cisco vs netgear

[ayosizzle]

Currently an organization i work for is looking at changing their network topology. They have a netgear fvx538 router as their core routing equipment and it also functions as the firewall. we are proposing using the cisco 3945 as the core router an asa 5510 as the firewall, the distribution switch would be the 3750 switch and the access layer switches can still be the netgear gsm 7328s since the switches are already on the network and to reduce the cost of buying all new 2960 switches for the 7 floors. Are there any flaws to this topology or improvements or unforeseeable issues?

[Joseph W. Doherty]

Disclaimer

The   Author of this posting offers the information contained within this   posting without consideration and with the reader's understanding that   there's no implied or expressed suitability or fitness for any purpose.   Information provided is for informational purposes only and should not   be construed as rendering professional advice of any kind. Usage of  this  posting's information is solely at reader's own risk.

Liability Disclaimer

In   no event shall Author be liable for any damages whatsoever (including,   without limitation, damages for loss of use, data or profit) arising  out  of the use or inability to use the posting's information even if  Author  has been advised of the possibility of such damage.

Posting

Perhaps not a flaw, but a concern might be, using a software based router for a LAN core.  Cisco recommends the 3945 for WAN bandwidths up to 150 Mbps.  Depending on just how many LAN traffic you expect to pass through the core, a L3 switch is often a better choice.

If there was only going to be a single 3750 as the distribution switch, perhaps this would be your LAN core.  You might consider stacking it with another 3750 to provide you redundancy.

Using the 3750 as described, then perhaps you only need a WAN edge.  This might be a ASA or a WAN router (perhaps with firewall feature set) or perhaps both.  Choice dependent on your WAN requirements.

[ayosizzle]

thanks alot. The organization is also looking at WAN connectivity to about 7 other branches in different geographical areas. I was thinking the 3945 would be a good device to support this requirement and the 3750 can just be the distribution layer of the network where the access layer switches connect. what do u think?

[Joseph W. Doherty]

Disclaimer

The    Author of this posting offers the information contained within this    posting without consideration and with the reader's understanding that    there's no implied or expressed suitability or fitness for any  purpose.   Information provided is for informational purposes only and  should not   be construed as rendering professional advice of any kind.  Usage of  this  posting's information is solely at reader's own risk.

Liability Disclaimer

In    no event shall Author be liable for any damages whatsoever  (including,   without limitation, damages for loss of use, data or  profit) arising  out  of the use or inability to use the posting's  information even if  Author  has been advised of the possibility of such  damage.

Posting

Whether a 3945 is suitable for your seven other branches really depends on aggregate bandwidth.  Again, Cisco recommends a 3945 for up to 150 Mbps WAN bandwidth.  If you expect more WAN bandwidth, go larger, if less, you can go smaller.

Also again, most software routers are not really suitable for a LAN core especially if your LAN uses gigabit.

If your "distribution" 3750 will handles all local LAN routing and only off-site traffic transit the 3945, that's fine.  If the 3945 will be doing LAN routing, that's what I'm suggesting you avoid.

[ayosizzle]

Ok so rather than use the 3945 as the WAN edge router and the ASA 5510 as

the firewall, what other recommendation would u suggest?

On Tue, Oct 11, 2011 at 3:44 PM, JosephDoherty <

[Joseph W. Doherty]

Disclaimer

The     Author of this posting offers the information contained within this     posting without consideration and with the reader's understanding  that    there's no implied or expressed suitability or fitness for any   purpose.   Information provided is for informational purposes only and   should not   be construed as rendering professional advice of any kind.   Usage of  this  posting's information is solely at reader's own risk.

Liability Disclaimer

In     no event shall Author be liable for any damages whatsoever   (including,   without limitation, damages for loss of use, data or   profit) arising  out  of the use or inability to use the posting's   information even if  Author  has been advised of the possibility of  such  damage.

Posting

Nothing else.  To recap, use a WAN router for the WAN edge (e.g. your 3945, but size as needed), use a L3 switch for a small LAN core (e.g. your 3750), consider redundancy in your LAN core (e.g. 3750 stack; MEC to access switches), for small LAN 2 layer model likely sufficient (i.e. core and edge), for Internet edge use a firewall (e.g. your ASA, although your 3945 with firewall features might be sufficient too).