{"id":3435,"date":"2016-10-24T17:18:57","date_gmt":"2016-10-24T21:18:57","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/azuregov\/?p=3435"},"modified":"2016-10-24T17:18:57","modified_gmt":"2016-10-24T21:18:57","slug":"adding-value-with-csr1000v-on-azure-government","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/azuregov\/adding-value-with-csr1000v-on-azure-government\/","title":{"rendered":"Adding Value with Cisco CSR1000v on Azure Government"},"content":{"rendered":"<p><span>Microsoft Azure <\/span><span>Government Cloud<\/span><span> is an isolated and dedicated cloud platform,<\/span> <span>which<\/span><span> enable<\/span><span>s<\/span><span> government agencies and government approved contractors<\/span><span> to host sensitive data. <\/span><span>C<\/span><span>onnectivity from on-premise<\/span><span>s<\/span><span> locations to Azure <\/span><span>Government Cloud<\/span><span> must be secure, scalable and dynamic.\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><span><span>With <\/span><\/span><span><span>Cisco CSR1000v<\/span><\/span> <span><span>now <\/span><\/span><span><span>available on Azure <\/span><\/span><span><span>Government Cloud<\/span><\/span><span><span>, <\/span><\/span><span><span>Government Cloud<\/span><\/span><span><span> customers can enjoy the same<\/span><\/span><span><span> advanced routing and security benefits<\/span><\/span><span><span> delivered on <\/span><\/span><span><span>Azure <\/span><\/span><span><span>public cloud. Cisco CSR1000<\/span><\/span><span><span>v<\/span><\/span><span><span> provides best in class routing capabilities that support full path encryption with the strongest cipher suites available in the market, L4<\/span><\/span><span><span>-L7<\/span><\/span><span><span> firewall capabilities<\/span><\/span><span><span> and<\/span><\/span><span><span> L7 visibility and control. <\/span><\/span><span><span>Using Cisco CSR1000v in concert with the Azure <\/span><\/span><span><span>Government Cloud<\/span><\/span><span><span> delivers on the value proposition of ensuring Government data receives the protection of Cisco\u2019s security capabilities in the Azure cloud environment they trust.\u00a0<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><span><span>Because Cisco CSR1000V runs full featured Cisco IOS-XE, management of CSR1000V simply becomes another location inside an already deployed Cisco based network<\/span><\/span><span><span> and plugs in easily<\/span><\/span><span><span> to existing management tools and operations<\/span><\/span><span><span>. See below for some FAQs.\u00a0<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><b><span><span>L<\/span><\/span><\/b><b><span><span>aunch<\/span><\/span><\/b><b><span><span>ing<\/span><\/span><\/b><b><span><span> the CSR <\/span><\/span><\/b><b><span><span>1000V <\/span><\/span><\/b><b><span><span>on Azure<\/span><\/span><\/b><b><span><span> with Solution Templates<\/span><\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span><span>To launch the CSR 1000<\/span><\/span><span><span>V<\/span><\/span><span><span> on Azure<\/span><\/span> <span><span>Government Cloud<\/span><\/span><span><span> there is a pre-built solution available to you.\u202f The solution is based on templates we created to ease the deployment of the CSR 1000<\/span><\/span><span><span>V<\/span><\/span><span><span> on Azure.\u202f The templates allow the solution to deploy different resources at the same time to fully support a CSR <\/span><\/span><span><span>1000V <\/span><\/span><span><span>deployment.\u202f The solution details are as follows:<\/span><\/span><span>\u00a0<\/span><\/p>\n<ul>\n<li><span><span>2<\/span><\/span><span><span> or 4<\/span><\/span><span><span> Network-Interface-Cards (NICs)<\/span><\/span><span><span>.\u00a0<\/span><\/span><span>\u00a0<\/span><\/li>\n<li><span><span>VNet<\/span><span> configured with two <\/span><\/span><span><span>or four <\/span><\/span><span><span>subnets, one private <\/span><\/span><span><span>or three private<\/span><\/span> <span><span>and one public<\/span><\/span><span>\u00a0<\/span><\/li>\n<li><span><span>Routing tables on each subnet, with user-defined routes, the private subnet will use private-facing interface as the gateway so the VMs behind the router will not have direct access to the internet<\/span><\/span><span>\u00a0<\/span><\/li>\n<li><span><span>Enables IP forwarding for each interface<\/span><\/span><span>\u00a0<\/span><\/li>\n<li><span><span>Adds UDP port 500 (ISKAMP) and 4500 (NAT-T) in the security group on the public subnet for VPN connections<\/span><\/span><span>\u00a0<\/span><\/li>\n<li><span><span>Azure D2<\/span><\/span><span><span> or D3<\/span><\/span><span><span> instance type compute<\/span><\/span><span>\u00a0<\/span><\/li>\n<\/ul>\n<p><b><span><span>How to Deploy Cisco<\/span><\/span><\/b> <b><span><span>CSR in Azure Government<\/span><\/span><\/b><span>\u00a0<\/span><\/p>\n<ol>\n<li><span><span>Go to the solution templates for 2-NIC and 4-NIC Cisco CSR1000v in <\/span><\/span><a href=\"https:\/\/github.com\/Azure\/azure-quickstart-templates\/tree\/058f18cbb43165b043e5bb56a82a406290c02dac\/cisco-csr-1000v-4-nic\"><span><span>Azure QuickS<\/span><\/span><span><span>tart Repo on Github<\/span><\/span><\/a><span><span>, found at the links below. <\/span><\/span><span><span>They can be found by searching for Cisco CSR1000v, or clicking below. <\/span><\/span><span><span>They can be found by searching for Cisco CSR1000v, or clicking below. <\/span><\/span><span><span>F<\/span><\/span><span><span>or step by step deployment instructions for <\/span><\/span><span><span>solution templates from <\/span><span>Github<\/span><span> in to Azure Government Cloud<\/span><\/span><span><span>, <\/span><\/span><a href=\"https:\/\/azure.microsoft.com\/en-us\/documentation\/articles\/azure-government-image-gallery\/\"><span><span>see <\/span><\/span><span><span>our <\/span><\/span><span><span>technical documentation<\/span><\/span><\/a><span><span>.<\/span><\/span><span>\u00a0<\/span><\/li>\n<\/ol>\n<ul>\n<li><a href=\"https:\/\/github.com\/Azure\/azure-quickstart-templates\/tree\/058f18cbb43165b043e5bb56a82a406290c02dac\/cisco-csr-1000v\"><span><span>Cisco CSR1000v<\/span><\/span><\/a><span><span> (<\/span><\/span><span><span>2 NIC<\/span><\/span><span><span>)<\/span><\/span><span>\u00a0<\/span><\/li>\n<li><a href=\"https:\/\/github.com\/Azure\/azure-quickstart-templates\/tree\/058f18cbb43165b043e5bb56a82a406290c02dac\/cisco-csr-1000v-4-nic\"><span><span><span>Cisco CSR1000v<\/span><\/span> <span><span>4 NIC<\/span><\/span><\/span><\/a><span>\u00a0<\/span><\/li>\n<li><a href=\"https:\/\/github.com\/Azure\/azure-quickstart-templates\/tree\/058f18cbb43165b043e5bb56a82a406290c02dac\/cisco-csr-1000v-existing-vnet-4-nic\">Cisco CSR1000v 4 NIC existing Vnet <\/a><\/li>\n<\/ul>\n<p><span><span><span><a href=\"https:\/\/devblogs.microsoft.com\/azuregov\/\"><img decoding=\"async\" width=\"1500\" height=\"337\" class=\"aligncenter size-full wp-image-3445\" alt=\"Cisco 1\" src=\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/43\/2019\/03\/Cisco-1.png\" \/><\/a><\/span><\/span><\/span><\/p>\n<p><span><span>NOTE: you will need an Azure Government Account valid in order to continue. <\/span><\/span><span><span>To experience the power of Azure Government for your organization, sign up for an <\/span><\/span><a href=\"https:\/\/azuregov.microsoft.com\/trial\/azuregovtrial\"><span><span>Azure Government Trial<\/span><\/span><\/a><span><span>.<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><b><span><span>W<\/span><\/span><\/b><b><span><span>hat is the Performance of the CSR <\/span><\/span><\/b><b><span><span>1000V <\/span><\/span><\/b><b><span><span>on Azure?<\/span><\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span><span>When deploying the CSR <\/span><\/span><span><span>1000V <\/span><\/span><span><span>solution on Azure D2 compute <\/span><\/span><span><span>specifications<\/span><\/span><span><span> are 2 vCPU and 7GB of RAM.\u202f With these specifications the CSR <\/span><\/span><span><span>1000V <\/span><\/span><span><span>can achieve a CEF throughput of 500Mbps and an <\/span><span>IPSec<\/span><span> throughput (AES 256) of 150 <\/span><span>Mbps<\/span><span>.\u202f<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><span><span>When deploying the CSR 1000<\/span><\/span><span><span>V<\/span><\/span><span><span> solution on Azure D3 compute specifications are 4 vCPU and 14GB of RAM.\u202f With these specifications the CSR 1000<\/span><\/span><span><span>V<\/span><\/span><span><span> can achieve a CEF throughput of 500Mbps and an <\/span><span>IPSec<\/span><span> throughput (AES 256) of 500 <\/span><span>Mbps<\/span><span>.\u202f<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><span><span>\u00a0<\/span><\/span><span><span>Both offers<\/span><\/span><span><span> support up to 1,000 VPN tunnels.<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><b><span><span>How Does Licensing the CSR <\/span><\/span><\/b><b><span><span>1000V <\/span><\/span><\/b><b><span><span>Work on Azure<\/span><\/span><\/b> <b><span><span>Government Cloud<\/span><\/span><\/b><b><span><span>?<\/span><\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span><span>If you want to connect your enterprise network to Azure the CSR <\/span><\/span><span><span>1000V <\/span><\/span><span><span>supports Bring Your Own <\/span><\/span><span><span>License (BYOL).\u202f This means you buy a license from Cisco or a partner and install that license to the CSR <\/span><\/span><span><span>1000V <\/span><\/span><span><span>running on Azure<\/span><\/span> <span><span>Government Cloud<\/span><\/span><span><span>.\u00a0<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><span><span>Find your local Cisco partner here: <\/span><\/span><span><span>https:\/\/locatr.cloudapps.cisco.com\/WWChannels\/LOCATR\/openBasicSearch.do<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><span><span>To experience the power of Azure Government for your organization, sign up for an <\/span><\/span><a href=\"https:\/\/azuregov.microsoft.com\/trial\/azuregovtrial\"><span><span>Azure Government Trial<\/span><\/span><\/a><span><span>.<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><span><span>If you want to give the CSR <\/span><\/span><span><span>1000V <\/span><\/span><span><span>a try on Azure, Cisco offers 60-day demo licenses to all CCO account holders.\u202f If you don\u2019t have an account, you go to this <\/span><\/span><a href=\"https:\/\/sso.cisco.com\/autho\/forms\/CDClogin.html\"><span><span>link<\/span><\/span><\/a><span><span>, and create a guest account.\u202f Once you have a guest account, follow the instructions <\/span><\/span><a href=\"http:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/routers\/csr1000\/software\/configuration\/csr1000Vswcfg\/csroverview.html\"><span><span>here<\/span><\/span><\/a><span><span> for temporarily licensing you CSR <\/span><\/span><span><span>1000V <\/span><\/span><span><span>on Azure.<\/span><\/span><b><span><span>\u202f<\/span><\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span><span>You can access this <\/span><\/span><a href=\"http:\/\/www.cisco.com\/c\/en\/us\/products\/collateral\/routers\/cloud-services-router-1000v-series\/white-paper-c11-736574.html\"><span><span>whitepaper<\/span><\/span><\/a><span><span> to learn more about the integration of Cisco CSR 1000V with Microsoft Azure.<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><span><span>To launch the CSR <\/span><\/span><span><span>1000V <\/span><\/span><span><span>for Microsoft Azure, please visit the<\/span><\/span><span><span> Azure Government Marketplace and search for Cisco<\/span><\/span><span><span> CSR <\/span><\/span><span><span>1000V<\/span><\/span><span><span>.<\/span><\/span><span>\u00a0<\/span><\/p>\n<p><span><span>We welcome your comments and suggestions to help us continually improve your Azure Government experience. To stay up to date on all things Azure Government, be sure to subscribe to our <\/span><\/span><a href=\"https:\/\/blogs.msdn.microsoft.com\/azuregov\/feed\/\"><span><span>RSS feed<\/span><\/span><\/a><span><span> and to receive emails, click \u201cSubscribe by Email!\u201d on the <\/span><\/span><a href=\"https:\/\/blogs.msdn.microsoft.com\/azuregov\/\"><span><span>Azure Government Blog<\/span><\/span><\/a><span><span>. To experience the power of Azure Government for your organization, sign up for an <a href=\"https:\/\/azuregov.microsoft.com\/trial\/azuregovtrial\">Azure Government Trial<\/a>.<\/span><\/span><\/p>\n<p><span>\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft Azure Government Cloud is an isolated and dedicated cloud platform, which enables government agencies and government approved contractors to host sensitive data. Connectivity from on-premises locations to Azure Government Cloud must be secure, scalable and dynamic.\u00a0\u00a0 With Cisco CSR1000v now available on Azure Government Cloud, Government Cloud customers can enjoy the same advanced routing [&hellip;]<\/p>\n","protected":false},"author":1779,"featured_media":20423,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2,1,25],"tags":[51,75,95,107,160],"class_list":["post-3435","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-announcements","category-azuregov","category-portalpreview","tag-announcement","tag-azure","tag-azure-government","tag-azure-marketplace","tag-cisco"],"acf":[],"blog_post_summary":"<p>Microsoft Azure Government Cloud is an isolated and dedicated cloud platform, which enables government agencies and government approved contractors to host sensitive data. Connectivity from on-premises locations to Azure Government Cloud must be secure, scalable and dynamic.\u00a0\u00a0 With Cisco CSR1000v now available on Azure Government Cloud, Government Cloud customers can enjoy the same advanced routing [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/posts\/3435","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/users\/1779"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/comments?post=3435"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/posts\/3435\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/media\/20423"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/media?parent=3435"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/categories?post=3435"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/tags?post=3435"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}