Site-to-site IPSEC on 2811-sec/k9 & ATM E3 modules?

Answered Question
Apr 7th, 2009

Hi folks,

I am planning for a pair of IOS firewalling 2811's across a 34mbits/s data-only link and may additionally need to protect the link with IPSec.

Is this feasible using this platform?

If so, I am concerned about performance...maybe ASA5500's would be better?

Scenario: LAN_a--2811a--E3_line--2811b--LANb.

As always, suggestions gratefully received!

Regards,

Andy.

I have this problem too.
0 votes
Correct Answer by tstanik about 7 years 7 months ago

You can perform site to site VPN in both 2811 and ASA 5500 but the Cisco ASA 5500 Series is Cisco's most feature-rich solution for SSL and IPsec-based remote access, supporting robust site-to-site connectivity. The series provides higher scalability and greater throughput capabilities than the widely deployed Cisco VPN 3000 Series Concentrators and can integrate easily into any Cisco VPN 3000 Series load-balancing cluster.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
tstanik Mon, 04/13/2009 - 14:03

You can perform site to site VPN in both 2811 and ASA 5500 but the Cisco ASA 5500 Series is Cisco's most feature-rich solution for SSL and IPsec-based remote access, supporting robust site-to-site connectivity. The series provides higher scalability and greater throughput capabilities than the widely deployed Cisco VPN 3000 Series Concentrators and can integrate easily into any Cisco VPN 3000 Series load-balancing cluster.

Actions

This Discussion