Datasheet
Brochure
© 2008-2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 5 of 9
Dynamic Multipoint VPN (DMVPN) and Cisco Group Encrypted Transport VPN, which can vastly simplify the
provisioning and deployment of large numbers of branch offices.
No security implementation would be complete without the capability to manage and monitor network flows. The
Cisco ASR 1000 Series Router supports NetFlow Version 9, a Cisco innovation that has been adopted as the
industry standard for application monitoring, network planning, security analysis, IP accounting, and traffic
engineering. NetFlow boasts a large partner ecosystem, with most well-known systems management vendors
providing the capability to capture and analyze NetFlow data.
If more detailed traffic analysis is needed, the Cisco ASR 1000 Series Router supports up to 1024 Encapsulated
Remote Switched Port Analyzer (ERSPAN) sessions. ERSPAN allows traffic on a switch port to be replicated and
tunneled to another location, to aid in advanced troubleshooting, security analysis, compliance verification, or
archival purposes.
Cisco ASR 1000 Series Routers provide standards-based and certified security services, delivered at exceptional
speed, and they facilitate a simplified, single-point solution for the management and monitoring of network security.
Performance and Scalability: Increased Capacity for Efficient Operations
The processing power of these routers is contained on the Cisco ASR 1000 Series Embedded Services Processor
(ESP), which is the forwarding processor containing the Cisco QuantumFlow Processor, encryption engine, and
other hardware assists. The routers offer powerful performance and scalability:
Note: All performance figures are based on the Cisco ASR 1000 Series ESP with a 20-Gbps forwarding or
services engine and a 6-Gbps encryption engine. You can also deploy the Cisco ASR 1002 Router with an entry-
level 5-Gbps forwarding or services engine and a 1.5-Gbps encryption engine.
●
Throughput of 20 Gbps even with Cisco IOS Firewall, NAT, QoS, generic routing encapsulation (GRE), and
other services enabled
●
High-speed event logging of 40,000 sessions per second with NetFlow Version 9
●
Support for 2,000,000 concurrent sessions and 200,000 sessions per second for Cisco IOS Firewall
●
Support for 10,000 sessions per second for IPsec site-to-site or remote tunnels (Note: The Cisco ASR 1000
Series ESP20 has been tested internally to support up to 4,000 tunnels, but the ESP20 hardware itself can
support up to 10,000 IPsec tunnels.)
●
Support for 60,000 IP Multicast groups
●
Less than 100-microseconds latency for high-priority applications
●
Support for up to 4,000,000 IPv4 routes and 2,00,000 IPv6 routes with Cisco ASR 1000 Series Route
Processor 2 (RP2)
●
Support for up to 16,000 access control lists (ACLs)
●
Support for 2,000,000 NetFlow records
Although raw numbers alone do not tell the whole story of the Cisco ASR 1000 Series Router, these figures
represent a powerful price-to-performance ratio.
In terms of an investment decision, the performance numbers indicate that the Cisco ASR 1000 Series Router has
substantial headroom to accommodate the future business needs of even the largest of enterprises.