Opinions & Tangents

Cisco ISR 4000 – Now With More Licensing!

Cisco's ISR 4000 launch at Interop NYC brought IWAN and NIM slots, plus pay as you grow licensing that shapes throughput and shuts off cores on hardware you own.

Tony Mattke · 2014.10.07 · 4 min read

This week at Interop NYC, Cisco launched it’s ISR 4000 Series. This is a new approach for them focused on delivering services to your branch offices. Cisco has dubbed this new approach the Intelligent WAN (IWAN) — but before we talk about that, let’s talk about hardware. Those of us that have been paying attention remember that Cisco announced the ISR 4451 at Cisco Live 2013. The 4451 boasts a multi-core CPU architecture that runs the all to familiar by now IOS-XE. It’s 1-2 Gbps of throughput made it a perfect fit for those looking for something in between a 3945 and an ASR1k. Now Cisco that Cisco has brought the rest of the family into the spotlight it all makes sense.

IWAN focuses on a few key fundamentals to get more bang for your buck. And because Cisco has stuffed some serious hardware into the 4k you won’t see the same performance hits you’re all too familiar with in the ISR series. But more on that in a second. Here is Cisco’s break on on the Intelligent WAN…

  • Transport Independence – Providing flexibility when it comes to connectivity. DMVPN can help augment your network with low cost bandwidth for your branches.
  • Intelligent Path Control – PfR allows you the granular control of policy based path selection which takes into account delay, loss, jitter, and hard coded path metrics.
  • Application Optimization – AVC, WAAS, and Akamai Connect allow your to accelerate your applications and reduce bandwidth consumption by caching (even pre-loading) data.
  • Secure Connectivity – IOS Firewall, IPS, CWS provide comprehensive threat defense and protection.

The problem

My brighter listeners (?) may of noticed that Cisco has given us a rather broad range of throughput specs on the slide included above. That is because they are introducing “Pas as you grow” licensing! (Yay?!) Under the hood Cisco is shaping our traffic… Yes, that means your brand new ISR 4451 with no features turned on and no additional licensing will be bored out of it’s mind while it only passes 1gbps of traffic. In addition to the shaping of traffic, they are also shutting down cores. Their argument is that if you’re taxing your system by turning on nearly every feature under the sun, we want to ensure that you do see an improvement in throughput when you purchase the performance license. Which in some ways makes sense… but I have never been a fan on manufacturers disabling hardware that I physically own. How long before we’re only allowed to rent these things?

Goodbye WIC/HWIC/EHWIC

Cisco has finally drawn the line in the sand. And I for one say it’s about time. By giving us a new interface slot, they’re opening the door to interface options that we never had before. All of which makes me happy. The new cards are Network Interface Modules (NIMs) and we still have slots for our service modules, but the new cards are now Enhanced Service Modules which of course have a greater throughput capability. Our friends in the voice field will be glad to know that you can now purchase NIMs with built in DSP resources! Yay! — Actually, this leads into one of the best things I’ve noticed with the new line of ISRs…. Cisco has actually put some thought into the form factor of these routers. I can buy a low – mid range ISR with TONs of slots (ISR 4351) or a higher end router that is still just 1RU (ISR 4431), this alone makes me happy.

Interface Options

      </p>

For more information…

Standard TFD Disclaimer

While Cisco and HP were responsible for paying a portion of the travel and lodging costs for me during this Tech Field Day Extra event, they do not have input into what I write or say, if anything. And while I do appreciate being dragged across the US at last notice, I will not compromise my integrity.

Related Posts

Networking · 2 min read

HP Talks SDN at Interop NYC 2014

2014.10.07

I generally try to avoid oversharing when it comes to my thoughts about presentations, but I have to mention that after sitting down with Glue Networks and their “SDN” presentation, it was truly a …

Opinions & Tangents · 3 min read

Mandatory Cisco DNA Licensing – Is This the Future??

2019.03.13

With the release of the new 9200 series switches many enterprise organizations are starting to look towards the future. Cisco has also been looking towards the future… of their profit margin.

Comments

8 archived comments from Disqus 2014
Peter Revill

Great Article! Finally some stuff from TFD that’s not flying unicorn SDN shit

I am not as upset about the licensing model: keeps the base price lower

Tony
I agree.. the SDN hype has gone crazy. It actually was nice to sit down in a discussion that was pure and simple in nature. I just wish they would’ve talked more about IWAN.
Samuel Clements
You make a very good point asking the question: “How long before we’re only allowed to rent these things?”. It’s pretty clear that Cisco finds a business case in this exact consumption model. The Meraki acquisition clearly takes a routing/security platform to the cloud and one can’t help buy wonder how long it is before we see the ISR product line merge with the Meraki Cloud for a ‘required phone home’. No Internet, you own a brick - just like the existing Meraki platform. One of the benefits of a 100% OPEX model.
Duane Grant

For my particular use case, we’ll get less performance than the 2951s where we are using Nat and relatively large packet sizes. I’m glad to see that Cisco realizes that the old monolythic IOS isn’t the way forward. Some other vendors have been using the same chips Cisco is finally using here (pretty sure it’s a cavium) and abstracted the forwarding cores out with a virtual asic as was done here as well.

Anyway, a step in the right direction for Cisco but not leading the pack here.

Tony
2951 vs which platform? IIRC the 2951 was only rated for 75mbps, the 4321 with the 100mbit license, or the base license on the 4331 should be more than capable of outperforming the rating on the 2951… I’m curious what numbers you’re actually seeing on your network as well.
Duane Grant

Sorry, i was comparing the 4351 to the 2951 platform. In my use case with PAT, some Qos and larger packet sizes, I’m up around 750 mbps in throughput from testing with ixload on my ixia. On the 4351 with the base license, I’m sure that I’d get 200 Mbps with features turned on for small packet sizes, but I’ll also get 200 Mbps for large packet sizes with features turned off because it’s shaped in the “ESP” like an asr1k is.

So depending on your workload, if you’re not that feature rich and run larger packet sizes, you’ll likely see better throughput from the older ISR2 platform because they will forward until they run out of steam rather than being artificially limited.

Did that clarify?

Duane

Tony
100/100 – you hit the nail on the head. That is my biggest complaint on the new platform.
Duane Grant
i suspect that they are counting egress bandwidth like on the asr1k, so multicast replication counts against you, which is something to be aware of as well.