Cisco CISCO3620 SERIES IOS ENT S362AHK2-12105T= User Manual

Copyright  © 1999 Cisco Systems, Inc. All Rights Reserved.

Page 3 of 7

here is one phone number for modem and ISDN users. R2 and

CT1 interfaces also support this switching ability. Note: BRI

WICs do not support this “call switching” feature.

The Cisco 3600 bundles provide complete, centrally

managed modem capabilities, key requirements for branches and

enterprises building midsize dial-in pools. The digital modems

can be managed via the same Simple Network Management

Protocol (SNMP)-based tools used to manage the rest of the

network, providing network managers with one solution at a

central management point. Optional enhanced modem

management (Management Modem Technology License

[MMTL]) capabilities allow for the gathering of modem statistics,

real-time call-in-progress, monitoring modem activity log,

modem hard/soft busy out, and the ability to accomplish modem

firmware upgrades.

The installed modems can be utilized by LAN users for

dial-out and fax-out applications, utilizing 3rd party applications

such as clients available from Tactical Software. The modems can

be assigned as dial-in, dial-out, or both. Dial-out support allows

LAN users to utilize the modems during the day for outgoing calls

and use the same modems in the evening for incoming calls from

home users.

The ever-expanding numbers of remote users can be easily

accommodated with the support for multilink multichassis PPP,

allowing dial-in pools of lines to span numerous Cisco 3600

routers. This option gives users flexible, scalable bandwidth

options by bonding channels together to provide amalgamated

bandwidth. Through the use of Layer 2 Forwarding (L2F)

technology and the exclusive Cisco Stack Group Bidding Protocol

(SGBP), the Cisco 3600 can grow to meet the requirements of the

fast-growing and frequently changing dial environments. Since

the essential building block is a relatively small investment,

enterprises and branch offices can scale from very small to larger

installations.

The Cisco IOS software maximizes dial bandwidth, utilizing

numerous features such as bandwidth on demand and protocol

spoofing. These software features directly reduce line usage and

reduce the cost associated with a remote-access solution.

Lower operating costs are achievable with the Cisco 3600s

set of central management. The Cisco 3600 and its internal

modems can be managed with CiscoWorks software. In addition,

Cisco’s configuration management capabilities provide network

managers with complete control over network statistics and the

ability to configure and tune network operations from a central

location. Finally, comprehensive debugging tools in Cisco IOS

software substantially reduce the time and cost associated with

problem isolation and correction.

VPNs can help companies reap benefits such as dramatically

lower WAN costs, improved global connectivity, and better

reliability, while enabling capabilities such as secure extranet

communications. Remote dial, Internet, intranet, and extranet

access can all be consolidated over a single WAN connection to

the Internet.

The industry de facto standard networking software for the

Internet and private WANs, Cisco IOS software delivers the most

comprehensive set of VPN features on security, quality of service

(QoS), management, and reliability/scalability. The Cisco 3600

bundles, with full Cisco IOS support and modular, integrated

hardware, are designed for the new world of VPNs.

• Crucial security for a VPN because the company’s data

traverses a shared unprotected WAN and the internal network of

each office is exposed to this shared WAN. Advanced security

features are integrated into Cisco IOS software of the Cisco

3600 bundles:

– Firewall—The optional Cisco IOS Firewall protects the LAN

from attacks. Context-based access control (CBAC) provides

dynamic or stateful filtering on a per-application basis,

permitting legitimate traffic to enter the LAN only while a

session is active. CBAC capability is considered essential for

effective firewall functionality. Cisco IOS Firewall also

supports other key features such as Java blocking,

denial-of-service detection and prevention, audit trail, and

real-time alerts.

– Encryption-—Optional IP Security Data Encryption Standard

(IPSec DES) and Triple DES encryption up to 168-bit key

length provides the strongest standards-based encryption to

ensure confidentiality, data integrity, and data origin

authenticity while traversing a shared WAN.

– Tunneling—Several optional tunneling standards are

supported: IPSec, generic routing encapsulation (GRE),

Layer 2 Forwarding (L2F), and Layer 2 Tunneling Protocol

(L2TP). L2F and L2TP support allows mobile workers to dial

in to a service providers’ local points of presence (POPs),

tunnel traffic back to the Cisco 3600, and access resources

such as databases residing on the LAN of the router. When the