Cisco ASR 1013 User Manual

Page 63 of 72
6 Network Services and Protocols
The table below lists the network services/protocols available on the ASR as a client (initiated outbound) and/or server (listening for
inbound connections), all of which run as system-level processes. The table indicates whether each service or protocol is allowed to
be used in the certified configuration.
For more detail about each service, including whether the service is limited by firewall mode (routed or transparent), or by context
(single, multiple, system), refer to Command Reference guides listed in Table 2.
Table 9: Protocols and Services
Service or
Protocol
Description
Client
(initiating)
Allowed
Server
(terminating)
Allowed
Allowed use in the certified configuration
DHCP
Dynamic Host
Configuration
Protocol
Yes
Yes
Yes
Yes
No restrictions.
DNS
Domain Name
Service
Yes
Yes
No
n/a
No restrictions.
ESP
Encapsulating
Security Payload (part
of IPsec)
Yes
Yes
Yes
Yes
Configure ESP as described in the section
Error! Reference source not found.of this
document.
FTP
File Transfer Protocol
Yes
No
No
n/a
Use SCP or HTTPS instead.
ICMP
Internet Control
Message Protocol
Yes
Yes
Yes
Yes
No restrictions.
IKE
Internet Key
Exchange
Yes
Yes
Yes
Yes
As described in section Error! Reference
source not found. of this document.
IPsec
Internet Protocol
Security (suite of
protocols including
IKE, ESP and AH)
Yes
Yes
Yes
Yes
Only to be used for securing traffic that
originates from or terminates at the ASA, not
for “VPN Gateway” functionality to secure
traffic through the ASA. See IKE and ESP
for other usage restrictions.
Kerberos
A ticket-based
authentication
protocol
Yes
Over IPsec
No
n/a
If used for authentication of ASA
administrators, tunnel this authentication
protocol secure with IPsec.

Cisco ASR 1013 Specifications

General

Brand	Cisco
Model	ASR 1013
Category	Network Router
Language	English