Cisco VPN Bandwidth

[tsipoulanis]

Hello everyone,

is anyone who can help me in the next question?

we have a S2S VPN with 50Mb internet connection with Non Cisco firewalls (unfortunately).
they see the VPN tunnel doesnot use the whole Bandwidth.

my plan is to implement that VPN with Cisco ISR 800Series models (cause we need them also in the future to have a FlexVPN)

based on the quallity of the Cisco systems, are we gonna have better performance for the VPN?
is it possible to handle and configure the vpn points for a better communication bettwen the offices?

Thank you in advance,
Thomas

[Philip D'Ath]

Use Cisco 890 series.  I can't comment on the performance.  Could be system related.  Could be application related.  Could be people interfering with it from the dark side of the moon.

[tsipoulanis]

:) really thanks for the quick respond.

but i would like to give some more details,
today we have a 50Mb line and the traffic throught the vpn is using only the 12Mb.
are we gonna habe the 100% of the bandwidnth with the cisco  vpn?

thanks,
Thomas

[Philip D'Ath · Accepted solution]

I can 100% assure you the Cisco 890 series will flat line a 50Mb/s circuit with crypto using a medium to large packet mix, and have spare unused capacity free.

If you are using exclusively small packets (such as VoIP) then you are going to need a 4000 series router.

[tsipoulanis]

;) thanks Philip,

that is a next step goal i would like to achieve, next year.

thank you for the advice, was really helpfull.
is it possible to tell me the characteristic of the 4000 routers, which is important to know that show me handling the size of the packet?

best regards,
thom

[tsipoulanis]

do i need in that case (small voice packets) the Unified Communications lisence?
it seems to be "yes" because of the voice features, which are included

[Philip D'Ath]

It is not the Unified Communications licence you need to do VPN (it is the security licence) but it is the higher throughput required that the 4000 series gives you.

Here is a comparison of the 4000 series routers.

http://www.cisco.com/c/en/us/products/routers/4000-series-integrated-services-routers-isr/models-comparison.html

Specifically I would look at one of these two bundles (the first giving you just VPN capability, the second VPN plus a lot of advanced routing protocol options).

ISR4331-SEC/K9
ISR4331-AX/K9

You can read about the licence options here:

http://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/guide-c07-732797.html

[tsipoulanis]

i know about the VPN options, thanks...
that moment i was refering about the Unified Communications lisence, if i will implement the second vpn, for the voice traffic... but dont worry, is not for today.