- หน้าหลัก
- Router (เราเตอร์)
- Cisco ISR 4000 | ISR4331-SEC/K9 ISR 4331, 3 onboard GE, 2 NIM slots, 1 ISC slot, 1 SM slots, 4GB Flash, 4GB DRAM, Advanced Security
มีบริการอุปกรณ์สำรองระหว่างซ่อมและ Onsite Services ตลอด 24 ชั่วโมง 365 วัน (ข้อมูลเพิ่มเติม คลิก...)
Cisco ISR 4000 | ISR4331-SEC/K9 ISR 4331, 3 onboard GE, 2 NIM slots, 1 ISC slot, 1 SM slots, 4GB Flash, 4GB DRAM, Advanced Security
Band: | Cisco |
Type: | Router |
Model: | ISR 4000 |
Part Number: | ISR4331-SEC/K9 |
Features: | Security (SEC) |
Detail: | ISR4331-SEC/K9 | ISR 4331, 3 onboard GE, 2 NIM slots, 1 ISC slot, 1 SM slots, 4GB Flash, 4GB DRAM, Advanced Security |
บทความที่เกี่ยวข้อง
- Cisco MA แบบ SMB Support (CON-SMBS) คืออะไร
- Engineer Services
- Pre-Sale Services
- ตั้งค่า COM port เพื่อ Config Cisco
- เครื่องคอมใช้ COM port อะไรตั้งค่า Cisco
- ตั้งค่า Cisco Console (Serial port) สำหรับ Config ด้วย Putty
- วิธี Download Cisco Firmware, IOS
- ติดตั้ง และตั้งค่า TFTP Server สำหรับ Cisco
- การรับประกัน
- การจัดส่ง
- การชำระเงิน
- ขั้นตอนขอเปลี่ยนอุปกรณ์ เพื่อทดแทนอุปกรณ์ที่เสีย (Hardware Replacement)
- ขั้นตอนการสมัคร CCO id
- Cisco SMARTnet vs SMBS
- Cisco DOA Warranty 90 วัน คืออะไร
Features and benefits
Cisco 4000 Family ISRs provide you with Cisco® Software Defined WAN (SDWAN) software features and a converged branch infrastructure. Along with superior throughput, these capabilities form the building blocks of next-generation branch-office WAN solutions.
Cisco Software Defined WAN
Cisco SDWAN is a set of intelligent software services that allow you to reliably and securely connect users, devices, and branch office locations across a diverse set of WAN transport links. SDWAN-enabled routers like the ISR 4000 dynamically route traffic across the “best” link based on up-to-the-minute application and network conditions for great application experiences. You get tight control over application performance, bandwidth usage, data privacy, and availability of your WAN links - control that you need as your branches conduct greater volumes of mission-critical business.
Cisco converged branch infrastructure
The Cisco 4000 Series ISRs consolidate many must-have IT functions, including network, compute, and storage resources. The high-performance, integrated routers run multiple concurrent services, including encryption, traffic management, and WAN optimization, without slowing your data throughput. And you can activate new services on demand through a simple licensing change.
Cisco intent based networking and digital network architecture (Cisco DNA)
The last few years has seen a rapid transformation and adoption of digital technologies. This puts pressure on the on the Network teams supporting this changing infrastructure - especially when provisioning, managing, monitoring and troubleshooting these diverse devices. Additionally innovations such as Software Defined WAN (SDWAN), Network Function Virtualization (NFV), Open APIs and Cloud Management show great promise in transforming Organizations IT networks. This transformation raises further questions and challenges for the IT teams.
The Cisco Digital Network Architecture (Cisco DNA) is an open, extensible, software-driven architecture that provides for faster innovation, helping to generate deeper insights, and deliver exceptional experiences across many different applications. Cisco DNA relies on intent-based networking, a revolutionary approach in networking that helps organizations automate, simplify, and secure the network.
The intent-based Cisco DNA network is:
● Informed by Context: Interprets every byte of data that flows across it, resulting in better security, more customized experiences, and faster operations.
● Powered by Intent: Translates your intent into the right network configuration, making it possible to manage and provision multiple devices and things in minutes.
● Driven by Intuition: Continually learns from the massive amounts of data flowing through it and turns that data into actionable insight. Helps you solve issues before they become problems and learn from every incident.
Cisco DNA Center provides a centralized management dashboard across your entire network — the branch, campus, data center, and cloud. Rather than relying on box-by-box management, you can design, provision, and set policy end-to-end from the single Cisco DNA Center interface. This allows you to respond to organizational needs faster and to simplify day-to-day operations. Cisco DNA Analytics and Assurance and Cisco Network Data Platform (NDP) help you get the most from your network by continuously collecting and putting insights into action. Cisco DNA is open, extensible, and programmable at every layer. It integrates Cisco and third-party technology, open APIs, and a developer platform, to support a rich ecosystem of network-enabled applications.
Cisco 4000 Family ISR general feature highlights
Business Requirement(s) |
Feature/Solution |
Performance ● Throughput
● Service reliability
|
● Concurrent software services at speeds up to 2 Gbps. Backplane architecture supports high-bandwidth module-to-module communication at speeds up to 10 Gbps.
● A distributed multicore architecture with the industry’s first internal services plane.
● Remote installation of application-aware services, which run identically to their counterparts in dedicated appliances.
|
Lower WAN expenditures |
● Embedded SDWAN solution for creating lower-cost, business-class Internet connections.
|
Pay-as-you-grow ● Performance upgrade model
● Investment protection
● CapEx budget management
|
● Router capacity can be increased with a remote performance-on-demand license upgrade (no hardware upgrade) for exceptional savings.
|
Superior and secure user application experiences |
● ISR-AX “Application Experience” software bundle with advanced routing and network monitoring services.
● Dynamic Multipoint VPN (DMVPN), zone-based firewalls, Intrusion Prevention (Snort & Umbrella Branch) and Content Management using Cisco Cloud Web security & OpenDNS protecting data, providing authentication credentials, and transmissions not backhauled through the data center.
● Secure boot feature performs hardware-based authentication of the bootloader software to prevent malicious or unintended software from booting on the system.
● Code signing verifies digital signatures of executables prior to loading to prevent execution of altered or corrupted code.
● Hardware authentication protects against hardware counterfeiting by using an on-board tamper-proof silicon, including field replaceable modules. If authentication fails, the module is not allowed to boot.
|
IT consolidation, space savings, and improved Total Cost of Ownership (TCO) |
● Single converged branch platform integrates routing, switching, virtual server, storage, security, unified communications, WAN optimization, and performance management tools.
|
Business continuity and increased resiliency |
● ISR 4400 Series models (4461, 4451, and 4431 ISRs) support dual integrated power supplies for backup. The entire ISR 4000 Family supports optional power supply capable of delivering additional PoE power to endpoints.
● Modular network interfaces with diverse connection options for load-balancing and network resiliency.
● Modular interfaces with online removal and insertion (OIR) for module upgrades without network disruption.
● Cisco Unified Survivable Remote Site Telephony (SRST), which serves as a resiliency complement to Cisco Hosted Collaboration Solution (HCS), a Cisco cloud-based UC service.
● Support for multiple, diverse access links: T1/E1, T3/E3, Serial, xDSL, Gigabit and Ten-Gigabit Ethernet.
|
Lower telephony costs with VoIP and rich media experiences |
● High-performance analog/digital gateway, allowing VoIP over less expensive Session Initiation Protocol (SIP) trunks.
● Integrated IP PBX ( Cisco Unified Communications Express) and Session Border Controller ( Cisco Unified Border Element, or CUBE).
|
Easier manageability and support |
● Single, universal software image for all features and performance-on-demand licensing flexibility.
● No additional services and support needed for compute and storage.
● Supported by Cisco and third-party management tools, with programmability and automation.
|
Architectural highlights
Architectural Features |
Benefits/Description |
Multicore processors |
● High-performance multicore processors support high-speed WAN connections. The data plane uses an emulated Flow Processor (FP) that delivers Application-Specific Integrated Circuit (ASIC)-like performance that does not degrade as services are added.
|
Embedded IP Security (IPsec) VPN hardware acceleration |
● Increases scalability. When combined with an optional Cisco IOS XE Software Security license, enables WAN link security and VPN services.
|
Integrated Gigabit Ethernet ports |
● The Cisco 4000 Family provides up to four built-in 10/100/1000 Ethernet ports for WAN or LAN.
● Based on the platform, some of the 10/100/1000 Ethernet ports can support Small Form-Factor Pluggable (SFP)-based connectivity in addition to RJ-45 connections, enabling fiber or copper connectivity.
● Optionally, depending on the platform, up to 30W PoE+ can be enabled on two of the built-in front panel Gigabit Ethernet interfaces to provide power to external devices such as fourth-generation (4G) LTE routers.
|
USB-based console access |
● A mini type-B USB console port 1 supports management connectivity when traditional serial ports are not available.
● Traditional console and auxiliary ports are also available.
|
Optional integrated power supply for distribution of PoE |
● An optional upgrade to the internal power supply provides inline power (802.3af-compliant PoE or 802.3at-compliant PoE+) to optional integrated switch modules.
● Redundant PoE conversion modules provide an additional layer of fault tolerance.
|
Optional integrated Redundant Power Supply (RPS) |
● For the ISR 4400 Series, power redundancy is available by installing an optional integrated RPS for decreasing network downtime and protecting the network from power failures.
● Optional PoE boost mode increases total PoE capacity to up to 1000W.
|
Cisco Enhanced Services Module (SM-X) |
● Each service-module slot offers high data-throughput capability of up to 10 Gbps toward the system and up to 1 Gbps to other module slots.
● Support for both single- and double-wide service modules provides flexibility in deployment options.
● An SM-X slot can be converted into a Network Interface Module (NIM) slot using an optional carrier card.
● Service modules support Online Insertion and Removal (OIR), avoiding network disruption when installing new or replacement modules.
|
● Up to three integrated NIM slots on the Cisco 4000 Family allow for flexible configurations.
● Each NIM slot offers options of up to two 2Gbps connections. One towards the route processor and one for direct module to module communication. The ISR 4221 has only one 1Gbps connection to the Route Processor
● NIMs support OIR.
● Special NIMs add support Solid-State Drives (SSDs) and Hard Disk Drives (HDDs).
|
|
Cisco Integrated Services Card (ISC) slot on motherboard |
● Integrated Services Card natively supports the new Cisco High-Density Packet Voice Digital Signal Processor Modules (PVDM4s), providing greater-density rich-media voice.
● Each Integrated Services Card slot connects to the system architecture through an up-to 2-Gbps link.
● Future modules can be hosted on the Integrated Services Card slot, improving system functions.
|
Flash memory support |
● A single flash memory slot is available to support high-speed storage densities, upgradable to up to 32 GB. The ISR4221 ships with a fixed 8GB Flash
● Two USB type A 2.0 ports provide capabilities for convenient storage.
|
DRAM |
● For the ISR 4400 Series, the default control-plane memory is 4 GB, upgradable to 16 GB to provide additional scalability for control-plane features. The default data-plane memory is 2 GB.
● For the ISR 4300 Series, the default memory is 4 GB, upgradable to 16 GB (only 8GB for 4321) to provide additional scalability.
● The ISR 4200 Series comes with 4GB Fixed DRAM
|
Cisco DNA Center
Operational Phase |
Application |
Description |
Device staging and configuration |
WebUI |
● A GUI-based device-management tool for Cisco IOS and Cisco IOS XE Software-based access routers. This tool simplifies routing, firewall, VPN, unified communications, and WAN and LAN configuration through easy-to-use wizards.
|
Network-wide deployment, configuration, monitoring, and troubleshooting |
Cisco Prime™ Infrastructure |
● Offers comprehensive lifecycle management of wired and wireless access, campus, and branch-office networks, rich visibility into end-user connectivity, and application performance assurance.
● Provides wired lifecycle functions such as inventory, configuration, and image management; automated deployment; compliance reporting; integrated best practices; and reporting.
|
Staging, deployment, and changes to configuration and image files |
Cisco Configuration Engine |
● A secure network management product that provides zero-touch image and configuration distribution through centralized, template-based management.
|
Context-aware security configuration and monitoring |
Cisco Prime Security Manager |
● Management tool for configuring and managing context-aware security. The application supports both single- and multi-device manager form factors.
● Provides the ability to write and enforce the granular context-aware security policies.
|
Cisco Wide Area Application Service (WAAS) management |
Cisco WAAS Central Manager |
● The management tool for the WAAS, (WAN optimization and application acceleration) integrated service. It provides a centralized mechanism for configuring WAAS features, reporting, and monitoring.
|
Cisco IOS XE Software Embedded Management Capabilities |
|
Feature |
Description |
Cisco IOS Embedded Event Manager (EEM) |
● A distributed and customized approach to event detection and recovery.
● Offers the ability to monitor events and take informational, corrective, or any desired EEM action when the monitored events occur or when a threshold is reached.
|
Cisco IOS XE IP Service-Level Agreements (IP SLAs) |
● Helps assure the performance of new business-critical IP applications as well as IP services that use data and voice in an IP network.
|
SNMP, Remote Monitoring (RMON), syslog, NetFlow, IP Flow Information Export (IPFix) |
● Network monitoring and accounting tools.
|
Specifications of Cisco 4000 Family integrated services routers
Technical Specifications |
Cisco 4461 |
Cisco 4451 |
Cisco 4431 |
Cisco 4351 |
Cisco 4331 |
Cisco 4321 |
Cisco 4221 |
Aggregate Throughput (Default) |
1.5Gbps |
1 Gbps |
500 Mbps |
200 Mbps |
100 Mbps |
50 Mbps |
35Mbps |
Aggregate Throughput (Performance License) |
3Gbps |
2 Gbps |
1 Gbps |
400 Mbps |
300 Mbps |
100 Mbps |
75 Mbps |
Aggregate CEF Only[5] Throughput (Boost License) |
Over 7Gbps |
Over 4Gbps |
Over 4Gbps |
Over 2Gbps |
Over 2Gbps |
1.5Gbps |
1.2Gbps |
Total onboard WAN or LAN 10/100/1000 ports |
4 |
4 |
4 |
3 |
3 |
2 |
2 |
Total onboard WAN or LAN 10Gbps ports |
2 |
- |
- |
- |
- |
- |
- |
RJ-45-based ports |
4 |
4 |
4 |
3 |
2 |
2 |
2 |
SFP-based ports |
4 |
4 |
4 |
3 |
2 |
1 |
1 |
Enhanced service-module slots |
3 |
2 |
0 |
2 |
1 |
0 |
0 |
Doublewide service-module slots |
2 |
1 (assumes no singlewide SM-X modules installed) |
0 |
1 (assumes no singlewide SM-X modules installed) |
0 |
0 |
0 |
NIM slots |
3 |
3 |
3 |
3 |
2 |
2 |
2 |
OIR (all I/O modules) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Onboard ISC slot |
1 |
1 |
1 |
1 |
1 |
1 |
No |
Default memory double-data-rate 3 (DDR3) error-correction-code (ECC) DRAM (Combined control/services/data planes) |
NA |
NA |
NA |
4 GB |
4 GB |
4 GB |
4GB |
Maximum memory DDR3 ECC DRAM (Combined control/services/data planes) |
NA |
NA |
NA |
16 GB |
16 GB |
8 GB |
4GB |
Default memory DDR3 ECC DRAM (data plane) |
4 GB |
2 GB |
2 GB |
NA |
NA |
NA |
NA |
Maximum memory DDR3 ECC DRAM (data plane) |
4 GB |
2 GB |
2 GB |
NA |
NA |
NA |
NA |
Default memory DDR3 ECC DRAM (control/services plane) |
8 GB |
4 GB |
4 GB |
NA |
NA |
NA |
NA |
Maximum memory DDR3 ECC DRAM (control/services plane) |
32 GB |
16 GB |
16 GB |
NA |
NA |
NA |
NA |
Default flash memory |
8 GB |
8 GB |
8 GB |
4 GB |
4 GB |
4 GB |
8GB |
Maximum flash memory |
32 GB |
32 GB |
32 GB |
16 GB |
16 GB |
8 GB |
8GB |
External USB 2.0 slots (type A) |
2 |
2 |
2 |
2 |
1 |
1 |
1 |
USB console port -type B mini (up to 115.2 kbps) |
1 |
1 |
1 |
1 |
1 |
1 |
0 |
Serial console port - RJ45 (up to 115.2 kbps) |
1 |
1 |
1 |
1 |
1 |
1 |
1 (combo CON/AUX port) |
Serial auxiliary port - RJ45 (up to 115.2 kbps) |
1 |
1 |
1 |
1 |
1 |
1 |
1 (combo CON/AUX port) |
Power-supply options |
Internal: AC, DC and PoE |
Internal: AC, DC and PoE |
Internal: AC, DC, and PoE |
Internal: AC, DC and PoE |
Internal: AC,DC and PoE |
External: AC and PoE |
External AC only |
Redundant power supply |
Internal: AC, DC and PoE |
Internal: AC, DC and PoE |
Internal: AC, DC, and PoE |
N/A |
N/A |
N/A |
NA |
MTBF (Hours) |
480770 |
480770 |
512970 |
566310 |
587250 |
593270 |
593270 |
Cisco IOS XE Software |
|||||||
Protocols |
IPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path First (OSPF), Enhanced IGRP (EIGRP), Border Gateway Protocol (BGP), BGP Router Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast sparse mode (PIM SM), PIM Source Specific Multicast (SSM), RSVP, CDP, ERSPAN, IPSLA, Call Home, EEM, IKE, ACL, EVC, DHCP, FR, DNS, LISP, OTV, HSRP, RADIUS, AAA, AVC, Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multicast, MPLS, Layer 2 and Layer 3 VPN, IP sec, Layer 2 Tunneling Protocol Version 3 (L2TPv3), Bidirectional Forwarding Detection (BFD), IEEE802.1ag, and IEEE802.3ah |
||||||
Encapsulations |
Generic routing encapsulation (GRE), Ethernet, 802.1q VLAN, Point-to-Point Protocol (PPP), Multilink Point-to-Point Protocol (MLPPP), Frame Relay, Multilink Frame Relay (MLFR) (FR.15 and FR.16), High-Level Data Link Control (HDLC), Serial (RS-232, RS-449, X.21, V.35, and EIA-530), and PPP over Ethernet (PPPoE) |
||||||
Traffic management |
QoS, Class-Based Weighted Fair Queuing (CBWFQ), Weighted Random Early Detection (WRED), Hierarchical QoS, Policy-Based Routing (PBR), Performance Routing, and NBAR. |
||||||
Cryptographic Algorithms |
Encryption: DES, 3DES, AES-128 or AES-256 (in CBC and GCM modes); Authentication: RSA (748/1024/2048 bit), ECDSA (256/384 bit); Integrity: MD5, SHA, SHA-256, SHA-384, SHA-512 |
Cisco IOS Software Licensing and Packaging
Universal IOS XE and XE-SDWAN Image
A single Cisco IOS XE Universal image encompassing all functions is delivered with the platform. Advanced features can be enabled by simply activating a software license on the Universal image. Technology packages and feature licenses, enabled through right-to-use licenses, simplify software delivery and decrease the operational costs of deploying new features.
Beginning IOS version 16.9.1, SDWAN support is provided for IOS image on the ISR4000 series router. The SDWAN features are provisioned through a separate image, the XE-SDWAN image. While the Universal IOS-XE image provides for routing features, the XE-SDWAN image provides support for OnPrem or Cloud based Software Defined WAN solutions. Unified Communications for XE-SDWAN will be supported in upcoming releases
Four major technology licenses are available on the Cisco 4000 Family and use the IOS-XE image; these licenses can be activated through the Cisco software activation process identified at https://www.cisco.com/go/sa. The following licenses are available:
● IP Base: This technology package is available as default.
● Application Experience (APPX): This license includes data and application performance features.
● Unified Communications (UC)[8]: This license includes voice features.
● Security (SEC) or Security with No Payload Encryption (SEC-NPE): This license includes features for securing network infrastructure.
Cisco ISR 4000 bundles
Cisco ISR 4000 is available is several attractive bundles. The AX bundles integrate Cisco Wide Area Application Services (WAAS), Security (SEC), and Data (DATA) licenses into a single bundle that is simple to order, configure, and deploy. For customers who are also interested in voice along with all of these features, AXV presents an attractive option. See Table 6 for details.
Cisco ISR 4000 feature bundles
Bundles |
Features |
Application Experience with Voice (AXV) |
AX + Voice |
Voice with Security (VSEC) |
Voice + Security |
Application Experience (AX) |
IP Base + Security + advanced networking protocols: L2TPv3, BFD, MPLS, VRF, VXLAN (Bandwidth <100Mbps) Application Experience: PfRv3, WAAS with AppNav, NBAR2, AVC, IP SLA Hybrid Cloud Connectivity: LISP, OTV (for Bandwidth <100Mbps), VPLS, EoMPLS Intelligent Web Caching: Akamai Connect |
Voice (V) |
IP Base + Unified Communications: CME, SRST, CUBE |
Security (SEC) |
IP Base + Advanced Security: Zone Based Firewall, IPSec VPN, EZVPN, DMVPN, FlexVPN |
Note: ISR4221/K9 does not support UC (Voice), hence no V, VSEC, AXV bundles for ISR4221/K9
Warranty information
The Cisco ISR 4000 Series Integrated Services Routers have a 90-day limited liability warranty.
ประเภท | Router |
---|---|
Model | ISR 4000 |
License / Features | Security (SEC) |