ASR920-12SZ-IM - IPSec, NAT and QoS Traffic Shaping

[Aaron.Deacon]

Hi, 

We are currently looking at purchasing some ASR920-12SZ-IM's for our edge and have concerns over some features that may or may not be available on this device. 

1 - Do these devices allow me to create a IPSec VPN between two of them over the WAN to allow site-to-site communication?

2 - Can we static NAT public IP's that hit our edge to LAN addresses?

3 - Does the device support traffic shaping like the following

Source - *Subnet(s)*

Destination - Interface (Internet)
Shape - 100Mbps

Any advice would be appreciated

Regards

A.

[Mark Malone]

Hi
yes to your questions

Cisco ASR920 Family, ASR-920-12SZ-IM (uPOE, IPsec, NAT/PAT & GNSS Support)-
Ipsec

Software Release & Features: RLS 3.16 Jul 2015
-8xT1/E1 IM support
-802.1ad, REP, G.8032, MSTP, Flexlink, LACP, MST on EVC BD, 8021.ag, Y.1731 PM (DM and SLM), LLDP, SFP based LMM, CFM over C-VLAN, IGMP Snooping over EFP and TEFP, RSPAN, 802.1ad x-connect support
-IPv6 Routing, SSM, RSVP, uRFP, remote LFA for L2VPN, BGP PIC, BGP graceful shutdown, HSRP,/VRRP BFD echo mode offload in HW, IS-IS support for BFD over IPv6, Static Route support for BFD over IPv6, TWAMP Responder, Auto-IP, PIMv2, VRRPv3
-H-QoS, WRED, QoS ACL, IPv6 QoS, QoS for EthernetChannel, Egress policing and marking Egress policing on non priority queues, L2 QoS ofr AToM, QoS Match EFP, Multi-level priority queue, Ethernet Loopback with QoS, IPv6 QoS ACL, EXP Mapping through Tablemap, CoPP
-EoMPLS, VPLS, MPLS VPN, MPLS-TE Link and Node protection, 6PE, 6VPE, H-VPLS, MPLS-TP, MPLS-TP OAM, MPLS-TP with linear protection, Bi-directional MPLS-TP LSP
-1588 OC and BC, NTP timestamping, SyncE, NTP
-Disable MAC learning, L2 ACL, Broadcast/Multicast Suppression / Storm-control , Control Plane Policing
-Autonomic, SPAN/ IPSLA, SNMP, RMON, Y.1731 MIB, E-LMI, EEM, Dying Gasp, Smart Call Home, onePK basic service sets (no PSS or DPSS), Autonomic Networking


https://www.cisco.com/c/en/us/td/docs/routers/asr920/configuration/guide/sec_vpn/sec-ipsec-xe-3s-book-920.html


https://www.cisco.com/c/en/us/td/docs/routers/asr920/configuration/guide/qos/qos-guidelines-xe-3-13-asr920-book.html#ID-1374-000015d7