Description

Physical

The Cisco VPN ISM fits in the ISM slot in the Cisco ISR G2.

Platform support

The Cisco VPN ISM supports the Cisco 1941 and the Cisco 2900 and 3900 Series Integrated Services Routers (ISRs).

Hardware prerequisites

An ISM slot for the Cisco 1941 and the Cisco 2900 and 3900 Series is required.

IP Security (IPsec) encryption supported

Authentication:

Key exchange:

Data integrity:

Encryption:

Hardware Secure Sockets Layer (SSL) encryption supported

The Cisco VPN ISM supports SSL VPN encryption with DES, 3DES and AES.

Note: VPN ISM does not support DTLS.

Number of encryption modules per router

The Cisco VPN ISM uses one encryption module per router.

Minimum Cisco IOS Software version required

The Cisco VPN ISM requires Cisco IOS Software Version 15.2(1)T1 or later. The SEC-K9 and HSEC-K9 licenses are required.

Maximum number of IPsec encrypted tunnels

The Cisco VPN ISM supports up to 500 tunnels on the Cisco 1941, up to 2000 tunnels on the Cisco 2900 Series, and up to 3000 tunnels on the Cisco 3900 Series.

Standards supported

The Cisco VPN ISM supports the IPsec Internet Key Exchange (IKE): RFCs 2401 to 2410, 2411, 2451, 4306, 4718, 4869, and 5996.

Features

Benefits

Ability to offload encryption to a dedicated service module

Dedicated encryption protects performance while using CPU for other services.

Small physical, energy, and carbon footprint

You can save on energy bills, hardware support contracts, and onsite visits.

Maximum performance while also maintaining strong encryption protection

You have two to three times better onboard performance with the strongest Suite B encryption support.

High-overhead IPsec processing from the main processor

Critical processing resources are reserved for other services such as routing, firewall, and voice.

IPsec MIB

Cisco IPsec configuration can be monitored and can be integrated into a variety of VPN management solutions.

Certificate support to facilitate automatic authentication using digital certificates

Encryption use scales for large networks requiring secure connections between multiple sites.

Easy integration of VPN modules into existing Cisco 1941 and Cisco 2900 and 3900 Series Routers

System costs, management complexity, and deployment effort are reduced significantly compared to multiple-device solutions.

Confidentiality, data integrity, and data origin authentication through IPsec

Secure use of public switched networks and the Internet for WANs is facilitated.

Cisco IOS SSL VPN

Businesses can securely and transparently extend their networks to any Internet-enabled location using SSL VPN. The Cisco IOS SSL VPN supports Cisco AnyConnect Client, enabling full network access remotely to virtually any application.

Platform

Support

880

No

890

No

1921

No

1941

Yes

2901

Yes

2911

Yes

2921

Yes

2951

Yes

3925

Yes

3945

Yes

3925E

No

3945E

No

Feature

Specification

Product part number

ISM-VPN-19

ISM-VPN-29

ISM-VPN-39

CISCO1941-HSEC+/K9

CISCO2901-HSEC+/K9

CISCO2911-HSEC+/K9

CISCO2921-HSEC+/K9

CISCO2951-HSEC+/K9

CISCO3925-HSEC+/K9

CISCO3945-HSEC+/K9

Form factor

ISM

Internal network interfaces

Gigabit Ethernet connectivity to router backplane

Cisco IOS Software

15.2(1)T1 or higher

IPsec Support

Encryption

Data Encryption Standard (DES), 3DES, Advanced Encryption Standard (AES) in Cipher-Block Chaining (CBC) and Galois/Counter Mode (GCM) (128-, 192-, and 256-bit)

Key exchange

Diffie Hellman (DH) and Elliptic-Curve Diffie Hellman (ECDH)

Digital signature

Rivest, Shamir, and Adelman (RSA) and Elliptic-Curve Digital Signature Algorithm (ECDSA)

Integrity

Message Digest Algorithm 5 (MD5), Secure Hash Algorithm 1 and 2 (SHA-1 and SHA-2, respectively) (384- and 512-bit), and AES-GMAC (128-, 192-, 256- bit)

Power Specification

Power consumption (maximum)

20W

Physical Specification

Dimensions (H x W x D)

0.85 x 4 x 6.1 in. (2.2 x 10.2 x 15.5 cm)

Shipping dimensions
(H x W x D with packaging)

9.45 x 7.18 x 2.38 in. (24 x 18.4 x 6.05 cm)

Maximum weight

0.5 lb (0.206 kg)

Operating Conditions

Operating temperature

Cisco 1941 and 2901: 32 to 104°F (0 to 40°C) normal

Cisco 2911, 2921, 2951, 3925, and 3945: 32 to 122°F (0 to 50°C) normal

Humidity

10 to 95% operating

Altitude (operating)

104°F (40°C) at sea level

104°F (40°C) at 6,000 ft (1,800m)

86°F (30°C) at 13,000 ft (4,000m)

81°F (27.2°C) at 15,000 ft (4,600m)

Note: De-rate 34.5°F (1.4°C) per 1,000 ft above 6,000 ft (per 300m above 2,600m)

Transportation and Storage Conditions

Temperature

-4 to 149°F (-20 to +65°C)

Relative humidity

9 to 95% operating

Altitude

10,000 ft (3,050m)

Regulatory Compliance

Safety

EMC

Emissions:

Immunities:

Product Number

Product Description

ISM-VPN-19

VPN Internal Service Module for support on 1941 platform

ISM-VPN-29

VPN Internal Service Module for support on 2901,2911,2921 and 2951 platforms

ISM-VPN-39

VPN Internal Service Module for support on 3925 and 3945 platforms