Technical clarification ISR 891

[Srikanth Lingala]

Guys

Can you please let me know what’s the maximum bandwidth (ADSL/internet) supported by ISR 800 series routers … particularly 891 security model.

Appreciate your assistance in this regards

Srikanth

[Leo Laohoo]

With CEF enabled, the 890 can push up to 51.20 Mbps.  The value is express in HALF duplex and no encryption applied.

If you want the value expressed in full duplex or with encryption you just halve the value.

If you want want full duplex and with encryption you factor the value 51.20 to 4.

Please don't forget to rate useful posts.  Thanks.

[Srikanth Lingala]

Thanks you so much for the reply Leo

I have to terminate 32MB link and with DMVPN solution (ipsec over gre + NHRP)

Could you please advise me the cost effective product in ISR please

Thanks in advace

Srikanth

[Leo Laohoo]

Hmmmm ... 32 Mbps, Full duplex and encryption.  32 x 4 = 128 Mbps.

If you do not intend to "grow" this WAN link then your best candidate is the 1941.

Attached is a Cisco document, router perforrmance, that will give you the maximum bandwidth supported by each router models based on half duplex and no encryption.

Take note that the business unit that routinely updates this particular document has been disbanded and this is the last copy of it's kind.  It does not include the 3925E and 3945E and other ASR stuff.

[Vishnu Asok]

Hi Srikant

If you expecting a throughput of more than 25 Mbps on your Cisco 891 router with NHRP configuration, you should rather be cautious as there will be frequent occurences oh HIGH CPU which would impact your performance!!.

As you add ACL's, encryption, compression, etc - performance will decline significantly from the given numbers, unless it is a hardware-assisted platform

Please go through below link which shows the performance data sheet of most of the Cisco routers

http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf

Cheers

[Srikanth Lingala]

Thanks so much Leo and Vishnu. Your inputs really helped me to finalize the product..

Bandwidth   Required in MB			Proposed model
30			CISCO1941-SEC/K9
48			CISCO2921-SEC/K9
32			CISCO1941-SEC/K9
42			CISCO2921-SEC/K9
36			CISCO1941-SEC/K9
188			ASR1002-5G-SEC/K9
188			ASR1002-5G-SEC/K9

[Srikanth Lingala]

I was looking for cost effective solution, so went for ASR1002-5G-SEC/K9 as DMVPN hub. Please do correct me If am wrong.

Thanks again

[Leo Laohoo]

How big is your bandwidth?

[Srikanth Lingala]

Hi Leo

Here is my bw table against each branch ...

Sr.No	Branch	No of Camera's	Bandwidth   Required in MB	Proposed model
1	Branch 1	15	30	CISCO1941-SEC/K9
2	Branch 2	24	48	CISCO2921-SEC/K9
3	Branch 3	16	32	CISCO1941-SEC/K9
4	Branch 4	21	42	CISCO2921-SEC/K9
5	Branch 5	1	2	CISCO891-K9
6	Branch 6	1	2	CISCO891-K9
7	Branch 7	1	2	CISCO891-K9
8	Branhc 8	1	2	CISCO891-K9
9	Branch 9	1	2	CISCO891-K9
10	Branch 10	1	2	CISCO891-K9
11	Branch 11	1	2	CISCO891-K9
12	Branch 12	1	2	CISCO891-K9
13	Branch 13	1	2	CISCO891-K9
14	Primary   Hub	0	0	ASR1002-5G-SEC/K9
15	Secondary   Hub	0	0	ASR1002-5G-SEC/K9

[Srikanth Lingala]

Every branch has ACLs/Encryption/full deplex ...video traffic

[Vishnu Asok]

Hi Srikanth

Your choice of Models looks good. ASR series are very powerful routers and it makes sense to deploy them at the HUB sites considering future expansions.. But just wondering if you made a comparison between 7206 VXR NPE-G2 and ASR  performance before finalising? I am only giving you some ponters to think about  :-)

[Srikanth Lingala]

Yes yes, I did, thanks for heads-up Vishnu

[Leo Laohoo]

Looks like you did your homework.  ASR 1K for a hub is a "no brainer".

If you've got funds, I'd be looking at ASR 1004 with ESP10 minimum.

Points to consider:

1.  Flash/CF are cheap nowadays, consider getting the MAXIMUM amount of DRAM; and

2.  Don't forget to upgrade the bootstrap of the routers you are getting.

Just in case you are looking at a router that only has mobile wireless as a WAN link, you can consider the 819 (released 2011).

I'm just reviewing your table of branches against the number of IP cameras per site.  How much bandwidth does each camera pushes?

[Srikanth Lingala]

Thanks for the inputs Leo. Each camera support 2mega pixels and pushes 2MB with no video encryption. We are not allowed to go for WAAS/any WAN optimizers to encryp the video as per the client compiance statement

So going with ASR1002-5G-SEC/K9 as Hub is not a right choice ? I need atleast 200MB at hub to support all IP cams at various branches in Middle East (Same country)

I had pulled the mini bom for ASR 1004 with ESP10, assuming the last mail is on Ethernet/GE. Please kindly advise if i missed any ...

ASR1004-10G-SEC/K9	ASR1004 VPN+FW Bundle w/   ESP-10G,RP1,SIP10,AESK9,License	1
ASR1000-RP1-BUN	Cisco ASR1000 Route Processor 1, 4GB DRAM,Bundle Component	1
ASR1000-SIP10-BUN	Cisco ASR1000 SPA Interface Processor 10, Bundle Component	1
ASR1000-SIP10	Cisco ASR1000 SPA Interface Processor 10	1
SPA-2X1GE-V2	Cisco 2-Port Gigabit Ethernet Shared Port Adapter	1
ASR1004-PWR-AC	Cisco ASR1004 AC Power Supply	2
CAB-ACU-RA	Power Cord UK, Right Angle	2
MEMUSB-1024FT	1GB USB Flash Token	1
M-ASR1K-RP1-4GB	Cisco ASR1000 RP1 4GB DRAM	1
M-ASR1K-HDD-40GB	Cisco ASR1000 RP1 40GB HDD	1
ASR1000-SPA	SPA for ASR1000; No Physical Part; For Tracking Only	1
ASR1000-ESP10	Cisco ASR1000 Embedded Services Processor, 10G	1
FLASR1-FW-RTU	Firewall Right-To-Use Feature Lic for ASR1000 Series	1
FLASR1-IPSEC-RTU	Encryption Right-To-Use Feature Lic for ASR1000 Series	1
SASR1R1-AESK9-34S	Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES	1

[Leo Laohoo]

So going with ASR1002-5G-SEC/K9 as Hub is not a right choice ? I need atleast 200MB at hub to support all IP cams at various branches in Middle East (Same country)

ESP5 is a good choice.  But if I'm allowed to play a "devil's advocate" what happens if you or the organization wants to bump up the bandwidth.  I mean each camera pushes 2mb of data, fine by that, but what about the users?  Is this network you are building for IP Cameras only?  What about user data?  VoIP?

Another thing, I have never deployed IP Camera before so that was me, I'd set up one or two sites first and test the performance of everything before purchasing the rest of the kit.

Hold on ... Something's not right here.

You're in the Middle East so I would not have any idea what kind of power outlet standard you are using but you have "Power Cord UK, Right Angle".  Is this correct?

Another thing is "1GB USB Flash Token".  Really?  I wouldn't purchase this.