ASR1000-ESP100-X

Description

The Cisco ASR1000-ESP100-X is a high-performance Embedded Services Processor (ESP) for the Cisco ASR 1000 Series Aggregation Services Routers, providing 100 Gbps of throughput. This module is based on Cisco Flow Processor technology, enabling line-rate forwarding from 2.5 to 200 Gbps across WAN connections while accelerating advanced services such as crypto-based access security, Network Address Translation (NAT), threat defense with Cisco Zone-Based Firewall (ZBFW), Deep Packet Inspection (DPI), Cisco Unified Border Element (CUBE), and Data-Center-Interconnect (DCI) features without additional hardware.

Key Features and Benefits

• High Availability: Redundant hardware components and power supplies provide system and business continuity. Stateful intrachassis redundancy contains faults to prevent system-wide failure, offering 99.999-percent availability. In-Service Software Upgrade (ISSU) support enables changes without downtime, and Cisco IOS XE Software Sub-package Mode allows individual component upgrades.
• Scalable Capacity and Throughput: Cisco Flow Processor-based platform supports advanced services at high speeds. Hardware acceleration processes QoS, cryptography, and Access Control Lists (ACLs) in hardware. Control- and forwarding-plane separation scales planes independently.
• Investment Protection: Software modularity mixes services as needed. Pay-as-you-grow licensing with -X models activates higher throughput via software. Reuses Cisco Shared Port Adapters (SPAs) and Network Interface Modules (NIMs).
• Cisco Software-Defined WAN (SD-WAN): Enables secure, flexible WAN management with better user experience, greater agility, and advanced threat protection. Integrated security includes application-aware enterprise firewall and DNS layer enforcement. Supports high-performance SD-WAN aggregation headend on ASR1006-X with up to 8,000 IPsec SD-WAN overlay tunnels.
• Application Visibility: Integrated with Cisco ThousandEyes for hop-by-hop analytics, proactive SD-WAN overlay monitoring, and SaaS performance measurement, reducing Mean Time to Identification of Issues (MTTI).
• Unified Access Security: Zero trust model with multi-factor authentication for secure connections to on-premises or cloud applications.

Performance and Capabilities

The ASR1000-ESP100-X supports 100 Gbps bandwidth with up to 142 Gbps embedded hardware-based encryption throughput for 1400-byte packets. It features 32 GB DRAM and is compatible with Cisco ASR1006-X, ASR1009-X, and ASR1013 chassis. Minimum Cisco IOS XE Software release is 3.16.0, with 17.2 required for full capabilities.

Enterprise Use Cases

• WAN Edge: Applies Modular QoS CLI (MQC) policies on VLANs or tunnels, limits low-priority traffic, classifies based on DSCP, NBAR, FPM into hierarchies supporting 464,000 queues with min/max/excess bandwidth and priority propagation.
• Multiservice Secure Headend: IPsec VPN aggregation up to 78 Gbps encryption with ASR1000-ESP200, supports thousands of sites and 8,000 tunnels, optimized for QoS and IP Multicast.
• Embedded High-Speed Firewall: Zone-Based Policy Firewall with Layer 4/7/application inspection, 2.5-200 Gbps performance, 40,000 sessions/sec logging with NetFlow v9.
• Managed CPE: Routes over Ethernet for SLAs, encrypts gigabits without extra blades, WAN optimization, powerful firewall/NAT 2.5-200 Gbps.
• High Performance SD-WAN Aggregation Headend: On ASR1006-X/ESP200-X, supports EPA-10X10GE, EPA-2X40GE, EPA-QSFP-1X100GE via 1-2 ASR1000-MIP100, up to 8,000 IPsec tunnels, multilayer security.

Service Provider Applications

• Broadband L2TP LAC/LNS: Up to 64,000 subscribers, 16,000 tunnels for triple-play wholesale.
• L3VPN Provider Edge: 8,000 VRFs, 1M LDP labels, 4,000 ACLs, 4M IPv4/IPv6 routes, excellent multicast.
• High-End Route Reflector: Up to 29M IPv4 routes, 64,000 L3 adjacencies at 40 Gbps.
• Next-Gen Voice/Multimedia (CUBE ENT Edition): 16,000 simultaneous calls, 200 Gbps multimedia with security/QoS/IPv4v6, high availability.

Software Licensing

Supports Cisco IOS XE UNIVERSAL images, IP Base, Advanced IP Services, Advanced Services licenses. Cisco DNA Advantage/Premier subscriptions for SD-WAN, WAN optimization, analytics. Smart Licensing for flexible management. ThousandEyes requires min 8 GB DRAM/bootflash.

Integrated design allows capacity/services increase without hardware upgrades. Reuse SPAs/NIMs/EPAs for I/O across platforms.