© 2004 Cisco Systems, Inc. All rights reserved.
Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com.
Page 5 of 19
Feature Benefit
Dual AIM slots • Dual AIM slots support concurrent services such as hardware-accelerated security, ATM
segmentation and reassembly (SAR), compression, and voice mail (Refer to Table 7 for more
details on specific platform support).
Packet voice DSP module (PVDM)
slots on motherboard
• Slots for Cisco PVDM2 Modules (DSP Modules) are integrated on the motherboard, freeing slots
on the router for other services.
Extension-voice-module (EVM)
slot
• The EVM supports additional voice services and density without consuming the network-module
slot (Note: available only on Cisco 2821 and 2851).
Secure Networking–Feature and Benefits
The Cisco 2800 Series features enhanced security functionality as shown in Table 3. Integrated on the motherboard of every Cisco 2800 Series
router is hardware-based encryption acceleration that offloads the encryption processes to provide greater IPsec throughput with less overhead
for the router CPU when compared with software-based solutions. With the integration of optional VPN modules (for enhanced VPN tunnel
count), Cisco IOS Software-based firewall, network access control, or content-engine network modules, Cisco offers the industry’s most robust
and adaptable security solution for branch-office routers.
Table 3. Secure Networking—Feature and Benefits
Feature Benefit
Cisco IOS Software
Firewall
• Sophisticated security and policy enforcement provides features such as stateful, application-based filtering
(context-based access control), per-user authentication and authorization, real-time alerts, transparent
firewall, and IPv6 firewall.
Onboard VPN encryption
acceleration
• The Cisco 2800 Series supports IPsec Digital Encryption Standard (DES), Triple DES (3DES), Advanced
Encryption Standard (AES) 128, AES 192, and AES 256 cryptology without consuming an AIM slot.
Network Admissions
Control (NAC)
• A Cisco Self-Defending Network initiative, NAC seeks to dramatically improve the ability of networks to
identify, prevent, and adapt to threats by allowing network access only to compliant and trusted endpoint
devices.
Multiprotocol Label
Switching (MPLS) VPN
support
• The Cisco 2800 Series supports specific provider edge functions plus a mechanism to extend customers’
MPLS VPN networks out to the customer edge with virtual routing and forwarding (VRF) firewall and
VRF IPsec. For details on the MPLS VPN support on the different versions of the Cisco 2800 Series,
please check the feature navigator tool on www.cisco.com.
Onboard USB 1.1 port(s) • The USB port(s) will be used for future capabilities and will initially support secure token and flash memory
AIM-based security
acceleration
• Support for an optional dedicated security AIM can deliver 2 to 3 times the performance of embedded
encryption capabilities with Layer 3 compression.
Intrusion Prevention
System (IPS)
• Flexible support is offered through Cisco IOS
®
Software or a high-performance intrusion-detection-system
(IDS) network module.
• The ability to load and enable selected IDS signatures in the same manner as Cisco IDS Sensor Appliances
Cisco Easy VPN remote
and server support
• The Cisco 2800 Series eases administration and management of point-to-point VPNs by actively pushing
new security policies from a single headend to remote sites.