Cisco 3925 User Manual

150
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Configuring Security Features
Configuring Group Encrypted Transport VPN
Configuring Group Encrypted Transport VPN
Group Encrypted Transport (GET) VPN is a set of features that are necessary to secure IP multicast
group traffic or unicast traffic over a private WAN that originates on or flows through a Cisco IOS device.
GET VPN combines the keying protocol Group Domain of Interpretation (GDOI) with IPsec encryption
to provide users with an efficient method of securing IP multicast traffic or unicast traffic. GET VPN
enables the router to apply encryption to nontunneled (that is, “native”) IP multicast and unicast packets
and eliminates the requirement to configure tunnels to protect multicast and unicast traffic.
By removing the need for point-to-point tunnels, meshed networks can scale higher while maintaining
network-intelligence features that are critical to voice and video quality, such as QoS, routing, and
multicast. GET VPN offers a new standards-based IP security (IPsec) security model that is based on the
concept of “trusted” group members. Trusted member routers use a common security methodology that
is independent of any point-to-point IPsec tunnel relationship.
For additional information about configuring GET VPN, see Cisco Group Encrypted Transport VPN at:
http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/htgetvpn.html.

Cisco 3925 Specifications

General

Product Type	Router
Form Factor	Rack-mountable
Data Link Protocol	Ethernet, Fast Ethernet, Gigabit Ethernet
Connectivity Technology	Wired
Power	AC 120/230 V (50/60 Hz)
Redundant Power Supply	Optional
Routing Protocol	OSPF, IS-IS, BGP, EIGRP, PIM
Network/Transport Protocol	IPSec
Remote Management Protocol	SNMP, Telnet, SSH, HTTP
Encryption Algorithm	DES, Triple DES, AES
Flash Memory	256 MB
Weight	11.5 kg
Interfaces	2 x SFP (mini-GBIC)
Power Source	Internal power supply
Authentication Method	RADIUS, TACACS+, LDAP
Compliant Standards	IEEE 802.1Q, IEEE 802.3af
Operating Temperature	0 to 40 °C
Operating Humidity	5% to 85% (non-condensing)
Dimensions (WxDxH)	44.5 x 47.2 x 8.9 cm