The Cisco® 880 Series Integrated Services Routers combine Internet access, security, voice, and wireless services onto a single, secure device that is simple to use and manage for small businesses and enterprise small branch offices and teleworkers. The Cisco 880 Series delivers features including firewall, content filtering, VPNs, and wireless LANs (WLANs) at broadband speeds to small offices. Easy deployment and centralized management features help enable enterprises or service providers to deploy the Cisco 880 Series in small branch offices or small businesses.
Product Overview
Cisco 880 Series Integrated Services Routers are fixed-configuration routers that provide collaborative business solutions for secure voice and data communication to small businesses and enterprise teleworkers. They offer concurrent broadband services over third-generation (3G), Metro Ethernet, and multiple DSL technologies to provide business continuity. Wireless 802.11n and 3G offer LAN and WAN mobility. The routers provide the performance required for concurrent services, including firewall, intrusion prevention, content filtering, and encryption for VPNs; optional 802.11g/n for mobility; and quality-of-service (QoS) features for optimizing voice and video applications. In addition, the web-based Cisco Configuration Professional configuration tool simplifies setup and deployment. Centralized management capabilities give network managers visibility and control of the network configurations at the remote site.
Cisco 880 Series Integrated Services Routers offer:
• High performance for broadband access in small offices and small branch-office and teleworker sites
• Collaborative services with secure analog, digital voice, and data communication
• Business continuity and WAN diversity with redundant WAN links: Fast Ethernet, G.SHDSL, VDSL2, 3G, and ISDN
• Survivable Remote Site Telephony (SRST) voice continuity for enterprise small branch-office and teleworker sites
• Enhanced security, including:
– Firewall with advance application and control for email, instant messaging (IM), and HTTP traffic
– Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN (DMVPN), Group Encrypted Transport VPN with onboard acceleration, and Secure Sockets Layer (SSL) VPN
– Intrusion prevention system (IPS): An inline, deep-packet inspection feature that effectively mitigates a wide range of network attacks
– Content filtering: A subscription-based integrated security solution that offers category-based reputation rating; keyword blocking; and protection against adware, malware, spyware, and URL blocking
• Four-port 10/100 Fast Ethernet managed switch with VLAN support; two ports support Power over Ethernet (PoE) for powering IP phones or external access points
• Secure 802.11g/n access point option based on draft 802.11n standard with support for autonomous or Cisco Unified WLAN architectures
• CON/AUX port for console or external modem
• One USB 1.1 port for security eToken credentials, booting from USB, loading configuration
• Easy setup, deployment, and remote-management capabilities through web-based tools and Cisco IOS® Software
Figure 1 shows a Cisco 881 Integrated Services Router.
Figure 1. Cisco 881 Integrated Services Router with Integrated 802.11n Access Point
Tables 1 and 2 list the routers that currently make up the Cisco 880 data and SRST series, respectively.
Table 1. Cisco 880 Series Data Models
Models
WAN Interface
LAN Interfaces
802.11g/n Option
Integrated 3G
Integrated ISDN Dial Backup
Cisco 881
10/100-Mbps Fast Ethernet
4-port 10/100 Mbps managed switch
Yes (Cisco 881W)
Yes (Cisco 881G)
-
Cisco 887V
VDSL2 over POTS
4-port 10/100 Mbps managed switch
-
-
Yes
Cisco 888
G.SHDSL
4-port 10/100 Mbps managed switch
Yes (Cisco 888W)
Yes (Cisco 888G)
Yes
Table 2. Cisco 880 Series SRST Models
Models
WAN Interface
LAN Interfaces
Voice Ports
802.11g/n Option
Cisco 881 SRST
10/100 Mbps Fast Ethernet
4-port 10/100 Mbps managed switch
4 foreign-exchange-station (FXS) ports and 1 foreign-exchange-office (FXO) port for public-switched-telephone-network (PSTN) fallback
Yes (Cisco 881 SRSTW)
Cisco 888 SRST
G.SHDSL
4-port 10/100 Mbps managed switch
4 FXS ports and 1 Basic Rate Interface (BRI) port for PSTN fallback
Yes (Cisco 888 SRSTW)
The Cisco 880 Series is ideal for small branch offices and teleworkers who need to be connected to larger enterprise networks as well as small businesses. These routers help extend corporate networks to secure remote sites while giving users access to the same applications found in a corporate office. This access applies to both data and voice applications. When users require WLAN access, visibility and control of network security are even more critical at the remote site. The Cisco 880 Series meets this need with a single device that combines integrated 802.11g/n capabilities with security features such as Wi-Fi Protected Access (WPA), including authentication with IEEE 802.1X with Cisco Extensible Authentication Protocol (LEAP) and Protected EAP (PEAP) and encryption with WPA Temporal Key Integrity Protocol (TKIP). (Refer to the wireless solution overview and security data sheet for more information.) The Cisco 880 Series models that include the integrated access point can use either autonomous or Cisco Unified WLAN modes. In Cisco Unified WLAN mode, as part of an enterprise WLAN architecture, all WLAN functions are centrally managed through Cisco Wireless LAN Controllers and the Cisco Wireless Control System (WCS).
Service providers and value-added resellers can take advantage of the Cisco 880 Series to provide a true business-class broadband service. Business customers are using broadband access to connect to the Internet or to connect offices together, and they require a platform that incorporates security without sacrificing performance. Many of these customers are connecting computers in offices through WLANs; having a single device for both WAN and WLAN access provides a new option for managed services. These customers also require a higher level of support to keep their networks operational. Services with these customers should be simple to set up, while allowing a level of remote management and troubleshooting to quickly address support inquiries. The Cisco 880 Series meets the requirements of small offices and managed services providers.
Figure 2 shows deployment scenarios.
Figure 2. Deployment Scenarios
Applications
The Cisco 880 Series is ideally suited for deployment in a small office or in a small office that is part of a large network, most often with a secure VPN connection. These types of offices can include the following:
• Small remote office: The Cisco 880 can connect users in a small remote office, such as an insurance, lawyer, or sales office. When connecting to the main office, VPN encryption and integrated security such as firewall and intrusion prevention protect the network at perimeter. IT managers can centrally manage the remote site to quickly troubleshoot any network problems. For added reliability, customers can also use the integrated 3G or ISDN backup or connect through an external modem if the primary broadband link fails. Integrated secure unified WLAN connectivity simplifies the deployment and management devices at the remote site. Redundant WAN links offer business continuity, enabling nondisruptive business operation.
• Virtual office: The Cisco 880 Series is ideal for corporate teleworkers who have a mix of broadband connection types such as DSL, 3G, and Metro Ethernet. The Cisco 880 SRST Series provides a secure virtual office with all the collaborative services such as data, voice, and fax services. SRST helps ensure voice services are operational in case of WAN link failure, and redundant WAN links help ensure business continuity. QoS features in the Cisco 880 Series allow for connection of an IP or analog phone to the router, giving voice traffic precedence over data applications. Integrated WLAN support in the Cisco 880 Series helps ensure that if wireless connectivity is used it is secure. (Refer to Cisco Virtual Office Solution, http://www.cisco.com/go/cvo, for more information.)
• Remote call center agent: Similar to teleworking applications, this solution extends the Cisco IP Contact Center solution for telephone call center agents to remote sites. With a high-quality, secure connection through the Cisco 880 Series, call center agents can be dispersed away from costly call center facilities while maintaining secure and productive voice and data access in their home. SRST and business continuity solutions in the Cisco 880 Series provide reliability and continuous business operation.
• Retail VPN: Retail stores migrating from dialup connections for point-of-sale transactions can use the Cisco 880 Series to take advantage of low-cost broadband access with the required security to comply with payment-card-industry (PCI) and other data security requirements. They can then add multiple devices and applications to the store network to take advantage of the increased bandwidth and also incorporate optional WLAN support to enable secure mobility and enhance productivity.
• Managed services: Service providers and value-added resellers can use the Cisco 880 Series as a platform to offer differentiated business-class security and WLAN services for small business customers.
Features and Benefits
Table 3 lists the features and benefits of the Cisco 880 Series Integrated Services Routers.
Table 3. Features and Benefits of Cisco 880 Series Routers
Feature
Benefit
Increased performance to run concurrent services
• Cisco 880 Series Router performance allows customers to take advantage of broadband network speeds while running secure, concurrent data, voice, video, and wireless services.
Enhanced security
• An integrated stateful and application inspection firewall provides network perimeter security.
• High-speed IPsec 3DES and AES encryption offers data privacy over the Internet.
• Intrusion prevention enforces security policy in a larger enterprise or service provider network.
• Content filtering offers category-based URL classification and blocking, thus providing increased productivity and better use of company resources.
Redundant WAN links
• Redundant WAN links provide business continuity and WAN diversity with multiple WAN links: Fast Ethernet, VDSL2, G.SHDSL, 3G, and ISDN.
Four-port 10/100 Mbps managed switch
• The Cisco 880 Series allows for connection of multiple devices in a small office, with the ability to designate a port as the network edge.
• An optional external PoE adapter powers IP phones and external access points to avoid individual power supplies or power injectors.
• VLANs allow for secure segmentation of network resources.
CON/AUX port
• A single dual-purpose port provides direct connection to a console or external modem for management or backup access points.
Optional 802.11g/n access point
• This broadband router offers a secure integrated access point in a single device.
• This integrated Wi-Fi access point offers IEEE 802.11n draft 2.0 standard support for mobile access to high-bandwidth data, voice, and video applications through the use of multiple-input, multiple-output (MIMO) technology that provides increased throughput, reliability, and predictability.
• The Cisco 880 Series supports both autonomous and unified modes.
Real-time clock
• A built-in real-time clock maintains an accurate date and time for applications that require an accurate time stamp, such as logging and digital certificates.
SRST (supported on SRST models)
• SRST provides business continuity for voice when the WAN link fails by switching calls to the PSTN.
Cisco Configuration Professional
• Cisco Configuration Professional uses smart wizards and task-based tutorials, which resellers and customers can use to quickly and easily deploy, configure, and monitor a Cisco access router without requiring knowledge of the Cisco IOS Software command-line interface (CLI).
Unified wireless management
• Configuration and management of access points is automated and simplified without manual intervention.
• A unified hybrid remote-edge access point (HREAP) provides the following:
• WLAN services to remote and branch offices without deploying a wireless LAN controller at each location
• Central configuration and control of unified WLAN services for remote offices through a WAN link
• Flexibility in setting up wireless access at remote locations by specifying how traffic is to be bridged or tunneled
Summary
Cisco 880 Series Integrated Services Routers combine increased network performance with advanced security to allow small-office customers to get the most from their broadband connections. With models supporting different broadband technologies such as DSL, 3G, and Metro Ethernet, the Cisco 880 Series can be deployed at any small-office location. Optional integrated 802.11g/n wireless capabilities provide true business-class WAN and WLAN access in a single solution. With the Cisco 880 Series, enterprise IT managers and service providers can take advantage of a solution that can be easily set up at the remote site and can be centrally managed to reduce ongoing operational costs.
Product Specifications
Cisco IOS Software Support
Table 4 lists the minimum Cisco IOS Software releases and the default Cisco IOS Software feature sets.
*Cisco 881SRST and 888SRST run 880 voice universal image, which shares the same data and security features as the Advanced IP feature sets of Cisco 880 data models.
Tables 5 and 6 list software features of the Cisco 880 Series.
Table 5. Cisco IOS Software Features on Cisco 880 Series: Advanced Security Feature Set (Default)
Feature
Description
IP and IP services features
• Routing Information Protocol Versions 1 and 2 (RIPv1 and RIPv2)
• Generic routing encapsulation (GRE) and Multipoint GRE (MGRE)
• Cisco Express Forwarding
• Standard 802.1d Spanning Tree Protocol
• Layer 2 Tunneling Protocol (L2TP)
• Layer 2 Tunneling Protocol Version 3 (L2TPv3)
• Network Address Translation (NAT)
• Dynamic Host Configuration Protocol (DHCP) server, relay, and client
• Dynamic Domain Name System (DNS)
• DNS Proxy
• DNS Spoofing
• Access control lists (ACLs)
DSL and ATM features (G.SHDSL models only)
• ATM Variable Bit Rate real-time (VBR-rt)
• ATM Unspecified Bit Rate (UBR), Constant Bit Rate (CBR), and Variable Bit Rate non-realtime (VBR-nrt)
• ATM operations, administration, and maintenance (OA&M) support for F5 Continuity Check; segment and end-to-end loopback; and Integrated Local Management Interface (ILMI) support
• Dying gasp support
• TX ring adjustment
• Virtual-circuit (VC) bundling
• Per VC queuing
• Per VC traffic shaping
• 20 ATM virtual circuits
• RFCs 1483 and 2684
• Point-to-Point Protocol over ATM (PPPoA)
• PPP over Ethernet (PPPoE)
Switch features
• Auto Media Device In/Media Device Cross Over (MDI-MDX)
• Eight 802.1Q VLANs
• MAC filtering
• Two-port 802.3af and Cisco compliant PoE
• Switched Port Analyzer (SPAN)
• Storm Control
• Smartports
Security features
Secure connectivity:
• Secure Sockets Layer (SSL) VPN for secure remote access
• User database for survivable local authentication using LEAP and EAP-FAST
• Configurable limit to the number of wireless clients
• Configurable RADIUS accounting for wireless clients
• Pre-Shared Keys (PSKs) (WPA-small office or home office [WPA-SOHO])
Certifications
Service set identifiers (SSIDs)
16
Wireless VLANs
8
Encrypted wireless VLANs
8
Multiple broadcast service set identifiers (MBSSIDs)
16
Cisco IOS Software Advanced IP Services Feature Set (Optional Software Upgrade)
The Advanced IP Services software image has all the features of the Advanced Security software image with the addition of the features listed in Tables 7 and 8.
Table 7. Cisco IOS Software Features on Cisco 880 Series: Advanced IP Services Feature Set (Optional Software Upgrade)
• Subscription-based content filtering with Trend Micro
• Support for Websense and Smartfilter
• Cisco IOS Software black and white lists
Integrated threat control:
• IPS
• Control Plane Policing
• Flexible Packet Matching
• Network foundation protection
QoS features
• Class-Based Weighted Random Early Detection (CBWRED)
• Network-Based Application Recognition (NBAR)
• Link fragmentation and interleaving (LFI)
• Resource Reservation Protocol (RSVP)
• Real-Time Transport Protocol (RTP) header compression (cRTP)
• Differentiated Services (DiffServ)
• QoS preclassify and prefragmentation
• Hierarchical QoS (HQoS)
Metro Ethernet features
• Ethernet Operations, Administration, and Maintenance (Ethernet OAM)
• Ethernet Local Management Interface (Ethernet LMI)
• HQoS
IPv6 features
• IPv6 addressing architecture
• IPv6 name resolution
• IPv6 statistics
• IPv6 translation: Transport packets between IPv6-only and IPv4-only endpoints (NAT-PT)
• Internet Control Message Protocol Version 6 (ICMPv6)
• IPv6 DHCP
Unified WLAN management
Unified access point features:
• Supported by wireless LAN controller and Cisco WCS
• Configurable local or central switching for HREAP mode
• Radio management through Cisco WCS
• Transparent roaming with Mobility Groups
Table 8. Cisco IOS Software Features on Cisco 880 SRST Series: Advanced IP Services Feature Set
Feature
Description
Cisco SRST version
SRST 7.0 and later are supported.
Call-control signaling
H.323 Versions 1, 2, 3, and 4, Media Gateway Control Protocol (MGCP) 0.1 and 1.0, Skinny Client Control Protocol (SCCP), and SIP call-control protocols are supported.
ITU standard voice codecs
G.711, G.729, G.729a/b, G.723.1, G.726, and G.728, which are standards-based compression technologies allowing transmission of voice across IP, are supported. The G.711 standard employs 64-kbps pulse code modulation (PCM) using either mu-law or a-law. Other codecs employ lower bit rates.
Cisco Unified Communications Manager support for analog and digital ports come with Releases 6.1(3).
Telephony interface signaling support
Cisco 880 SRST supports the following signaling protocols:
• FXS loop-start and ground-start signaling
• FXO
• Inbound signaling (such as dual-tone multifrequency [DTMF] and multifrequency support)
• BRI QSIG
Voice features
• Echo cancellation: This feature cancels echo on tail circuits up to 64 msec (configurable tail length).
• Silence suppression and voice activity detection (VAD): Bandwidth is used only when someone is speaking. During silent periods of a phone call, bandwidth is available for data traffic.
• Comfort-noise generation: This feature reassures the phone user that the connection is being maintained, even when no voice packets are being transmitted.
• Caller ID support: Per port caller ID (with per call unblocking) is configurable over analog FXS.
• Dial-plan mapping: This feature simplifies configuration and management through automatic mapping of dialed phone numbers to IP addresses.
Voice port-specific features
• FXS: FXS provides battery polarity reversal detection and initiation for disconnect supervision and far-end answer supervision.
• ISDN BRI network side and phantom power: The BRI port provides the ability to connect a private branch exchange (PBX) or private automatic branch exchange (PABX) configured as user side directly to the router. It also provides phantom power to accommodate equipment that requires it.
• LED indicators show voice-processing resources and port status.
Fax and modem
• Fax and modem pass-through allows fax and modem traffic to pass through a voice port.
• Fax Relay provides a more robust protocol for fax transmission over packet networks. It also supports the T.37 and T.38 fax protocols.
• Channel capacity: Cisco 880 SRST supports up to four voice channels.
• Flexible DSP architecture: There is no need to specify codec complexity at configuration. An appropriate codec is dynamically selected when a call is established, while allocating DSP resources optimally.
• Feature upgrades: The DSP architecture allows for addition of new features through simple code updates.
System Specifications
Table 9 lists the system specifications for the Cisco 880 Series Routers.
Table 9. System Specifications
Feature
Description
Default DRAM
• 256 MB on Cisco 880 Series data models
• 512 MB on Cisco 880 Series SRST models
Maximum DRAM
768 MB
Default and maximum flash memory
• 128 MB on Cisco 880 Series data models
• 256 MB on Cisco 880 Series SRST models
WAN
• Fast Ethernet
• VDSL2 over POTS with ISDN backup
• G.SHDSL (2- and 4-wire support) with ISDN backup
• Fast Ethernet and 3G WAN for Code Division Multiple Access (CDMA) and high-speed downlink packet access (HSDPA)
LAN switch
Managed 4-port 10/100BASE-T with autosensing MDI/MDX for autocrossover
Standard 802.11g/n access point based on IEEE 802.11n draft 2.0 standard
Optional on all models (except Cisco 887V )
Console or auxiliary port
RJ-45
One USB 1.1 port for advanced security features such as security tokens or USB flash
Cisco 881 Ethernet Security Router 802.11n ETSI Compliant
CISCO881W-GN-P-K9
Cisco 881 Ethernet Security Router 802.11n Japan Compliant
POE
800-IL-PM=2
2 port 802.3af capable inline power module for 880 routers
DRAM
MEM8XX-256U512D
256-MB DRAM upgrade to 512 MB for Cisco 880 Series Routers
MEM8XX-256U768D
512-MB DRAM upgrade to 768 MB for Cisco 880 Series Routers
MEM8XX-512U768D
512-MB DRAM upgrade to 768 MB for Cisco 880 Series Routers
3G Modem
PCEX-3G-CDMA-V
Cisco 3G EVDO Modem-Verizon Network
PCEX-3G-CDMA-S
Cisco 3G EVDO Modem-Sprint Network
PCEX-3G-CDMA
Cisco 3G EVDO Modem
PCEX-3G-HSPA-A
Cisco HSPA Modem-North America
PCEX-3G-HSPA
Cisco 3G HSPA Modem
Cisco IOS Universal Software for Cisco 880
S880DUDK9*
Cisco 880 Series IOS UNIVERSAL DATA
S880VUDK9*
Cisco 880 Series IOS UNIVERSAL VOICE
*Each software part number has the Cisco IOS Software release number at the end of the string. For example, the part number of IOS 12.4(20)T data universal image for Cisco 880 series is S880DUK9-12420T.
Software License for Cisco 880 Data
SL-880-ADVSE (default)
Cisco 880 Advanced Security Image Feature License
SL-880-AIS (upgrade option)
Cisco 880 Advanced IP Services Image Feature License
Software License for Cisco 880 SRST
SL-SRST880-AIS (included by default)
Cisco 880 Advanced IP Services Image Feature License
Security Services
SL-CNFIL-88x-1Y
One year subscription to Content Filtering for Cisco 881/888-URL/Phishing
SL-CNFIL-8xx-TRI
30 day free trial license for 88x series
SSL
FL-WEBVPN-10-K9
Feature License SSL VPN for Up to 10 Users (incremental)
Router Software
C880data-universalk9-mz
Universal image for Cisco 880 ISR Data Router Series
C880voice-universalk9-mz
Universal image for Cisco 880 SRST Router Series
Access Point Software
ap801-k9w7-tar
Autonomous software image for ap801
ap801-rcvk9w8-tar
LWAPP recovery image for ap801
Cisco License Manager is a secure client- and server-based application used to manage Cisco IOS Software activation and licenses. For more information about Cisco License Manager, visit http://www.cisco.com/go/clm.
Cisco Services for the Branch
Services from Cisco and our certified partners can help you reduce the cost and complexity of branch deployments. We have the depth and breadth of experience across technologies to architect a blueprint for a branch solution to meet your company's needs. Planning and design services align technology with business goals and can increase the accuracy, speed, and efficiency of deployment. Technical services help maintain operational health, strengthen software application functionality, solve performance issues, and lower expenses. Optimization services are designed to continually improve performance and help your team succeed with new technologies. For more information, visit http://www.cisco.com/go/services.
For More Information
For more information regarding Cisco 880 Series Integrated Services Routers and options, contact your local Cisco representative or visit http://www.cisco.com/go/isr.
To upgrade the Cisco IOS Software for the Cisco 880 Series Integrated Services Routers, visit the Cisco Software Center.
For more information about Cisco products, contact: