Brand:	Cisco	Type:	Router Modules
PN:	ISM-VPN-29	Details:	Cisco Router Modules
Application:	Routers
Highlight:	cisco router switch module , cisco service module

Feature	Description
Physical	The Cisco VPN ISM fits in the ISM slot in the Cisco ISR G2.
Platform support	The Cisco VPN ISM supports the Cisco 1941 and the Cisco 2900 and 3900 Series Integrated Services Routers (ISRs).
Hardware prerequisites	An ISM slot for the Cisco 1941 and the Cisco 2900 and 3900 Series is required.
IP Security (IPsec) encryption supported	Authentication: • Rivest, Shamir, and Adelman (RSA) • Elliptic-Curve Digital Signature Algorithm (ECDSA) • Advanced Encryption Standard (AES) in Galois Message Authentication Code (GMAC) Key exchange: • Diffie Hellman and Elliptic-Curve Diffie Hellman (ECDH) Data integrity: • Message Digest Algorithm 5 (MD5) • Secure Hash Algorithm 1 (SHA-1) and Secure Hash Algorithm 2 (SHA-2) Encryption: • Data Encryption Standard (DES) • Triple DES (3DES) • Advanced Encryption Standard (AES) in Cipher-Block Chaining (CBC) and Galois/Counter Mode (GCM)
Hardware Secure Sockets Layer (SSL) encryption supported	The Cisco VPN ISM supports SSL VPN encryption with DES, 3DES and AES. Note: VPN ISM does not support DTLS.
Number of encryption modules per router	The Cisco VPN ISM uses one encryption module per router.
Minimum Cisco IOS Software version required	The Cisco VPN ISM requires Cisco IOS Software Version 15.2(1)T1 or later. The SEC-K9 and HSEC-K9 licenses are required.
Maximum number of IPsec encrypted tunnels	The Cisco VPN ISM supports up to 500 tunnels on the Cisco 1941, up to 2000 tunnels on the Cisco 2900 Series, and up to 3000 tunnels on the Cisco 3900 Series.
Standards supported	The Cisco VPN ISM supports the IPsec Internet Key Exchange (IKE): RFCs 2401 to 2410, 2411, 2451, 4306, 4718, 4869, and 5996.

Features	Benefits
Ability to offload encryption to a dedicated service module	Dedicated encryption protects performance while using CPU for other services.
Small physical, energy, and carbon footprint	You can save on energy bills, hardware support contracts, and onsite visits.
Maximum performance while also maintaining strong encryption protection	You have two to three times better onboard performance with the strongest Suite B encryption support.
High-overhead IPsec processing from the main processor	Critical processing resources are reserved for other services such as routing, firewall, and voice.
IPsec MIB	Cisco IPsec configuration can be monitored and can be integrated into a variety of VPN management solutions.
Certificate support to facilitate automatic authentication using digital certificates	Encryption use scales for large networks requiring secure connections between multiple sites.
Easy integration of VPN modules into existing Cisco 1941 and Cisco 2900 and 3900 Series Routers	System costs, management complexity, and deployment effort are reduced significantly compared to multiple-device solutions.
Confidentiality, data integrity, and data origin authentication through IPsec	Secure use of public switched networks and the Internet for WANs is facilitated.
Cisco IOS SSL VPN	Businesses can securely and transparently extend their networks to any Internet-enabled location using SSL VPN. The Cisco IOS SSL VPN supports Cisco AnyConnect Client, enabling full network access remotely to virtually any application.

Platform	Support
880	No
890	No
1921	No
1941	Yes
2901	Yes
2911	Yes
2921	Yes
2951	Yes
3925	Yes
3945	Yes
3925E	No
3945E	No

Feature	Specification
Product part number	ISM-VPN-19 ISM-VPN-29 ISM-VPN-39 CISCO1941-HSEC+/K9 CISCO2901-HSEC+/K9 CISCO2911-HSEC+/K9 CISCO2921-HSEC+/K9 CISCO2951-HSEC+/K9 CISCO3925-HSEC+/K9 CISCO3945-HSEC+/K9
Form factor	ISM
Internal network interfaces	Gigabit Ethernet connectivity to router backplane
Cisco IOS Software	15.2(1)T1 or higher
IPsec Support
Encryption	Data Encryption Standard (DES), 3DES, Advanced Encryption Standard (AES) in Cipher-Block Chaining (CBC) and Galois/Counter Mode (GCM) (128-, 192-, and 256-bit)
Key exchange	Diffie Hellman (DH) and Elliptic-Curve Diffie Hellman (ECDH)
Digital signature	Rivest, Shamir, and Adelman (RSA) and Elliptic-Curve Digital Signature Algorithm (ECDSA)
Integrity	Message Digest Algorithm 5 (MD5), Secure Hash Algorithm 1 and 2 (SHA-1 and SHA-2, respectively) (384- and 512-bit), and AES-GMAC (128-, 192-, 256- bit)
Power Specification
Power consumption (maximum)	20W
Physical Specification
Dimensions (H x W x D)	0.85 x 4 x 6.1 in. (2.2 x 10.2 x 15.5 cm)
Shipping dimensions (H x W x D with packaging)	9.45 x 7.18 x 2.38 in. (24 x 18.4 x 6.05 cm)
Maximum weight	0.5 lb (0.206 kg)
Operating Conditions
Operating temperature	Cisco 1941 and 2901: 32 to 104°F (0 to 40°C) normal Cisco 2911, 2921, 2951, 3925, and 3945: 32 to 122°F (0 to 50°C) normal
Humidity	10 to 95% operating
Altitude (operating)	104°F (40°C) at sea level 104°F (40°C) at 6,000 ft (1,800m) 86°F (30°C) at 13,000 ft (4,000m) 81°F (27.2°C) at 15,000 ft (4,600m) Note: De-rate 34.5°F (1.4°C) per 1,000 ft above 6,000 ft (per 300m above 2,600m)
Transportation and Storage Conditions
Temperature	-4 to 149°F (-20 to +65°C)
Relative humidity	9 to 95% operating
Altitude	10,000 ft (3,050m)
Regulatory Compliance
Safety	• UL 60950-1, 2nd Edition, Standard for safety for information deployable platform technology equipment (US) • CAN/CSA-C22.2 No. 60950-1-03, Safety of information technology equipment including electrical business equipment (Canada) • IEC 60950-1:3 ^rd edition [PRC] Safety of information technology equipment/Second Edition [Mexico] • EN 60950 -1:2001, Safety of information technology equipment (CENELEC; includes EU and EFTA) • AS/NZS 60950-1, Safety of information technology equipment including electrical business equipment (Australia)
EMC	Emissions: • 47 CFR Part 15 Class A • CISPR22 Class A • EN300386 Class A • EN55022 Class A • EN61000-3-2 • EN61000-3-3 • ICES Class A • KN 22 Class A • VCCI Class I Immunities: • CISPR24 • EN300386 • EN55024 • EN61000-6-1

Product Number	Product Description
ISM-VPN-19	VPN Internal Service Module for support on 1941 platform
ISM-VPN-29	VPN Internal Service Module for support on 2901,2911,2921 and 2951 platforms
ISM-VPN-39	VPN Internal Service Module for support on 3925 and 3945 platforms

Ordering SKU	Description
CISCO1941-HSEC+/K9	Security bundle for 1941 ISR G2 Platform, including VPN ISM
CISCO2901-HSEC+/K9	Security bundle for 2901 ISR G2 Platform, including VPN ISM
CISCO2911-HSEC+/K9	Security bundle for 2911 ISR G2 Platform, including VPN ISM
CISCO2921-HSEC+/K9	Security bundle for 2921 ISR G2 Platform, including VPN ISM
CISCO2951-HSEC+/K9	Security bundle for 2951 ISR G2 Platform, including VPN ISM
CISCO3925-HSEC+/K9	Security bundle for 3925 ISR G2 Platform, including VPN ISM
CISCO3945-HSEC+/K9	Security bundle for 3945 ISR G2 Platform, including VPN ISM

ISM-VPN-29 Cisco ISM Module VPN Internal Service Router Module for Cisco ISR G2

ISM-VPN-29 Cisco ISM Module VPN Internal Service Router Module for Cisco ISR G2

ISM-VPN-29 Cisco ISM Module VPN Internal Service Router Module for Cisco ISR G2

cisco router switch module

cisco service module

cisco router switch module,

cisco service module,