ISR 1000 and C1000 is a same?

[wmendozaOpenlink]

Hi team We have a client and they want put a very range of routers for small offices in an SDWAN architecture. They want use C112X and C116X and run all UTD features (IPS/IDS/URL-FILTERING/DNS security/Cisco Umbrella) but we can't get which are the feature support based on Controller mode for them.. I have a documentation but it only mentions ISR1100, nothing about C112X or C116X... 

I have this, but this is from a CISCO LIVE Section, but i'm confused, ISR 1000 and C1000 is a same?

Does anyone have any documentation to know if IPS/IDS/URL-FILTERING/DNS security/Cisco Umbrella is supported on C112x and C116X, as well as the image and the link that I am posting? and more importantly, all security features are supported in C1000?

https://community.cisco.com/t5/networking-knowledge-base/minimum-resource-requirements-for-appqoe-thousandeyes-amp-utd/ta-p/4728550

[Flavio Miranda]

Hi

 C comes from Catalyst.  C1000 is a switch not a router.

[wmendozaOpenlink]

Hi,

Ok, but why Cisco then calls a series of Routers as C116X, C112X??? If you see the image you will notice that they talk about ISR1100 and then call a C116x or C112x series

[M02@rt37]

Hello @wmendozaOpenlink,

C1161-X stand for Cisco 1161-X, it's part of Cisco ISR Series, like the others.

https://www.cisco.com/c/en/us/products/collateral/routers/1000-series-integrated-services-routers-isr/datasheet-c78-739512.html

"ISR 1000 and C1000 is a same?" -- In this case--- Yes

On the other hand we have Catalyst Cisco 1000 series, as mentioned @Flavio Miranda, there are Switches.

https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-1000-series-switches/nb-06-cat1k-ser-switch-ds-cte-en.html?oid=otren019232

[Flavio Miranda]

Confuse I agree. The best think to do is take the part njmber and look the data sheet. 

[wmendozaOpenlink]

hi @Flavio Miranda  thanks for all your support....

[Kanan Huseynli]

Hi,

please see note from below document, UTD features (IDS/ISP, Firewall, URL filtering etc.) are supported on below platform.

"*Note: This does not include ISR1100-4G/6G. UTD features are supported only on ISR1k platforms that end with an X."

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-security-policy-design-guide.html

By the way, Cisco uses "Catalyst" keyword for recent routers as well. 8000 series routers are catalyst routers, although mainly this word belongs to switches.

Also, recommended resource for ISR1100 or ISR1100X family is recent great Ciscolive session:

https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2023/pdf/BRKARC-2881.pdf

ISR1100X  models support both Viptela OS and IOS XE SD-WAN, if you choose IOS XE SD-WAN, you will have rich SD-WAN functionality with full security support (with X at the end, not previous ISR1100 series).

[wmendozaOpenlink]

Hi @Kanan Huseynli 

Thanks for replay my question....Do you know if i can use the full UTD function on these routers or i can only use some features...

I see this image, and I have some doubts, can you help me? 

[Kanan Huseynli]

From which live session is this doc? To be honest, I didn't find nowhere about limitations. Only this topic mentions that TCP optimization and UTD are not supported together.

https://community.cisco.com/t5/networking-knowledge-base/minimum-resource-requirements-for-appqoe-thousandeyes-amp-utd/ta-p/4728550#toc-hId--824379187

I think, better to ask your region account manager with details of your environment (which features and how you to implement) for guaranteed result. Because, even though device supports all features, running all of them may now give positive result,for example, after some level of user traffic, so you will need another platform for better performance.

[wmendozaOpenlink]

Hi, @Kanan Huseynli , This is from ciscolive BRKRST-3404,  https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/BRKRST-3404.pdf

I will keep checking, but I really appreciate all the time you take to support me and answer me...

Can I ask you one more question?
In case you want to use TCP optimization to send traffic (streaming video live) from my datacenter (C8500) to my branch office with a cEdge C112X (for example) and i can apply QoS to prioritize streaming traffic video live, and not TCP Optimization...

I mean appQoE, it can uses as an option to TCP optimization, since from what I understand UTD and TCP optimization cannot work at the same time on my cEdge C112X... this is a best way?

[Kanan Huseynli · Accepted solution]

You are welcome, glad to support colleagues as possible as I can

TCP Optimization is for TCP traffic, you can't optimize UDP. Streaming traffic is UDP based, so you can't do any optimization (in UDP header, there is no field which we can use for optimization). But since UDP is sensitive to packet loss/ delay ,you can implement QoS. You can match the traffic, map to Queue0 (LLQ in SD-WAN implementation) and shape at egress interface (if ISP/SP policies your traffic).

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/qos/ios-xe-17/qos-book-xe/forwarding-qos.html

But you can also use techniques like FEC or packet duplication from AppQoE features. FEC is described in below link and Packet Duplication in next chapter.

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/forward-error-correction.html

Using DRE you can only optimize TCP. So, DRE is also not applicable to UDP based traffic (voice; video; live streaming). See interesting F.A.Q from community page:

• Is DRE applicable to TCP traffic only?
  
  Yes, DRE is applicable only for TCP traffic

https://community.cisco.com/t5/networking-knowledge-base/appqoe-amp-waas-faq/ta-p/4532236

In general, for increasing UDP performance, you can use FEC or packet duplication, in paralel you can implement QoS for traffic prioritization.

For increasing TCP performance, you can use TCP optimization using AppNavXE (even with traditional WAAS Accelerators) or DRE.