Recommended Cisco router for GRE OVER IPSEC.

[sarahr202]

Hi everybody,

I am planning to connect our two remote locations via IPSEC tunnel, looking for the cheapest option available for router options.

You guys have any good recommendations?

Have a nice weekend!!

Much appreciated

[Francesco Molino · Accepted solution]

Hi

there is 1 I like so much, it's Cisco 892fsp. 

It has 8 ports switch, you can do l2tp,vpn,gre,mgre,ips,zbf,....

hope this helps. 

Thanks

PS: Please don't forget to rate and mark as correct answer if this answered your question 

[dmuinoorallo · Accepted solution]

I think any of 800 models with K9 ios is perfect for you.

http://www.cisco.com/c/dam/en/us/products/collateral/routers/800-series-routers/cs_poster_800_series.pdf

[sarahr202]

Hi Guys,

Thanks for your response, just find out we need to support 500 users, so any ideas for good cheap router that can do that ? must support IPSEC, DMVPM,.

Thanks,

[Francesco Molino]

Hi

ok for 500 ipsec tunnels? If so, Cisco 800 series won't fit. 

With HSEC-K9 licenses, you can go over the 250 tunnels limits but don't remember how many exactly (http://www.cisco.com/en/US/prod/collateral/routers/ps10616/white_paper_c11_556985.html).Youhave all supported platforms. The limit of bandwidth with ISR would be 85 Mbps (if I remember good) for encrypted throughput. 

Then you have choice to go with asr 1001-x for example but not cheapest solution. 

What do you mean by 500 users? 

Because you can also do a design with ASA and separated router. 

It's quite hard to reply with few informations

Thanks

PS: Please don't forget to rate and mark as correct answer if this answered your question 

[Joseph W. Doherty]

For how much bandwidth?

[sarahr202]

Hi Joseph,

It is  going to be 100M MPLS CKT.

Thanks,

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages wha2tsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

Well, don't believe any 800 series model has sufficient performance for that.

For 100 Mbps, Cisco would recommend at least a 3925.

PS:

(older) Whitepaper ISR performance: https://supportforums.cisco.com/sites/default/files/legacy/0/3/8/142830-white_paper_c11_595485.pdf

[sarahr202]

Thanks Joseph