Question: which Router for Telstra Fibre TSF30?

[JobstSchmalenbach]

I have a working Telstra Fibre connection 30/30, NTU is a MRV OS-904.

This produces a WAN IP XXX.XXX.XXX.XXX/255.255.255.254.

Over that connection I get a network of XXX.XXX.XXX.XXX/29. This gives me 5 machines, 1 VOIP PABX, 1 DMZ, 1 LAN gateway and 2 mailservers (due to the extra certificates required).

The ISP suggested a Cisco 1921-SEC/K9 which was a little overkill due to 80/80. I asked for another one and the CISCO 892 was suggested – the ISP knew I wanted firewall capabilities, they said it could do what I wanted. I took this one as part of the contract.

Now I understand the theory of firewalls (I studied it @ University), I can setup a LINUX gateway with iptables very happily. I just cannot know all the hardware of CISCO and any other company – it's not the main part of my job - I only need to do this occasionaly.

I trusted the engineers but I am now left with something that does not do what I want.

I have some other firewalls in a datacenter connected to Dell Blade Servers. One of them is a CISCO 5505 which I am very happy with (I know it can do 150mbs). I know the later version Cisco 5506 and 5508 are the replacement of the 5505.

In the data centre the Cisco 5505 is connected via the WAN/Management address (outside) to an upstream router and my machines (inside) are connected to the it using a XXX.XXX.XXX.XXX/29 network.

I think the Cisco 5505 should  be able to do the job as a CPE behind the Telstra NTU MRV OS-904, as it is basically the same network setup as the one I use in the datacenter. Also it give me HTTPD interface which allows me to program it without the need to understand the cisco programming language in detail.

A Few questions:

1. Can I use a Cisco 550X to be used as the CPE, i.e. as the router (with firewall built in) behind the MRV OS-904?
2. If not what router with built in firewall should I get?

thanks
Jobst

[Dennis Mink]

I am not sure what the MRV OS-904. is and what it is configured as.

the most intereseting question is, what sort of service is Telstra offering, if you get an ethernet drop then sure an ASA will do. but what about QoS?  do you need that?  I Telstra 'QoS-ing" your traffic?

Typicall y 1900, 2900 series used to the CPE, but they are now superceeded by 4000 series ISR.

what I see with Telstra;s offerings, I think an ASA will do the trick, but do analyse your QoS requirements.

please rate if helpful