What kind of problems do you know about the 3000? It seems to do Remote Access VPN pretty good.

We're running all static routes. I thought about this and I think all I need to do is point the static route to the internet router and VPN cloud.

Thanks

The 3000 is not good at managing route and it's EOL.

For the routing part, it you use static route in your network, just point it at your vpn gateway.

I don't quite understand specifically what you mean by managing routes. We don't plan on implementing too many VPN's, maybe 3 or 4 at the most.

"For starters, dont use the 3000. Not a good box for doing L2L vpn."

Where did you come up with this reason?

I've done lot of VPN configurations on

many vendors such as Juniper, Checkpoint

and Cisco and I can say that the VPN

concentrator is an excellent device, very

easy to manage and configure. You can

even run dynamic routing protocol on the

VPNc. VPNc is a much better device than

the ASA in term of VPN, IMHO. Granted,

if you have complex VPNs with GRE, then

IOS router is the way to go but VPNc

will do just fine here, especially when

you only have a few tunnels to deal with.

Managing routes on VPNc is almost the

same as IOS routers.