Cisco CISCO3620 SERIES IOS ENT S362AHK2-12105T= User Manual

Copyright  © 1999 Cisco Systems, Inc. All Rights Reserved.

Page 4 of 7

router is used in this way, it is called a home gateway or tunnel

server. This setup obviates the need for a separate remote

access server/concentrator at the small to medium-sized

business and saves on long-distance calling charges. L2TP

can also be used to tunnel non-IP traffic for connecting remote

offices or users (IPSec tunneling supports only IP traffic).

Device authentication and key management—Support for

Internet Key Exchange (IKE), X.509v3 digital certificate, and

Certificate Enrollment Protocol (CEP) with certificate

authorities such as Verisign and Entrust ensures device and

data authenticity and enables scalability to very large IPSec

networks through automated key management.

– User Authentication—User authentication provides support

for Password Authentication Protocol (PAP), Challenge

Handshake Authentication Protocol (CHAP), TACACS+,

Remote Access Dial-In User Service (RADIUS), and token

authentication.

• QoS (traffic management) for a VPN to provide the highest

level of availability and predictability, QoS controls are needed

with regards to which applications or users have access to how

much bandwidth. Time-sensitive or mission-critical

applications (for example, Enterprise Resource Planning

applications such as PeopleSoft) should get priority over

less-critical traffic (for example, push applications such as

Pointcast). The Cisco 3600 supports leadership QoS features

such as:

– Committed access rate (CAR) performs three important

functions on a per-application or per-user level: Classify

traffic type (for example, is it PeopleSoft or Pointcast traffic?);

set the maximum bandwidth allowed for that traffic (also

known as “traffic policing” or “rate shaping”—for example,

PeopleSoft gets 1.0 Mbps, Pointcast gets 28 kbps); and

prioritize the traffic by giving each traffic type an “IP

precedence number.”

– Policy routing can also classify and prioritize traffic by IP

precedence, but it also directs which type of traffic should go

to which interface on the router. However, it does not set the

allowed bandwidth like CAR does.

– Weighted fair queuing (WFQ) provides consistent response

time. It schedules low-bandwidth traffic to the front of the

queue to reduce response time, and fairly shares the remaining

bandwidth among high-bandwidth applications.

– Generic traffic shaping (GTS) avoids congestion by

controlling and smoothing outbound WAN traffic to a

specified bandwidth. This feature is useful when the receiving

router on the other edge of the WAN cannot handle the

incoming traffic bandwidth.

The comprehensive Cisco support portfolio delivers solutions that

enhance the network throughout its life cycle. From design and

installation to preventive and scheduled maintenance and

performance optimization, Cisco solutions promote network

reliability, efficiency, and flexibility. Designed to function as an

integral product component, these programs deliver seamless

support. Together, they proactively help organizations sharpen

their competitive edge. Through access to the Cisco Connection

Online (CCO) Web site, customers can both use and market

expanded functionality and new features as soon as they become

available. Moreover, access to Cisco technical expertise is

available around the clock and around the globe. This virtual team

of the worlds top networking engineers is equipped to address

every need from troubleshooting to network design and planning.

Historically, branch office connectivity has been synonymous

with connecting the local LAN to a regional or central site. With

the rapid growth in mobile computing and telecommuting, more

and more branch offices need to add user-to-LAN capabilities. At

the same time, V.90 modems have become the standard for remote

users and to satisfy their throughput requirements, many

enterprises and smaller ISP’s are installing digital PSTN

connections, either ISDN BRI or PRI, at their premises.

The Cisco 3600 PRI bundles are designed to address the 1/2

PRI digital dial markets, providing a powerful routing engine and

a competitive price point. Up to 60 concurrent users are

supported.

Figure 3 illustrates a typical application for the Cisco 3620

PRI modem bundle.

For basic telephone users, both 33.6 K and 56 K modem calls

can be terminated through the PRI connection into a digital

modem network module. Users including mobile workers and

people working from hotel rooms. For teleworkers with access to

Basic Rate Interface (BRI), the same phone number could be used

to connect to the same Cisco 3600, achieving 64 Kbps

noncompressed, or with multilink PPP, 128 kbps. V.110

connectivity (used with GSM phones) is also available.