Introduction to Cisco series ISR 1100 SDWAN router

Today I am going to talk about the newly launched Cisco ISR 1100 router. Cisco ISR 1100 router is an IOS-XE based router with internet access, comprehensive security and wireless services integrated. If we talk about the Wireless services it is LTE advanced 3.0 Wireless capabilities, 802.11ac wireless support.

With more employers accessing networks, an unsafe branch can be defenceless to attack. And as hackers become more talented, your network needs wide-ranging protection. In tally to security challenges, establishing and handling user access from different devices can place new loads on IT. 

Fig 1.1- Cisco ISR 1100 SDWAN router

Your clients want the expediency of wireless access and public clouds collective with vigorous security that doesn’t negotiate their overall experience. To meet the needs of clients in this environment, your network should offer:

• Simplified network management: As your organization demands more from its network, IT must make the most of limited resources. By centralizing network functions, IT can devote more time to innovation.
• Increased security: Hackers are using more sophisticated techniques. With a rise in network breaches and intrusions, your network may be susceptible to attack. Blocking malware and phishing attacks is essential.
• Reduced TCO: For your organization to get the most out of its network investment, it is important to establish long-term value. Saving on operating expenses with features such as pay-as-you-grow licenses can enhance your ROI.

Cisco ISR 1100 series routers are basically deployed in the branch and the remote sites which are relatively small. It gives you the high performance to take advantage of broadband network speeds while running secure, concurrent data, voice, video, and wireless services.

The first Cisco router which supports SD-WAN Viptela features. Although Cisco already integrates the Viptela SDWAN features in Cisco ISR4k and ASR 1k. You can use Cisco ISR 1100 router as SDWAN router for the remote or the branch locations.

With the help of Cisco ISR 1100 you can get Network perimeter security with integrated application inspection firewall. It can support IPsec, 3DES, and AES encryption. It can also support the VPN services like DMVPN, FlexVPN and GETVPN. Supports WLAN services without requiring a wireless LAN controller

Hardware Description

• Provides up to 10 built-in 10/100/1000 Ethernet ports for WAN or LAN (1100-8P: 2 WAN and 8 LAN ports, 1100-4P: 2 WAN and 4 LAN ports, 1101-4P: 1WAN and 4 LAN ports, and 1109-2P M2M: 1 WAN and 2 LAN ports)
• All 1100-8P and 1100-4P platforms model have one 10/100/1000 Ethernet port that can support Small Form-Factor Pluggable (SFP)-based connectivity in addition to RJ-45 connections, enabling fiber or copper connectivity.

Protocol Support

IPv4, IPv6, static routes, RIPv1 ,RIPv2, OSPF, EIGRP, BGP, BGP Router Reflector, IS-IS, IGMPv3, PIM SM, PIM SSM, RSVP, CDP, ERSPAN, IPSLA, Call Home, Cisco IOS EEM, Internet Key Exchange (IKE), ACLs, Ethernet Virtual Connections (EVC), DHCP, Frame Relay (FR), DNS, LISP, HSRP.

Security Protocols

RADIUS, Authentication, Authorization, and Accounting (AAA), Application Visibility and Control (AVC), Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multicast, Multiprotocol Label Switching (MPLS), Layer 2 and Layer 3 VPN, IPsec, Layer 2 Tunneling Protocol Version 3 (L2TPv3), Bidirectional Forwarding Detection (BFD), IEEE 802.1ag, and IEEE 802.3ah.

Encapsulations

GRE, Ethernet, 802.1q VLAN, PPP, Multilink Point-to-Point Protocol (MLPPP), Frame Relay, Multilink Frame Relay (MLFR) (FR.15 and FR.16), HDLC, Serial (RS-232, RS-449, X.21, V.35, and EIA-530), and PPPoE

Traffic management

Qos, CBWFQ, WRED, Hierarchical QoS, PBR, PfR, and Network-Based Application Recognition (NBAR).

Cryptographic algorithms

Encryption: DES, 3DES, AES-128 or AES-256 (in CBC and GCM modes).

Authentication: RSA, ECDSA; Integrity: MD5, SHA, SHA-256, SHA-384, SHA-512.