Deciding which devices are good choice for vpn

[alianengineer1]

hi every one

i need help in deciding which cisco devices are the better choice for establishing vpn connection between HQ and 14 remote sites in which the remote sites are only connects to the HQ and not connecting to each other and which softwares and licenses are required 

thanks

[Omar El-Mohri]

What is the bandwidth usage that you need?

Basically an ASA 5505 or 5510 at the HQ K9 if you want AES encryption.

And on the branches only ISR2 something like Cisco 1900 or Cisco 2900 with SEC license.

If you identify what traffic you have and the BW usage needed, I can me more precise.

[alianengineer1]

Thanks omar for your reply 

we will use ethernet connection with bandwidth no mor than 8 mbps

thanks

[Karsten Iwen]

For scenarios like these I would typically go for IOS routers on both the HQ and the branches. There you can tunnel-interfaces which make implementing VPNs really easy and gives you the flexibility to extend your VPN in the future. The decision which devices to take depend purely on the needed throughput and the type of WAN-interface for the branches (like Ethernet or DSL).

Another possibility which make the VPN-implementation even easier would be the Cisco Meraki MX appliances on both the branches and the HQ.

[alianengineer1]

Thank you karsten for your reply 

we will use ethernet connection with bandwidth no more than 8 mbps

thanks

[Karsten Iwen]

For the branches you could use the c881. For the HQ I would look at one or two of the new 4331. The c800 is much faster than 8 mps, the 4331 is capable of 100 Mbps and can be upgraded to 300 mbps with a license.

For the alternate solution, you could use Meraki MX64 at the branches and MX 84 at the HQ. With that you also have a really good firewall and the possibility to add content inspection.

[alianengineer1]

Iam very glad that you helped me but there is one more thing to ask about

which licensing do i need for c881 and 4331 and which software images , is the default license and image for c881 is good for my work and it says its default so is that mean its free? and what about the 4331 router images and license? thank you alot for your help

[Karsten Iwen · Accepted solution]

The C881-K9 comes by default with an Advanced Security license. There is an optional Advanced IP license for more routing options. For the 4331, the SEC-Bundle is needed. The options are shown in the Data-sheets I linked in the previous answer.

[Omar El-Mohri]

In your case you should consider Karsten's recommendation. You'll have plenty of hardware to support your requirements.