Table Of Contents
Data Sheet
Cisco 1711 and 1712
Security Access RoutersCisco® 1711 and 1712 security access routers are ideal for providing secure/reliable Internet and corporate network connectivity to enterprise small branch offices and small- and medium- sized businesses. They offer an all-in-one security and routing solution with built-in Fast Ethernet LAN switching, Fast Ethernet WAN or DSL broadband modem connectivity; and ISDN or analog modem backup interface to help ensure high availability of critical business applications. Cisco 1711 and 1712 routers also support integrated network security services that help ensure protection of the network and to secure data traveling over the Internet.
Figure 1:
Cisco 1711 or 1712 router
Cisco 1711 and 1712 routers, when deployed at a small- or medium-sized business, provide access to the Internet and other remote offices, while securing and protecting business critical data with Cisco IOS® Software security features. When deployed in the enterprise-small-branch office, Cisco 1711 and 1712 routers enable secure/reliable connections to corporate headquarters or other branch offices, providing employees with access to the corporate intranet.
Cisco 1711 and 1712 routers help businesses reduce costs by allowing deployment of a single device to provide multiple services (router, Fast Ethernet switch, firewall, virtual private network [VPN], Intrusion Detection System [IDS], and redundant WAN interface) typically performed by separate devices. Cisco IOS Software allows this flexibility, providing the industry's most robust, scalable, and feature-rich internetworking software support, using the accepted standard networking software for the Internet and private WANs.
Integrated LAN Switching
The four-port 10/100BASE-TX Fast Ethernet switch on Cisco 1711 and 1712 routers allows businesses to support and manage LAN and WAN configurations on a single device. The switch interfaces support Spanning Tree Protocol 802.1D and can be used to connect up to four physical LANs, or up to 16 IEEE 802.1Q virtual LANs (VLANs).
In addition, Cisco IOS Software integrated security features allow for the creation of demilitarized zones (DMZs) within the corporate intranet (Figure 2). This helps businesses secure and protect their network from external threats while enabling customer access to public Web and FTP servers.
Figure 2:
A DMZ can be created on the Fast Ethernet switching ports of the Cisco 1711 and 1712 using Cisco IOS Firewall
High Availability
For reliable access to the Internet and corporate networks, the ISDN port on the Cisco 1712, and the analog modem port on the Cisco 1711 Router, provide a redundant backup WAN connection to failover should the primary WAN connection fail (Figure 3). Additionally, Cisco 1711 and 1712 routers with Cisco IOS Software, which can automatically detect WAN failures and reestablish connectivity through the backup link. Cisco IOS Software is the industry proven software that has become the standard for reliable business access, and allows businesses to avoid productivity losses resulting from interruptions in WAN connectivity.
Figure 3:
In the event that the primary broadband connection fails, the analog modem port on the Cisco 1711 Router, or the ISDN port on the Cisco 1712 Router, functions as a backup WAN connection
Integrated Network Security
Cisco 1711 and 1712 routers deliver integrated network security solutions that enable organizations to protect productivity gains and reduce costs.
Standard integrated security services include hardware-accelerated IP security (IPSec) Triple Data Encryption Standard (3DES) encryption for wire-speed site-to-site VPN, as well as stateful inspection firewall and the Cisco IDS for network protection. These features provide secure connections via the Internet to connect geographically dispersed offices, business partners, and remote users while providing security, traffic prioritization, management, and reliability equal to that of private networks.
VPNs
VPNs enable companies to securely connect their branch offices, mobile workers, and business partners over public networks, dramatically lowering costs compared to a private line. By taking advantage of the vast, shared communications infrastructure of the Internet or a shared service provider backbone, companies avoid the service charges of traditional private networks.
The Cisco 1711 and 1712 routers deliver hardware-assisted VPN functionality encrypting data using the strongest encryption available, 3DES at 15 Mbps. The Advanced Encryption Standard (AES) is also supported by Cisco IOS Software. Using high-performance VPN encryption and tunneling technologies, Cisco 1711 and 1712 routers can establish secure tunnels across the Internet to the corporate network. The virtual network connection lasts only as long as it is needed, so enterprises no longer pay for idle capacity on costly leased lines. Using a Cisco 1711 or 1712 router, a VPN can scale to support up to 100 concurrent tunnels or sites in a partial or fully meshed, fully secure global communications Web.
Firewall and IDS
With an always-on broadband connection to the Internet, it is essential to protect the internal network against unwanted intrusion or malicious Internet attacks. The integrated stateful inspection firewall enables secure Internet access by internal users while defending the internal network against denial-of-service (DoS) attacks and other forms of unauthorized access.
Cisco 1711 and 1712 routers integrate robust firewall and IDS features for every perimeter of the network. The router adds greater depth and flexibility to Cisco IOS Software security solutions such as authentication and encryption with state-of-the-art security features including stateful, application-based filtering, Context-Based Access Control (CBAC), DoS protection, dynamic per-user authentication and authorization, defense against network attacks, Java blocking, and real-time alerts.
Advanced Security
Advanced security features supported on the Cisco 1711 and 1712 routers include Cisco Easy VPN Server and Cisco Easy VPN Remote, Cisco Security Device Manager (SDM), Cisco AutoSecure, and Firewall Websense URL Filtering.
Cisco Easy VPN software allows simple deployment and management of VPNs. Using the Cisco Easy VPN Server feature with the hardware encryption module, routers can establish VPNs initiated by remote workers running VPN client software on PCs. This functionality helps businesses increase productivity by empowering employees to access information and applications at any time. Additionally, using the Easy VPN Remote feature, enterprise customers can configure site-to-site VPNs with security policies pushed from corporate headquarters to enterprise small branch offices, reducing IT supports costs.
With the Cisco IOS AutoSecure feature a single Cisco IOS Software command can disable common IP services that can be exploited for network attacks and can enable IP services and features that can aid in the defense of a network when under attack. This feature also simplifies the security configuration of a router and hardens the router configuration.
The Firewall Websense URL Filtering feature enables the Cisco IOS Firewall to interact with Websense URL filtering software, allowing it to prevent users from accessing specified Websites on the basis of some security policy. The Cisco IOS Firewall works with the Websense server to know whether a particular URL should be allowed or denied (blocked).
Advanced QoS
Cisco QoS features maximize network performance levels and help businesses reduce WAN access costs by classifying application data, giving the most important applications priority use of the WAN line. The Cisco 1711 and 1712 routers come standard with a complete suite of advanced QoS features such as the Resource Reservation Protocol (RSVP), Weighted Fair Queuing (WFQ), and IP Precedence and many others. Features such as committed access rate (CAR); policy routing, low-latency queuing (LLQ), generic traffic shaping (GTS), Frame Relay traffic shaping (FRTS), and RSVP also help allocate WAN bandwidth for improved performance.
Superior Management
Cisco 1711 and 1712 routers offer superior management applications and ease-of-installation tools including Cisco SDM, CiscoWorks, CiscoView, and CiscoWorks Small Network Management Solution (SNMS).
The Cisco SDM is an intuitive, Web-based device management tool embedded within the Cisco IOS Software access routers. SDM simplifies router and security configuration through smart wizards to enable customers to quickly and easily deploy, configure and monitor a Cisco access router without requiring knowledge of Cisco IOS Software CLI.
Cisco SDM provides innovative ease-of-use features to enable quick deployment of security services (firewall, VPN, and Network Address Translation [NAT] for example.) on Cisco 1711 and 1712 routers. Cisco SDM's intelligent wizards guide users step-by-step to configure LAN and WAN interfaces, firewall, and VPNs. Additionally, Cisco SDM wizards can automatically detect incorrect security configurations and propose fixes, such as allowing Dynamic Host Control Protocol (DHCP) traffic through a firewall if the WAN interface is DHCP-addressed.
Another innovative feature in Cisco SDM is Security Audit (Figure 4). This functionality allows the user to create a security audit report of their existing router configuration and then lock-down the router configuration based on ICSA Labs and Cisco Technical Assistance Center (TAC) recommended configuration through a single click. Cisco SDM is flexible in its design to improve the productivity of users not familiar with Cisco IOS Software CLI through intelligent wizards, and to help the expert Cisco IOS Software users to quickly fine tune the standard firewall and VPN configuration generated by the wizards to be more site specific. Cisco SDM has a Cisco IOS Software CLI preview mode for expert users to review all the configurations generated by Cisco SDM in Cisco IOS Software CLI format.
CiscoWorks, the industry-leading Web-based network management suite, provides the ability to remotely configure, administer, monitor, and troubleshoot the Cisco 1711 and 1712 routers, and also increases visibility into network behavior by quickly identifying performance bottlenecks and long-term performance trends. CiscoWorks provides sophisticated configuration tools to optimize bandwidth and usage across expensive and critical WAN links in the network.
CiscoWorks SNMS is a comprehensive, Web-based network management solution that provides a powerful set of monitoring, configuration, and management tools to simplify the administration of small and medium-sized business networks and workgroups that contain up to 20 Cisco internetworking products (switches, routers, hubs, and access servers).
CiscoWorks VPN/Security Management Solution (VMS), an integral part of the SAFE Blueprint for network security, combines Web-based tools for configuring, monitoring, and troubleshooting enterprise VPNs, firewalls, and network and host-based IDS. CiscoWorks VMS delivers the industry's first robust and scalable foundation and feature set that addresses the needs of small and large-scale VPN and security deployments.
ISDN to ADSL Migration
The Cisco 1712 Router provides businesses a cost-effective migration path from ISDN to ADSL services. In many countries where ISDN is already a popular WAN access technology, ADSL for WAN access is being increasingly adopted. The Cisco 1712 Router allows customers to deploy ISDN access initially while providing a migration path to ADSL when the service becomes available, without purchasing a new router.
Product Specifications
Figure 4:
Rear view of the Cisco 1711 and 1712
Physical Interfaces/Ports
Four 10/100BASE-TX autosensing Fast Ethernet switched ports
•
RJ-45 jacks
•
•
•
•
One ISDN BRI port on the Cisco 1712 Router
•
•
•
One analog modem port on the Cisco 1711 Router
•
•
•
•
One 10/100BASE-TX Fast Ethernet WAN port (RJ-45)
•
•
One auxiliary port
•
•
One console port
•
•
Performance Summary
•
•
•
•
Memory
Flash memory
•
•
DRAM memory
•
•
Dimensions and Weight
•
•
•
•
Power
•
•
•
•
Environmental
•
•
•
Safety
Certifications
•
•
•
•
•
•
•
•
EMI
Classifications
•
•
•
•
•
•
Immunity
Standards
•
•
•
•
•
•
•
•
Network Homologation
Standards
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
The Cisco 1700 Series, including the Cisco 1711/1712 routers, is in compliance with the requirements of these countries for distribution. The Cisco 1700 Series conforms to safety, EMI, immunity, and network homologation standards. Details can be obtained through your Cisco reseller or account manager.
Service and Support
Technical Support Services for Cisco 1711 and 1712 routers are available through Cisco SMARTnet®™ and Cisco SMARTnet Onsite service programs. Cisco SMARTnet support augments the resources of your operations staff; it provides them access to a wealth of expertise, both on line and via telephone, the ability to refresh their system software at will, and a range of hardware Advance Replacement options.
Cisco SMARTnet Onsite provides all Cisco SMARTnet services and complements the hardware Advance-Replacement feature by adding the services of a field engineer, offering support that can be critical for those locations where staffing is insufficient or unavailable to perform parts-replacement activities. Table 3 lists features and benefits of Cisco SMARTnet support.
