Full English Description for Cisco ASR 1002-HX

1. Official Short Order Description (Cisco Datasheet Standard Format)

2. Complete Detailed Product Overview

Product Line Positioning

Fixed Native Front-Panel Ethernet Ports (License Expandable)

• 8 × 10/100/1000BASE-X SFP Gigabit Ethernet ports for branch access, local service interconnection and low-speed fiber links
• 8 × 10GBASE-X SFP+ 10 Gigabit Ethernet ports for high-speed core uplink aggregation to data centers or carrier MPLS cores
  All fixed ports support SyncE Stratum 3 timing, IEEE 802.1Q VLAN trunking, MACsec hardware encryption, MQC QoS and CEF forwarding offload; compatible with single/multi-mode fiber and copper SFP/SFP+ transceiversCisco.

Modular Expansion Slot Architecture (Core Differentiators)

1. 1 EPA Ethernet Port Adapter Slot: Hot-swappable without chassis power cycle, supports high-density 10G/25G SFP28 aggregation modules for further fiber uplink expansion
2. 1 Universal NIM Network Interface Module Slot: Accepts either single-wide or double-wide NIM modules for legacy circuit integration: 8-port T1/E1 channelized trunk, multi-port async serial, T3 serial modules to converge modern fiber and traditional private WAN circuits
3. Optional Field-Replaceable Crypto Module Bay: Dedicated hardware encryption co-processor, provides up to 25 Gbps wire-speed IPsec, FlexVPN and DMVPN acceleration with AES-256, RSA, ECDSA, SHA-256 cipher suites; installable/upgradable on-site without full chassis replacementCisco.

Management & Auxiliary Interfaces

• 1×10/100/1000BASE-T RJ45 out-of-band management Ethernet port for isolated remote chassis monitoring
• Dual console access: RJ45 serial console + Mini-USB Type B console port for local offline configuration
• 1×RJ45 AUX dial-out port for backup analog modem out-of-band management
• 2×USB 3.0 Type-A host ports for license import, offline config backup and firmware image upload
• Front-panel full-color LED array monitoring power supply, fan health, EPA/NIM slot status, port link activity, crypto module presence, timing lock and system fault alarms

Processor, Memory & Storage

1. Quantum Flow Processor 3.0 (QFP3) Fixed ESP Forwarding Plane: Delivers sustained 44–100 Gbps scalable aggregate IPv4/IPv6 CEF forwarding throughput via software license tiers, native hardware offload for NAT, stateful firewall, NBAR2 AVC DPI, hierarchical QoS and multicast replication
2. Route Processor 3 (RP3) Quad-Core x86 Control Plane: ECC-protected DDR4 memory for reliable large-scale routing tables:
   • Default factory: 16GB RAM, supports up to 2 million IPv4/IPv6 routing entries
   • Field-upgradable to 32GB RAM for ultra-large BGP route reflectors, 10,000+ concurrent SD-WAN tunnels and millions of firewall/NAT sessions
3. Storage: 32GB rugged industrial eUSB bootflash for IOS XE modular system images, crash dumps, NVRAM and centralized telemetry logs; no internal HDD/SSD bay supportedCisco.

Power, Mechanical & Environmental Specifications

• Form Factor: Standard 2RU 19-inch four-post rack-mount chassis
• Dimensions: 88.9mm H × 439.42mm W × 571.5mm D; fully loaded weight ~19kg
• Cooling: Single hot-swappable OIR fan tray with front-to-back data center airflow design
• Power Supply Options: Dual hot-swappable wide-range AC/DC/HVDC redundant power supplies (1+1 HA deployment standard for carrier-grade sites)
• Operating Temperature: 0°C ~ +40°C continuous indoor data center/equipment room operation
• Storage Temperature: -40°C ~ +70°C
• Humidity: 10%–90% RH non-condensing operating humidity
• Compliance: UL 62368-1, IEC 60950-1, FCC Class A, CE certified for enterprise and service provider deployment

Official Performance Benchmarks

• Scalable aggregate IMIX forwarding throughput: 44 Gbps base, up to 100 Gbps with full performance license
• Optional dedicated crypto module IMIX IPsec VPN throughput: Max 25 Gbps
• Maximum concurrent SD-WAN/DMVPN overlay tunnels: Up to 10,000 tunnels
• Total concurrent stateful firewall sessions: 1,000,000+
• Full hardware offload support for MACsec link encryption, AES-256 VPN acceleration, NBAR2 deep packet inspection, traffic shaping and policing

Software & Core Supported Capabilities (Modular IOS XE)

1. Carrier-Grade Routing & Full MPLS Suite
   IPv4/IPv6 dual-stack forwarding, BGP, OSPF, EIGRP, IS-IS, Segment Routing, BFD fast convergence; complete MPLS feature stack including L3VPN, VPLS, EoMPLS, multi-tenant route reflector and broadband L2TP termination for service provider private WAN architectures.
2. Catalyst SD-WAN / IWAN Hybrid Multi-WAN Convergence
   Full SD-WAN feature parity with Catalyst 8000 physical edge routers, zero-touch provisioning via vManage orchestrator, application-aware intelligent multi-path routing, DMVPN/FlexVPN overlay tunnels, native integration with Cisco Umbrella SASE cloud security and ThousandEyes end-to-end full-path monitoring.
3. Unified Integrated NGFW Security Stack
   Line-rate hardware VPN acceleration, next-generation stateful zone firewall, IDS/IPS threat inspection, advanced malware protection (AMP), CGNAT carrier-grade large-scale address translation, AAA RADIUS/TACACS+, TLS encrypted remote management, IT/OT traffic segmentation and threat visibility.
4. Application Visibility & Hierarchical QoS Management
   NBAR2 full application signature recognition, hierarchical MQC traffic shaping/policing, IP SLA performance monitoring, NetFlow/IPFIX streaming telemetry for centralized traffic analytics and capacity planning.
5. Enterprise & Carrier High Availability Mechanisms
   NSF Nonstop Forwarding, SSO Stateful Switchover, ISSU In-Service Software Upgrade for zero-downtime firmware updates, HSRP/VRRP/GLBP gateway redundancy, sub-second BFD WAN failure detection.
6. Cloud-Native Automation & Programmability
   CLI/SSH console access, REST API, NETCONF/YANG data models, streaming telemetry, native integration with Catalyst Center and NSO Network Services Orchestrator for mass enterprise and multi-tenant service provider lifecycle automation.

Typical Deployment Scenarios

3. E-commerce Short Marketing Description

4. Product Catalog Keyword Tags

Naming Rule Explanation

• ASR = Aggregation Services Router carrier/enterprise multi-service WAN aggregation platform
• 1002 = Standard 2RU rack-mount chassis form factor
• HX = High-performance enhanced flagship variant (QFP3 ASIC, 100Gbps max throughput, expandable 32GB memory, optional dedicated crypto module, high-density built-in 10GE ports; superior performance to legacy ASR 1002 / mid-tier ASR 1002-X)