Cisco Catalyst 6500/7600 IPSEC VPN SPA SPA-IPSEC-2G= Datenbogen
Produktcode
SPA-IPSEC-2G=
© 2005 Cisco Systems, Inc. All rights reserved.
Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com.
Page 4 of 8
Table 2.
Product Specifications
Features
Descriptions
VPN Tunneling
IPSec (RFCs 2401–2411 and 2451)
Encryption
•
Encapsulating Security Payload (ESP)
•
DES
•
3DES
•
AES
Authentication
•
X.509 digital certificates (RSA signatures)
•
Preshared keys
•
Simple Certificate Enrollment Protocol (SCEP)
•
RADIUS (RFC 2138)
•
TACACS+
•
Challenge Handshake Authentication Protocol/Password Authentication Protocol (CHAP/PAP; RFC 1994)
Integrity
Hashed Message Authentication Code with MD5 (HMAC-MD5) and with Secure Hash Algorithm-1 (HMAC-SHA-1)
(RFCs 2403 and 2404)
Key Management
•
Internet Key Exchange (IKE; RFCs 2407–2409)
•
IKE-XAUTH
•
IKE-CFG-MODE
CA/PKI Support
•
Entrust
•
VeriSign
•
Microsoft
•
Netscape
•
IPlanet
•
Baltimore Technologies
Resiliency and
High
Availability
•
HSRP + RRI
•
Intrachassis (blade-to-blade) active/active IPSec stateful failover
•
Interchassis (box-to-box) active/standby IPSec stateful failover
•
DPD
•
Dynamic routing across IPSec (see “Routing Protocols” section of this table)
Network Management
•
CiscoWorks VMS and Router MC
•
Cisco ISC
•
Secure command-line interface (CLI) using Secure Shell (SSH) Protocol or Kerberized Telnet
Routing Protocols
•
Border Gateway Protocol Version 4 (BGPv4)
•
Routing Information Protocol (RIP) and RIP Version 2 (RIPv2)
•
Open Shortest Path First (OSPF)
•
Enhanced Interior Gateway Routing Protocol (EIGRP) and IGRP
•
Intermediate System-to-Intermediate System (IS-IS)
Supervisor Engines
•
Supervisor Engine 2 with Multilayer Switch Feature Card 2 (MSFC2)