RV016 for 20 site-to-site VPN

[Diego.Satizabal1]

Best regards

Currently I've got one RV016 and one RV110W router to try and interconnect one of our branches (clothes retail) with the central site, we've managed to install them and VPN works just fine, but we have 19 more stores nationwide.

At the stores we may have 2 to 8 computers as point-of-sale, one of them acting as server to our system, that server is required to connect to the main server at the central office.

My question is: We've received some advice from people saying that these equipement are too small to connect our 20 stores, does anyone know if this is true? are these RV series suited for this quantity of branches connection?

Thanks in advance for any support!

[Michael Swenson]

Hello,

The RV016 will support up to 100 IPsec site-to site tunnels.  Also, the device is designed for 100 users or less.  Thus, the 20 VPN connections will establish to the RV016.  However, the performance could degrade has more connection are added.

RV016 datasheet below:

http://www.cisco.com/c/en/us/products/collateral/routers/rv016-multi-wan-vpn-router/data_sheet_c78-501223.html

Best Regards,

[Diego.Satizabal1]

Hello Michael, thanks for your kind response

So, you wouldn't recommend me to use RV016 as central router for such number of VPN? You think that would be better to install a mor powerfull router such as one of Cisco ISR 4000 series?

Thanks in advance for your support!

[Michael Swenson]

Hello,

The RV016 will work at your central office.  The performance would depend on the amount traffic generated.  Because the server, on both ends, is the main communication over the vpn and not the 8+ pcs, you should be fine.  You could set up the VPN so only the server communicates to the Main office.  This would reduce the traffic and help performance.  Yes, you could always upgrade the main office VPN router.

Regards,

[Diego.Satizabal1]

Thanks a lot for your response Michale, it's been very useful for us

I'm daring to ask you a couple of more questions:

1) If we intend to connect more services in the future through this platform, such as connection from stores to file servers or mail server, would it still these RV016/RV110W support it?

2) Wouldn't it be necessary to install additional security equipment such as ASA5506 with this RV016?

Thanks a lot for your help!

[Michael Swenson · Accepted solution]

Hello,

The ASA5506 is a very good security appliance and will give you much better security.   The RV016 is not a security appliance but does have a firewall.  Less flexible, Less features.

You would need the ASA5506-x w/ Firepower and the Security Plus License.  With the Security Plus license the 5506 only support 10 IPsec VPN tunnels.  With the License it support 50.

The VPN throughput ( speed ), however, is about the same between the ASA and the RV016.  ASA get 100 mbps VPN throughput  and the RV016 get 97 mbps.  very similar. 

*** The real bottle neck is actually with the RV110w on the remote site.  It only get 5 mbps VPN throughput.  You should  consider the RV130W with 50 mbps VPN throughput.

Regards,

[Diego.Satizabal1]

THANK YOU!