Cisco CVPN3002-BUN-K9 Datasheet download pdf (Page 2)

Cisco Systems

Page 2 of 6

• Conﬁgurable Interface MTU, and Fragmentation

Control Policy, including support for Path MTU

Discovery (PMTUD)

Exploring Software Client and VPN Router Benefits

Small router, VPN, and ﬁrewall devices can be

inexpensive and providemany features, includingstateful

ﬁrewall capabilities, but they lack true scalability beyond

a few hundred devices. In addition, deployment and

ongoing management can be inconvenient, time

consuming, and expensive because of the numerous

parameters and manual conﬁgurations required at both

ends of the connection.

By contrast, software clients are typically providedfor no

charge with central site concentrators so they easily

deploy and scale to large numbers. However, these clients

have speciﬁc limited operating system support. Software

clients may be impractical in extranet environments

where the sponsor company does not own or control the

PC (such as franchises), or does not want to incur the

expense associated with maintaining non-company PCs

and workstations.

Exploring Hardware Client Benefits

A hardware client combines the best features of a

software client while maintaining the reliability and

stability of a hardware platform. Because it uses push

policy and is assigned an IP address from a pool of

addresses in the concentrator, it has few parameters to

manage and can be easily conﬁgured and deployed.

However, unlike software clients, the hardware client

operates across all operating systems and never interferes

with the PC because it is an external piece of hardware.

As a result, the hardware client is ideal for extranet

applications or companies with a diverse set of operating

system, or for companies with many remote ofﬁces or

branches, such as franchise, bank, retail, and similar

applications, that require simple, unattended operations

or those applications where support is unavailable. A

hardware client also appeals to companies that want to

expand VPN solutions to home ofﬁce users.

Why Use a Hardware Client?

Most large enterprises agree that the price of a hardware

client is offset by the reduced or eliminated service calls

typically associated with supporting software clients on

the PC or the expense of supporting growing

LAN-to-LAN networks with their complex conﬁguration

requirements at central and remote sites.

In summary, the value proposition for a hardware client

includes:

• Scales to very large networks without requiring

expensive implementation support at the central site

• Enables easy and secure deployments because policy

and conﬁguration are pushed from the central site

• Supports any operating system, enabling the client to

plug in easily across networks

• Improves application stability because the client is

deployed independently of the PC

• Pays for itself if it saves even one service call per year

versus a router or software client

• Enables VPNs to be easily implemented by enterprises

that do not have control over the remote PCs

Cisco VPN 3002 Hardware Client Application

The Cisco VPN 3002 Hardware Client can also work

alongside networks using the Cisco VPN (software)

Client.Itservesasahardwareclientinapplicationswhere

using a software client is impractical or undesirable. The

Cisco VPN 3002 uses a DHCP client to acquire its IP

address from the central site and a DHCP server to

provide addresses to up to 253 stations in a single

networkbehindit.TheCisco VPN3002uses PAT andcan

scale to tens ofthousands of devices because asa client, it

acquires a concentrator assigned IP address upon

connection from a pool, eliminating manual route

assignment.

The Cisco VPN 3002 supports the Cisco VPN Client

Release3.5protocol usingtheUniﬁed ClientFramework.

This enables it to connect to any Cisco central-site VPN

Concentrator that supports the Uniﬁed Client Protocol

Speciﬁcation, including the Cisco PIX

Firewall, and

Cisco IOS

central site concentrators, as well as to the

Cisco VPN 3000 Concentrators.

1 2 3 4 5 6

Comments to this Manuals

No comments

Cisco CVPN3002-BUN-K9 Datasheet Page 2

Comments to this Manuals