Cisco ASR 1004 User Manual

Page 24 of 72
TOE-common-criteria(config-if)#interface g0/0
TOE-common-criteria(config-if)#ip address 11.1.1.6 255.255.255.0
TOE-common-criteria(config-if)#crypto map sample
TOE-common-criteria(config-if)#exit
TOE-common-criteria(config)#ip route 12.1.1.0 255.255.255.0 11.1.1.4
TOE-common-criteria(config)#access-list 115 permit ip 10.1.1.0 0.0.0.255 12.1.1.0
0.0.0.255 log
TOE-common-criteria(config)#logging host 12.1.1.1
3.3.5 Base Firewall Rule set Configuration
The Network Device PP VPN Gateway Extended Package (VPNGW EP) contains requirements
for the TOE basic packet filtering. Packet filtering is able to be done on many protocols by the
TOE, including but not limited to:
o IPv4 (RFC 791)
o IPv6 (RFC 2460)
o TCP (RFC 793)
o UDP (RFC 768)
o IKEv1 (RFCs 2407, 2408, 2409, RFC 4109)
o IKEv2 (RFC 5996)
o IPsec ESP (RFCs 4301, 4303)
o SSH (RFCs 4251, 4252, 4253, and 4254)
The following attributes, at a minimum, are configurable within Packet filtering rules for the
associated protocols:
 IPv4
o Source address
o Destination Address
o Protocol
 IPv6
o Source address
o Destination Address
o Next Header (Protocol)
 TCP
o Source Port
o Destination Port
 UDP
o Source Port

Cisco ASR 1004 Specifications

General

Product Type	Router
Form Factor	Rack-mountable
Rack Height	2U
Forwarding Capacity	Up to 20 Gbps
Total Number of Ports	Varies by configuration
Number of Total Expansion Slots	4
Product Series	ASR 1000
Model	ASR 1004
Forwarding Performance	Up to 20 Gbps
Operating System	Cisco IOS XE
Power Supply	Dual
Route Processor	ASR 1000 Series Route Processor
Network Interface Modules	SFP, SFP+, Gigabit Ethernet, 10 Gigabit Ethernet
Interfaces/Ports	Varies by configuration
Expansion Slot Type	SPA
Throughput	20 Gbps
Redundancy	Power supply, Route Processor
Interfaces	Gigabit Ethernet, 10 Gigabit Ethernet, SFP, SFP+
Storage	Up to 64 GB Flash