Cisco 2821 ISR & CallManager Express review
Cisco's ISRs offer a remarkable level of expansion capabilities, including unbeatable voice features
Review Date: 23 Jun 2006
Reviewed By: Dave Mitchell
Price when reviewed: Starts from £2,115 exc VAT
Networking giant Cisco started its first serious assault on the SMB territory in 2005 with its Catalyst Express products, and we brought you an exclusive review of the 500-24PC. Its latest ISR (Integrated Services Router) portfolio shows the company isn't letting up on the pressure. In another exclusive, we take a look at the 2821 ISR model.
The ISR products aim to provide a solution that amalgamates data services, security, voice, wireless, video and internet access into a single, easy-to-manage package. All the new 1800, 2800 and 3800 ISR platforms run the same code - you just decide which one provides the right hardware and expansion capabilities. The 2821 is aimed at the SMB and enterprise branch offices, and supports up to 96 IP phones. The base unit is a 2U rack-mount chassis, which comes with a pair of fixed copper gigabit ports and a selection of expansion slots that accept more than 90 modules.
The four smaller slots at the top support Cisco's high-speed WAN interface cards. There's ADSL, ISDN, E1, T1 and so on, and the latest to join the club is a module with ADSL2/2+ support and integral ISDN backup. Below is a single slot for standard, enhanced and extended network modules, and the 2821 supports EtherSwitch modules offering Layer 2 switching and Layer 3 routing. A power supply upgrade allows you to use the EtherSwitch versions that deliver PoE on all ports. The EVM (extension voice module) brings in standard analogue and digital voice and fax services, and there are expansion cards that add IP telephony with support for both H.323 and SIP (session initiation protocol). This brings into play a wide range of Cisco IP phones, all managed using the UCE (Unified CallManager Express) tools.
As with the Express switches, you don't need Cisco's IOS software for installation and configuration. First contact is via a web browser, where you're taken to Cisco's SDM (security device manager) Express interface. This provides a wizard for initial LAN and WAN configuration, plus basic access to settings such as the firewall, NAT and routing. For full access, you install Cisco's SDM utility on a PC, and the routine will also load the SDR firmware on the ISR's CompactFlash card. It's clear that Cisco has done a lot of work to make the ISR family as user-friendly as possible. The firewall is set up by selecting the basic configuration option with pre-defined rules. Three security settings are provided, with the highest blocking all unsolicited inbound traffic and even application-specific traffic such as IM and P2P in both directions. Advanced settings allow you to apply custom rules and create DMZs using specific interfaces.
VPNs get the same treatment, with wizards for site-to-site tunnels between two Cisco routers, dynamic multipoint VPNs and Cisco's WebVPN gateways for remote users with the WebVPN and Secure Desktop software installed. Using signature files, IPS guards against hackers and QoS can be applied to specific WAN traffic with ease.
Anti-virus capabilities aren't actually embedded on the 2821, as it integrates with Cisco's NAC (network admission control) technology. The idea behind NAC is that each endpoint such as a PC, notebook or PDA is queried as to its security condition on the network, and it will be allowed access based on the applications it's running - in this case, anti-virus software. The router must have a connection via RADIUS to a Cisco Secure access control server, which maintains NAC policies and combines with a Cisco Trust Agent running on each host.
- Forget monitors: your next display may be mist or bubbles
- Google+ head Vic Gundotra steps down
- Tech firms shell out to prevent another Heartbleed
- Cisco: 100% of companies hosting malware
- Brits willing to pay for secure web services
- Google creates Maps time machine
- Facebook scores with mobile advertising
- Cook: Microsoft should have released Office for iPad sooner
- What's on this week's PC Pro podcast?
- Universal wireless charging gets a boost from Microsoft
- Hello Cortana, it's nice to meet you
- Windows 8.1 Update: an abject surrender
- The insane economics of Sky Now TV
- No such thing as a free app... so pay up if you want quality
- Time to outlaw crapware-laden installers
- Windows Phone 8.1 video: hands-on
- Office for iPad: key information
- Why every PC buyer owes Richard Durkin a debt of gratitude
- HTC One M8 vs Samsung Galaxy S5: 2014's big-hitters compared
- Windows XP end of life: key information
- How to upgrade from Windows XP to Ubuntu
- The great iPhone ripoff and how it works
- Heartbleed: what you need to know and do
- Data recovery: inside the clean room
- Best tablet PCs to buy in 2014
- How much RAM do you really need?
- News of the weird: the strangest ever tech stories
- Five hyped technologies: disruptive or not?
- Piracy's dying: why we're all going straight
- Office: should you buy it, rent it - or dump it?
- Why laptops with serial ports matter to the Internet of Things
- Make your mobile battery last longer
- Small steps into handling Big Data
- Nexus 5: does it really run stock Android?
- How to get broadband to a garden office
- How to write your company's IT security policy
- Raspberry Pi and Wolfram: a must-have for every child
- Could you get by with Office Web Apps?
- The best Android antivirus apps for 2014
- Headings vs headers: how to use both in Word