Which among the followin Incident Response technology provides statistics on packets flowing through a Cisco router or multilayer switch?
Product overview Show
Cisco ASR 1000 Series Aggregation Services Routers provide a Software Defined WAN platform that aggregates multiple WAN connections and network services including encryption and traffic management, and forward them across WAN connections at line speeds from 2.5 to 200 Gbps. The routers contain both hardware and software redundancy in an industry-leading high-availability design. The latest additions to the Cisco ASR 1000 Series are the Cisco ASR 1002-HX Router and the Cisco ASR 1001-HX Router. Both new routers support up to 100 Gbps in a 2-Rack-Unit (2RU) and 60 Gbps in a 1-Rack-Unit (1RU) form factor, respectively. The ASR 1002-HX has 8 built-in 10 Gigabit Ethernet (GE) ports and 8 1 GE ports, with the Ethernet Port Adapter (EPA) slot for expansion. The ASR 1001-HX has 4 built-in 10 GE ports, 8 1 GE ports, and 4 configurable 10 GE or 1 GE ports. The Cisco ASR 1000 Series Route Processor 3 is the newest addition to the modular control plane engines in the Cisco ASR 1000 Series. The Route Processor 3 adds more options for higher performance, memory, and storage to the ASR 1000 Series. The Cisco ASR 1000 Series supports Cisco IOS XE Software, a modular operating system with modular packaging, feature velocity, and powerful resiliency. The Cisco ASR 1000 Series Embedded Services Processors (ESPs), which are based on Cisco Flow Processor technology, accelerate many advanced features such as crypto-based access security; Network Address Translation (NAT), thread defense with Cisco Zone-Based Firewall (ZBFW), Deep Packet Inspection (DPI), Cisco Unified Border Element (CUBE), and a diverse set of Data-Center-Interconnect (DCI) features. These services are implemented in Cisco IOS XE Software without the need for additional hardware support. Cisco ASR 1000 Series routers sit at the edge of your enterprise data center or large office connecting to the WAN, as well as in service provider Points Of Presence (POPs). The Cisco ASR 1000 Series will benefit the following types of customers: ● Enterprises experiencing explosive network traffic as mobility, cloud networking, and video and collaboration usage increase: Cisco ASRs consolidate these various traffic streams and apply traffic management and redundancy properties to them to maintain consistent performance among enterprise sites and cloud locations. ● Network service providers needing to deliver high-performance services, such as DCI and branch-office server aggregation, to business customers: Service providers can also use the multiservice routers to deploy hosted and managed services to business and multimedia services to residential customers. ● Existing Cisco 7200 Series Router (end-of-sale) customers looking for simple migration to a new multiservice platform that delivers greater performance with the same design. Features and benefits The Cisco ASR 1000 Series Routers carry a modular yet integrated design, so network operators can increase their network capacity and services without a hardware upgrade. With flexibility in the number of connections, speed maximums, and price, you don’t have to under- or overprovision for any network location. Alternatively, you also have the option to buy “-X” and “-HX” models, so you can increase throughput by simply purchasing upgrade licenses as you grow to increase your network speed dynamically. Cisco Software-Defined WAN Cisco SD-WAN can be enabled on the Cisco ASR 1000 series platforms with IOS-XE. Cisco SD-WAN offers an entirely new way to manage and operate your WAN infrastructure. Cisco SD-WAN is a cloud delivered architecture that offers secure, flexible and rich services with the following key benefits: ● Better user experience: The ability to deploy applications in minutes, on any platform, with a consistent user experience. Deliver predictable performance for applications residing in the data center or in the cloud. ● Greater agility: Faster, easier deployment and operation of your WAN, and get faster performance using less bandwidth. Add new revenue generating services in minutes not months. ● Advanced threat protection: Securely connect your users to applications in minutes and protect your data from the WAN edge to the cloud. Secure segmentation for critical assets and multi-layer, robust security that encrypts all data. SD-WAN Integrated Security In order to efficiently connect to multiple cloud infrastructures many enterprise customers want to build an SD-WAN infrastructure that uses Direct Internet Access (DIA). This can save costs and reduce complexity by reducing WAN traffic backhauled to your data centers; however connecting branches directly to the internet without the right security controls exposes your network to threats and vulnerabilities. With Cisco SD-WAN and the ASR 1000 series platforms, you have integrated security built-right-in for branch DIA security with these integrated security capabilities: ● Application aware enterprise firewall ● DNS layer enforcement (Umbrella) And with Cisco SD-WAN security integration you will reduce complexity by having a single management interface (vManage) for both the network and security. For more info on Cisco SD-WAN and vManage see: https://www.cisco.com/go/sd-wan. Application visibility Applications and users are more distributed than ever, and the internet has effectively become the new enterprise WAN. As organizations continue to embrace internet, cloud, and SaaS, network and IT teams are challenged to deliver consistent and reliable connectivity and application performance over networks and services they don’t own or directly control. The ASR 1000 Series Routers are integrated with Cisco ThousandEyes internet and cloud intelligence. IT managers now have expanded visibility, including hop-by-hop analytics, into network underlay, proactive monitoring of SD-WAN overlay, and performance measurement of SaaS applications. This granular visibility ultimately lowers the Mean Time to Identification of Issues (MTTI) and accelerates resolution time. Unified access security and multi-factor authentication The Zero trust security model allows secure connections to all applications (whether on premises or in the cloud) based on the trustworthiness of users and devices. Table 1 summarizes the features and benefits of the Cisco ASR 1000 Series Routers. Table 1. Features and benefits of Cisco ASR 1000 Series Routers
Product portfolio The Cisco ASR 1000 Series contains 8 models with varying types of I/O connectivity and slots and different maximum throughput rates (Figure 1). All models use the innovative and powerful Cisco Flow Processor and support the same feature set based on the Cisco IOS XE Operating System. All this commonality simplifies management and operations. ● Cisco ASR 1001-X Router (Figure 2) ● Cisco ASR 1002-X Router ● Cisco ASR 1001-HX Router (Figure 3) ● Cisco ASR 1002-HX Router (Figure 4) ● Cisco ASR 1004 Router ● Cisco ASR 1006 Router ● Cisco ASR 1006-X Router ● Cisco ASR 1009-X Router ● Cisco ASR 1013 Router Figure 1. Cisco ASR 1000 Series Aggregation Services Routers Figure 2. Cisco ASR 1001-X Router Figure 3. Cisco ASR 1001-HX Router Figure 4. Cisco ASR 1002-HX Router Software licensing Software subscription through Cisco DNA Licensing The ASR 1000 series supports software based subscription using Cisco DNA based licensing. Two Cisco DNA based software subscription licenses are available for the WAN portfolio: Cisco DNA Advantage and Cisco DNA Premier allowing customers to have a single unified solution that spans across the ASR 1000 series routers and its ISR 1000 and ISR 4000 counterparts. The license tiers are structured to support the growth in business needs enabling the customer to move from basic functionality at branch to full-functionality with the Cisco DNA Advantage and expanding that to include WAN Optimization and Analytics on the Cisco DNA Premier. This provides complete flexibility to move the same license across end-points based on growing network and security requirements, growth in bandwidth based on user and application growth at the sites as also the ability to change the management of the platform from on-prem to cloud or vice-versa. Cisco DNA Licenses are supported for ASR 1000 platforms using the Cisco DNA Center, the controller and analytics platform at the heart of Cisco’s intent-based network. For more information on the Cisco DNA Center and supported platforms, please refer to https://www.cisco.com/site/us/en/products/networking/dna-center-platform/index.html. Cisco Smart Licensing Cisco Smart Licensing is a flexible licensing model that provides you with an easier, faster, and more consistent way to purchase and manage software across the Cisco portfolio and across your organization. And it’s secure – you control what users can access. With Smart Licensing you get: ● Easy Activation: Smart Licensing establishes a pool of software licenses that can be used across the entire organization—no more PAKs (Product Activation Keys). ● Unified Management: My Cisco Entitlements (MCE) provides a complete view into all of your Cisco products and services in an easy-to-use portal, so you always know what you have and what you are using. ● License Flexibility: Your software is not node-locked to your hardware, so you can easily use and transfer licenses as needed. To use Smart Licensing, you must first set up a Smart Account on Cisco Software Central (software.cisco.com). For a more detailed overview on Cisco Licensing, go to cisco.com/go/licensingguide. Cisco ThousandEyes A valid ThousandEyes agent license is required to activate the ThousandEyes agent. Existing ThousandEyes subscriptions can be leveraged on eligible ASR 1000 Series Routers. Additional ThousandEyes subscription information can be found here. Cisco ONE Software Cisco ONE™ Software offers a valuable and flexible way to buy software for the WAN, access, and data center domains. At each stage in the product lifecycle, Cisco ONE Software helps make buying, managing, and upgrading your network and infrastructure software easier. Cisco ONE Software provides: ● Flexible licensing models to smoothly distribute customers’ software spending over time ● Investment protection for software purchases through software services–enabled license portability ● Access to updates, upgrades, and new technology from Cisco through Cisco Software Support Services (SWSS) Cisco ONE for WAN gives organizations broad capabilities for branch offices and the enterprise edge. Cisco ONE Foundation for WAN connects and secures your branch office while optimizing for cost. Cisco ONE WAN Collaboration integrates voice and video into your branch office and network edge. Software feature licenses are required to activate services on Cisco ASR 1000 Series Routers. Currently, two types of feature licenses are available. Certain services require only a Right-To-Use (RTU) license, whereas other services require both an RTU license and one or more number-of-sessions licenses. All the licenses on the Cisco ASR 1000 Series are honor-based, meaning that the licenses are not enforced through a product activation or license key. For Cisco ASR 1000 Routers, one of the following five packages is required: ● Cisco ASR 1000 IOS XE UNIVERSAL - NO PAYLOAD ENCRYPTION ● Cisco ASR 1000 IOS XE UNIVERSAL ● Cisco ASR 1000 IOS XE UNIVERSAL WITHOUT Lawful Intercept ● Cisco ASR 1000 IOS XE UNIVERSAL - NO PAYLOAD ENCRYPTION WITHOUT Lawful Intercept To enable a set of required features, one of the following three technology packages is required: ◦ Cisco ASR 1000 IP Base License ◦ Cisco ASR 1000 Advanced IP Services License ◦ Cisco ASR 1000 Advanced Services License Table 2. ThousandEyes requirements
Cisco ASR 1000 Series use cases Tables 3 and 4 describe enterprise and service provider application examples, respectively. Table 3. Cisco ASR 1000 Series Enterprise Applications
Table 4. Cisco ASR 1000 Series service provider applications
Product specifications Table 5 compares the different Cisco ASR 1000 Series Routers, and Table 6 compares the different processor module specifications. For comparisons of Cisco ASR ESPs, refer to the ESP datasheet. For comparisons of the ASR route processors, refer to the RP datasheet. For comparisons of the SPAs and SPA interface processors, refer to the SPA/SIP datasheet. Table 5. Cisco ASR 1000 Series: Chassis comparison and specifications
Table 6. Cisco ASR 1000 Series processor module comparison and specifications
Ordering information Cisco ONE Software for WAN is available for the ASR 1000 Series. Cisco ONE Software offers a complete solution that delivers an optimal experience over any connection while helping you get the most from your WAN investment with secure, fault-tolerant connectivity. Benefits: ● Connect branch offices and your campus securely at an optimal cost by improving application performance through application protocol acceleration and optimization techniques that offload the WAN. ● Integrate voice and video across branch offices and your campus to increase productivity. For ordering information for Cisco ONE Software for the ASR 1000 Series, go to https://www.cisco.com/c/en/us/products/software/one-wan/wan-part-numbers.html. Product sustainability Information about Cisco’s Environmental, Social and Governance (ESG) initiatives and performance is provided in Cisco’s CSR and sustainability reporting Table 7. Cisco environmental sustainability information Support for Cisco Software-Defined WAN The ASR 1000 series is optimized for Cisco Software Defined WAN (SD-WAN). For enterprises, this means that business critical applications run faster, with more reliability and reduced Operational Expenditure (OpEx). Cisco SD-WAN achieves this by making all branches and Data Centers have the ability to monitor, control, move and report on streams of application data such as specific web (HTTP) traffic for example. The ASR 1000 series has deep packet inspection capability and can accurately identify and control thousands of different applications including custom in-house enterprise applications. The entire SD-WAN implementation on the ASR 1000 is implemented by managing the end device either from the Cloud or On-Premise through ascending levels of throughput based licenses. All licenses that support Cisco SD-WAN, whether On-Premise or on Cloud are all enabled using Subscription Licenses. These subscription licenses enable all customers to seamlessly transition between On-Premise and Cloud management as needed. The license tiers are structured to support the growth in business needs through simple subscriptions that help simplify the journey to intent-based networking for the WAN. Cisco SD-WAN subscriptions are aligned across three subscription licenses of Cisco DNA Essentials, Cisco DNA Advantage and Cisco DNA Premier, each expanding functionally. The Cisco DNA Essentials on ISR 1000 and ISR 4000 covers all types of connectivity and router life cycle management, support for Network and application visibility coupled with basic premise and transport security. ASR 1000 series support two Cisco DNA tiers, Cisco DNA Advantage and Cisco DNA Premier. The Cisco DNA Advantage provides for Advanced WAN topologies, Application aware policies supported by enhanced network security. The Cisco DNA Premier provides for Cloud connectivity with unlimited segmentation, Advanced Application optimization and Network Analytics, secured by advanced threat protection. For more information on Cisco SD-WAN please refer to https://www.cisco.com/c/en/us/products/software/one-wan-subscription/index.html. To place an order, visit the Cisco Commerce Workspace. To get started with the Cisco ASR 1000 Series, refer to the detailed product part numbers and descriptions in the following tables: ● Table 8: Chassis ● Table 9: Processor Modules ● Table 10: Interfaces and Modules For software image, feature and upgrade license, and more details about the Cisco ASR 1000 Series bundles and how to order the Cisco ASR 1000 Series, refer to the Cisco ASR 1000 Ordering Guide. Table 8. Ordering Information for Cisco ASR 1000 Series Chassis
Table 9. Ordering information for processor modules
Table 10. Ordering information for interfaces and modules
Upgrade paths Cisco ASR 1000 Series Routers are included in the standard Cisco Technology Migration Program. Refer to https://www.cisco.com/go/tmp and contact your local Cisco account representative for program details. Cisco Services. Cisco Services make networks, applications, and the people who use them work better together. Cisco and our certified partners can help make your enterprise WAN edge deployment a success with a broad portfolio of services based on proven methodologies. We can help you establish a secure, resilient WAN architecture and successfully integrate security and Cisco Unified Communications technologies with bandwidth to support video, collaboration, branch-office solutions, and growth in alignment with your business goals. The Cisco Lifecycle approach to services defines the requisite activities at each phase of the solution lifecycle. Planning and design services expedite solution adoption. Award-winning technical support increases operational efficiency. Optimization services improve performance, resiliency, stability, and predictability and prepare your network and teams for change. For more information, please visit https://www.cisco.com/go/services. Cisco Capital Flexible payment solutions to help you achieve your objectives Cisco Capitalmakes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more. For more information For more information about the Cisco ASR 1000 Series, visit https://www.cisco.com/go/asr1000 or contact your local Cisco account representative. For information about the Cisco ASR 1000 Series bundles, refer to the Cisco ASR 1000 Ordering Guide. Document history Table 11. Document history
Which monitoring technology mirrors traffic flowing through a switch to an analysis device connected to another switch port?What Is Port Mirroring? Port mirroring is used on a network switch or a router to send a copy of network packets seen on the specified ports (source ports) to other specified ports (destination ports). With port mirroring enables, the packets can be monitored and analyzed.
What networking tool can be used to copy packets moving through one port and send those copies to another port for analysis?SPAN [Switch Port Analyzer]
Port Mirroring also known as SPAN (Switch Port Analyzer), are designated ports on a network appliance (switch), that are programmed to send a copy of network packets seen on one port (or an entire VLAN) to another port, where the packets can be analyzed.
Which statement describes statistical data in network security monitoring process?Which statement describes statistical data in network security monitoring processes? It contains conversations between network hosts. It lists each alert message along with statistical information. It shows the results of network activities between network hosts.
Which two services are provided by the NetFlow tool choose two?Explanation: NetFlow efficiently provides an important set of services for IP applications including network traffic accounting, usage-based network billing, network planning, security, denial of service monitoring capabilities, and network monitoring.
|