Cisco DES/3DES VIRTUAL PRIVATE NETWORK ENCRYPTION AIM FOR 2600-BASE PERFORMANCE Specification Guide

Cisco Systems, Inc.

All contents are Copyright © 2004 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.

Page 9 of 12

• SLA monitoring for IPSec and MPLS

• Task manager (scheduling)

• Events APIs including TIBCO event bus, and Common Object Request Broker Architecture (CORBA) event API

• Extensible Markup Language (XML) interface for easy import and export of data to the Cisco VPN Solution

Center repository

VPNSC 2.2 supports the Cisco 1700 and 2600 Series routers as both MPLS Customer Premise equipment (CPE) and

as IPSec devices. This allows the provider to manage both IPsec and MPLS-based IP VPNs. The Cisco 2691 model is

currently being tested to provide Provider Edge PE support at a future Cisco IOS release date but is not currently

supported today.

VPNSC 2.2 also supports the Cisco 3600 and 3700 Series routers as both MPLS Customer Premise Equipment (CPE)

and as IPSec devices. In addition, the Cisco 3640, 3660 and 3700 can be supported as Provider Edge PE devices with

VPNSC 2.2.

The VPN module is supported on Releases 12.1(1) XC, 12.1(2) T, and later of the Cisco 1700 series The Cisco 2600,

3600, and 3700 Series VPN Module is supported on releases Cisco IOS 12.1(5) T and later of the Cisco IOS software.

The Cisco 2600XMs, 2691 and 3700 Series require Cisco IOS 12.2(8)T and later. The Cisco 2600XMs with

AIM-VPN/BPII require 12.2(15)ZJ Cisco IOS and later. The new AIM-VPN/BPII-PLUS, AIM-VPN/EPII-PLUS and

AIM-VPN/HPII-PLUS require 12.3(5c)/12.3(6) Cisco IOS and later for mainline release and 12.3(7)T Cisco IOS and

later for T-train releases. Cisco IOS IP firewall plus IPSec 3DES software contains all the IPSec, firewall and plus

features of Cisco IOS software and supports both 3DES and DES (56-bit) encryption, while the IPSec 56 version

software supports DES (56-bit) encryption.

A Cisco 1700, 2600, 3600, or 3700 Series router with a VPN module installed will run with any feature set for the

Cisco IOS Software, but the module is utilized only with IPSec feature sets. For example, Cisco 1700, 2600 and 3600

Series Cisco IOS IP-only software for 12.1(5) T will run on a Cisco 1700, 2600 or 3600 Series router with the VPN

module installed, but it will not be enabled for IPSec and will not exploit the features of the VPN module.

Cisco 1700/ 2600/3600/3700 Series IPSec Software Part numbers

Enterprise Plus IPSec 56 (DES)

C2600/3620/3640/3660-jk8s-mz

RAM

Enterprise Plus IPSec 3DES

C2600/3620/3640/3660-jk9s-mz

RAM

Enterprise IP/FW/IDS Plus IPSec 56

C2600/3620/3640/3660-jk8o3s-mz

RAM

Enterprise IP/FW/IDS Plus IPSec 3DES

C2600/3620/3640/3660-jk9o3s-mz

RAM

ENTERPRISE/SNASW PLUS IPSEC 56

C2600/3620/3640/3660-a3jk8o3s-mz

RAM

ENTERPRISE/SNASW PLUS IPSEC 3DES

C2600/3620/3640/3660-a3jk9s-mz

RAM

IP Plus IPSec 56 (DES)

C2600/3620/3640/3660/3700-ik8s-mz

RAM

IP PLUS IPSEC 3DES

C2600/3620/3640/3660/3700-ik9s-mz

RAM

IP/FW/IDS Plus IPSec 56 DES

C2600/3620/3640/3660-ik8o3s-mz

RAM