Cisco delivers service-stuffed routers
ISR line leverages hefty horsepower to deliver VoIP, firewall, VPN, and moreFollow @pvenezia
Not that long ago, a small-office router handling a single T1 was more or less fully consumed by that task. Throwing more features into the software to support services such as VoIP or firewalling just wasn’t practical, given the cost of CPU and RAM available for the smaller units.
Now, the converse is true: SOBO (small office/branch office) routers have plenty of horsepower to spare. As the availability of high-power embedded platforms grows, the prices drop, and the headroom provided by the new platforms enables manufacturers to bring together into a single solid-state unit services that used to require several devices and possibly a few servers. Cisco’s new line of access routers, dubbed ISRs (Integrated Services Routers), fits this bill nicely.
In the lab
I evaluated two examples from Cisco’s ISR series: the 1811W and 2811. The 1811W is a fixed-configuration router designed almost exclusively for the small office. It offers DSL or Ethernet handoff, firewalling, VPN tunneling, integrated wireless capabilities, integrated Ethernet switching, and even optional PoE (Power over Ethernet) switch ports for VoIP phones.
My 1811W evaluation unit came with a Wi-Fi AP (access point), two antennas, and an eight-port 10/100 Ethernet switch with PoE capabilities when paired with a single outboard brick-style power supply, an integrated 56K modem, two USB ports, and two dedicated 10/100 Ethernet interfaces.
The 2811 expands on this concept by providing most of the above, except the AP, in a modular 1U chassis and adding eight switch ports, embedded VoIP call-handling capabilities, voice mail, and as many as 16 FXS/FXO ports. With four WIC (WAN interface card) slots and a single NM (network module) slot in the rear, my 2811 evaluation unit came with a 16-port 10/100 PoE blade containing a single Gigabit Ethernet port; a two-port FXO (foreign exchange office) card for POTS connections; and two built-in 10/100 Ethernet ports.
Both routers run Cisco IOS (Internetwork Operating System), providing the familiar CLI and borrowing against over 20 years of development. Cisco has a habit of providing a management GUI and configuration tools only at a premium, but in this case, the company tacked them on as part of the package. The 1811W comes complete with a Java-based management application launched from a Web session to the router itself. Nearly all the configuration options available to this router are also available through this interface, with a few notable additions.
The SDM (Security Device Manager) GUI is subject to the vagaries of incompatible JREs (Java Runtime Engines). I had a hard time firing it up on a Linux workstation running JRE 1.5, but it worked well on a Mac PowerBook and a Windows XP workstation running JRE 1.4 flavors.
The SDM GUI is somewhat reminiscent of the Cisco PIX PDM (PIX Device Manager), with a relatively well-laid-out, frames-based config dialog. All the basic configuration elements are there, from basic interface addressing options to VPN configuration. In addition, there are several extensions available, such as a built-in security-reporting tool that will evaluate the router configuration and make recommendations on changes that can improve security. Also available are network utilization reports. For most single-office uses, this GUI will be all that’s needed; they won’t need to mess with the CLI at all.