VPN solution for multiple remote sites including SNA

[philip]

What would be the best hardware VPN solution that is scalable? I have 1 central office and 2 remote sites for now. What type of hardware VPN should I use at the central office and at the remote sites. One of my remote sites is SNA on token ring. Should I encapsulate IP on the same router that is running the VPN?

[rsissons]

I would not recommend running SNA traffic across a VPN. SNA, as a protocol, was designed to run on dedicated connections and, consequently, is extremely intolerant of delay.

By definition, VPNs run over a public backbone over which you have no control over what is running and therefore you cannot guarentee response.

[danlorus]

The best hardware VPN solution at your central office would be a 7200, and a 2600 at your remote office's. Anything lower than a 7200 at the central office, and you'lll run into issues adding more than one VPN site.