual private networks (VPNs). The VPN module, which fits in a slot inside the Cisco 1720 or 1750 chassis, encrypts data using the Data Encryption Standard (DES) and 3DES algorithms at speeds suitable for a full-duplex T1/E1 serial connection (4 megabits per second [Mbps] for 1514-byte packets). The module, together with the platform, supports as many as 100 encrypted tunnels (400 security associations) for concurrent sessions with mobile users or other sites.

QoS (Traffic Management)

Cisco IOS features for QoS control the allocation of VPN bandwidth to mission-critical applications. The Cisco 1720 supports leadership QoS features such as committed access rate (CAR), policy routing, weighted fair queueing (WFQ), generic traffic shaping (GTS), and resource reservation protocol (RSVP).

Management and Ease of Installation.

The Cisco 1720 router supports a range of network management and ease of installation tools:

• Cisco ConfigMaker is a Windows Wizards-based tool designed to configure a small network of Cisco routers, switches, hubs and other network devices from a single PC. This tool simplifies VPN deployment with support for VPN policy configuration, including Cisco IOS Firewall Feature Set, IPSec encryption, network address translation (NAT), and DHCP server.

• CiscoView, a GUI-based device management software application for UNIX platforms, provides dynamic status, statistics, and comprehensive configuration information

• CiscoWorks2000, the industry-leading Web-based network management suite from simplifies tasks such as network inventory management and device change, configuration change, rapid software image deployment, and troubleshooting

• For service providers, Cisco Service Management (CSM) provides an extensive suite of service management solutions to enable service providers to quickly plan, provision, monitor, and bill for VPNs.

• Configuration Express, available for customers who order directly from Cisco through Cisco Connection Online (CCO), provides preconfigured routers for plug-and-play installation. The process is easy:

  • Customer supplies a custom router software configuration using CCO`s Web-based interface optional color-coded cables that match the Cisco 1720 color-coded ports can also be ordered

  • Cisco loads the custom software configuration in the factory and drop ships directly to end users

  • End user plugs in color-coded cables, turns on power switch, and the router is up and running

• Customers can also specify asset tagging for inventory control, labeling, and custom documentation to accompany each router shipment. Configuration Express can help service provider customers dramatically streamline their ordering and fulfillment processes.

• Reliability and Scalability

  Cisco IOS software is the de facto industry standard networking software with proven reliability. Cisco IOS technologies ensure that a VPN can scale reliably to very large networks through the support of Internet key exchange (IKE) and digital certificates with leading certificate authorities, scalable routing protocol features such as Open Shortest Path First (OSPF) protocol and Enhanced Interior Gateway Routing Protocol (EIGRP), and reliability services such as Hot Standby Router Protocol (HSRP). Encryption Performance. Powered by a RISC processor, the Cisco 1720 supports IPSec software-based encryption at 512 Kbps for 256-byte packets, which is typical for most networks. (Performance may vary depending on the encryption algorithm used, network packet sizes, and more.) An expansion slot on the Cisco 1720 motherboard allows for support of future hardware-assisted services such as encryption (up to T1/E1) and compression.

• Flexibility

  The Cisco 1720 router offers a flexible solution for small offices in several ways. Interchangeable WAN interface cards enable easy upgrades or change of WAN technologies to keep pace with office needs. The ability to use the same WAN interface cards in Cisco 1600, 2600, and 3600 routers reduces requirements for spare parts inventory and protects investments in existing routers. As demand for LAN network performance increases, the Cisco 1720 router`s 10/100 autosensing Fast Ethernet port allows for easy migration to Fast Ethernet networks. Due to its RISC architecture, the Cisco 1720 has the performance necessary to support digital subscriber line (DSL) and other broadband access technologies as they become ubiquitous.

• Device Integration

  The Cisco 1720 router provides a complete solution for VPN access in a single product, with options to combine a router, DSU/CSU, ISDN network termination-1device (NT1) as well as firewall, VPN tunnel server (home gateway), and encryption functionality. This integration reduces deployment and management time and expense because fewer devices and cables need to be installed and configured. An integrated product also saves space and increases reliability because fewer components are required. The Cisco 1720 router simplifies ongoing support of small offices from a central site through remote configuration, monitoring and troubleshooting of all integrated functions in the router.

Cisco IOS Software Features for Internet and Intranet Access

In addition to the above features, extensive Cisco IOS software features for Internet and intranet access differentiate the Cisco 1720 router from the competition:

• Multiprotocol routing (IP, IPX, AppleTalk), IBM/SNA, and transparent bridging over ISDN, asynchronous serial, and synchronous serial such as leased lines, Frame Relay, SMDS, Switched 56, X.25, and X.25 over D

• Network address translation (NAT) reduces the cost of Internet access by eliminating the need to readdress all hosts with existing private network addresses (one-to-one translation) or by enabling all internal hosts to share a single registered IP address (many-to-one translation, also known as port address translation [PAT]). NAT also enhances network security by hiding internal addresses from public view

• Easy IP simplifies deployment and minimizes Internet access costs by combining:

  • PAT to conserve IP addresses

  • Point-to-Point Protocol/Internet Protocol Control Protocol (PPP/IPCP), enabling the router to dynamically negotiate and configure its own IP address

  • DHCP Server to dynamically and transparently assign reusable IP addresses to clients

• WAN optimization features such as dial-on-demand routing (DDR), bandwidth-on-demand (BOD) and Open Shortest Path First (OSPF)-on-demand circuit, Snapshot routing, compression, filtering, and spoofing reduce WAN costs

Key Features and Benefits

Full Cisco IOS support:

• Provides industry`s most robust, scalable for Internet and private WANs using the De facto standard networking software for Internet and private WANs

• Part of the Cisco end-to-end network solution

Firewall

The 1700 supports an integrated firewall and intrusion detection with Cisco Secure Integrated Software. Cisco Secure Integrated Software (formerly the Cisco IOS Firewall) includes context based access control for dynamic firewall filtering, intrusion detection, denial of service detection and prevention, Java blocking, and real-time alerts. Internal users can access the Internet with secure, per-application-based dynamic access control. Unauthorized, Internet users are prevented from accessing the internal LAN.

Encryption

The Cisco 1720 supports IPSec DES and Triple DES (3DES) encryption, as well as a modular slot on the motherboard for an optional VPN Module that delivers hardware-based high-speed encryption. Enables creation of secure VPNs by providing all the components necessary to deliver a VPN solution: integrated VPN tunneling, encryption, firewall and intrusion detection. Optional high-speed hardware-assisted encryption to deliver triple DES encryption at full duplex T1/E1 speeds

Device Authentication and Key Management

IKE, X.509v3 digital certificate, support for certificate enrollment protocol (CEP) with certificate authorities (CAs) such as Verisign and Entrust:

• Ensures proper identity and authenticity of devices and data

• Enables scalability to very large IPSec networks through automated key management

User Authentication

• PAP/CHAP

• RADIUS

• TACACS+

• Token for verified user identity

Tunneling IPSec, GRE, L2F, L2TP

• Choice of standards-based tunneling methods to create VPNs for IP and non IP traffic

• Allows any standards-based IPSec or L2TP client to interoperate with Cisco IOS tunneling technologies

Management

• Manageable via SNMP (CiscoView, CiscoWorks2000), telnet and console port

• Allows central monitoring, configuration, and diagnostics for all functions integrated in the Cisco 1720 router, reducing management time and costs

Ease of Use and Installation

• Cisco ConfigMaker, Configuration Express, SETUP configuration utility, AutoInstall, Color coded ports/cables, LED status indicators

• Simplifies and reduces deployment time and costs with graphical LAN/VPN policy configurator, command-line context sensitive configuration questions, and straight-forward cabling

• LEDs allows quick diagnostics and troubleshooting

Network Address Translation and Easy IP

• Simplifies deployment and reduces Internet access costs

Quality of Service (QoS)

• Allocates WAN bandwidth to priority applications for improved performance

Reliability and Scalability

• Cisco IOS Software, dial-on-demand routing; dual bank Flash memory, scalable routing protocols such as OSPF and EIGRP, HSRP

• Improves network reliability and enables scalability to large networks

Flexibility

• Modular architecture (WAN card slots)

• Enables flexible WAN choices on the Cisco 1720 router protecting investment

• WAN Interface Cards shared with Cisco 1600, 2600, and 3600 routers

• Reduced cost of maintaining inventory

• Lowers training costs for support personnel

• Protects investments through reuse on various platforms

• 10/100 Autosensing Fast Ethernet

• Simplifies migration to Fast Ethernet performance in the office

• Expansion slot on motherboard — Allows expandability to support future services such as hardware-assisted encryption and compression

Device Integration

• Integrated router, firewall, encryption, VPN tunnel server, DSU/CSU, and NT1 in single device

• Reduces costs and simplifies management compared to solutions based upon multiple, separate devices

• Part of Cisco Networked Office stack

• Delivers complete, compatible solutions for small office networks

Specifications

Cisco IOS Software Feature Sets

The Cisco 1720 router supports a choice of Cisco IOS software feature sets, as shown in Table 17-103: Table 2. Cisco 1720 Software Feature Sets and Memory Requirements for Cisco IOS Release 12.0XA and 12.0T . Each feature set requires specific amounts of RAM and Flash memory in the router, as indicated in the table.

The Cisco 1720 feature sets share the same feature definitions as the Cisco 1600 series. Starting with Cisco IOS Release 12.0, the base feature sets include some features formerly in Plus: NAT, OSPF, RADIUS, and NHRP. Plus feature sets contain L2TP, L2F, Border Gateway Protocol (BGP), IP Multicast, Frame Relay SVC, RSVP, NetWare Link Services Protocol (NLSP), AppleTalk SMRP, and Network Timing Protocol (NTP). Encryption is offered in special encryption feature sets (Plus 40, Plus IPSec 56, and Plus IPSec 3DES).

New! Security Software Feature Sets are available to simplify the process of adding security features to the Cisco 1720 platform. These security bundles make it more cost-effective for customers to take advantage of the optional firewall and VPN services that the 1700 offers to insure that customer data and communication is fully protected. The security packages for the Cisco 1700 series include Cisco IOS software images and required memory, with an option for adding the new VPN Module. Customers or partners buying from Cisco will be able to order a Cisco 1720 or Cisco 1750 and then select one of the security packages as an integrated option (instead of having to order software and the required memory in piece parts). Customers buying through distribution will be able to order the security packages as standalone upgrade kits.

1. Satisfies memory requirements for 12.1(1)T

Ordering Information

Posted: Wed Sep 27 05:13:55 PDT 2000
Copyright 1989-2000©Cisco Systems Inc.