Cisco ASR 1004 User Manual

Page 42 of 72
 The ‘discard’ option is accomplished using access lists with deny entries, which are
applied to interfaces within access-groups. Guidance for configuration of IOS
Information Flow Policies is located in the [23] Under “IP Access List Overview”
 The ‘bypassing’ option is accomplished using access lists with deny entries, which
are applied to interfaces within crypto maps for IPsec. Guidance for configuration of
entries for IPsec is in [10]
 The ‘protecting’ option is accomplished using access lists with permit entries, which
are applied to interfaces within crypto maps for IPsec VPN.
The criteria used in matching traffic in all of these access lists includes the source and destination
address, and optionally the Layer 4 protocol and port.
The TOE enforces information flow policies on network packets that are receive by TOE
interfaces and leave the TOE through other TOE interfaces. When network packets are received
on a TOE interface, the TOE verifies whether the network traffic is allowed or not and performs
one of the following actions, pass/not pass information, as well as optional logging.
4.6.6 IPsec Session Interuption/Recovery
If an IPsec session with a peer is unexpectedly interrupted, the connection will be broken. In
these cases, no administrative interaction is required. The IPsec session will be reestablished (a
new SA set up) once the peer is back online.

Cisco ASR 1004 Specifications

General

Product Type	Router
Form Factor	Rack-mountable
Rack Height	2U
Forwarding Capacity	Up to 20 Gbps
Total Number of Ports	Varies by configuration
Number of Total Expansion Slots	4
Product Series	ASR 1000
Model	ASR 1004
Forwarding Performance	Up to 20 Gbps
Operating System	Cisco IOS XE
Power Supply	Dual
Route Processor	ASR 1000 Series Route Processor
Network Interface Modules	SFP, SFP+, Gigabit Ethernet, 10 Gigabit Ethernet
Interfaces/Ports	Varies by configuration
Expansion Slot Type	SPA
Throughput	20 Gbps
Redundancy	Power supply, Route Processor
Interfaces	Gigabit Ethernet, 10 Gigabit Ethernet, SFP, SFP+
Storage	Up to 64 GB Flash