Cisco Catalyst 8200系列边缘平台数据表

Cisco® Catalyst® 8200平台安装XE SD-WAN软件交付思科为小型分支机构提供安全的云级SD-WAN解决方案。这些平台是专门为性能和集成的SD-WAN服务而构建的,同时还具有从云端或本地一起提供安全性和网络服务的灵活性。它们有各种各样的接口选项可供选择,并向后兼容现有的WAN、LAN和语音模块。Catalyst 8200系列由思科IOS XE(一种完全可编程的软件架构)和API支持提供支持,可以促进大规模自动化,在将工作负载迁移到云端的同时实现零接触IT功能。这些平台还提供了值得信赖的解决方案2.0基础设施,通过高级完整性验证和修复威胁,保护平台免受威胁和漏洞的侵害。

8200系列非常适合中小型企业分支机构,具有最优的性价比和集成的SD-WAN服务。

Catalyst 8200系列边缘平台提供两种型号:C8200L-1N-4T适用于具有符合sase标准、基于云的安全要求的小型分支机构;C8200-1N-4T适用于具有更高吞吐量、规模和业务灵活性要求的中小型分支机构。除了支持符合sase标准的基于云的安全服务,C8200-1N-4T还通过基于容器的应用程序提供了一个灵活的一流的本地安全服务系统,使用美国第三方生态系统。

产品概述

产品亮点

 产品亮点

产品特性

好处和描述

多核处理器

?  C8200-1N-4T uses an Intel ® x86 CPU with 8 GB DRAM memory default
?  C8200L-1N-4T uses an Intel x86 CPU with 4 GB DRAM memory default
?  High-performance multicore processors support high-speed WAN connections
?  Dynamic core allocation architecture will repurpose unused cores into forwarding entities as per the user?s configuration

嵌入式IPsec VPN硬件加速

?  C8200-1N-4T enables up to 1 Gbps IPsec traffic
?  C8200L-1N-4T enables up to 500 Mbps IPsec traffic
?  Increases scalability for IPsec throughput requirements
?  SSL and crypto hardware acceleration

集成千兆以太网端口

?  Provides four built-in Ethernet WAN ports
?  Two Ethernet ports are Small Form-Factor Pluggable (SFP) and two are RJ45 ports, enabling fiber as well as copper connectivity

DRAM

?  C8200-1N-4T ships with 8 GB DRAM
?  C8200L-1N-4T ships with 4 GB DRAM
?  C8200-1N-4T can be upgraded to 16 GB and 32 GB DRAM for higher scale and performance
?  C8200L-1N-4T can be upgraded to 8GB, 16 GB and 32 GB DRAM for higher scale and performance

闪存支持

?  Both models have an integrated onboard 8-GB flash which is not upgradable. M.2 storage provides flash upgrade options

M.2存储

?  The C8200-1N-4T is shipped with default 16G M.2 storage and can be upgraded to 32G M.2 USB and 600G M.2 Non-Volatile Memory Express (NVMe) Storage
?  The C8200L-1N-4T does not ship with a default M.2 storage but can be upgraded to 16G, 32G USB and 600G M.2 Non-Volatile Memory Express (NVMe) Storage

电力供应

?  Both models use an internal, fixed AC power supply
?  Power over Ethernet (PoE) is available as an option
?  PoE ports added in the Network Interface Module (NIM) slot will require an additional external PoE power supply

模块化和外形因素

?  1-Rack Unit (1RU) form factor
?  Supports NIM and Pluggable Interface Module (PIM) slots

集成安全

?  Hardware-anchored Secure Boot and Secure Unique Device Identification (SUDI) support for Plug and Play to verify the identity of the hardware and software

平台详细信息

模块和配置

平台规范

型号

描述

1G端口数量

插槽

默认内存

默认存储(M.2 SSD)

C8200-1N-4T

C8200 1RU w/ 1 NIM slot and 4x 1 Gigabit Ethernet WAN ports

4

1 NIM

1 PIM

8 GB

16 GB

C8200L-1N-4T

C8200L 1RU w/ 1 NIM slot and 4x 1 Gigabit Ethernet WAN ports

4

1 NIM

1 PIM

4 GB

No

平台的性能

思科控制器模式(SD-WAN)性能规范

型号

C8200-1N-4T

C8200L-1N-4T

SD-WAN的IPsec吞吐量

Up to 1 Gbps

Up to 500 Mbps

SD-WAN IPsec吞吐量(IMIX)*)

900 Mbps

400 Mbps

SD-WAN覆盖隧道规模

2500

1500

 思科自主模式(非SD-WAN)性能规范

型号

C8200-1N-4T

C8200L-1N-4T

IPv4转发吞吐量(1400 bytes)

Up to 3.8 Gbps

Up to 3.8 Gbps

IPsec吞吐量(1400 bytes)

Up to 1 Gbps

Up to 500 Mbps

IPsec SVTI (Static Virtual Tunnel Interface)隧道个数

2500

1500

思科自治模式(非sd - wan)系统可扩展性

型号

C8200-1N-4T

C8200L-1N-4T

每个系统的访问控制列表(ACLs)数量

4000

4000

每个系统的IPv4访问控制条目(ACEs)数量

72,000

72,000

IPv4路由数量

1.6M with default 8 GB, up to 4M with 32 GB

800,000 with default 4 GB, up to 4M with 32 GB

IPv6路由数量

1.5M with default 8 GB, up to 4M with 32 GB

800,000 with default 4 GB, up to 4M with 32 GB

队列数量

16,000

16,000

NAT会话数量

1.2M with default 8 GB, up to 2M with 32 GB

600,000 with default 4 GB, up to 2M with 32 GB

防火墙会话数量

512,000

512,000

VRF实例数量

4000

2000

平台整体优势

Cisco SDWAN加速服务

思科SD-WAN是一组智能软件服务,允许您在各种WAN传输链路上可靠、安全地连接用户、设备和分支机构位置。Cisco Catalyst 8000 Edge平台系列可以跨最佳网络动态路由流量。根据最新的应用和网络状况链接,提供卓越的应用体验。使用Cisco SD-WAN,您可以严格控制应用程序性能、带宽使用、数据隐私和WAN链接的可用性。这种控制是至关重要的,因为分支机构使用本地和云控制器来执行更多的关键任务业务。

应用程序性能优化

确保SD-WAN网络符合服务水平协议(sla)并保持强大的性能,即使网络出现问题。通过分支多云访问,您可以通过从SD-WAN控制器推送一个简单的模板来加速软件即服务(SaaS)应用程序。TCP优化、FEC (Forward Error Correction)和数据包复制等特性增强了应用程序的性能,为用户提供了更好的体验。

多层安全

现在,您可以将传统的、复杂的广域网转移到具有集成安全性的敏捷的、软件定义的广域网。Catalyst 8200系列边缘平台将分支机构连接到互联网和云,提供业界领先的网络攻击保护。来自分支的安全直接互联网访问(DIA)有助于优化分支工作负载,以提高性能,特别是对于云托管应用程序。同时,安全DIA有助于确保您的分支免受外部威胁。

应用程序的可见性

应用程序和用户比以往任何时候都更加分散,互联网已经有效地成为新的企业广域网。随着组织继续拥抱互联网、云和SaaS,网络和IT团队面临着通过网络和服务提供一致和可靠的连接和应用程序性能的挑战。我拥有或直接控制。

Catalyst 8200系列边缘平台集成了思科千眼互联网和云智能。IT经理现在已经将可见性(包括逐跳分析)扩展到网络底层、SD-WAN覆盖的主动监视以及SaaS应用程序的性能度量。这种粒度可见性最终降低了问题识别的平均时间(MTTI)并加快了解决时间。

统一通信

Catalyst 8200系列Edge平台在SD-WAN和传统的思科IOS XE软件功能堆栈中提供丰富的语音服务。思科是唯一一家将模拟和数字IP直接集成到单个客户端设备(CPE)中的SD-WAN供应商,从而降低了资本支出和运营成本。在SD-WAN模式下,Catalyst 8200系列还可以通过SRST(可生存远程站点电话)帮助防止内部和外部中断,使分支路由器能够承担呼叫控制PBX的角色,以实现电话的可生存性。它们还继续支持一长串传统的思科IOS XE语音用例,如思科统一边界元素(CUBE)会话边界控制器(SBC)、思科统一通信管理器Express (CUCME)、可生存远程站点电话(SRST)、ISDN和IP语音。

具有可编程软件架构的云原生敏捷性

思科继续在Catalyst 8200系列上提供功能丰富的传统思科IOS XE路由堆栈。IP路由、IPsec、QoS、防火墙、NAT、基于网络的应用识别(NBAR)、灵活的NetFlow (FNF)和许多其他功能都是思科IOS XE的一部分,这是一个完全可编程的软件架构,具有API支持和各种协议和配置。使用集成的软件映像和单个二进制文件,您现在可以在Cisco IOS XE SD-WAN和Cisco IOS XE之间进行选择。当你选择这样做时,你可以很容易地从一个移动到另一个。

5G功能

Catalyst 8200系列Edge平台专为高速Cat18 LTE和5G网络而设计。随着Cat18 LTE和5G的更高吞吐量,无线广域网解决方案正在成为主要传输用例的可行选择。这些平台既支持集成可插拔模块,也支持具有Cat18 LTE和5G功能的外部蜂窝网关,以提高吞吐量,解决这些用例。可以根据具体的分支选择集成PIM模块或外部蜂窝网关?或串联工作,形成高可用性双活蜂窝广域网解决方案

接口的灵活性
第二层(交换)和第三层(路由)端口

Catalyst 8200系列继续支持思科提供的一种灵活的单一设备解决方案,同时具备小型分支的交换和路由功能。Layer 2 NIM模块提供了4端口和8端口的交换功能,同时具备PoE功能,而基于NIM的Layer 3端口模块则提供了扩展的Layer 3端口密度,除了四个内置的Layer 3端口外。

语音模块

Catalyst 8200系列延续了Cisco?S支持多种语音模块,满足分支机构的不同语音需求。语音模块的示例包括外汇交换站(FXS)、外汇兑换局(FXO)、数字信号处理器(DSP)等。

支持模块

模块支持

产品编号

描述

以太网三层接口

C-NIM-1M

1-port 2.5/1Gbps RJ-45 WAN, 90W Poe 802.3 af/at/bt NIM

C-NIM-2T

2-port 100Mbps/1Gbps dual-mode RJ45/SFP NIM with WAN MACSec

局域网模块

NIM-ES2-4

Cisco 4-port Gigabit Ethernet switch NIM

NIM-ES2-8

Cisco 8-port Gigabit Ethernet switch NIM

NIM-ES2-8-P

Cisco 8-port Gigabit Ethernet switch NIM with PoE 802.3 af/at support

语音模块

NIM-2FXO

2-port FXO NIM

NIM-4FXO

4-port FXO NIM

NIM-2FXSP

2-port FXS NIM

NIM-4FXSP

4-port FXS NIM

NIM-2FXSP/4FXOP

2-port FXS and 4-port FXO NIM

NIM-4E/M

4-port E/M NIM

NIM-2BRI-NT/TE

2-port BRI (NT and TE) NIM

NIM-4BRI-NT/TE

4-port BRI (NT and TE) NIM

NIM-PVDM-32

32-channel voice DSP NIM

NIM-PVDM-64

64-channel voice DSP NIM

NIM-PVDM-128

128-channel voice DSP NIM

NIM-PVDM-256

256-channel voice DSP NIM

NIM-1MFT-T1/E1

1-port multiflex trunk voice/clear-channel data T1/E1 module

NIM-2MFT-T1/E1

2-port multiflex trunk voice/clear-channel data T1/E1 module

NIM-4MFT-T1/E1

4-port multiflex trunk voice/clear-channel data T1/E1 module

NIM-8MFT-T1/E1

8-port multiflex trunk voice/clear-channel data T1/E1 module

DSL/宽带

NIM-VAB-A

Multi-mode VDSL2/ADSL/2/2+ NIM Annex A

NIM-VA-B

Multi-mode VDSL2/ADSL/2/2+ NIM Annex B

NIM-VAB-M

Multi-mode VDSL2/ADSL/2/2+ NIM Annex M

NIM-4SHDSL-EA

Multi-mode G.SHDSL NIM

信道化T1/E1和ISDN PRI

NIM-1CE1T1-PRI

1-port Multiflex trunk voice/channelized data T1/E1 module

NIM-2CE1T1-PRI

2-port Multiflex trunk voice/channelized data T1/E1 module

NIM-8CE1T1-PRI

8-port Multiflex trunk voice/channelized data T1/E1 module

ISDN BRI WAN接口

NIM-2BRI-S/T

2-port ISDN BRI WAN interface card for data

NIM-4BRI-S/T

4-port ISDN BRI WAN interface card for data

串行广域网接口

NIM-1T

1-port serial high-speed WAN interface card

NIM-2T

2-port serial high-speed WAN interface card

NIM-4T

4-port serial high-speed WAN interface card

异步广域网接口

NIM-16A

16-port Asynchronous Module

NIM-24A

24-port Asynchronous Module

无线广域网(LTE)

P-5GS6-GL

5G Sub-6 GHz Pluggable ? Global

P-LTEAP18-GL

4G/CAT18 LTE Advanced Pro Pluggable – Global

P-LTEA-EA

4G/CAT6 LTE Advanced Pluggable for North American and Europe

P-LTEA-LA

4G/ CAT6 LTE Advanced Pluggable for APAC, ANZ, and LATAM

NIM-LTEA-EA

LTE Advanced for Europe and North America

NIM-LTEA-LA

LTE Advanced for Asia Pacific, Australia and LATAM

内存,存储和附件选项

内存,存储和附件选项

产品编号

描述

MEM-C8200-8GB

Cisco C8200 Edge Platform – 8 GB DRAM Memory

MEM-C8200-16GB

Cisco C8200 Edge Platform ? 16 GB DRAM Memory

MEM-C8200-32GB

Cisco C8200 Edge Platform ? 32 GB DRAM Memory

M2USB-16G

Cisco C8000 Edge Platform ? 16 GB M.2 USB SSD Storage

M2USB-32G

Cisco C8000 Edge Platform ? 32 GB M.2 USB SSD Storage

SSD-M2NVME-600G

Cisco C8000 Edge Platform ? 600 GB M.2 NVMe SSD Storage

C8200-RM-19

Cisco C8200 1RU Edge Platform – Rack Mount kit – 19″

C8200-RM-23

Cisco C8200 1RU Edge Platform – Rack Mount kit – 23″

C8200-WM-1R

Cisco C8200 1RU Edge Platform ? Wall Mount Kit

C8200-RFID-1R

Cisco C8200 1RU Edge Platform – RFID

C8200-NIM-BLANK

Cisco C8200 NIM Blank

C8200-PIM-BLANK

Cisco C8200 PIM Blank

光模块和收发模块

电力供应

电源规格

电源特性

PWR-CC1-150WAC optional external PSU for PoE

 

最大额定功率

100W

150W

For PoE only

PoE budget: 150W

输入电压范围和频率

90 to 264 VAC

47 to 63 Hz

90 to 264 VAC

47 to 63 Hz

电源效率

85%

Avg 89%

输入电流

1.5A max

2A max

输出评级

12V 8.4A

54V 2.78A

输出保持时间

20 ms

10 ms

电源输入插座

IEC 320 C14

IEC 320 C14

电源线额定功率

10A

10A

资产管理: Catalyst 8200系列边缘平台具有内置的RFID标签,其中包含序列号和产品ID,可通过商用RFID读卡器轻松进行资产和库存管理。RFID标签是外部的,如果需要,可以轻松取下,或者在订购时取消选择。它还具有可伸缩的标签标签,提供相同的信息。标签上的QR码使资产管理变得简单,只需使用智能手机QR码阅读器扫描标签即可。

软件需求

Cisco DNA Software for Catalyst 8200系列为企业分支网络提供全面的解决方案。

最低软件要求

产品编号

描述

最低软件要求

C8200-1N-4T

Cisco Catalyst 8200 Series Edge Platform

Cisco IOS XE Software Release 17.4.1

C8200L-1N-4T

Cisco Catalyst 8200 Series Edge Platform

Cisco IOS XE Software Release 17.5.1

ThousandEyes需求

型号

要求

Cisco ThousandEyes

ThousandEyes is supported with a minimum 8 GB DRAM and 8 GB bootflash/storage. Additional memory and storage will be necessary for concurrently running the ThousandEyes agent with containerized SD-WAN security services.

自主模式的软件特性和协议

型号

描述

协议

IPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), Border Gateway Protocol (BGP), BGP Route Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast Sparse Mode (PIM SM), PIM Source-Specific Multicast (SSM), Resource Reservation Protocol (RSVP), Cisco Discovery Protocol, Encapsulated Remote Switched Port Analyzer (ERSPAN), Cisco IOS IP Service-Level Agreements (IPSLA), Call Home, Cisco IOS Embedded Event Manager (EEM), Internet Key Exchange (IKE), ACLs, Ethernet Virtual Connections (EVC), Dynamic Host Configuration Protocol (DHCP), Frame Relay, DNS, Locator ID Separation Protocol (LISP), Hot Standby Router Protocol (HSRP), RADIUS, Authentication, Authorization, and Accounting (AAA), Application Visibility and Control (AVC), Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multicast, Multiprotocol Label Switching (MPLS), Layer 2 and Layer 3 VPN, IPsec, Layer 2 Tunneling Protocol Version 3 (L2TPv3), Bidirectional Forwarding Detection (BFD), IEEE 802.1ag, and IEEE 802.3ah

封装

Generic Routing Encapsulation (GRE), Ethernet, 802.1q VLAN, Point-to-Point Protocol (PPP), Multilink Point-to-Point Protocol (MLPPP), Frame Relay, Multilink Frame Relay (MLFR) (FR.15 and FR.16), High-Level Data Link Control (HDLC), serial (RS-232, RS-449, X.21, V.35, and EIA-530), and PPP over Ethernet (PPPoE)

路径管理

QoS, Class-Based Weighted Fair Queuing (CBWFQ), Weighted Random Early Detection (WRED), Hierarchical QoS, Policy-Based Routing (PBR), Performance Routing (PfR), and NBAR

加密算法

Encryption: Data Encryption Standard (DES), 3DES, Advanced Encryption Standard (AES)-128 or AES-256 (in Cipher Block Chaining [CBC] and Galois/Counter Mode [GCM])

Authentication: RSA (748/1024/2048 bit), ECDSA (256/384 bit)

Integrity: MD5, SHA, SHA-256, SHA-384, SHA-512

统一通信

Call Admission Control (CAC), Cisco Unified Boarder Element(CUBE) Session Border Controller(SBC), Cisco Unified Communications Manager Express (CUCME), (ISDN), RADIUS, RFC 4040-based clear channel codec signaling with Session Initiation Protocol (SIP), Resource Reservation Protocol (RSVP), RTP Control Protocol (RTCP), SIP for voice over IP (VoIP), Survivable Remote Site Telephony (SRST), Secure Real-Time Transport Protocol (SRTP), and voice modules

控制模式的软件特性和协议

型号

描述

核心功能

IPv4, IPv6, static routes, OSPF, EIGRP, BGP, Overlay Management Protocol (OMP), Application Aware Routing (AAR), Traffic Engineering, service insertion, zero trust, whitelisting, tamper-proof module, DTLS/TLS, IPsec, classification, prioritization, low latency queuing, remarking, shaping, scheduling, policing, mirroring, Multicast IPv4 support, service advertisement and insertion policy, Simple Network Management Protocol (SNMP), Network Time Protocol (NTP), DNS client, DHCP, DHCP client, DHCP server, DHCP relay archival, syslog, Secure Shell (SSH), Secure Copy (SCP), Cflowd v10 IPFIX export, IPv6 for transport side, Virtual Router Redundancy Protocol (VRRP), MPLS, NAT (DIA, service-side, overload/PAT, NAT64, etc.), NAT pools, split DNS, ACLs, BFD, NETCONF over SSH, CLI, NTP server support, BFD with service-side BGP, BGP community propagation to OMP, 6 SLA for AAR, Cisco TrustSec®/SD-Access (inline scalable group tag [SGT] propagation), custom app with Software-Defined AVC (SD-AVC), multicast AAR, dynamic on-demand tunnels, OSM, OSPFv3, route policies, multi-VRF support

封装

Generic Routing Encapsulation (GRE), Ethernet, 802.1q VLAN

应用程序的经验

QoS, FEC, Class of Service (CoS) marking, Weighted Random Early Detection (WRED), Hierarchical QoS, PBR, NBAR, SD-AVC, per-tunnel QoS, Cloud OnRamp for SaaS, Enhanced Office 365 traffic steering, direct access, FNF

加密算法

Encryption: AES-256 (in CBC and GCM modes), Internet Key Exchange (IKE), Cisco Public Key Infrastructure (PKI)

Authentication: AAA, RSA (2048 bit), ESP-256-CBC, HMAC-SHA1, ECDSA (256/384 bit)

Integrity: SHA-1, SHA-2

安全:C8200-1N-4T

Built-in end-to-end segmentation (VPNs), zone-based firewall (ZBFW), PKI, Cisco DNA Layer Security, Snort® IPS/IDS, URL filtering, Secure Malware Defense, Secure Malware Analytics, Application-Level Gateway (ALG) for ZBFW, Secure Internet Gateway (SIG)

安全:C8200L-1N-4T

Built-in end-to-end segmentation (VPNs), ZBFW, PKI, Cisco DNA Layer Security, SIG

统一通信

Cisco Unified Border Element (CUBE), Survivable Remote Site Telephony (SRST), Cisco Unified Communications Manager Express (CUCME) &, voice modules

Licensing

Catalyst 8200系列边缘平台仅提供Cisco DNA软件订阅、企业协议和托管服务许可协议(MSLA)的订阅。 

思科DNA堆栈:

·Cisco DNA Essentials

· Cisco DNA Advantage

· Cisco DNA Premier

网络堆栈:

·Network Essentials

·Network Advantage

规范

 机械规格

描述

规范

部件号码

C8200-1N-4T & C8200L-1N-4T

尺寸

1.73 x 17.25 x 11.8 in. (4.39 x 43.81 x 29.97 cm)

机架单元(RU)

1RU

底架重量

10 lb (4.54 kg)

输入电压

AC: 90 to 264 VAC

工作温度

32° to 104°F

(0° to 40°C)

储存温度

-40° to 150°F

(-40° to 70°C)

声学,两种型号:

声压

(标准/最大值)

54 dBA/69 dBA

声学,两种型号:

声音功率

(标准/最大值)

68 dBA/80 dBA

相对湿度工作和非工作非冷凝

Ambient (noncondensing) operating: 5% to 85%

Ambient (noncondensing) nonoperating and storage: 5% to 95%

高度

0 to 10,000 feet

(0 to 3050 meters)

平均无故障时间(MTBF)

692,577 hours

 安全性和合规性

描述 规范

安全认证

UL 60950-1

CAN/CSA-C22.2 No. 60950-1

EN 60950-1

IEC 60950-1

AS/NZS 60950-1

IEC/EN 60825 Laser Safety

FDA: Code of Federal Regulations Laser Safety

EMC (emissions)

47 CFR Part 15 Class A

ICES 003 Class A

AS/NZS CISPR 32 Class A

CISPR 32 Class A

EN55032 Class A

VCCI-CISPR 32 Class A

CNS-13438 Class A

KN32 Class A

IEC/EN 61000-3-2: Power Line Harmonics

IEC/EN 61000-3-3: Voltage Fluctuations and Flicker

EMC (immunity)

IEC/EN-61000-4-2: Electrostatic Discharge Immunity

IEC/EN-61000-4-3: Radiated Immunity

IEC/EN-61000-4-4: Electrical Fast Transient Immunity

IEC/EN-61000-4-5: Surge AC, DC, and Signal Ports

IEC/EN-61000-4-6: Immunity to Conducted Disturbances

IEC/EN-61000-4-8: Power Frequency Magnetic Field Immunity

IEC/EN-61000-4-11: Voltage DIPS, Short Interruptions, and Voltage Variations

KN35

EMC (ETSI/EN)

EN300 386: Telecommunications Network Equipment (EMC)

EN55032: Multimedia Equipment (Emissions)

EN55024: Information Technology Equipment (Immunity)

EN55035: Multimedia Equipment (Immunity)

EN61000-6-1: Generic Immunity Standard