New Cisco Router to replace a Draytech Vigor 2950

[Dario Francesco Vanin]

Hi guys,

I have to replace a Draytech Vigor 2950 with a new Cisco device for a customer, as the Draytech does not support any more than 10 site-to-site VPNs.

I've seen that Cisco 880 Series allows up to 20 IPsec Tunnels whereas Cisco 890 Series allows up to 50 tunnels.

My questions are:

1. Is it possible to increase the number of IPSEC licenses if I buy the 880?

2. Is Cisco 880/890 Series the best deal to replace my old Draytech?

3. What about if I use an ASA 5505 + Ipsec license pack instead? Considering I don't need to configure routing protocols as the network is quite small, I could add a better firewall functionality. I don't need any ADSL functionality as well as the adsl modem is already configured.

Thanks,

Dario

[Leo Laohoo]

The amount of VPN tunnels supported isn't your only concern.  What is the size of the bandwidth?  Have a look at the PDF document below:

http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf

Take note that the PDF document was created for "marketing" purposes so the BW quoted is expressed in half duplex and without any encryption. 

[Dario Francesco Vanin]

Hi Leolaohoo,

The internet speed at their Head Office is 10 Mbps... nothing huge and I reckon the other sites are even slower.

Following your PDF document, both the Cisco 880 and 890 seem to offer enough VPN throughput for what they really need.

What about the ASA 5505 instead? The smaller maximum VPN throughput seems to be 100Mbps and it acts as a firewall as well:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80402e39.html

Thanks,

Dario

[Dario Francesco Vanin]

Any idea about the ASA as solution?

Thanks,

Dario

[Dario Francesco Vanin]

The ASA 5510 replaced the old Draytek without problems.