The Cisco FLSASR1-FW is the Firewall License designed specifically for the Cisco ASR 1000 Series Aggregation Services Routers, enhancing security capabilities across enterprise WAN edge deployments. This license activates firewall functionalities on ASR1000 platforms equipped with fixed Ethernet line cards such as the ASR1000-2T+20X1GE (twenty 1 Gigabit Ethernet ports and two 10 Gigabit Ethernet ports) and ASR1000-6TGE (six 10 Gigabit Ethernet ports). These line cards deliver 40-Gbps full-duplex traffic forwarding using a fixed-port interface design.
Key Capabilities and Features
- Rich Ethernet Layer 2, Layer 3, IP, IPv6, and Multiprotocol Label Switching (MPLS) packet-processing capabilities, consistent with Cisco ASR 1000 Series platforms.
- Advanced Quality-of-Service (QoS) functions including ingress and egress QoS, egress queuing, and high- and low-priority lanes to Embedded Services Processors for low-latency forwarding.
- Support for Small Form-Factor Pluggable (SFP) and 10-Gbps SFP (XFP) modules, configurable for copper or fiber media types and single- or multimode fiber optical requirements.
- Hardware readiness for MACsec on specific port adapters: 18-port 1 Gigabit Ethernet, 10-port 10 Gigabit Ethernet, 2-port 40 Gigabit Ethernet, and 1-port 40 Gigabit Ethernet port adapters.
- LED indicators: one power LED, one line-card status LED, and port or link-status LEDs for 22 ports on fixed line cards.
The license integrates seamlessly with the Cisco ASR 1000 Series Modular Interface Processor (ASR1000-MIP100), a full-duplex 100-Gbps modular Ethernet line card hosting up to two Ethernet Port Adapters (EPAs). EPAs introduce 40 Gigabit Ethernet and 100 Gigabit Ethernet connectivity, maintaining feature parity with SPA interface processors.
Platform Integration
Fixed Ethernet line cards replace SPA interface processors, occupying the same slot without Shared Port Adapter (SPA) compatibility. The modular interface processor supports EPAs exclusively. This design achieves greater Ethernet density and lower price per port while preserving full platform functionality.
- Differences from SPA Interface Processors: No SPAs on fixed or modular cards; built-in Ethernet ports on fixed cards only; EPAs on modular processors only.
Advanced Security and Protocol Support
In conjunction with firewall activation, the ASR 1000 Series supports MACsec encryption via dedicated licenses, ensuring secure data transmission across high-speed interfaces. Compatible with a range of chassis, route processors, and embedded services processors for scalable deployments.
Environmental sustainability is prioritized, with compliance to product material content laws, electronic waste regulations (WEEE), and detailed packaging data availability.