Cisco ISR 4000 Series

Product Update

Dax Choksi,
Product Manager, Enterprise Routing, Cisco

Feb 2017
Cisco Branch Router Evolution

ISR 4431 & 4300 family

Making a complete ISR
ISR 4451 4000 family
First ISR based
on IOS XE

ISR G2 family
800, 1900, 2900 &
ISR G1 family
3900 2014
Taking ISR G1
1800, 2800, 3800
architecture to the next
The first architecture
custom designed for
level 2013
integrated services
Cisco 2600
Superseded 2500. 2009
Considered one of Cisco's
premier products.
Cisco 2500 2004  Not shown here: 700, 1600, 1700,
Cisco’s first family of
branch routers for 23 4000/4500, 3600 & 3700 series routers
different deployments 1998

1993
Cisco Confidential 2
Introducing the Cisco ISR 4000 Family
Enabling Branch Services for the 21st Century Network

Delivering the Ultimate Application Experience Over Any Connection

Cisco® Application Centric

Revolutionary Architecture Service Innovation
Infrastructure (ACI) for the WAN
 4-10 times faster, at the same price  Native Layer 2 – 7 services  Automation, orchestration,
 Deterministic performance with  Converged network, compute,
 User/app-based policy
services storage
 Simple, scalable WAN path control  Changes without disruption
 Pay as you grow
 Best-of-breed security:
 Virtualized network function Sourcefire® IDS
Cisco Confidential 3
Pay-As-You-Grow with Cisco ISR 4000 Series

Investment Protection Without Oversubscription

ISR 4451
1-2 Gbps

ISR 4431
ISR 4351 500-1000 Mbps
200-400 Mbps
ISR 4331
100-300 Mbps
ISR 4321
50-100 Mbps
ISR 4221
35-75 Mbps
4-10X Faster
Add performance and services anytime
Flexible consumption options
Cisco Confidential 4
Modular ISR Migration Paths

4451
Branch consolidation

3945E (2 RU, 1000-2000 Mbps)

3925E 4431
(1 RU, 500-1000 Mbps)

3945
4351
3925 (2 RU, 200-400 Mbps)

2951
4331
(1 RU, 100-300 Mbps)
2921

4321
2911 (1 RU (Desktop), 50-100 Mbps)

2901
4221
(1 RU (Desktop), 35-75 Mbps)
1921 1941

Application services
Cisco Confidential 5
Cisco ISR 4451

Entity ISR 4451

4 core control/services 10 core data

CPU architecture
plane

#NIMs 3

#SMs 2

FPGE Up to 4 GE / 4 SFP (Max = 4)

ISC slot 1 for all ISC cards

USB type A ports 2

1 Gbps or 2 Gbps Performance Power Dual internal AC or DC

Control/services Base 4 GB; max 16 GB

memory 1600 MHz DIMMs 2 DIMM slots
Maps to Cisco® 3900E ISR
Mgmt Ethernet 1 Gbps

Cisco Confidential 6
Cisco ISR 4431

Entity ISR 4431

4 core control/services
CPU architecture
6 core data plane

#NIMs 3

#SMs 0

FPGE Up to 4 RJ45 / 4 SFP (Max = 4 GE)

ISC slot 1 for all ISC cards

USB type A ports 2

500 Mbps or 1 Gbps Performance Power Dual internal AC or DC

Control/services Base 4 GB; max 16 GB

memory 1600 MHz DIMMs 2 DIMM slots
Maps to Cisco® 3900 Series ISR
Mgmt Ethernet 1 Gbps

Cisco Confidential 7
Cisco ISR 4351

Entity ISR 4351

CPU architecture 8-core CPU

#NIMs 3

#SMs 2

FPGE Up to 3 RJ45 / 3 SFP (Max = 3 GE)

ISC slot 1 for all ISC cards

USB type A ports 2

200 Mbps or 400 Mbps Performance Power Single internal AC or DC

Control/services Base 4 GB; max 16 GB

memory 1600 MHz DIMMs 2 DIMM slots
Maps to Cisco® 2951 ISR
Mgmt. Ethernet 1 Gbps

Cisco Confidential 8
Cisco ISR 4331

Entity ISR 4331

CPU architecture 8-core CPU

#NIMs 2

#SMs 1

FPGE Up to 2 RJ45 / 2 SFP (Max = 3 GE)

ISC slot 1 for all ISC cards

USB type A ports 1

100 Mbps or 300 Mbps Performance Power 1 internal AC

Control/services Base 4 GB; max 16 GB

memory 1333 MHz DIMMs 2 DIMM slots
Maps to Cisco® 2911 or 2921 ISR
Mgmt Ethernet 1 Gbps

Cisco Confidential 9
Cisco ISR 4321

Entity ISR 4321

CPU architecture 4-core CPU

#NIMs 2

#SMs 0

FPGE Up to 2 RJ45 / 1 SFP (Max = 2 GE)

ISC slot 1 for all ISC cards

USB type A ports 1

50 Mbps or 100 Mbps Performance Power Single external AC

Control/services Base 4 GB; max 8 GB

memory 1333 MHz DIMMs 2 DIMM slots
Maps to Cisco® 1941 or 2901 ISR
Mgmt Ethernet 1 Gbps

Cisco Confidential 10
Cisco ISR 4221
ISR4221/K9

Entity ISR 4221

CPU architecture 4-core CPU

Network Interface
2 (limited NIM support)
Modules
Enhanced Service
0
Modules

Front-Panel Ethernet 2 GE (1 dual-phy, 1 RJ45 only)

ISC slot 0

USB type A ports 1

35 Mbps or 75 Mbps Performance Power 1 external AC

Control/services Fixed 4 GB
Migrate from Cisco® 1921 or 1941 ISR memory 3 GB for IOS, 1 GB for SNORT

Mgmt Ethernet 1 Gbps

Cisco Confidential 11
Cisco 4300 Comparison to 4400: Differences

Redundant power

Ability to physically separate control, services,

and data plane CPU sockets
4400 Family
Benefits Additional service container capacity through
faster CPUs

Higher throughput for base and performance

licenses
Cisco Confidential 12
ISR 4000 Architecture

C97-732576-00 © 2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13
Revolutionary Platform Architecture
Architected for the Optimal Application Experience
Converged Branch with
Pay as You Grow UCS® E-Series
Performance and services Integrated compute
Up to 8 cores

Service-Aware
Native L2-7 Services
Data Plane Security, optimization
For efficient traffic handling
Cisco ISR
4000
Virtualized Services
Framework 4-10 Times Faster
Appliance-level Than ISR G2 at similar price
performance Powering the Intelligent WAN
Cisco Confidential 14
ASIC-Like Experience with New Services
Appliance-Level Performance

Miercom Testing: Cisco® 4451 ISR Enabling Technologies

2  Multicore architecture
 Service-aware data plane
1.5
 Multigigabit fabric
1
Benefits
0.5
 Up to 10 times faster performance
Additive features and services
0  Scalability
4451-X no-perf license
 Layer 7 services
4451-X perf license
 Steady performance curve maintained
Software-only router with new additive services
Cisco Confidential 15
Cisco ISR 4000 Family I/O Design

Management Interface Front-Panel GE Network Interface Modules Optional Drive NIM for
out-of-band control plane  RJ45/SFP GE Interfaces (NIMs) Embedded Applications
connection directly to a  Larger and more powerful  RAID 1 for data protection
 PoE+ available on some than EHWICs  Single HD (future) and
management network models  Up to 8 ports per module dual SSD options
 DSPs directly on modules

Enhanced Service Modules

USB Connections  Compatible with Cisco® ISR G2
 2 times type A for file storage  Up to 10-Gbps connection to system
 USB type B console in addition to RJ45 console and aux ports  Faster and more powerful than SMs
Cisco Confidential 16
Cisco ISR 4400 Series Architecture

Service containers IOSd

live here
Control Plane (1 Data Plane (6 or 10
core) and services cores)
plane (3 cores)

FPGE

ISC
Multigigabit
ISR-WAAS Fabric SM-X
KVM - Hypervisor

Services Plane
(Control Plane CPU) NIM
Cisco Confidential 17
Cisco ISR 4300 Series Architecture

Data Plane Cores

IOSd

FPGE
Service Container

Multigigabit ISC
Fabric
ISR-WAAS SM-X

KVM - Hypervisor

Services Plane NIM

(Control Plane CPU) Note:4321 uses 2DP, 1CP & 1SC cores
Cisco Confidential 18
Cisco ISR 4400 Packet Flow

Control Plane Data Plane (6 or 4xSGMII

DRAM (1 core) and 10 cores)
Services Plane (3 FPGE
cores)
4xPCIe

DRAM

Mgt Eth 4xPCIe System 10G XAUI

FPGA 1 Gb SGMII
Cons/Aux ISC
Platform 10 Gb/slot
Multigigabit
Controller
Fabric
USB Hub SM-X

2 Gb/slot
Flash

NIM

Cisco Confidential 19
Cisco ISR 4200 Series Architecture

Data Plane Cores

IOS

FPGE
Snort

1 Gb/slot
System
FPGA
RJ45
Cons Platform NIM
Controller
Fixed USB Hub
(4GB)
Fixed Flash
(8GB)

Cisco Confidential 20
Modules

C97-732576-00 © 2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21
Connectivity Options

Outside the office Inside the office

Analog Voice
 T1/E1  FXS
PSTN  E/M
 FXO
 BRI Voice Ethernet / Switching
 EtherSwitch LAN
 16 / 24 / 48 ports
 T1/E1, T3/E3,  4 / 8 port
Serial  Ethernet WAN
WAN/
 ADSL, VDSL  4 & 6 port GE
Internet
 SHDSL (roadmap)  10 GE port
 1 & 2 port GE

Cisco UCS® E-Series

 Up to 8 cores
 3G / 4G / LTE
Mobile Intel® Xeon® processor
 Up to 3 TB storage and 96 GB DRAM

Cisco Confidential 22
 NIM-Async IOS Release: XE: 16.4

 NIM targeted for Terminal Server use

 Two NIM versions
 NIM-16A and NIM-24A

 New serial cable to accommodate both 16

ports and 24 ports SKUs
 NIM-16A
 2 x 8 port connectors.
 NIM-24A
 3 x 8 port connectors

Cisco Confidential 23
Cisco ISR 4000 Family Modules (1 of 2) For Your
Reference

Category Type Name Available

SM-X Ethernet Switches: 16, 24 & 48 ports Yes

LAN
NIM Ethernet Switches: 4 & 8 ports Yes

SM-X CPU: 2, 4, 6 & 8 cores Yes

UCS E-Series
NIM CPU: 4 cores Yes

NIM T1/E1: 1, 2, 4 & 8 ports Yes

NIM FXS/FXO: 2 & 4 ports. Also, 4FXS+2FXO combo NIM. Yes

Voice NIM E/M & BRI Voice Yes

PVDM PVDM4: 32, 64, 128 & 256 channels Yes

SM-X High-density DSP farm Yes

SM-X 1GE: 4 ports OR 1-port 10GE Yes

WAN Ethernet SM-X 1GE: 6 ports Yes

NIM 1GE: 1 & 2 ports Yes

NIM USA, Canada, Europe, Australia Yes

NIM LATAM / APAC (Incl. Band 28 for Australia and LTE TDD for China/India) Polaris 16.4
WAN 4G / LTE
ISR G2 -
EHWIC and LATAM / APAC (Incl. Band 28 for Australia and LTE TDD for China/India) Polaris 16.4
800BB

Cisco Confidential 24
 Cisco ISR 4000 Family Modules (2 of 2) For Your
Reference

Category Type Name Available

WAN T3/E3 SM-X T3/E3: 1-port Yes

NIM T1/E1: 1 & 2 ports Yes

WAN T1/E1
NIM T1/E1: 8 ports Yes

WAN xDSL NIM Multi-mode VDSL2 / ADSL Annex A, B & M Yes

NIM Synchronous Serial: 1, 2 & 4 ports Yes

WAN Serial
NIM Asynchronous Serial: 16 & 24 ports + new cable for 24 port version Sep 2017

NIM Dual SSD carrier. Each SSD may be 200G or 400G. Yes
Storage
mSATA 200G SSD Yes

NIM Adaptor SM-X Converts SM-X slot to 1 NIM slot Yes

NIM-ISDN BRI-Data
In progress

NIM-G.SHDSL
In progress.

Cisco Confidential 25
UCS E-Series Updates

C97-732576-00 © 2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26
 Shipping Roadmap

UCS E-Series Service Module Roadmap

Scalability

UCS-E180D

UCS-E160D
8-core, 1.8 GHz,
96 GB RAM
UCS-E160S
6-core, 2.0 GHz,
96 GB RAM
UCS-E140S
6-core, 2.0 GHz,
32 GB RAM

4-core, 1.8 GHz,

16 GB RAM

Performance
Cisco Confidential 27
 Available
UCS-E160S-M3/K9
6-core, 32 GB, 2 Disks

Upgraded LSI controller for higher

6-core, Intel Broadwell, 2.0 GHz
performance
Up to 32 GB DRAM
options

Dual EMMC Storage with

RAID

Dual External 10G USB 3.0 port for external device

Up to 4TB SATA Storage connectivity

Cisco Confidential 28
UCS-E Service Modules - Storage Options
Type Size UCS-E Models Availability
SATA 500 GB 120S only Now
SATA 1 TB All Now
SATA 2 TB M2 & M3 only April 2016

SAS-SED 600 GB All Now

SAS 900 GB All Now
SAS-SED 1.2 TB M2 & M3 only May 2016
SAS 1.8 TB M2 only Now

SSD 200 GB M1 & M2 only AEOS

SSD 200 GB M1 & M2 only Now
SSD 400 GB M1 & M2 only Now
SSD 480 GB M2 & M3 only April 2016
SSD 960 GB M2 & M3 only April 2016

Note: Dates subject to change. AEOS = Announced End of Sale

Cisco Confidential 29
Service Integration

C97-732576-00 © 2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30
World’s Broadest Service Offerings in One Box
Simplified Services Integration
The Ultimate Converged Branch – No More Appliances
Compute
Security WAN Opt Path Control App Visibility UC
Storage

Native, Full Featured Ease of Service Deployment Network, Compute,

Security, AVC, WAN Opt, UC – No Truck Rolls and Storage
Cisco Confidential 31
Service Virtualization for Networking

Service Containers

 Dedicated virtualized compute

resources
 CPU, disk, memory
for each service
 Easily repurpose resources VM 1 VM 2 VM 3
 Industry-standard hypervisor
WAAS Energywise Future App

Benefits

 Better performing network services

 Ease of deployment with zero
footprint; no truck roll
 Greater security through fault isolation
 High reliability
 Flexibility to upgrade network services
independent of router IOS® Software

Cisco Confidential 32
Enable Advanced Threat Protection Across Branches
Security Services

HIGH ADVANCED THREAT CLOUD WEB CONSISTENT POLICY

PERFORMANCE VPN DEFENSE SECURITY ENFORCEMENT

VPN

DMVPN, GET VPN, ZB Firewall, CWS TrustSec with

Flex VPN Sourcefire IDS with AMP Identity Service
Engine
• Up to 1.3 Gbps • Industry leading • Real-time web • Single Source for
encryption network intrusion Policy Rules
filtering with AVC
• Advanced encryption detection
(Suite B) • Threat analytics for • Context Aware
• Soucefire IDS
• Integrated crypo without Integrated on UCS E- full continuum: • 80% reduction in
additional hardware Series Before, During, After rules and policy

© 2013-2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33
Make the WAN Behave Like the LAN
Application Optimization Services

NETWORK WAN APPLICATION INTELLIGENT

VISIBILITY PATH CONTROL ACCELERATION CACHING

ISR-AX

Application Visibility Performance Wide Area Application Akamai

and Control Routing V3 Service (WAAS) Connect

• Probe-less deployment • 2X WAN bandwidth • 50–70% bandwidth • High quality Digital

• Wired/Wireless view of • Maintain App reduction Experience
1000+ apps Continuity • 2x VDI Sessions • Address Last Mile
• Rapid root cause • Lower bandwidth • Faster document BW Congestion
analysis costs processing • WAN Offload

© 2013-2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34
High Quality Voice/Video Services at the Branch
Unified Communications Services

Higher performance
• Prioritize multiple services
simultaneously without
compromise Cisco Unified Border TDM Gateway
Easier upgrades and Element (CUBE) • T1/E1 Modules

maintenance • BRI & E/M

Cisco SRST
• Simplified infrastructure – (E-SRST Roadmap) DSP Media Services
DSPs built into UC cards • Conferencing
Cisco Unified CME • Transcoding

All protocols: SIP, H.323,

LMR MGCP, SCCP, etc.
Analog Gateway
• FXO, FXS
Implemented Road mapped

© 2013-2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 35
ISR 4K
Open Services Containers

© 2013-2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 36
 OS Release: XE: 16.3 onwards
What is a Service Container?
Service Containers use virtualization technology
(LXC and KVM) to provide a hosting environment
on Cisco routers/switches for applications which
may be developed and released independent of
platform release cycles.
Virtualized environment on a cisco device.

Use Case Cisco Virtual Services: Network OS

• Lightweight Application Hosting
• Example: ISR-WAAS ( KVM )
• Example: SNORT ( LXC ) Container

Virtual Service
Use Case Third Party Services:
• KVM Hosted Applications
© 2013-2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 37
Common Service Container Use Cases
Troubleshooting VM
General purpose virtual machine with custom and open-source troubleshooting tools.
(Wireshark, Speedtest, IXIA etc.)

Network Functions

Common network functions such as Print Server, Domain Controller, File Storage, etc.

Analytics

Network Analysis and Application Performance Monitoring without a dedicated probe.

Device Customization
Augment the capabilities of the host platform in some way. (Custom encryption, business-
based routing, specialized API interface)
© 2013-2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 38
Software and Management

C97-732576-00 © 2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 39
Cisco 4000 Series
Packaging and License Model

High Security

CME/SRST
CUBE

Performance
Security Application Experience Unified Collaboration

IP Base
Cisco Confidential 40
Thank you.