Sign in
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

Cisco Cloud Services Router (CSR) 1000V - Security Pkg. Max Performance

Cisco Cloud Services Router (CSR) 1000V - Security Pkg. Max Performance

By: Cisco Systems, Inc. Latest Version: 17.03.08a

This version has been removed and is no longer available to new customers.

Product Overview

CSR 1000V is now End of Sale (Please see EOS notice here: and Cisco recommends customers to adopt the following next generation cloud router, Catalyst 8000V, for virtual Enterprise class networking for SD-WAN and Routing:

You may use the GUI-driven migration tool will help you migrate your Cisco Cloud Services Router 1000V (CSR 1000V) instance running in autonomous mode to a Cisco Catalyst 8000V (C8000V) instance. This migration uses AWS CloudFormation template based automation to spin-up a new instance of Catalyst 8000V and copy the configuration files from the CSR 1000V instance. You can batch migrate up to ten CSR 1000V instances in one go. The migrated instances will include the enhanced "secure object storage" feature in C8000V that stores all sensitive configuration information in an encrypted file system inside the VM. See the chapter in the Catalyst 8000V Configuration Guide for AWS for more details.

The Security Technology Package for Maximum Performance version of Cisco Cloud Services Router (CSR1000V) delivers the maximum VPN/firewall performance in the AWS cloud, by using AWS instances with direct I/O path for higher & more consistent IPSec performance & 2x the IPSec performance with IMIX packets. As part of Cisco's cloud connect portfolio, the CSR1000V is a full Cisco IOS-XE router (i.e. ASR1K) in an AMI form factor that enables AWS customers to easily extend their enterprise security policies to AWS cloud in point-to-point or point-to-multipoint deployments. With CSR1000V, AWS customers can deploy enterprise-class VPN 3x times faster than with native or other VPN solutions, and they can control and manage both sides of the VPN tunnel for higher security. Unlike native VPN, CSR provides notifications, logs and debugging commands and terminates many VPN tunnels with one instance. Native VPN solutions only offer site-to-site IPSec, but the CSR1000V offers IPSec, DMVPN, GETVPN, FLEXVPN, SSL VPN, and VTI-VPN: static and dynamic. It also offers advanced config options: pre-shared key, certificates (PKI), SHA-1 &2, DES, 3DES, AES-128, 192, 256, & 512, DH Groups 1-24, and ECP in addition to MODP 2 & 5, ike-v1 & v2. It also includes enterprise-class Zone Based Firewall and routing functionality: BGP, OSPF, EIGRP, RIP, ISIS, IPv6, GRE, VRF-LITE, NTP, QoS, 802.1Q VLAN, EVC, NAT, DHCP, DNS, ACL, AAA, RADIUS, TACACS+, IOS-XE CLI, SSH, Flexible NetFlow, SNMP, EEM, and NETCONF.

Learn more about Cisco's cloud portfolio:
Other product demos & Trials:
Watch the connect, protect, consume video:



Operating System

Linux/Unix, Other Cisco IOS XE

Delivery Methods

  • CloudFormation Template
  • Amazon Machine Image

Pricing Information

Usage Information

Support Information

Customer Reviews