Decision between Cisco 2811 or 2821 or 3825? (GRE and IPSec)

Answered Question
May 7th, 2009

Hello Community.

I hope you can help me, because searching the site wasn't really helpful for solving my problem.

I have a customer, that wants to have a network deployed with about 15 locations. (up to 30 GRE and IPSec tunnels on each device)

Now I don't know, how many GRE- and IPSEC-tunnels a Cisco 2811 can handle.

Is it necessary to buy 2821 or 3825?

I hope that anybody of you can help me.

PS: I already tryied google and

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3.3 (3 ratings)
montiburns Thu, 05/07/2009 - 05:35

DMVPN would be a decision, but we have to make it with the traditional ipsec and GRE tunnels, because the customer is only part of a network witch 15 companys and they want it.

Amit Singh Thu, 05/07/2009 - 06:02

2811 would not survive with even 5 GRE over IPSEC tunnels unless you have an AIM VPN module on it. 3825 might survive the 15 GRE/IPSEC tunnels but again it would be just a comment without checking the exact configuration/traffic. I would agree with the above poster and would certainly look for DMVPN phase-1 config to have static point-point IPSEC tuneel between the HUB and the branch sites. Please make sure that you have AIM module on the routers before implementing it.

montiburns Thu, 05/07/2009 - 11:47

Thank you all for your urgent help.

I have now ordered some 3825 with AIM modules (3825 HSEC/K9 Bundle)

In the next time I want to set up a Lab with a DMVPN config, to get some Know-how on that issue.

Thanks a lot.


This Discussion