Cisco Systems® integrated services routers with wireless services provide a complete, secure wireless infrastructure solution for enterprise branch offices, small and medium-sized businesses (SMBs), public wireless LAN (WLAN) or Wi-Fi hotspots, and small remote offices and teleworkers. The Cisco® Integrated Services Router portfolio supports integrated WLAN connectivity, Wi-Fi hotspot services, Cisco Land Mobile Radio (LMR)-over-IP services, and wireless infrastructure services.

Product Overview

Figure 1. Cisco Integrated Services Router Portfolio with Wireless Services

• WLAN Connectivity-Integrated 802.11 WLAN access points are supported as an option with the entire portfolio of integrated services routers, including the Cisco 800 and 1800 series fixed-configuration wireless routers and the Cisco 1800, 2800, and 3800 series modular routers, each available with a built-in access point or a high-speed WAN interface card (HWIC) access-point module.

• Public WLAN Hotspot-Integrated WLAN access points, access-zone-router (AZR) services, and Service Selection Gateway (SSG) services provide a comprehensive selection of routers for Wi-Fi hotspot locations:

–Small hotspots requiring a single access point and AZR services can be served by a single integrated services router with an integrated access point (Cisco 800, 1800, 2800, and 3800 integrated services routers).

–Hotspots requiring multiple access points and AZR services or Power over Ethernet (PoE) can be supported with an integrated services router and Cisco Aironet® access points (Cisco 1800, 2800, and 3800 integrated services routers).

–Large multiprovider or distributed hotspots (for example, airports) can be supported with Cisco Aironet access points and an integrated services router with AZR capabilities and a SSG (Cisco 2800 and 3800 integrated services routers).

• LMR over IP-LMR-over-IP services are supported on selected integrated services routers (Cisco 2800 and 3800 routers) significantly expand the scope of push-to-talk radio communications to include remote-access and dispatch operations from a variety of communications devices (IP telephones, analog telephones, cellular telephones, etc.) as well as interoperability among disparate radio systems to enhance productivity and collaboration capabilities for radio users at:

–Enterprises-Corporate security and emergency response services (security guards, medical technicians), building management and repair services (mail, electrical, heating, ventilating, and air conditioning [HVAC]), fleet services (trucking, installation, repair technicians), etc.

–SMBs-Plumbers, electricians, delivery personnel, construction, etc.

–Public Safety Venues-Police, fire, medical responders, etc.

• Wireless Infrastructure Services-Integrated services routers (Cisco 2800 and 3800 series) provide enhanced WLAN survivability and mobility services with Cisco Aironet® access points located at branch offices and remote sites. The SSG helps enable customized guest access, and the Mobile IP Home Agent feature of Cisco IOS® Software helps enable mobility across WLAN and mobile (cellular) networks.

–Survivable IEEE 802.1X local authentication capability in the router allows authentication of up to 1000 wireless clients to the secure wireless network at a remote site without a separate authentication, authorization, and accounting (AAA) server or as a backup for the AAA server at headquarters.

–WLAN and wired IP telephony support with Cisco CallManager Express (CCME) and Survivable Remote Site Telephony (SRST).

–Customized guest access solutions for large enterprises are enabled with SSG and the Cisco CNS Subscriber Edge Services Manager (SESM).

–The Mobile IP Home Agent helps enable transparent mobility and application session continuity for mobile users and mobile networks when they roam across IP network boundaries and different access network types, such as WLAN and mobile (cellular) 2.5- and third-generation (3G) networks.

• Wireless LAN Controller Functionality-Integrated services routers (Cisco 2800 and 3800 series) provide wireless LAN controller functionality with the Cisco Wireless LAN Controller Network Module. The Integrated wireless LAN Controller network module provides system wide wireless LAN functions, such as creating and enforcing security policies, intrusion prevention, RF management, quality of service (QoS), and mobility.

–Zero-touch access point configuration by managing all access points as a complete wireless LAN system.

–Embedded software with Radio Resource Management (RRM) algorithms to detect and adapt to changes in the air space in real time-creating a self-configuring, self-optimizing, and self-correcting wireless LAN environment.

–Supports up to 6 Access Points with an aggregated throughput of 75 Mbps.

Features Table

Table 1. Cisco Integrated Services Router Portfolio with Wireless Services

Features and Benefits

WLAN Connectivity Services-Integrated 802.11b/g and 802.11a/b/g Access Points

Integrated 802.11b/g WLAN Connectivity

Integrated 802.11a/b/g WLAN Connectivity

Table 2. Integrated Services Router WLAN Connectivity

Public WLAN Hotspot Service-Integrated 802.11 Access Points, AZR, PoE, and SSG Support

Integrated 802.11b/g and 802.11a/b/g WLAN Connectivity

AZR

• Secure Address Resolution Protocol (ARP)-IP Spoofing

• Called station ID (CSID) format

• Authorized ARP-IP Spoofing and session termination

• Automatically operational static address support

• Automatically operational static address Network Address Translation (NAT) accounting

• Automatically operational static address NAT timeout session termination

• Automatically operational static address and authentication

• ARP session termination

• Dynamic Host Configuration Protocol (DHCP) Option 82 secured address assignment and accounting

Figure 2. Public WLAN or WiFi Hotspot Network

Table 3. Integrated Services Routers for Public WLAN Hotspots

Ethernet Switch and PoE Support

Table 4. Integrated Services Routers with Ethernet Switch and Inline Power over Ethernet

Service Selection Gateway

• SSG can authenticate and authorize subscribers to access public (or enterprise) WLAN services.

• In conjunction with a billing server, SSG can provide per-subscriber, per-service billing in both post- and prepaid billing modes.

• In conjunction with SESM, SSG can provide a Web portal for subscriber authentication and self-subscription, as well as service provider branding.

• SSG provides open-garden and walled-garden services for controlled access of information to subscribers.

Figure 3. Service Selection Gateway Helps Enable Individualized Subscriber Services for Service Providers and Enterprises

LMR-over-IP Services-Push-to-Talk Radio Interoperability

• IP-Enabled Transport-The LMR gateway is used to connect the LMR system to the IP network in a point-to-point or point-to-multipoint configuration. This allows users to take advantage of IP infrastructure and eliminate dedicated-leased-line recurring charges.

• Remote Monitor and Dispatch from Phones and Other Devices-This application allows users to monitor and talk to one or multiple radio channels that are connected to an IP network, allowing them to access their radio system from any location with a network connection or telephone through a variety of clients-IP phone, PC, basic telephone service phone, or mobile phone.

• Multiagency Interoperability-This application provides the ability to "bridge" different radio systems together.

Figure 4. LMR over IP-Interoperability with Push-to-Talk Radios

Table 5. Integrated Services Router for LMR over IP

Wireless Infrastructure Services-Survivability, Telephony, and Mobility

Survivable Local Authentication

Figure 5. IEEE 802.1X Local Authentication Service for up to 1000 User Accounts

WLAN and Wired IP Telephony with CCME and SRST

Figure 6. Wired and WLAN IP Telephony Support with CCME or SRST

Transparent Mobility for IP Networks Crossing and Media Type Roaming

Figure 7. IP Mobility Across WLAN and Mobile Wireless Networks

The wireless infrastructure services supported by the integrated services router portfolio are summarized in Table 6.

Table 6. Integrated Services Router for Wireless Infrastructure Services

Applications

• Enterprises-Corporate branch offices, bank branches, etc.

• Retailers-Small and large retail stores, distribution centers, etc.

• Government and Public Safety-Government offices, police stations, fire departments, etc.

• SMBs-Medical offices, service professionals (plumbers, electricians, etc.), and others

• Teleworkers-Home offices, etc.

Figure 8. Converged Wireless and Wired Branch Office with Secure Data, Voice, Switching, and Wireless

Wireless LAN Controller Functionality

Figure 9. Wireless LAN Controller Network Module with ISR

Intelligent RF Management

Figure 10. Enterprise Wide RF Intelligence

• Dynamic Channel Assignment-802.11 channels are adjusted to optimize network coverage and performance based on changing RF conditions.

• Interference Detection and Avoidance-The system detects interference and recalibrates the network to avoid performance problems.

• Load Balancing-The system provides automatic load balancing of users across multiple access points for optimum network performance, even under heavy load.

• Coverage Hole Detection and Correction-RMM software detects coverage holes and attempts to correct them by adjusting the power output of access points.

• Dynamic Power Control-The system dynamically adjusts the power output of individual access points to accommodate changing network conditions, helping to ensure predictable wireless performance and availability.

Enterprise-Class Security

• 802.11i Wi-Fi Protected Access 2 (WPA2), WPA, and Wired Equivalent Privacy (WEP)

• 802.1X with multiple Extensible Authentication Protocol (EAP) types-Protected EAP (PEAP), EAP with Transport Layer Security (EAP-TLS), EAP with Tunneled TLS (EAP-TTLS), and Cisco LEAP

• RF Security-Detect and avoid 802.11 interference and control unwanted RF propagation.

• Wireless LAN Intrusion Prevention and Location-The Cisco Centralized Wireless LAN Solution not only detects rogue devices or potential wireless threats, but also locates these devices. This helps IT administrators to quickly assess the threat level and take immediate action to mitigate threats as required.

• Identity-Based Networking-IT staff must support many different user access rights, device formats, and application requirements when securing wireless LANs. The Cisco wireless LAN system enables enterprises to deliver individualized security policies to wireless users or groups of users. These include:

–Layer 2 Security-802.1X (PEAP, LEAP, TTLS), WPA, 802.11i (WPA2)

–Layer 3 Security (and above)-IPSec, web authentication

–VLAN Assignments

–Access Control Lists (ACLs)-IP restrictions, protocol types, port, and differentiated services code point (DSCP) value

–QoS-multiple service levels, bandwidth contracts, traffic shaping and RF utilization

–Authentication, Authorization, and Accounting (AAA)/RADIUS-User session policies and rights management

• Network Admission Control (NAC)-Enforce policies pertaining to client configuration and behavior, to ensure that only end-user devices with appropriate security utilities can gain access to the network.

• Secure Mobility-Maintains the highest level of security in mobile environments with Cisco Proactive Key Caching (PKC), an extension to the 802.11i standard and precursor to the 802.11r standard that facilitates secure roaming with advanced encryption standard (AES) encryption and RADIUS authentication.

• Guest Tunneling-Provides additional security for access to the corporate network by guest users. It helps ensure that guest users are unable to access the corporate network without first passing through the corporate firewall. Guest Switch tunneling can be initiated on Wireless LAN controller network module but can not be terminated. For terminating Guest Switch tunneling a 44xx controller is required.

Figure 11. Multiple Layers of Wireless LAN Protection

Real-Time Application Support

Mobility

Simplified Deployment and Management

Table 7. Integrated Services Router for Wireless LAN Controller Functionality

Summary

Ordering Information

Table 8. Ordering Information