Cisco Catalyst 4500 Series Access Gateway Module Data Sheet [Cisco Catalyst 4000 Series Switches]

Data Sheet

Cisco Catalyst 4500 Series
Access Gateway Module

Cisco Catalyst 4500 Access Gateway Module integrates secure WAN and voice services into the Cisco Catalyst 4500 Series LAN switches.

Figure 1
Cisco Catalyst 4500 Series with Secure WAN and Voice Services

The Cisco^® Catalyst^® 4500 Access Gateway Module (AGM) enables organizations to implement integrated IP telephony and WAN services at campus and integrated branch office sites. Combining the WAN and voice infrastructure into Cisco Catalyst 4500 Series switches gives organizations the ability to reduce network complexity, enhance employee productivity, and improve network deployment times through an integrated platform while preparing for data, voice, and video convergence across the enterprise.

The Cisco Catalyst 4500 AGM can be deployed in both Cisco Catalyst 4500 Series and Catalyst 4000 Series chassis running either Catalyst OS or Cisco IOS^® Software and is fully compatible with all supervisor engines. Multiple AGMs can be deployed in the chassis to support higher density requirements or provide a higher level of availability and resiliency.

Features and Benefits

The primary features of the Cisco Catalyst 4500 AGM include telephony and WAN routing.

Telephony Features

Survivable Remote Site Telephony (SRST)—The Cisco CallManager can be used for centralized control of the Cisco Catalyst 4500 AGM at campus and branch sites. The AGM supports both MGCP and H.323v2 interfaces to the Cisco CallManager. SRST enables a resilient IP telephony service when connectivity to the Cisco CallManager is lost. The AGM provides SRST for up to 240 IP phones.
Audio-conferencing—The digital signal processor (DSP) farm on the Cisco Catalyst 4500 AGM can be used to support on-demand and dedicated, reservation-less audio-conferencing services for local and remote users. Audio transcoding between G.729 and G.711 enables efficient communications between callers using different codecs (for example, campus phones using G.711 and remote site phones using G.729).
Fax/modem/PBX voice gateway—Foreign exchange station (FXS) ports on the Cisco Catalyst 4500 AGM can support up to 22 fax machines, speakerphones, modems, analog phones, and PBX lines to supplement IP phones at a campus or branch.
Public Switched Telephone Network (PSTN) voice gateway—The Cisco Catalyst 4500 AGM incorporates a 96-channel DSP farm with up to 6 digital (T1, E1, Primary Rate Interface [PRI], Basic Rate Interface [BRI]) or analog Foreign exchange office (FXO) interfaces with compression and echo cancellation services for connectivity to the PSTN or toll bypass with ISDN dial backup. Signaling support includes T1 channel-associated signaling (CAS), BRI signaling, ISDN PRI, Q.SIG, and R2 signaling.

WAN Routing Features

Cisco IOS Multiprotocol routing—The Cisco Catalyst 4500 AGM supports multiprotocol routing with support for IP, IPv6, Internetwork Packet Exchange (IPX), AppleTalk and System Network Architecture (SNA) as well as Web Cache Control Protocol version 2 (WCCPv2).
WAN interfaces—Up to six WAN interfaces are supported per module, including T1, E1, PRI, BRI, and serial ports.
WAN security—Security options include firewall, intrusion detection system (IDS), Network Address Translation (NAT) and hardware-based IP security (IPsec) with 3DES data encryption for secure VPN or public Internet connectivity.
Quality of service (QoS)—Features such as the Resource Reservation Protocol (RSVP), Protocol Independent Multicast (PIM), traffic shaping, custom and priority queuing, Low Latency Queuing (LLQ), and Weighted Fair Queuing (WFQ) ensure a consistent QoS for data, voice, and video applications over the WAN.

Benefits for Campus and Branch Office Deployments

The Cisco Catalyst 4500 AGM may be deployed in a range of applications where WAN connectivity or integrated IP telephony services are required. As an ideal solution for medium to large integrated branch offices, the AGM can be deployed with both WAN interfaces and IP telephony services (including voice gateway telephony services) or only with WAN connectivity and services. In the wiring closet, the AGM enables the deployment of IP telephony services at the network edge boosting scalability and enhancing availability.

The benefits of deploying the Cisco Catalyst 4500 AGM include:

Reduced network complexity—Deploying the AGM in the Cisco Catalyst 4500 Series provides a complete, integrated branch office solution combining robust intelligent LAN switching with WAN routing, and comprehensive IP telephony support. Consolidating the infrastructure for LAN switching, WAN routing, and telephony improves deployment times and reduces network complexity and administration overheads, resulting in enhanced productivity of the IT staff. Integrated voice gateway services enable VoIP toll bypass with compression over the IP WAN to reduce WAN costs, offering an economical alternative to PSTN telephony while the modular interfaces shared with the Cisco 1700/2600/3700 routers reduces the cost of sparing and network support. Centralized MGCP and H.323 call control with the Cisco CallManager and SRST reduce network administration costs.
Employee productivity—Availability of consistent Cisco CallManager and Cisco Unity services across branch and campus sites enhances the productivity of remote employees. The built-in audio-conferencing bridge makes six party audio-conferencing available to all employees, reducing the cost of this essential business productivity application while WCCP support enables deployment of cache engines to enhance the effective WAN download speeds.
Investment protection—The Cisco Catalyst 4500 AGM is based on Cisco IOS Software and provides a suite of multiprotocol routing services to protect investments in IPX, AppleTalk, and SNA equipment while providing a migration path to IP or IPv6. The AGM also supports analog fax machines, speakerphones, and PBXs, providing a migration path to IP telephony.
Enhanced WAN security—Integrated Cisco IOS Software with firewall, IDS, NAT, as well as software and hardware accelerated VPN encryption services increase network security.
High-availability design—Integrated SRST, ISDN dial backup, and Hot Standby Router Protocol (HSRP) support enhance the resiliency of the telephony and WAN routing services.

Hardware and Interface Overview

Figure 2 details the physical interfaces and modularity of the Cisco Catalyst 4500 AGM.

Figure 2
Cisco Catalyst 4500 Access Gateway Module

The Cisco Catalyst 4500 AGM incorporates:

Cisco IOS WAN routing and telephony with Cisco Catalyst 4500 Series switches and Cisco Catalyst 4000 Series switches
One Gigabit Ethernet backplane interface supporting 802.1q with multiple virtual LANs (VLANs)
One Fast Ethernet front-panel interface for management
One console serial port for management
Onboard support for the 96-channel DSP set (4x6 SIMMs)
One Flexslot for high-density analog interface modules, including the 16-port or 8-port FXS module (RJ21)
One slot for a VPN/Encryption Services Adapter for hardware-accelerated encryption
Two Voice Interface Card/Multi-Flex Voice/WAN Interface Card/WAN Interface Card (VIC/VWIC/WIC) slots and one VIC/VWIC slot for selected Cisco 1700/2600/3700 series interface cards

Tables 1 and 2 below include a list of supported modules.

Features

Voice Gateway Features

Cisco IOS IP routing and H.323v2 and MGCP voice-over-IP (VoIP) gateway functions
DSP farm supporting up to 96 digital voice channels with G.711 or G.729a voice or analog voice, conferencing, and transcoding
Fax relay, G.711 fax pass-through and modem pass-through services compatible with other Cisco IOS gateways
Time-division multiplexing (TDM) switching between analog and digital ports enables faster connection speeds for modems and fax machines

Advanced Voice Services

Conferencing—Each DSP bridges up to six participants in a single on-demand or dedicated, reservation-less conference call.
Transcoding—Each DSP bridges up to two full-duplex channels from G.711 to G.729a.
Voice gateway—Each DSP supports up to four digital voice channels or analog ports, or two channels per DSP for VIC modules.

Network Management

Simple Network Management Protocol (SNMP) compliant
CiscoWorks interface for configuration
Cisco Voice Manager
Cisco CallManager

Cisco Catalyst 4500 AGM 16-Port or 8-Port (RJ-21) FXS Modules

The Cisco Catalyst 4500 16-port or 8-port (RJ-21) FXS modules for the AGM provide integrated analog ports. By providing connectivity for fax machines, analog phones, speakerphones, and dial-up modems, these modules emulate a PSTN central office (CO) or PBX. See Figure 3.

Figure 3
Cisco Catalyst 4500 AGM 16-Port RJ-21 FXS Module

Cisco Catalyst 4500 AGM VPN/Encryption Service Adapter

The VPN/Encryption Service Adapter (ESA) optimizes the Cisco Catalyst 4500 AGM for VPNs. The ESA provides up to ten times the performance over software-only encryption by offloading the encryption processing from the router central processing unit (CPU). Ideal for use in branch offices to connect to the enterprise IP WAN, mobile users, partner extranets, or service provider managed-services customer premises equipment (CPE), the Cisco Catalyst 4500 AGM with the ESA delivers a rich integrated package of routing, firewall, IDS, and VPN functions. As an integral component of Cisco VPN solutions, the AGM with the ESA provides industry-standard encryption (IPsec), application-aware QoS and bandwidth management, and robust perimeter security options. See Figure 4.

Figure 4
Cisco Catalyst 4500 AGM VPN/Encryption Service Adapter

Features

Cisco fully supports the entire set of Request for Comments (RFCs) describing IPsec and related protocols, RFCs 2401-2410. In particular, Cisco supports the following features:

IPsec—IPsec uses encryption technology to provide data confidentiality, integrity, and authenticity between participating peers in a private network. Cisco provides full encapsulating security payload and authentication header support.
IKE—Based on the Internet Security Association Key Management Protocol/Oakley, or ISAKMP/Oakley, IKE provides security association management. IKE authenticates each peer in an IPsec transaction, negotiates security policy, and handles the exchange of session keys.
Certificate management—Cisco fully supports the X509.V3 certificate system for device authentication and the Simple Certificate Enrollment Protocol (SCEP), a protocol for communicating with certificate authorities. Several vendors, including VeriSign, Entrust Technologies, and Microsoft support Cisco SCEP and operate with Cisco devices.
DES and 3DES—DES or 3DES encryption is required for all packets destined for an IPsec tunnel. The Cisco Catalyst 4500 AGM VPN adapter encrypts data with DES or 3DES while freeing the main processor for other tasks.
RSA signatures and Diffie-Hellman—These are used every time an IPsec tunnel is established to authenticate the IKE security association. RSA signatures are digital certificates. Diffie-Hellman is used to derive the shared secret encryption key for the protection of data across the IKE security association, including the negotiation of the IPsec policy to be used.
Performance—Process switching, fast switching, and Cisco Express Forwarding are supported. Cisco Express Forwarding avoids the potential overhead of continuous cache churn and offers significant benefits in terms of performance, scalability, network resilience, and functions.

Export Regulations on the Encryption Service Adapter

DES and 3DES software for the ESA is controlled by U.S. export regulations on encryption products. The adapter itself is not controlled. U.S. regulations require the recording of names and addresses of recipients of DES and 3DES software. The Cisco ordering process for DES and 3DES software enforces these requirements. For more details, see:

http://www.cisco.com/wwl/export/crypto/

Software Support for Cisco Catalyst 4500 and 4000 Series Supervisor Engine Modules

The Cisco Catalyst 4500 AGM is supported in the Cisco Catalyst 4500 Series and Cisco Catalyst 4000 Series chassis with any supervisor engine running at least Cisco Catalyst OS 5.5(1) or Cisco IOS Software Release 12.1(13)EW. The AGM itself runs a separate instance of Cisco IOS Software which must be at least release 12.1(5)YF to support Cisco Catalyst OS supervisor engines or release 12.2(13)T to support Cisco IOS supervisor engines.

Voice and Data Interface Cards

Tables 1 and 2 detail the voice and data interfaces supported and the minimum release of Cisco IOS Software required.

Table 1 Data Interfaces

Interface	Encapsulations	Minimum Cisco IOS Software Release	Comments
WIC-2T	HDLC, PPP, Frame Relay	12.2(13)T	WIC-1T is not supported
WIC-2A/S	HDLC, PPP, Frame Relay	12.1(5)T	No asynchronous support
WIC-1DSU-56K4	HDLC, PPP, Frame Relay	12.1(5)T
VWIC-1MFT-T1 VWIC-2MFT-T1	HDLC, PPP, Frame Relay	12.1(5)T	Channel group, no PRI ISDN dial-up
VWIC-1MFT-T1-DI VWIC-2MFT-T1-DI	HDLC, PPP, Frame Relay	12.1(5)T	Channel group, no PRI ISDN dialup, no drop-and-insert
VWIC-1MFT-E1 VWIC-2MFT-E1	HDLC, PPP, Frame Relay	12.1(5)T	Channel group, no PRI ISDN dialup
VWIC-1MFT-E1-DI VWIC-2MFT-E1-DI	HDLC, PPP, Frame Relay	12.1(5)T	Channel group, no PRI ISDN dialup, no drop-and-insert
VIC-2BRI-S/T-TE	HDLC, PPP, Frame Relay	12.1(5)T	User-side S/T only, no 144 k/80 k leased line

Table 2 Voice Interfaces

Interface	Encapsulations	Minimum Cisco IOS Release	Comments
VIC-2FXS	Ground Start (GS), Loop Start (LS)	12.1(5)T	Hook-flash, calling line ID (CLID) supported
VIC-2FXO	GS, LS	12.1(5)T
VIC-2FXO-EU	GS, LS	12.1(5)T
VIC-2BRI-S/T-TE	BRI	12.1(5)T	User-side S/T only
VWIC-1MFT-T1 VWIC-2MFT-T1	T1 CAS, PRI	12.1(5)T	PRI network and user side, T1 CAS
VWIC-1MFT-T1-DI VWIC-2MFT-T1-DI	T1 CAS, PRI	12.1(5)T	PRI network and user side, T1 CAS, no drop-and-insert
VWIC-1MFT-E1 VWIC-2MFT-E1	PRI	12.1(5)T	PRI network and user side
VWIC-1MFT-E1-DI VWIC-2MFT-E1-DI	PRI	12.1(5)T	PRI network and user side, no drop-and-insert
WS-U4604-8FXS	LS	12.1(5)YF	CLID supported
WS-U4604-16FXS	LS	12.2(15)T	CLID supported

Ordering Information

Table 3 Hardware Ordering Information

Part Number	Description
WS-X4604-VOICE(=)	Cisco Catalyst 4500 AGM Voice/WAN bundle (AGM, 96-channel DSP set, 128 MB DRAM)^1,2
WS-X4604-GWY(=)	Cisco Catalyst 4500 AGM
WS-U4604-DSP(=)	Cisco Catalyst 4500 AGM 96-channel DSP set (4 x 6 SIMMs)¹
WS-U4604-ESA(=)	Cisco Catalyst 4500 AGM VPN/Encryption Service Adapter³
MEM-C4K-AGM128M (=)	Cisco Catalyst 4500 AGM 128 MB DRAM upgrade²
WS-U4604-16FXS	Cisco Catalyst 4500 AGM 16-port RJ-21 FXS module^1,2
WS-U4604-8FXS	Cisco Catalyst 4500 AGM 8-port RJ-21 FXS module¹

1. Requires Cisco IOS Voice feature set

2. Requires Cisco IOS Software Release 12.2(15)T or later

3. Requires Cisco IOS 3DES feature set

Table 4 Software Ordering Information

Part Number	Description
S4AGMCV-12215T(=)	Cisco Catalyst 4500 AGM IOS IP/VOICE (default)
S4AGMBPV-12215T(=)	Cisco Catalyst 4500 AGM IOS IP/VOICE/IPV6/IPX/APPLETALK
S4AGMRHK9-12215T(=)	Cisco Catalyst 4500 AGM IOS IP/VOICE/IPX/SNA/FW/IDS/WAN 3DES
FL-SRST-SMALL (=) FL-SRST-MEDIUM (=) FL-SRST-144 (=) FL-SRST-240 (=)	Feature Licenses for SRST Small supports 24 phones, medium 48 phones, maximum 240 phones per AGM module Requires Cisco IOS Software Release 12.2(13)T or later with Voice feature set. Requires 128 MB DRAM for more than 24 phones.

Specifications

Cisco Catalyst 4500 AGM

IP Routing Performance

Processor type: MPC 8260
Flash memory: 32 MB
System memory: 64 MB (default), 128 MB (maximum)
Performance: Up to 45 kpps

Connectors, Interfaces, and Indicators

One 1000BASE-T backplane interface
One 10/100BASE-T RJ-45 management interface
Two VIC/VWIC/WIC slots
One VIC/VWIC slot
One Flexslot for high-density analog modules
One ESA slot
Four DSP SIMM slots for one 96-channel DSP set
One console/auxiliary port, RJ-45 serial
One module status indicator
Four DSP presence indicators
Four DSP activity indicators

Physical Specifications

Each module occupies one slot in a Cisco Catalyst 4500 Series chassis; multiple modules supported simultaneously
Dimensions (H x W x D): 1.75 x 17.5 x 11.8 in. (4.4 x 44.5 x 30 cm)

Cisco Catalyst 4500 AGM 16-Port or 8-Port (RJ-21) FXS Modules

Connectors, Interfaces, and Indicators

Sixteen or eight FXS ports through a single RJ-21 telco connector
Sixteen or eight interface status indicators
- Green—Device is off hook
- Yellow—Module or port disabled through command-line interface (CLI)
- Off—Device is on hook or not connected

Physical Specifications

Occupies the high-density analog Flexslot in a Cisco Catalyst 4500 AGM
Provides on-premise support for distances up to 1000 feet (300m)
Enhanced line-cross protection against AC shorts on tip or ring
Four separately fused power domains

Cisco Catalyst 4500 AGM VPN/Encryption Service Adapter

Throughput: Up to 8 Mbps; 12 Mbps for 1024-byte packets
Maximum number of encrypted tunnels: Up to 100 tunnels
Minimum Cisco IOS Software Release: Cisco IOS Version 12.1(5)YF IPsec 56 or IPsec 3DES

Physical Specifications

Occupies the Encryption Service Adapter slot on a Cisco Catalyst 4500 Access Gateway Module

Environmental Conditions

Operating temperature: 32 to 104° F (0 to 40° C)
Storage temperature: -4 to 149° F (-20 to 65° C)
Operating relative humidity: 10 to 85 percent, noncondensing
Operating altitude: Up to 6500 ft (2000m)

Safety

UL1950, CSA C22.2 No. 950, EN60950, IEC950, TS001, AS/NZS 3260

Compliance

CE marking

EMC

FCC Class A (47CFR, Part 15)

EN55022 Class A with unshielded twisted-pair (UTP), Class B with foil twisted-pair (FTP)

CISPR22 Class A with UTP, Class B with FTP

VCCI Class A with UTP, Class B with FTP

AZ/NZS 3548 Class A with UTP, Class B with FTP

ICES-003 Class A with UTP

EN 500 82-1

Network Management

Dial Control MIB (RFC 2128) and Cisco Dial Control Management Information Base (MIB) extension to RFC 212
CISCO-VOICE-DIAL-CONTROL-MIB Voice Dial Control MIB
CISCO-VOICE_IF_MIB. Voice Interface MIB
CISCO-VOICE-ANALOG-IF_MIB Voice Analog Interface MIB
CISCO-DSP-MGMT-MIB Digital Signal Processing Management MIB
RFC 1157 SNMP
RFC 1643 Ethernet MIB
RFC 1213 MIB II
RFC 1573 MIB II interface extensions

Hierarchical Navigation

Cisco Catalyst 4000 Series Switches