ASR1002X-20G-SECK9 - Cisco ASR 1000 Aggregation Services Routers

ASR1002X-20G-SECK9 Order Identity

ASR1002X-20G-SECK9 is a physical Cisco ASR1002-X fixed-platform router bundle at the 20 Gbps software-licensed forwarding tier. It is not a standalone software license, generic ASR 1000 chassis page or guarantee of encrypted/application throughput.

Cisco's lifecycle record describes ASR1002X-20G-SECK9 as “ASR1002-X, 20G, VPN+FW Bundle, K9, AES license.”

ASR1002-X hardware facts

Cisco documents an integrated embedded services processor licensed for 5, 10, 20 or 36 Gbps, three half-height SPA slots, a built-in six-port Gigabit Ethernet SPA and hardware-based encryption capability. Interface modules, optics, cords, software rights and support must still be checked line by line on the supplied quote.

VPN and firewall security bundle boundary

The SEC code identifies the Cisco VPN plus firewall bundle family. Firewall policy, IPsec use and logging requirements must be tested together rather than inferred from the product name.

20G regional security gateway

This 20 Gbps SEC bundle supports a regional gateway design that combines routing with VPN and firewall requirements.

Keep an interface map, policy baseline, entitlement owner, software release and rollback image with the receiving record. A chassis-only quote does not satisfy this PID.

Acceptance test

Validate routing convergence, firewall state, encrypted traffic and logging under the intended regional service mix.

Regional gateway change ledger

Maintain a ledger that ties every route-policy, firewall rule, VPN object and logging destination to an owner and change ticket. Before replacement, export the configuration and translate objects into the target platform's policy model, identifying features that have no direct equivalent. The acceptance window should include ordinary traffic, a burst of new sessions and a carrier failover. Compare log completeness and timestamps before and after the event so a gateway that forwards packets but loses audit evidence is not accepted. For the 20G regional role, group changes by carrier and business unit, and retain a backout snapshot for each wave instead of relying on one site-wide rollback.

Related ASR1002-X order records

• ASR1002X-36G-SECK9 - compare the licensed tier and bundle boundary.
• ASR1002X-10G-SECK9 - compare the licensed tier and bundle boundary.
• ASR1002X-20G-HA-K9 - compare the licensed tier and bundle boundary.

Lifecycle note: Cisco's ASR1002-X notice requires a current support and migration decision before acquisition or extension.

Official Cisco evidence: ASR 1000 ordering guide, ASR1002-X hardware installation guide, and ASR1002-X lifecycle notice.