Guest

Cisco Catalyst 4000 Series Switches

Cisco Catalyst 4500 Series Access Gateway Module Data Sheet

Data Sheet


Cisco Catalyst 4500 Series
Access Gateway Module


Cisco Catalyst 4500 Access Gateway Module integrates secure WAN and voice services into the Cisco Catalyst 4500 Series LAN switches.

Figure 1
Cisco Catalyst 4500 Series with Secure WAN and Voice Services

The Cisco® Catalyst® 4500 Access Gateway Module (AGM) enables organizations to implement integrated IP telephony and WAN services at campus and integrated branch office sites. Combining the WAN and voice infrastructure into Cisco Catalyst 4500 Series switches gives organizations the ability to reduce network complexity, enhance employee productivity, and improve network deployment times through an integrated platform while preparing for data, voice, and video convergence across the enterprise.

The Cisco Catalyst 4500 AGM can be deployed in both Cisco Catalyst 4500 Series and Catalyst 4000 Series chassis running either Catalyst OS or Cisco IOS® Software and is fully compatible with all supervisor engines. Multiple AGMs can be deployed in the chassis to support higher density requirements or provide a higher level of availability and resiliency.

Features and Benefits

The primary features of the Cisco Catalyst 4500 AGM include telephony and WAN routing.

Telephony Features

  • Survivable Remote Site Telephony (SRST)—The Cisco CallManager can be used for centralized control of the Cisco Catalyst 4500 AGM at campus and branch sites. The AGM supports both MGCP and H.323v2 interfaces to the Cisco CallManager. SRST enables a resilient IP telephony service when connectivity to the Cisco CallManager is lost. The AGM provides SRST for up to 240 IP phones.
  • Audio-conferencing—The digital signal processor (DSP) farm on the Cisco Catalyst 4500 AGM can be used to support on-demand and dedicated, reservation-less audio-conferencing services for local and remote users. Audio transcoding between G.729 and G.711 enables efficient communications between callers using different codecs (for example, campus phones using G.711 and remote site phones using G.729).
  • Fax/modem/PBX voice gateway—Foreign exchange station (FXS) ports on the Cisco Catalyst 4500 AGM can support up to 22 fax machines, speakerphones, modems, analog phones, and PBX lines to supplement IP phones at a campus or branch.
  • Public Switched Telephone Network (PSTN) voice gateway—The Cisco Catalyst 4500 AGM incorporates a 96-channel DSP farm with up to 6 digital (T1, E1, Primary Rate Interface [PRI], Basic Rate Interface [BRI]) or analog Foreign exchange office (FXO) interfaces with compression and echo cancellation services for connectivity to the PSTN or toll bypass with ISDN dial backup. Signaling support includes T1 channel-associated signaling (CAS), BRI signaling, ISDN PRI, Q.SIG, and R2 signaling.

WAN Routing Features

  • Cisco IOS Multiprotocol routing—The Cisco Catalyst 4500 AGM supports multiprotocol routing with support for IP, IPv6, Internetwork Packet Exchange (IPX), AppleTalk and System Network Architecture (SNA) as well as Web Cache Control Protocol version 2 (WCCPv2).
  • WAN interfaces—Up to six WAN interfaces are supported per module, including T1, E1, PRI, BRI, and serial ports.
  • WAN security—Security options include firewall, intrusion detection system (IDS), Network Address Translation (NAT) and hardware-based IP security (IPsec) with 3DES data encryption for secure VPN or public Internet connectivity.
  • Quality of service (QoS)—Features such as the Resource Reservation Protocol (RSVP), Protocol Independent Multicast (PIM), traffic shaping, custom and priority queuing, Low Latency Queuing (LLQ), and Weighted Fair Queuing (WFQ) ensure a consistent QoS for data, voice, and video applications over the WAN.

Benefits for Campus and Branch Office Deployments

The Cisco Catalyst 4500 AGM may be deployed in a range of applications where WAN connectivity or integrated IP telephony services are required. As an ideal solution for medium to large integrated branch offices, the AGM can be deployed with both WAN interfaces and IP telephony services (including voice gateway telephony services) or only with WAN connectivity and services. In the wiring closet, the AGM enables the deployment of IP telephony services at the network edge boosting scalability and enhancing availability.

The benefits of deploying the Cisco Catalyst 4500 AGM include:

  • Reduced network complexity—Deploying the AGM in the Cisco Catalyst 4500 Series provides a complete, integrated branch office solution combining robust intelligent LAN switching with WAN routing, and comprehensive IP telephony support. Consolidating the infrastructure for LAN switching, WAN routing, and telephony improves deployment times and reduces network complexity and administration overheads, resulting in enhanced productivity of the IT staff. Integrated voice gateway services enable VoIP toll bypass with compression over the IP WAN to reduce WAN costs, offering an economical alternative to PSTN telephony while the modular interfaces shared with the Cisco 1700/2600/3700 routers reduces the cost of sparing and network support. Centralized MGCP and H.323 call control with the Cisco CallManager and SRST reduce network administration costs.
  • Employee productivity—Availability of consistent Cisco CallManager and Cisco Unity services across branch and campus sites enhances the productivity of remote employees. The built-in audio-conferencing bridge makes six party audio-conferencing available to all employees, reducing the cost of this essential business productivity application while WCCP support enables deployment of cache engines to enhance the effective WAN download speeds.
  • Investment protection—The Cisco Catalyst 4500 AGM is based on Cisco IOS Software and provides a suite of multiprotocol routing services to protect investments in IPX, AppleTalk, and SNA equipment while providing a migration path to IP or IPv6. The AGM also supports analog fax machines, speakerphones, and PBXs, providing a migration path to IP telephony.
  • Enhanced WAN security—Integrated Cisco IOS Software with firewall, IDS, NAT, as well as software and hardware accelerated VPN encryption services increase network security.
  • High-availability design—Integrated SRST, ISDN dial backup, and Hot Standby Router Protocol (HSRP) support enhance the resiliency of the telephony and WAN routing services.

Hardware and Interface Overview

Figure 2 details the physical interfaces and modularity of the Cisco Catalyst 4500 AGM.


Figure 2
Cisco Catalyst 4500 Access Gateway Module

The Cisco Catalyst 4500 AGM incorporates:

  • Cisco IOS WAN routing and telephony with Cisco Catalyst 4500 Series switches and Cisco Catalyst 4000 Series switches
  • One Gigabit Ethernet backplane interface supporting 802.1q with multiple virtual LANs (VLANs)
  • One Fast Ethernet front-panel interface for management
  • One console serial port for management
  • Onboard support for the 96-channel DSP set (4x6 SIMMs)
  • One Flexslot for high-density analog interface modules, including the 16-port or 8-port FXS module (RJ21)
  • One slot for a VPN/Encryption Services Adapter for hardware-accelerated encryption
  • Two Voice Interface Card/Multi-Flex Voice/WAN Interface Card/WAN Interface Card (VIC/VWIC/WIC) slots and one VIC/VWIC slot for selected Cisco 1700/2600/3700 series interface cards

Tables 1 and 2 below include a list of supported modules.

Features

Voice Gateway Features

  • Cisco IOS IP routing and H.323v2 and MGCP voice-over-IP (VoIP) gateway functions
  • DSP farm supporting up to 96 digital voice channels with G.711 or G.729a voice or analog voice, conferencing, and transcoding
  • Fax relay, G.711 fax pass-through and modem pass-through services compatible with other Cisco IOS gateways
  • Time-division multiplexing (TDM) switching between analog and digital ports enables faster connection speeds for modems and fax machines

Advanced Voice Services

  • Conferencing—Each DSP bridges up to six participants in a single on-demand or dedicated, reservation-less conference call.
  • Transcoding—Each DSP bridges up to two full-duplex channels from G.711 to G.729a.
  • Voice gateway—Each DSP supports up to four digital voice channels or analog ports, or two channels per DSP for VIC modules.

Network Management

  • Simple Network Management Protocol (SNMP) compliant
  • CiscoWorks interface for configuration
  • Cisco Voice Manager
  • Cisco CallManager

Cisco Catalyst 4500 AGM 16-Port or 8-Port (RJ-21) FXS Modules

The Cisco Catalyst 4500 16-port or 8-port (RJ-21) FXS modules for the AGM provide integrated analog ports. By providing connectivity for fax machines, analog phones, speakerphones, and dial-up modems, these modules emulate a PSTN central office (CO) or PBX. See Figure 3.


Figure 3
Cisco Catalyst 4500 AGM 16-Port RJ-21 FXS Module

Cisco Catalyst 4500 AGM VPN/Encryption Service Adapter

The VPN/Encryption Service Adapter (ESA) optimizes the Cisco Catalyst 4500 AGM for VPNs. The ESA provides up to ten times the performance over software-only encryption by offloading the encryption processing from the router central processing unit (CPU). Ideal for use in branch offices to connect to the enterprise IP WAN, mobile users, partner extranets, or service provider managed-services customer premises equipment (CPE), the Cisco Catalyst 4500 AGM with the ESA delivers a rich integrated package of routing, firewall, IDS, and VPN functions. As an integral component of Cisco VPN solutions, the AGM with the ESA provides industry-standard encryption (IPsec), application-aware QoS and bandwidth management, and robust perimeter security options. See Figure 4.


Figure 4
Cisco Catalyst 4500 AGM VPN/Encryption Service Adapter

Features

Cisco fully supports the entire set of Request for Comments (RFCs) describing IPsec and related protocols, RFCs 2401-2410. In particular, Cisco supports the following features:

  • IPsec—IPsec uses encryption technology to provide data confidentiality, integrity, and authenticity between participating peers in a private network. Cisco provides full encapsulating security payload and authentication header support.
  • IKE—Based on the Internet Security Association Key Management Protocol/Oakley, or ISAKMP/Oakley, IKE provides security association management. IKE authenticates each peer in an IPsec transaction, negotiates security policy, and handles the exchange of session keys.
  • Certificate management—Cisco fully supports the X509.V3 certificate system for device authentication and the Simple Certificate Enrollment Protocol (SCEP), a protocol for communicating with certificate authorities. Several vendors, including VeriSign, Entrust Technologies, and Microsoft support Cisco SCEP and operate with Cisco devices.
  • DES and 3DES—DES or 3DES encryption is required for all packets destined for an IPsec tunnel. The Cisco Catalyst 4500 AGM VPN adapter encrypts data with DES or 3DES while freeing the main processor for other tasks.
  • RSA signatures and Diffie-Hellman—These are used every time an IPsec tunnel is established to authenticate the IKE security association. RSA signatures are digital certificates. Diffie-Hellman is used to derive the shared secret encryption key for the protection of data across the IKE security association, including the negotiation of the IPsec policy to be used.
  • Performance—Process switching, fast switching, and Cisco Express Forwarding are supported. Cisco Express Forwarding avoids the potential overhead of continuous cache churn and offers significant benefits in terms of performance, scalability, network resilience, and functions.

Export Regulations on the Encryption Service Adapter

DES and 3DES software for the ESA is controlled by U.S. export regulations on encryption products. The adapter itself is not controlled. U.S. regulations require the recording of names and addresses of recipients of DES and 3DES software. The Cisco ordering process for DES and 3DES software enforces these requirements. For more details, see:

http://www.cisco.com/wwl/export/crypto/

Software Support for Cisco Catalyst 4500 and 4000 Series Supervisor Engine Modules

The Cisco Catalyst 4500 AGM is supported in the Cisco Catalyst 4500 Series and Cisco Catalyst 4000 Series chassis with any supervisor engine running at least Cisco Catalyst OS 5.5(1) or Cisco IOS Software Release 12.1(13)EW. The AGM itself runs a separate instance of Cisco IOS Software which must be at least release 12.1(5)YF to support Cisco Catalyst OS supervisor engines or release 12.2(13)T to support Cisco IOS supervisor engines.

Voice and Data Interface Cards

Tables 1 and 2 detail the voice and data interfaces supported and the minimum release of Cisco IOS Software required.

Table 1   Data Interfaces

Interface Encapsulations Minimum Cisco IOS Software Release Comments
WIC-2T

HDLC, PPP, Frame Relay

12.2(13)T

WIC-1T is not supported

WIC-2A/S

HDLC, PPP, Frame Relay

12.1(5)T

No asynchronous support

WIC-1DSU-56K4

HDLC, PPP, Frame Relay

12.1(5)T

 

VWIC-1MFT-T1 VWIC-2MFT-T1

HDLC, PPP, Frame Relay

12.1(5)T

Channel group, no PRI ISDN dial-up

VWIC-1MFT-T1-DI VWIC-2MFT-T1-DI

HDLC, PPP, Frame Relay

12.1(5)T

Channel group, no PRI ISDN dialup, no drop-and-insert

VWIC-1MFT-E1 VWIC-2MFT-E1

HDLC, PPP, Frame Relay

12.1(5)T

Channel group, no PRI ISDN dialup

VWIC-1MFT-E1-DI VWIC-2MFT-E1-DI

HDLC, PPP, Frame Relay

12.1(5)T

Channel group, no PRI ISDN dialup, no drop-and-insert

VIC-2BRI-S/T-TE

HDLC, PPP, Frame Relay

12.1(5)T

User-side S/T only, no 144 k/80 k leased line

Table 2   Voice Interfaces

Interface Encapsulations Minimum Cisco IOS Release Comments
VIC-2FXS

Ground Start (GS), Loop Start (LS)

12.1(5)T

Hook-flash, calling line ID (CLID) supported

VIC-2FXO

GS, LS

12.1(5)T

 

VIC-2FXO-EU

GS, LS

12.1(5)T

 

VIC-2BRI-S/T-TE

BRI

12.1(5)T

User-side S/T only

VWIC-1MFT-T1 VWIC-2MFT-T1

T1 CAS, PRI

12.1(5)T

PRI network and user side, T1 CAS

VWIC-1MFT-T1-DI VWIC-2MFT-T1-DI

T1 CAS, PRI

12.1(5)T

PRI network and user side, T1 CAS, no drop-and-insert

VWIC-1MFT-E1 VWIC-2MFT-E1

PRI

12.1(5)T

PRI network and user side

VWIC-1MFT-E1-DI VWIC-2MFT-E1-DI

PRI

12.1(5)T

PRI network and user side, no drop-and-insert

WS-U4604-8FXS

LS

12.1(5)YF

CLID supported

WS-U4604-16FXS

LS

12.2(15)T

CLID supported

Ordering Information

Table 3   Hardware Ordering Information

Part Number Description
WS-X4604-VOICE(=)

Cisco Catalyst 4500 AGM Voice/WAN bundle (AGM, 96-channel DSP set, 128 MB DRAM)1,2

WS-X4604-GWY(=)

Cisco Catalyst 4500 AGM

WS-U4604-DSP(=)

Cisco Catalyst 4500 AGM 96-channel DSP set (4 x 6 SIMMs)1

WS-U4604-ESA(=)

Cisco Catalyst 4500 AGM VPN/Encryption Service Adapter3

MEM-C4K-AGM128M (=)

Cisco Catalyst 4500 AGM 128 MB DRAM upgrade2

WS-U4604-16FXS

Cisco Catalyst 4500 AGM 16-port RJ-21 FXS module1,2

WS-U4604-8FXS

Cisco Catalyst 4500 AGM 8-port RJ-21 FXS module1

1. Requires Cisco IOS Voice feature set

2. Requires Cisco IOS Software Release 12.2(15)T or later

3. Requires Cisco IOS 3DES feature set

Table 4   Software Ordering Information

Part Number Description
S4AGMCV-12215T(=)

Cisco Catalyst 4500 AGM IOS IP/VOICE (default)

S4AGMBPV-12215T(=)

Cisco Catalyst 4500 AGM IOS IP/VOICE/IPV6/IPX/APPLETALK

S4AGMRHK9-12215T(=)

Cisco Catalyst 4500 AGM IOS IP/VOICE/IPX/SNA/FW/IDS/WAN 3DES

FL-SRST-SMALL (=) FL-SRST-MEDIUM (=) FL-SRST-144 (=) FL-SRST-240 (=)

Feature Licenses for SRST

Small supports 24 phones, medium 48 phones, maximum 240 phones per AGM module

Requires Cisco IOS Software Release 12.2(13)T or later with Voice feature set. Requires 128 MB DRAM for more than 24 phones.



Specifications

Cisco Catalyst 4500 AGM

IP Routing Performance

  • Processor type: MPC 8260
  • Flash memory: 32 MB
  • System memory: 64 MB (default), 128 MB (maximum)
  • Performance: Up to 45 kpps

Connectors, Interfaces, and Indicators

  • One 1000BASE-T backplane interface
  • One 10/100BASE-T RJ-45 management interface
  • Two VIC/VWIC/WIC slots
  • One VIC/VWIC slot
  • One Flexslot for high-density analog modules
  • One ESA slot
  • Four DSP SIMM slots for one 96-channel DSP set
  • One console/auxiliary port, RJ-45 serial
  • One module status indicator
  • Four DSP presence indicators
  • Four DSP activity indicators

Physical Specifications

  • Each module occupies one slot in a Cisco Catalyst 4500 Series chassis; multiple modules supported simultaneously
  • Dimensions (H x W x D): 1.75 x 17.5 x 11.8 in. (4.4 x 44.5 x 30 cm)

Cisco Catalyst 4500 AGM 16-Port or 8-Port (RJ-21) FXS Modules

Connectors, Interfaces, and Indicators

  • Sixteen or eight FXS ports through a single RJ-21 telco connector
  • Sixteen or eight interface status indicators
    • Green—Device is off hook
    • Yellow—Module or port disabled through command-line interface (CLI)
    • Off—Device is on hook or not connected

Physical Specifications

  • Occupies the high-density analog Flexslot in a Cisco Catalyst 4500 AGM
  • Provides on-premise support for distances up to 1000 feet (300m)
  • Enhanced line-cross protection against AC shorts on tip or ring
  • Four separately fused power domains

Cisco Catalyst 4500 AGM VPN/Encryption Service Adapter

  • Throughput: Up to 8 Mbps; 12 Mbps for 1024-byte packets
  • Maximum number of encrypted tunnels: Up to 100 tunnels
  • Minimum Cisco IOS Software Release: Cisco IOS Version 12.1(5)YF IPsec 56 or IPsec 3DES

Physical Specifications

  • Occupies the Encryption Service Adapter slot on a Cisco Catalyst 4500 Access Gateway Module

Environmental Conditions

  • Operating temperature: 32 to 104° F (0 to 40° C)
  • Storage temperature: -4 to 149° F (-20 to 65° C)
  • Operating relative humidity: 10 to 85 percent, noncondensing
  • Operating altitude: Up to 6500 ft (2000m)

Safety

UL1950, CSA C22.2 No. 950, EN60950, IEC950, TS001, AS/NZS 3260

Compliance

CE marking

EMC

FCC Class A (47CFR, Part 15)

EN55022 Class A with unshielded twisted-pair (UTP), Class B with foil twisted-pair (FTP)

CISPR22 Class A with UTP, Class B with FTP

VCCI Class A with UTP, Class B with FTP

AZ/NZS 3548 Class A with UTP, Class B with FTP

ICES-003 Class A with UTP

EN 500 82-1

Network Management

  • Dial Control MIB (RFC 2128) and Cisco Dial Control Management Information Base (MIB) extension to RFC 212
  • CISCO-VOICE-DIAL-CONTROL-MIB Voice Dial Control MIB
  • CISCO-VOICE_IF_MIB. Voice Interface MIB
  • CISCO-VOICE-ANALOG-IF_MIB Voice Analog Interface MIB
  • CISCO-DSP-MGMT-MIB Digital Signal Processing Management MIB
  • RFC 1157 SNMP
  • RFC 1643 Ethernet MIB
  • RFC 1213 MIB II
  • RFC 1573 MIB II interface extensions