VPN design issues

[shabib.syed]

Well I have the same task to implement a VPN, what i design was using a 3620 connected to the outside interface to PIX 515 whose inside interface is connected to the backbone switch. Now my remote clients will be runniing VPN client software. Right now I have only one Full T1, but i might need to increase my bandwidth since i will have some remote offices. I know 3620 is not that scalable but what i need to know is about the PIX 515. Now i have not really grasp the concept of concentrators( how they can help). With not more then 150 remote users will this implementation work? And even if I have 2 more Full T1 i can continue with 3620? My other question is for remote offices, can I use DSL there so that they dont use my netowrk bandwidth for internet, but only to use internal resources.

[lisa.hall]

Looks like the PIX 515 will work just fine. It's rated for 120 Mbps and 125k connections simultaneously. 150 VPN users should be no problem. Let me know what you decide on or if I can help you out anymore.

Good Luck

[shabib.syed]

hey thanks there....i open nother conversation ...help me there

thanks....

[smalkeric]

When I have to design a PIX/VPN solution I refer to this document http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/prodlit/cspix_dg.pdf. It gives some good details on the performance numbers. DSL to the Internet should work out as long as those remote offices aren't too big. You should first check to be sure you are close enough to a CO to get DSL. If you aren't too far you can sometimes get up to T1 speeds. Just be sure to setup encryption for traffic coming into your network.

[shabib.syed]

thanks,

this link was very helpful