Transcription
All you need to know about ISR FixedBranch PlatformsAbhishek and PrakashTechnical Marketing Engineering Technical LeaderAugust 2021
Become an event Top Contributor!Participate in Live InteractiveTechnicalEvents and much morehttp://bit.ly/EventTopContributors 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential2
Rate content at the Cisco CommunityHelp us to recognize the quality content in the communityRate documents,Videos & blogs! 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialEncourage and acknowledge people whogenerously share theirtime and expertise3
You can volunteer to host a Cisco Community Event!Register here: http://bit.ly/cl-hostevent 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential4
Cisco Community ExpertsAbhishekTechnical Marketing Engineer 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPrakashTechnical Marketing Engineer5
Thank You ForJoining Us Today!Download Today’s Presentationhttps://bit.ly/cl-ISR-slides 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential6
Submit Your Questions Now!Use the Q&A panel to submit yourquestions and the panel of expertswill respond.They will be answered eventuallyPlease take a moment to completethe survey at the end of the event 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential7
Enterprise Branch ISR FixedPlatformsAbhishek Keswani and Prakash KhilolaniTechnical Marketing, IBNG RoutingAugust 2021
Agenda1 IntroductionISR 800 Platform6 Overview2ISR 1000 Platform DeepDive7 ISR 800/900 to 1000 Migration3ISR 1100X Platform DeepDive (Viptela OS and XE SDWAN)8 FAQs & References4Performance and TestMethodology9OptionsPromotions & Offers5 ISR 900 Platform Overview 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential9
Cisco Enterprise Branch ISR Fixed Platforms PortfolioEnterprise Branch, SMB, Remote Worker, Managed CPEClassic IOSIOS-XE /IOS-XE SDWANViptela OS /IOS-XE SDWANClassic IOSFeature SetISR 800(All PIDs EoL, except 892FSP,867VAE, C888 and C841M)Up to 250 MbpsFixed and fanlessCisco IOS basedHigh performance VPNISR 900Up to 350 MbpsCisco SD-WANEthernet/Cat4/Cat6/Cat18 LTESD-WAN Services(IOS XE)ISR 1101Pure Play SDWAN Supportwith Viptela OSOR 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialFeature Rich SDWAN with IOS-XESD-WANISR 1111ISR 1100-4G/6G/LTEISR 1121ISR1100X-4G/6GUp to 428 MbpsViptela or CiscoSD-WANEthernet/Cat4 LTE10
Key Building Blocks 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential11
Easy Operations with Single ImageIOS XEIMAGESingleImageuniversalk9universalk9 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialIOS XESD-WANIMAGEucmk9IOS XESD-WAN‘Controller’modeIOS XE‘Autonomous’modeAccelerate SD-WANRouter# controller-mode ?disable controller-mode disableenablecontroller-mode enableresetcontroller-mode resetSimplify DeploymentsCloud-scale Applications12
“DP Heavy” SoC ArchitectureX86 Multi-core CPUKey Datapath InnovationsISR1000DPSPDPCPISR1000Dynamic CoreAllocationService PlaneDPDPDPCPData PlaneAvailable in IOS XE 17.6 release (Aug 2021)ISR1100X-6GDPSPDPCPMulti-Core Parallel ProcessingDynamic CoreAllocationService PlaneISR1100X-6GDPDPDPCPDPData Plane CoreCPControl Plane CoreSPService Plane CoreData PlaneAvailable in XE SD-WAN 17.4.1a release 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential13
TAmSecure Platform with Trustworthy SolutionsStep 1Step 2Step 3Step 4Step 5Step ecks BootloaderBootloaderchecks OSOS launchedAuthenticity andlicense checksTrust Anchormod ule providescritical servicesMicroloaderFirst instructions run on CPU stored in tamper-resistant hardwareConfidentiality 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialIntegrityAuthenticity14
ISR 1000 PlatformsRunning IOS-XE and XE SD-WAN images 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential15
Cisco ISR 1000 Branch Platforms dSD-WANLTESemi-Ruggedized*4GB DRAM - FW AppAware, DNS/web-layer security8GB DRAM - FW AppAware, IPS, URL-F, AMP&TG, DNS/web-layersecuritySD-WANSD-WAN SecurityLTEWirelessPoE/PoE SD-WANSD-WAN SecurityLTEWirelessPoE/PoE DSLSD-WANSD-WAN SecurityPoE/PoE ISR1100 andISR1100XSD-WANLTEWirelessPoE/PoE DSLSD-WANLTEWirelessSD-WANSD-WAN Security(ISR1100X)Integrated LTE (ISR11004GLTE)Flexible Secure Connectivity Options for your Small to Medium BranchDeployments 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential16
Cisco ISR 1000 Series RoutersWAN and Application AssuranceHigh Performance & ScaleForward Error Correction, TCP Optimization& Packet Duplication, SGT Propagation, CustomApplicationsUp to 350Mbps of IPsec throughputDynamic Core AllocationUp to 200 IPsec and GRE Overlay TunnelsComprehensive SecurityAdvanced MobilityIPSURL FilteringAdvanced Malware ProtectionEnterprise FW with Application AwarenessUmbrella SIGPluggable LTE (Cat 4 6 18)USB Dongle for non-LTE SKUsIntegrated WiFi capabilitiesFull Featured SD-WANRich Services with EnhancedPerformanceEthernet/LTE 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential8GB DDR4IOS-XE/XE SD-WANManageabilityvManageWebUIDNAC On17Prem
PollingQuestion #1 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialAll ISR1K routers supportembedded security features True False18
How to read a router PID – C1121X-8PLTEPWBSupported WirelessDomains for C1121EEuropeBNorthAmericaZAustralia/BrazilNew ZealandQJapanSupported WirelessDomains for C1121XEEuropeBNorth AmericaZAustralia/BrazilNew ZealandACanadaDSL PIDs8 port Ethernet LANSub-series IDC 11WBCisco2 1 X – 8PC1127DSL Annex A&MC1128G.SHDSLSeries VariantsName ofSeries 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialDSL Annex B&JLTEPWAN Int.Type8 GBDRAM/FLASHC1126C112xCPU 1.2 GHzC1161CPU 1.6 GHzPluggableLTE ModuleWireless Bdomain19
Cisco ISR 1000 Series Routers Block DiagramDRAMDDR44 Core CPUFlash – 4GB/8GBRJ45/Micro-USBConsoleLANDSLDRAM 8 GBWLANAP4/8 x 1GE RJ45SoC with HighPerformance 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialTAMUSB 3.0WAN1GERJ451GERJ45/SFPDynamic CoreAllocationPluggable/ IntegratedLTERichConnectivity20
C1121X-8PLTEPWxStatus and physicalsecurityData Interfaces Status LED 4 PoE or 2 PoE Capable* Power buttonEthernet LAN Reset button RJ45/SFP GE WAN Power connector* 4 Port (2 PoE or 1 PoE ) variants available** 4GB versions available in C1121 models 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialDRA M/FLASH **8G B/8GBSD-WAN Ready802.11acWave2Ex ternal PSUCAT 4 6 18 PluggableLTEManagement Interface USB 3.0, Type A Micro-USB LTE Debug Port, Micro-USB21
Ex ternal PSUC1117-4PLTEDRA M/FLASH:4G B/4GBIntegratedCA T6 ModemDSLSD-WAN ReadyStatus and physicalsecurity Power button Reset button Power connectorData Interfaces PoE CapableEthernet LAN 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialData Interfaces 1 x GE WANDual SimGPS ConnectorDSLManagement Interface USB 3.0, Type A RJ-45/Micro-USB22
SIM usage indicatorCAT18 PIM moduleDiversity antennas Used for additional reception orremote antennas Utilizing LM960A18 LTE Modems Dual Micro SIM (field replaceable) SD-WAN Support SMA Antenna Max Throughput1200Mbps(DL)/200Mbps(UL)Micro USB ModemDebug Supported on ISR1120 and ISR1160 For modem diagnosticsMain antennasPIDP-LTEAP18-GL 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialOperating RegionsLTE BandsGlobal1, 2, 3, 4, 5, 7, 8, 12, 13, 14*,17, 18, 19, 20, 25, 26, 28, 29,30, 32, 38, 39, 40, 41, 42, 43,46, 48, 66, 71* Support for LTE band dedicated for use by emergency services23
CAT18 PIM Supported ISR1000 platforms C1121 C1127 C1121-4PLTEP C1127-8PLTEP C1121-4PLTEPWy C1127-8PMLTEP C1121-8PLTEP C1127X-8PLTEP C1121-8PLTEPWy C1127X-8PMLTEP C1121X-8PLTEP C1121X-8PLTEPWy C1126 C1126-8PLTEP C1126X-8PLTEP 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialWhere:y B,E,Q,Z C1128 C1128-8PLTEP C1160 C1161-8PLTEP C1161X-8PLTEP24
CAT18 PIM Unsupported platforms ISR800 series ISR900 series ISR1100-4G ISR1100-6G Any other ISR1000 platforms not listed on previous slide ENCS platforms ISR4000 series vEdge platforms 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential25
USB Based CAT4 LTE DongleSMA AntennaLength: 2.46 inWeight: 0.3 oz Utilizing SWI WP76xx LTE ModemsCompact Form Single Micro SIM (field replaceable)Dimensions: 3.69 in x 1.30 in x 0.39 inWeight: 1.1 oz Powered through USB Sub-miniature version - A (SMA) Antenna CAT4 LTE-Only Support Max Throughput 75Mbps(DL)/50Mbps(UL)Micro-SIM Card SlotPIDDescriptionOperating RegionsBandsD-LTE-GBCAT4 LTE Dongle for EMEAREMEARBands 1,3,7,8,20,28D-LTE-ASCAT4 LTE Dongle for ASEANIndia, China, Hong Kong,Indonesia, Malaysia, Philippines,South AfricaBands 1,3,5,8,40,41D-TE-NACAT4 LTE Dongle for NorthAmericaNorth AmericaBands2,4,5,12,13,14,17Supported on select Cisco 1000 Series Integrated Service Routers (ISRs) 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential26
LTE mMb/sMax downloadMIMO layers3GPP ReleaseCAT4LTE150512CAT6LTE Advanced301512 or 4Release 10CAT18LTE Advanced Pro11742002, 4, or 8Release 13Sub-65G3300420Release 8Release 15 D-LTE max data rates are75 Mb/s downstream and 50 Mb/sec upstreamD-LTE is CAT4 hardware 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential27
CAT4 USB Dongle Supported ISR1000 platforms C1101 C1126 C1160 C1101-4P C1126-8PLTEP C1161-8P C1101-4PLTEP C1126X-8PLTEP C1161-8PLTEP C1101-4PLTEPWx C1161X-8P C1161X-8PLTEP C1121C1127 C1127-8PLTEPFrom Viptela OS 20.4 C1121-4P C1127-8PMLTEP C1121-4PLTEP C1127X-8PLTEP ISR1100-4G C1121-4PLTEPWy C1127X-8PMLTEP ISR1100-6G C1121-8P ISR1100X-4G C1121-8PLTEP ISR1100X-6G C1121-8PLTEPWy C1121X-8P C1121X-8PLTEP C1121X-8PLTEPWy 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential C1128 C1128-8PLTEP Where:x A,B,D,E,F,H,N,Q,RZy B,E,Q,Z28
CAT4 USB Dongle Unsupported platforms ISR800 series ISR900 series Any other ISR1000 platforms not listed on previous slide vEdge hardware ISR1100-4GLTE ISR4000 series ENCS 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential29
Antenna PortfolioDescriptionPart NumberConnector typeUse CasesMulti-Band SwivelMount DipoleAntenna-FaceplateMount (dualincluded)LTE-ANTM-DTNCDefault antennas, attacheddirectly to router antenna portswhen there is good LTE signal,or clear line of sight.Multi-Band SwivelMount DipoleAntenna-FaceplateMount (dualincluded) SMALTE-ANTM-SMA-DSMADefault antennas, attacheddirectly to router antenna portswhen there is good LTE signal,or clear line of t4G-ANTM-OM-CMTNC* Single AntennaLTE-ANTM-D (Spare)4G-ANTM-OM-CM (Spare) 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPicture* Indoor ceiling mount30
Cisco 4G AccessoryCables, Extensions, Bundles & OtherNameLMR 400 Cable (UltraLow Loss) TNC to TNCLMR 400 Cable (UltraLow Loss) TNC to NtypePID4G-CAB-ULL-204G-CAB-ULL-50Length20 ft (6 m)50 ft (15 m)CAB-L400-20-TNC-NCAB-L400-50-TNC-N20 ft (6m)50 ft (6m)LMR 240 Cable TNC -7525 ft ( 7.5 m)50 ft (15 m)75 ft (22.5 m)Antenna Extension Base4G-AE010-R4G-AE015-R10 ft (3 m)15 ft (4.5 m)Lightning ArrestorAntenna LMR 240 20/50/75 ft CableAntenna LMR 400 20/50 ft CableAntenna Extension Base4G-ACC-OUT-LA 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialLightning Arrestor31
Wireless LAN Hardware Overview WLAN Module based on the Cisco LANModule5 GHz 1GB DRAM, 256MB Flash, 4MB Boot Flash 802.11ac Wave 2 Dual Radio (2.4GHz &5GHz) 2x2, 2 SS MU-MIMO No BLE Internal antenna Console access via the router console1Gbps hw-module session 0/x 1Gbps uplink to the host CPUSwitching Module*Mobility Express is the default image installed. 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential32
Wireless LAN Software Overview Unified Mode and Mobility Express Software feature parity with the Cisco Aironet1815i Transmit Beam Forming Band Select Rogue AP Detection FlexconnectSpectrum Analysis instead of CleanAir 10 regulatory domains for C111x -E, -B, -A, -Z, -N, -Q, -H, -R, -F, -D 5 regulatory domains for C1101 and C1109 -E, -B, -A, -Z, -Q, -D 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialSupported WirelessD omains for C1121EEuropeBNorthAmericaZAustralia/BrazilNew ZealandSupportedWirelessQJapanD omains for C1121XEEuropeBNorthAmericaZAustralia/BrazilNew ZealandACanada33
Step 2:1: Controller SetupME Setup on PCCiscoAirProvision 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential34
OptionCAPWAP Setup: VLANSwitchportDHCP 43vManage 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential35
* The actual data rate negotiated during the line training process is dependent on theprofiles supported by the DSLAM, CPE’s distance from the central office where theDSLAM is located, noise conditions, and other parameters associated with line quality.ADSL/VDSL2DSL Interface VDSL 2 Profiles 8a, 8b, 8c, 8d, 12a, 12b, 17a Theoretical speeds: 22Mbps – 150 Mbps* Supported Platforms C1126-8PLTEP / C1126X-8PLTEP C1127-8PLTEP / C1127X-8PLTEP C1127-8PMLTEP / C1127X-8PMLTEP C1116-4P / C1117-4P / C1117-4PMDSL TechnologyC1127-8PMulti-mode over POTS,Annex AYesMulti-mode over POTS,Annex M-Multi-mode over ISDN,Annex B/J 2021 Cisco and/or its affiliates. All rights reserved. Cisco -YesYesC11164P-Yes-Yes36
G.FAST/VDSL2DSL Interface Supports G.FAST and VDSL2 Profile 35b, 106a, 106b Theoretical speeds: 150Mbps – 1Gbps* Supported Platforms C1113-8P / C1113-8PM C1112-8PDSL TechnologyC1113-8PC1113-8PM-C1112-8PMulti-mode over POTS,Annex AYesMulti-mode over POTS,Annex M-Yes-Multi-mode over ISDN,Annex B/J--Yes 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential-37
G.SHDSL Performance up to 15.36 Mbps* Supported Platforms C1118-8P / C1128-8PLTEPStatus and physicalData InterfacessecurityLTE Technology 4 PoE or 2 PoE Capable Status LED CAT 4/6/18 PluggableEthernet LAN Power button RJ45/SFP GE WAN Reset buttonManagement Interface Power connector USB 3.0, Type A Micro-USB LTE Debug Port, Micro-USB 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialG.SHDSL38
ISR1100X Platform for SD-WANBranchBridge to Feature Rich SD-WAN from Viptela OS 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential39
XE SD-WAN 17.4.1aor Viptela OS 20.4.1onwardsISR1100 and ISR1100X Series Platform EvolutionvEdgeISR1100ISR1100XvEdge 100BvEdge 100MvEdge R1100X-6GOperating SystemViptela OSDRAM2 - 4 GB DRAMFeature SupportBasic SD-WANScaleUp to 1500 IPsec andGRE Tunnels 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential4 – 6 WAN portsViptela OS, Upgradable to IOS-XESD-WAN4 GB DRAMBasic SD-WAN with Viptela OS,Feature rich SD-WAN with IOS-XEUp to 1500 IPsec andGRE Tunnels4 – 6 WAN portsBranch Security5 – 8 WAN portsSuperior HardwarePortsViptela OS or IOS-XESD-WAN8 GB DRAMBasic SD-WAN with Viptela OS,Feature rich with full Security SD-WAN with IOS-XEUp to 3000 IPsec andGRE Tunnels40
Cisco ISR1100 and ISR1100X Series Routers forSD-WANIntegrated Rich ServicesHigh Performance & ScaleForward Error Correction, TCP Optimization& Packet Duplication, SGT Propagation, SD-AVC,Custom ApplicationsUp to 428Mbps of IPsec IMIX performanceDynamic Core AllocationUp to 3000 IPsec and GRE Overlay TunnelsComprehensive SecurityAdvanced MobilityIPSURL FilteringAdvanced Malware ProtectionEnterprise FW with Application AwarenessDNS/Web-Layer Security (Umbrella)Umbrella SIGIntegrated LTE (Cat 4)USB Dongle for non-LTE SKUs (Viptela OS only)Full Featured SD-WANRich Services with EnhancedPerformanceEthernet/LTE 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential8GB DDR4(ISR1100XSeries)XE SD-WAN/Viptela OSManageabilityvManageOpen APIsAnalytics42
Cisco ISR1100X Series RoutersXE SD-WAN 17.4.1a orViptela OS 20.4.1onwardsBridge to Feature Rich SD-WAN from Viptela OSISR1100X—4G8GB DRAMISR1100X—6G8GB Flash8GB DRAM16GB Flash4x1GEEthernet2x1GE SFP4x1GEEthernetSD-WAN to the branch 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential43
2019 LaunchCisco ISR1100 Series RoutersBridge to Feature Rich SD-WAN from Viptela OS4GB DRAM8GB FlashISR1100—4GISR1100—6G4x1GE Ethernet2x1GE SFP(ISR1100-6G)Integrated LTE(ISR11004GLTE)ISR1100—4GLTESD-WAN to the branch 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential44
Cisco ISR1100X-4G Series Routers Block DiagramDRAMx86 SoC CPU4 CoresFlash – 8GBDRAM 8 GBDPDKUSB 3.0PCIePIM4 x 1GE RJ45SoC with HighPerformance 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialQATQAT for CryptoAccelerationTAMRJ45 ConsoleRichConnectivity45
Cisco ISR1100X-6G Series Routers Block DiagramDRAMx86 SoC CPU4 CoresFlash – 16GBDRAM 8 GBQATDPDKUSB 3.0PCIePCIePIM4 x 1GE RJ452 x1GE SFPSoC with HighPerformance 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialQAT for CryptoAccelerationTAMRJ45 ConsoleRichConnectivity46
ISR1100-4G vs ISR1100X-4GProduct ComparisonISR1100-4GISR1100X-4GCPU: x86 2.2GHz 4-coreCPU: x86 2.2GHz 4-coreMemor y: 4GB DDR4, ECCMemor y: 8GB DDR4, ECCBulk Flash: 8GB eMMC pSLCBulk Flash: 8GB eMMC pSLCWAN Ports: 4x GEWAN Ports: 4x GEIntegrated LTE US and Global): NoUSB Dongle support (Viptela OS only)Integrated LTE (US and Global): NoUSB Dongle support (Viptela OS only)Console: 1x RJ45Console: 1x RJ45USB Type A: USB3.0, 4.5WUSB Type A: USB3.0, 4.5WPower supply: External Adapter, 30WPower supply: External Adapter, 30WForm Factor: 10.2” x 7” x 1.1”Form Factor: 10.2” x 7” x 1.1” 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential47
ISR1100-6G vs ISR1100X-6GProduct ComparisonISR1100-6GISR1100X-6G4-core x86 CPU4-core x86 CPUMemor y: 4GB DDR4, ECCMemor y: 8GB DDR4, ECCBulk Flash: 8 GB eMMC pSLCBulk Flash: 16GB eMMC pSLCWAN Ports: 4x GE 2x SFP (6 individual ports)WAN Ports: 4x GE 2x SFP (6 individual ports)Integrated LTE (US and Global): NoUSB Dongle support (Viptela OS only)Integrated LTE (US and Global): NoUSB Dongle support (Viptela OS only)Console: 1x RJ45Console: 1x RJ45USB Type A: USB3.0, 4.5WUSB Type A: USB3.0, 4.5WPower supply: External Adapter, 30WPower supply: External Adapter, 30WForm Factor: 10.2” x 7” x 1.1”Form Factor: 10.2” x 7” x 1.1” 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential48
XE SD-WAN vs Viptela OS ComparisonISR1100X - Bridge to Feature Rich SD-WAN from Viptela OSXE SD-WAN BenefitsComprehensiveSecurity now availableon ISR1100X SeriesRouters withXE SD-WANBBR- Bottleneck Bandwidth & Round-trip propagation time 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential49
PollingQuestion #2 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialISR1100-4G/6G routers can be migrated toIOS-XE supporting controller mode fromwhich release? 17.317.417.517.650
Upgrading ISR1100 and ISR1100X Series RoutersPre 20.4/17.4vManageUntil 20.4/17.4 release: ISR1100-4G, ISR1100-4G-LTE, ISR1100-6G can be deployedwith Viptela OS for the pure play SD-WAN use cases Minimum software release supported on these platforms isViptela OS 19.2With 20.4/17.4Starting with 20.4/17.4: We have option to run the XE SD-WAN code on ISR1100 andISR1100X series routers and leverage all services such as Security,AppQoE, SD-AVC which are supported on IOS-XE SD-WANsoftware Minimum software release supported on ISR1100X series routers isViptela OS 20.4 or XE SD-WAN 17.4PrerequisitesSD-WANViptela OS XE SD-WANISR1100 router should be first upgraded to 20.4 Viptela OS code toupgrade the firmware and then we can migrate to XE SD-WAN17.4 code 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialOnly Controller Mode is supported with support51ofXE SD-WAN. Autonomous Mode is not
Use Cases 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential52
SASE Cloud Adoption with SD-WANCloudSecure web delivered FWgatewayInteractiveThreat IntelDNS/weblayer securityCloud accessSecurity -loISR1000IaaSCisco SD-WAN Umbrella SIG SASESeamless cloud access for SASE applications 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential53
IOS-XE SD-WAN17.4.1a onwardsManaged Service ProvidersCPE Use CaseSecurity StackBranchQFPEnt. FWApp AwareCPESP ManagedMPLS BBQFPQFPIPSData CenterEnterprise DataApplicationsQFPDNS/weblayersecuritySP ManagedInternet BBQFPManagedServicesQFPDC TrafficEmployee Internet TrafficISR1000Employee SAAS TrafficHigh Performance, SP Managed Network, SP Managed Services 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialManaged Services54
AppQoE with SD-WANBranchISP2DIAMPLSSD-WANFabricRegionalData centerCriticalApplicationsISR1000Data CenterTCP Optimization, Forward Error Correction, Packet Duplication, Enhanced Application Quality experience 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential55
CustomerDemoAvailableRemote Worker: Zero Touch DeploymentCiscoUmbrellaHome OfficeSecurity StackEnt. FWApp IASD-WANMPLSFabricData CenterURLFilteringIntegrated Security, Visibility & Analytics, Cloud OnRamp for SaaS, Office in a Box (WiFi LTE) 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential56
Unified Throughput TestMethodology 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential57
PollingQuestion #3 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialISR1K published throughput numbers arealways: Aggregated Unidirectional58
Throughput DefinitionThe posted result is aggregated throughput.For example, a platform is measured with 10Gbps throughput, that is aggregated throughputwhich could be 3Gbps eastbound 7Gbps westbound.10 Gbps3 Gbps7 Gbps3 Gbps7 Gbps3Gbps Unicast Eastbound 7Gbps Unicast WestboundTotal Aggregated Throughput 3Gbps 7Gbps 10Gbps 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential59
SD-WAN Testbed TopologyTgenC8500vManagevBondMPLSINET DUT– Device Under TestTgen: Traffic GeneratorBi Directional TrafficTest Duration - 120 secondsNo Drop Rate (NDR)vSmartDUTTgen 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential60
Traffic Profiles – Packet SizesPacket SizeIPv4 UnicastSmall Packets64B/72B*IMIX64B/72B*, 594B, 1400B7:4:1 ratioLarge Packets1400B* 72B for UDP frame in NAT/FW profiles Packet size is defined as Ethernet frame size:Ethernet Header (DMAC/SMAC/EtherType) Ethernet FCS IP Header 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential61
Traffic Profiles – Flows100Servers1000Clients Many to Many FlowsBi Directional Traffic 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 62
SD-WAN Throughput Profiles (1)1.IPsec (v4, v6, v4mcast)2.IPsec QoS3.IPsec QoS DPI FNF (v4, v6, v4mcast)4.IPsec QoS DPI FNF NAT5.IPsec QoS DPI FNF ZBFW6.IPsec QoS DPI FNF NAT ZBFW 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential63
SD-WAN Throughput Profiles (2)7.IPsec QoS DPI FNF ZBFW IPS8.IPsec QoS DPI FNF DIA-NAT50% ZBFW9.IPsec QoS DPI FNF DIA-NAT50% ZBFW IPS URLF10.IPsec QoS DPI FNF DIA-NAT50% ZBFW IPS URLF AMP TG11.IPsec QoS DPI FNF DIA-NAT50% ZBFW IPS URLF AMP SSL proxy (DIA only)12.IPsec QoS AppQoE with 250 msec latency13.IPsec QoS DPI FNF AppQoE DIA-NAT50% ZBFW IPS URLF with 250 msec latencyNote 1: SD-WAN Security features set IPS, URLF, AMP and TG only apply to ISR4k and ISR1k (8GB DRAM) platform.Note 2 : AppQoE will include BBR, Packet deduplication, DRE cache when available. Excluded FEC, because FEC and PktDup are mutuallyexclusive.Note 3 : AppQoE features are applied on traffic from Branch(applied at source, not receive direction) 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential64
Non SD-WAN DUTBidirectional TrafficTest Duration - 120 secondsNo Drop Rate (NDR) – zero packet drop on physical platforms.Packet Drop Rate (PDR) - 0.01%. In the virtual platforms it is common practice to set thePDR rate at 0.01% as there are external factors may cause packet drop, i.e. vSwitch,Hypervisor.Ensure No Bottleneck on Supporting Devices 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential65
Traffic Profiles – Packet SizesPacket SizeIPv4 UnicastIPv6 UnicastIPv4 MulticastIPv6 , 594B, 1400B*/1518B7:4:1 ratio94B, 594B, 1400B*/1518B7:4:1 ratio64B, 594B,1518B7:4:1 ratio94B, 594B,1518B7:4:1 ratioLargePackets1518B1400B* (IPsec)1518B1400B* (IPsec)1518B1518B* 72B for UDP frame in NAT/FW profiles* 1400B for IPsec to ensure no fragmentation Packet size is defined as Ethernet frame size:Ethernet Header (DMAC/SMAC/EtherType) Ethernet FCS IP Header 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential66
Non SD-WAN Throughput Profiles1.CEF (v4, v6, mcast)2.ACL3.HQoS4.GRE5.PBR6.FNF Optimized Mode7.NAT8.ZBFW9.IPsec Multi Tunnels (v4, v6)10.IPsec Single Tunnel (v4, v6)11.IPsec QoS FNF NBAR12.IPsec QoS ACL NAT AVCPerfMonPublic cloud instances are only tested with profile 1 and 10 with IPv4 unicast traffic 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential67
SD-WANLTE PluggableCisco ISR 1000 Series RoutersSD-WAN Security** VDSL2, ADSL2 onlyDSL [G.FAST/35b]Wireless 11288* SD-WAN IMIX PerfPoE/PoE ISR 1161X-8P Up to 350 Mbps***ISR 1121X-8P Up to 290 Mbps*ISR 111x-8PUp to 290 Mbps*ISR 1111X-8P Up to 290 Mbps***ISR 111x-4P Up to 200 Mbps*ISR 1101-4P Up to 200 Mbps*ISR 1109-4P Up to 165 Mbps*ISR 1109-2P Up to 135 MbpsM2MRemote Workers 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialExtended temperature & dual LTEManaged ServiceProvider CPEBranch in a box68
Cisco ISR 1000 - CEF ThroughputISR1161X-8PISR1121X-8PCEF PerformanceISR1111X-8PISR1101-4PISR111x-4P1.89 GbpsISR1109-4P1.6 GbpsISR1109-2P1.6 Gbps1.1 Gbps1.1 Gbps1 Gbps900 Mbps 2021 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialProfile: Cisco IMIX traffic (352Bytes)69
Cisco ISR 1000 - 1D ScaleIOS XE 4PC1101-4PC1109-4PC1109-2PIPsec OverlayTunnels200200200200200200200200200GRE OverlayTunnels200200200200200200200200200DPI Flows32K32K32K32K32K32K32K32K32KcFlows Entries32K32K32K32K32K32K32K32K32KOMP KIPv4 Routes120K120K120K120K120K120K120K120K120KHigher Scale with XE SD-WAN 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential70
SD-WANCisco ISR1100 and ISR1100X Series RoutersPerformanceIntegrated LTESD-WAN SecurityCAT4 USB Dongle (Viptela)ISR1100X-6G up to 428Mbps*ISR1100X-4G up to 399Mbps*ISR1100-6G up to 428 Mbps*ISR1100-4GLTE up to 399Mbps*ISR1100-4G up to 399 Mbps** SD-WAN IPsec IMIX Performance (Aggregate)Better Performance with XE SD-WAN with SD-WAN Security 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential71
Cisco ISR1100 and ISR1100X Series iptela OS1100X-4G1100-6G1100X-6GIOS-XE SD-WANIPsec OverlayTunnels2472501500150025050015003000GRE Overlay Tunnels2472501500150025050015003000DPI Flows14K14K14K14K50K256K50K256KcFlows Entries8K8K65K65K50K256K50K256KOMP Routes(overlay)30K30K128K128K200K512K200K512KIPv4 Routes30K250K128K250K256K512K256K512KHigher Scale with XE SD-WAN 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential72
Cisco 900 Series Integrated Services RoutersEnterprise-class Connectivity and SecurityHigh PerformanceEase to Deploy and ManageUp to 1.8 Gbps of CEF IMIXPerformanceUp to 250 Mbps of VPN ThroughputApplication Visibility & Control, QoSFixed, Compact DesignCisco IOSAdvanced ConnectivityIntegrated SecurityEthernetADSL and VDSLCAT4 LTEHigh performance VPNFirewallTrustworthy SystemsManageabilityClassic IOSFeature SetFanless 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential1GB RAMSOHO/SMBCisco DNACenterCCP Express73
ISR900 Platform OverviewISR 921ISR 926ISR 927ISR 2GBWAN Ethernet2 GE1 GE1 GE2 GEManaged Switch Ports4 GE4 GE4 GE4 NoVLANs50505050Console PortsRJ45RJ45RJ45RJ45Power supplyInternalExternalExternalInternalUSB1 USB 2.01 USB 2.01 USB 2.01 USB L2/ADSL2/2 LTE 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential74
How to read ISR 900 PID4 x GE-LANRegionsC 927 – 4P / 4PM / 4PMLTEGBLTEGBGlobalMexico, Europe,Middle East withspecific a, India,Southeast AsiaIntegratedCAT4 LTECiscoReg ionsProduct1 GE WAN 1 ADSL2/2 /VDSL – Annex M 4
WAN Feature Rich SD-WAN with IOS-XE SD-WAN OR ISR 1100-4G/6G/LTE ISR 800 (All PIDs EoL, except 892FSP, 867VAE, C888 and C841M) ISR 900 Up to 250 Mbps Fixed and fanless Cisco IOS based High performance VPN Up to 350 Mbps Cisco SD-WAN Ethernet/ Cat4/Cat6/Cat18 LTE Up to 428 Mbps Viptela or Cisco SD-WAN Ethernet/Cat4 LTE ISR 1101 ISR 1121
