Cisco 1720 Modular Access Router Flexible Internet Access for Small and Medium-Sized Businesses and Small Branch Offices

Preparing a small or medium-sized business or small branch office network for the future means implementing networking equipment with three critical characteristics:

• Flexibility to adapt to changing requirements and growth

• Features and performance to support new WAN services and technologies including VPNs

• Integration of multiple network functions including an optional firewall and DSU to simplify deployment and management

The Cisco 1720 access router delivers these capabilities with the power of Cisco IOS^® software in a modular, integrated product for Internet, intranet, and extranet access. The Cisco 1720 router provides a tailored access router solution for small and medium-sized businesses and small branch offices.

Figure 1: The Cisco 1720 Router Delivers a Versatile WAN Access Solution with the Power of Cisco IOS Software, Flexibility, and Device Integration

Cisco 1720 Modular Access Router

The Cisco 1720 access router offers the following features:

• One autosensing 10/100 Fast Ethernet port

• Two WAN interface card (WIC) slots that support the same data WAN interface cards as the Cisco 1600, 2600, and 3600 routers

• One auxiliary (AUX) port (up to 115.2 kbps asynchronous serial)

• One console port

• A RISC processor to support high-performance encryption and broadband services

• One internal expansion slot for support of a hardware-assisted encryption card (up to T1/E1)

The Cisco 1720 router supports up to two WAN interface cards listed in Table 1. These cards support a wide variety of WAN technologies: Integrated Service Digital Network (ISDN), asynchronous serial, and synchronous serial such as leased lines, Frame Relay, switched 56, X.25, and Switched Multimegabit Data Service (SMDS). Also available are WAN interface cards that integrate a data service unit/channel service unit (DSU/CSU) into the Cisco 1720 router, eliminating the support costs and complexity of deploying and managing external devices.

Figure 2: Rear View of the Cisco 1720 Router

Flexibility

The Cisco 1720 router offers a flexible solution. Interchangeable WAN interface cards enable easy upgrades or change of WAN technologies to keep pace with office needs. The ability to use the same WAN interface cards in Cisco 1600, 2600, and 3600 routers reduces requirements for spare parts inventory and protects investments in existing routers. As demand for LAN network performance increases, the Cisco 1720 autosensing 10/100 Fast Ethernet port allows for easy migration to Fast Ethernet networks. Because of its RISC architecture, the Cisco 1720 has the performance capability necessary to support digital subscriber line (DSL) and other broadband access technologies as they become more widely deployed.

Cisco IOS Software Features for Internet and Intranet Access

In addition to the above features, extensive Cisco IOS software features for Internet and intranet access differentiate the Cisco 1720 router from the competition:

• Multiprotocol routing (IP, IPX, and AppleTalk), IBM/SNA, and transparent bridging over ISDN, asynchronous serial, and synchronous serial such as leased lines, Frame Relay, SMDS, Switched 56, X.25, and X.25 over D

• Network address translation (NAT), which reduces the cost of Internet access by eliminating the need to readdress all hosts with existing private network addresses (one-to-one translation) or by enabling all internal hosts to share a single registered IP address (many-to-one translation, also known as port address translation [PAT]). NAT also enhances network security by hiding internal addresses from public view.

• Easy IP simplifies deployment and minimizes Internet access costs by combining:

  • PAT to conserve IP addresses

  • Point-to-Point Protocol/Internet Protocol Control Protocol (PPP/IPCP), enabling the router to dynamically negotiate and configure its own IP address

  • DHCP Server to dynamically and transparently assign reusable IP addresses to clients

• WAN optimization features such as dial-on-demand routing (DDR), bandwidth-on-demand (BOD) and OSPF-on-demand circuit, Snapshot routing, compression, filtering, and spoofing reduce WAN costs.

Security and VPN Support

The power of Cisco IOS Software---The de facto standard networking software for the Internet and private WANs, Cisco IOS software delivers the most comprehensive set of security, quality of service (QoS), management, reliability, and scalability VPN features. The Cisco 1720 router with Cisco IOS software enables practical, cost-effective, and wide-scale current or future VPN deployment.

Security---Cisco IOS software supports an extensive set of basic and advanced network security features, including access control lists (ACLs), user authentication, authorization, and accounting (such as PAP/CHAP, TACACS+, and RADIUS), and complete VPN support including encryption. To increase security, the integrated Cisco IOS Firewall protects internal LANs from attacks with context-based access control (CBAC).

VPNs enable companies to connect their offices, mobile workers, and business partners with dramatically reduced costs by leveraging the vast, shared communications infrastructure of the Internet or a service-provider-shared backbone, thus avoiding the long-distance charges of traditional private networks. With today's technology, VPNs enable companies to reduce recurring wide-area network (WAN) costs, improve data security, increase network performance and availability, and simplify network operations. In addition to supporting all of today's common WAN access applications and services, the Cisco 1720 has been optimized to support VPNs. It provides all the components necessary to enable secure VPNs-today or in the future-with integrated firewall, encryption features and performance, VPN tunneling, and QoS.

IPSec tunneling with data encryption standard (DES) and Triple DES encryption provide standards-based data privacy, integrity, and authenticity as data travels through a public network. Layer 2 Forwarding (L2F) and Layer 2 Tunneling Protocol (L2TP) combine with IPSec encryption to provide a secure multiprotocol solution (such as IP, IPX, AppleTalk, and more) for remote access VPN. Mobile users dial in to a service provider's local points of presence (POPs) and data is "tunneled" (or encapsulated inside a second protocol such as L2TP) back to the Cisco 1720 router to securely access the corporate network via the Internet.

QoS (Traffic Management)---Cisco IOS features for QoS control the allocation of VPN bandwidth to mission-critical applications. The Cisco 1720 supports leadership QoS features such as committed access rate (CAR), policy routing, weighted fair queuing (WFQ), generic traffic shaping (GTS), and resource reservation protocol (RSVP).

Management and Ease of Installation---The Cisco 1720 router supports a range of network management and ease of installation tools:

• Cisco ConfigMaker is a Windows Wizard-based tool designed to configure a small network of Cisco routers, switches, hubs, and other network devices from a single PC. This tool makes it simple to configure value-add security features such as the Cisco IOS Firewall Feature Set, IPSec encryption, and network address translation (NAT); establish VPN policies (including QoS and security); and configure the Dynamic Host Configuration Protocol (DHCP) server.

• CiscoView, a GUI-based device management software application for UNIX platforms, provides dynamic status, statistics, and comprehensive configuration information.

• CiscoWorks2000, the industry-leading Web-based network management suite from Cisco, simplifies tasks such as network inventory management and device change, rapid software image deployment, and troubleshooting.

• For service providers, Cisco Service Management (CSM) provides an extensive suite of service management solutions to enable service providers to quickly plan, provision, monitor, and bill for VPNs. (See http://www.cisco.com/warp/public/cc/cisco/mkt/servprod/sms/tech/vpn_wp.htm for the white paper titled Network Management Solutions for IP-VPN.)

Reliability and Scalability---Cisco IOS software is the industry-standard networking software with proven reliability. Cisco IOS technologies ensure that a VPN can scale reliably to large networks through the support of Internet key exchange (IKE) and digital certificates with leading certificate authorities, scalable routing protocol features such as Open Shortest Path First (OSPF) Protocol and Enhanced Interior Gateway Routing Protocol (EIGRP), and reliability services such as Hot Standby Router Protocol (HSRP).

Encryption Performance---Powered by a RISC processor, the Cisco 1720 supports IPSec software-based encryption at 512 Kbps for 256-byte packets, (typical packet size for most networks). Performance may vary depending on the encryption algorithm used, network packet sizes, and more. An expansion slot on the Cisco 1720 motherboard allows for support of future hardware-assisted services such as encryption (up to T1/E1) and compression.

Device Integration

The Cisco 1720 router provides a complete access solution in a single product, with options to combine a router, DSU/CSU, ISDN network termination-1 device (NT1) as well as a dynamic firewall, VPN tunnel server (home gateway), and encryption functionality. This integration reduces deployment and management time and expense because fewer devices and cables need to be installed and configured. An integrated product also saves space and increases reliability because fewer standalone devices are required to build the solution. The Cisco 1720 router simplifies ongoing support of small branch offices from a central site through remote configuration, monitoring, and troubleshooting of all integrated functions in the router.

Part of the Cisco Networked Office Stack

The Cisco 1720 router is part of the Cisco Networked Office (CNO) stack, a suite of flexible and integrated products designed to provide complete networking solutions for small businesses and small branch offices. Other compatible products in the CNO stack include Cisco 1600 series routers, the Cisco 1538 Micro Hub 10/100, the Cisco 1548 Micro Switch 10/100, Cisco IOS Firewall, and Cisco ConfigMaker software.

Figure 3: The Cisco 1720 router is designed to work with other products in the CNO stack family, including the Cisco 1538 Micro Hub 10/100 and Cisco 1548 Micro Switch 10/100

Table 2: Key Features and Benefits

Key Features	Benefits
Flexibility
Full Cisco IOS Support Including multiprotocol Routing (IP, IPX, AppleTalk, IBM/SNA) and Bridging	Provides industry's most robust, scalable, and feature-rich internetworking software support using the de facto standard networking software for Internet and private WANs Part of the Cisco end-to-end network solution
Modular Architecture (WAN Card Slots)	Enables flexible WAN choices on the Cisco 1720 router protecting investment
WAN Interface Cards Shared with Cisco 1600, 2600, and 3600 Routers	Reduced cost of maintaining inventory Lowers training costs for support personnel Protects investments through reuse on various platforms
Autosensing 10/100 Fast Ethernet	Simplifies migration to Fast Ethernet performance in the office
Expansion Slot on Motherboard	Allows expandability to support future services such as hardware-assisted encryption and compression
Security and VPN Capability
Firewall The Cisco IOS Firewall includes context-based access control for dynamic firewall filtering, denial of service detection and prevention, Java blocking, and real-time alerts	Allows internal users to access the Internet with secure, per-application-based, dynamic access control while preventing unauthorized Internet users from accessing the internal LAN
Encryption IPSec ESP DES and Triple DES expansion slot for future high-speed, hardware-based encryption	Enables creation of VPNs by providing industry-standard data privacy, integrity, and authenticity as data traverses public networks Provides an option to upgrade to high-speed hardware-assisted encryption up to T1/E1 when available
RISC Processor	Enables software-based encryption performance at 512 kbps for VPNs
Device Authentication and Key Management IKE, X.509v3 digital certification, support for certificate enrollment protocol (CEP) with certification authorities (CAs) such as Verisign and Entrust	Ensures proper identity and authenticity of devices and data · Enables scalability to very large IPSec networks through automated key management
User Authentication PAP/CHAP, RADIUS, TACACS+, Token Ring	Verifies user identity
Tunneling IPSec, GRE, L2TP, L2F	Choice of standards-based tunneling methods to create VPNs for IP and non-IP traffic Allows any standards-based IPSec or L2TP client to interoperate with Cisco IOS tunneling technologies
Management Manageable via SNMP (CiscoView, CiscoWorks2000), Telnet, and console port	Allows central monitoring, configuration, and diagnostics for all functions integrated in the Cisco 1720 router, reducing management time and costs
Ease of Use and Installation Cisco ConfigMaker, SETUP configuration utility, AutoInstall, color-coded ports/cables, and LED status indicators	Simplifies and reduces deployment time and costs with graphical LAN/VPN policy configurator; command-line, context-sensitive configuration questions; and straight-forward cabling LEDs allows quick diagnostics and troubleshooting
Network Address Translation and Easy IP	Simplify deployment and reduces Internet access costs
Quality of Service (QoS) CAR, Policy Routing, WFQ, GTS, Policy Routing, RSVP	Allocates WAN bandwidth to priority applications for improved performance
Reliability and Scalability Cisco IOS software, dial-on-demand routing; dual bank Flash memory, scalable routing protocols such as OSPF, EIGRP, and HSRP	Improve network reliability and enables scalability to large networks
Device Integration Integrated router, firewall, encryption, VPN tunnel server, DSU/CSU, and NT1 in a single device	Reduces costs and simplifies management compared to solutions based upon multiple, separate devices
Part of Cisco Networked Office stack	Delivers complete, compatible solutions for small office networks

Cisco IOS Software Feature Sets

The Cisco 1720 router supports a choice of Cisco IOS software feature sets (Table 3). Each feature set requires specific amounts of RAM and Flash memory in the router. (Note: The software features on the Cisco 1720 router are the same as on the Cisco 1600 series routers as of release 12.0, with the addition of IPSec 3DES feature sets.)

Starting with Cisco IOS Release 12.0, Base feature sets include some features formerly in Plus: NAT, OSPF, RADIUS, and NHRP. Plus feature sets contain L2TP, L2F, the Border Gateway Protocol (BGP), IP Multicast, Frame Relay SVC, RSVP, the Netware Link Services Protocol (NLSP), AppleTalk SMRP, the Web Cache Control Protocol (WCCP), and the Network Timing Protocol (NTP). Encryption is offered in special encryption feature sets (Plus 40, Plus IPSec 56, and Plus IPSec 3DES).

To build an IP VPN, the recommended feature sets are IP/Firewall Plus IPSec 56 or IP/Firewall Plus IPSec 3DES.

Figure 4: Rear Panel, Cisco 1720 Access Router

Technical Specifications

Physical Interfaces/Ports

• One 10/100BaseTX Fast Ethernet port (RJ45)

  • Automatic speed detection

  • Automatic duplex negotiation

• Two WAN interface card slots

  • Supports any combination of up to two WAN interface cards as shown in Table 1: WIC-1T, WIC-2T, WIC-1DSU-56K4, WIC-1DSU-T1, WIC-1B-S/T, WIC-1B-U, WIC-2A/S

• Synchronous Serial Interfaces on Serial WAN Interface Cards

  • Interface speed: up to 2.0 Mbps (T1/E1)

  • Synchronous serial protocols: PPP, HDLC, LAPB, IBM/SNA

  • Synchronous serial WAN services: Frame Relay, X.25, SMDS

  • Synchronous serial interfaces supported on the WIC-1T, WIC-2T, and WIC-2A/S cards: V.35, EIA/TIA-232, EIA/TIA-449, X.21, EIA-530

• Asynchronous Serial Interfaces on Serial WAN Interface Cards

  • Interface speed: up to 115.2 kbps

  • Asynchronous serial protocols: Point-to-Point Protocol (PPP), Serial Line Internet Protocol (SLIP)

  • Asynchronous interface: EIA/TIA-232

• ISDN WAN Interface Cards

  • ISDN dialup and ISDN Leased Line (IDSL) at 64 and 128 kbps

  • Encapsulation over ISDN Leased Line: Frame Relay and PPP

• One auxiliary (AUX) port

  • RJ-45 jack with RS232 interface (plug compatible with Cisco 2500 series AUX port)

  • Asynchronous serial DTE with full modem controls (CD, DSR, RTS, CTS)

  • Asynchronous serial data rates up to 115.2 kbps

• One console port

  • RJ-45 jack with RS232 interface (plug compatible with Cisco 1000/1600/2500 series console ports)

  • Asynchronous serial DTE

  • Transmit/receive rates up to 115.2 kbps (default 9600 bps, not a network data port)

  • No hardware handshaking such as RTS/CTS

• One internal expansion slot for support of future hardware-assisted services such as encryption (up to T1/E1) and compression

Processor

• Motorola MPC860T PowerQUICC at 48 MHz

DRAM and Flash Memory

• Run from RAM architecture

• DRAM

  • Onboard (fixed/default): 16 MB

  • One DIMM slot; available DIMM sizes: 4, 8, 16, 32 MB

  • Maximum DRAM: 48 MB

• Flash

  • Type: onboard (socketed) mini-flash card

  • Default: 4 MB

  • Available sizes: 4, 8, 16 MB

  • Maximum Flash: 16 MB

  • Support Dual Flash Bank

Dimensions

• Width: 11.2 in.(28.4 cm)

• Height: 3.1 in. (7.85 cm)

• Depth: 8.7 in. (22.1 cm)

• Weight (minimum): 2.6 lbs (1.18 kg)

• Weight (maximum): 2.9 lbs (1.32 kg)

Power

• Locking connector on power socket

• AC Input Voltage: 100 to 240 VAC

• Frequency: 47 to 64 Hz

• AC Input Current: 0.5 amps

• Power Dissipation: 20 watts (maximum)

Environmental

• Operating Temperature: 32 to 104° F (0 to 40° C)

• Nonoperating Temperature: -4 to 149° F (-20 to 65° C)

• Relative Humidity: 10 to 85% noncondensing operating; 5 to 95% noncondensing, nonoperating

Safety

• UL 1950

• CSA 22.2 --- No 950

• EN60950

• EN41003

• AUSTEL TS001

• AS/NZS 3260

• ETSI 300-047

• BS 6301 (power supply)

EMI

• AS/NRZ 3548 Class A

• Class B

• FCC Part 15 Class B

• EN60555-2 Class B

• EN55022 Class B

• VCCI Class II

• CISPR-22 Class B

Immunity

• 55082-1 Generic Immunity Specification Part 1: Residential and Light Industry

• IEC 1000-4-2 (EN61000-4-2)

• IEC 1000-4-3 (ENV50140)

• IEC 1000-4-4 (EN61000-4-4)

• IEC 1000-4-5 (EN61000-4-5)

• IEC 1000-4-6 (ENV50141)

• IEC 1000-4-11

• IEC 1000-3-2

Network Homologation

• Europe: CTR2,CTR3

• Canada: CS-03

• Unites States: FCC Part 68

• Japan: Jate NTT

• Australia/New Zealand: TS013/TS-031

• Hong Kong: CR22

I want some more information!!

Send me back to the Cisco Products page