Hi,

Can someone recommend cisco routers support site to site VPN. I already have a ASA but am looking to purchase some cisco routers to support multiple sites.

Thanks in advance

815-VPN, is the cheapest Cisco router that supports IPsec site-to-site, ASA5505 is cheaper that 815-VPN.

Vyatta, either hardware appliance or software is cheap, you can install it on old i386 or even micro-computer.

In regards to server side, you can use ASA5510, or a crypto module with 3845 or 7200, I don't know if there are cheaper options, that what we used to use.

Cheers,

I think something to consider is how much traffic you'll be putting across this. I have a 2801 router that also has the crypto co-processor hardware in it and when we push toward 15Mbps of VPN traffic through the router, it is very processor bound. If you are not going to move that much traffic then a budget router will be fine.

Why though do you need the router? as laith43d mentioned, the 5510 is an option and I think ASAs are optimized to handle more VPN traffic than a budget router but that's just my opinion - an ASA 5505 also seems to handle some of my site to site traffic fairly well and that was way less than $1,000.

Excellent point, I already have a 5510 on the server side I will look into the asa5505.

My familiarity with configuring the routers is better than ASA but always room to learn. Thanks guys.

In setting up site-to-site VPNs, you'll also want to consdider what type of tunnel you'll be using as it will have consequences on your hardare. For a basic IPSec VPN, the opinions above are correct that routers or ASAs will work fine. But if you are looking for features such as VTI or GRE over IPSec, these are only supported on the router platform. If this is for internal business VPNs, I would strongly lean towards using either VTI or GRE over IPSec because of the added flexibility that they provide. In terms of hardware, 2800/2900 or 3800/3900 series routers should be fine, as long as they are sized to your environment.

You can reference Table 12 on the following page to check IPSec performance on the 2800 platform. Unfortunately I have been unable to find a similar table for the 3800 series platform.

http://www.cisco.com/en/US/prod/collateral/routers/ps5854/prod_qas0900aecd80169bd6.html

laith43d

Vyatta :- is it support bandwidth controll for tunnel

hi MR laith43d

vyatta is good option for vpn but I got a problem :- how I can disable muliple login from diffirent PC using the same user acount in vpn access server

thank you

Version : VC5.0.2

VPN type remote access with local account athentication