ASR1002X-36G-SECK9 - Cisco ASR 1000 Aggregation Services Routers

ASR1002X-36G-SECK9 Order Identity

ASR1002X-36G-SECK9 is a physical Cisco ASR1002-X fixed-platform router bundle at the 36 Gbps software-licensed forwarding tier. It is not a standalone software license, generic ASR 1000 chassis page or guarantee of encrypted/application throughput.

Cisco's lifecycle record describes ASR1002X-36G-SECK9 as “ASR1002-X, 36G, VPN+FW Bundle, K9, AES license.”

ASR1002-X hardware facts

Cisco documents an integrated embedded services processor licensed for 5, 10, 20 or 36 Gbps, three half-height SPA slots, a built-in six-port Gigabit Ethernet SPA and hardware-based encryption capability. Interface modules, optics, cords, software rights and support must still be checked line by line on the supplied quote.

VPN and firewall security bundle boundary

The SEC code identifies the Cisco VPN plus firewall bundle family. Firewall policy, IPsec use and logging requirements must be tested together rather than inferred from the product name.

36G security service-chain acceptance

This 36 Gbps SEC bundle combines a physical ASR1002-X order with Cisco's VPN and firewall bundle identity.

Model forwarding, IPsec, firewall state and logging together. Record which functions are licensed on the router and which controls remain on adjacent security systems.

Acceptance test

Create representative state and encrypted flows while sustaining logging, then test policy recovery after a controlled restart.

Security service-chain matrix

List each control plane and data plane function in order: routing, address translation if used, firewall decision, encryption, telemetry and log delivery. Assign an owner and validation method to every function so an adjacent firewall is not confused with a router entitlement. Replay permitted, denied and encrypted flows while monitoring state creation and log timestamps. Preserve the policy revision, object inventory and rollback export. Capacity approval should use the combined service test; a routing-only benchmark cannot validate a gateway expected to enforce security and deliver audit evidence. For the 36G design, also inventory every high-rate ingress and egress path and prove that telemetry export does not become the hidden bottleneck during peak inspection.

Related ASR1002-X order records

• ASR1002X-10G-SECK9 - compare the licensed tier and bundle boundary.
• ASR1002X-20G-SECK9 - compare the licensed tier and bundle boundary.
• ASR1002X-36G-HA-K9 - compare the licensed tier and bundle boundary.

Lifecycle note: Cisco's ASR1002-X notice requires a current support and migration decision before acquisition or extension.

Official Cisco evidence: ASR 1000 ordering guide, ASR1002-X hardware installation guide, and ASR1002-X lifecycle notice.