01-16-2018 03:18 AM - edited 03-08-2019 01:26 PM
Hello All,
I´m trying to choose some router for small office with 25-50 users, I´m thinking about this device:
C892FSP-K9, questions are :
1. Is it possible to make HA (active/standby as on cisco ASA) with this devices, guess it is not possible but I need some confirmation, because I cannot find nothing about that.
2. Do you know some cisco routers with similar price (maybe little bit higher), which will be capable working at least active/standby.
3. Is Anyconnect SSL VPN, supported by this router or is there any option to use AnyConnect VPN?
Thank you in advance
Solved! Go to Solution.
01-16-2018 03:57 AM
01-16-2018 04:39 AM
What do you mean with "just connect 2 ISP lines to one device". It makes sense if I have 2 ISP lines and connect them first line to first R and second line to second R.
Yes exactly 2 routers would be best but some people may not have budget for 2 devices so the other option would be connect 2 lines to the same device with 2 different ISPs for some form of resiliency
So with GLBP you could have both routers active at the same time both sending traffic out there own wan circuits , with HSRP only 1 router is active at a time , if one fails either by tracking a route upstream or even the hardware itself fails the second router becomes active, you could use the features such as ip sla with tracking to initiate the instant fail over to the other router , design would look a bit like below , the LAN would be split across the 2 routers with say .251 on 1 lan interface of routerA and .252 on 1 lan interface of routerB and then they both share a VIP address .254 that the lan users point too so no matter which router is up and active they can get out of the lan to the wan
01-16-2018 03:57 AM
01-16-2018 04:19 AM - edited 01-16-2018 04:23 AM
Thanks for answer, okay imagine that I have 2x C892FSP-K9, how they will cooperate? when one of them will "die", they will not have same configuration, so how I will ensure routing to the ISP (ther is only static route, to the provider. (maybe floating route).
What do you mean with "just connect 2 ISP lines to one device". It makes sense if I have 2 ISP lines and connect them first line to first R and second line to second R.
01-16-2018 04:39 AM
What do you mean with "just connect 2 ISP lines to one device". It makes sense if I have 2 ISP lines and connect them first line to first R and second line to second R.
Yes exactly 2 routers would be best but some people may not have budget for 2 devices so the other option would be connect 2 lines to the same device with 2 different ISPs for some form of resiliency
So with GLBP you could have both routers active at the same time both sending traffic out there own wan circuits , with HSRP only 1 router is active at a time , if one fails either by tracking a route upstream or even the hardware itself fails the second router becomes active, you could use the features such as ip sla with tracking to initiate the instant fail over to the other router , design would look a bit like below , the LAN would be split across the 2 routers with say .251 on 1 lan interface of routerA and .252 on 1 lan interface of routerB and then they both share a VIP address .254 that the lan users point too so no matter which router is up and active they can get out of the lan to the wan
01-16-2018 05:08 AM
Thanks for answer, and one more question, what is different between ASA active/standby and hsrp or glbp ? two ASAs are in one stack and they have same configuration, but what are advantages ?
And last question, if I will think about ASA, why should I choose ASA instead of router with IPS, zone based firewall....this one is classic question difference between Firewall and Router, but I cannot find some comprehensive answer, if you have some link please share with me.
Thank you for help Mark !
01-16-2018 06:33 AM
01-17-2018 03:45 AM - edited 01-17-2018 03:48 AM
Thanks for answer, last question about C892FSP-K9: how many AnyConnect VPN clients could be connected, is there any licensing as on cisco ASA ?
Thank you
01-17-2018 04:02 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide