hardware vpn box to box doubt

[binoyjosephstanly]

hi all,

im planing to put ASA 5510 at my HQ and for branch office if i go for 515E i will be able to establish VPN in network extension mode ( hope this is calles hardware based VPN). For this kind of setup whats the PIX OS required for both these equipments.i need to go for a 3DES licence for pix 515E that is for my branch pix.

and is there special OS feature set required for ASA 5510.

please help.i will rate all the posts.

Regards

Binoy.

[spremkumar]

Hi

You can refer the below latest release notes of both the products..

http://www.cisco.com/en/US/products/ps6120/prod_release_notes_list.html

http://www.cisco.com/en/US/products/sw/secursw/ps2120/prod_release_notes_list.html

regds

[sachinraja]

ASA's nowadays come with OS 7.x... its kinda router like CLI on the ASA & PIX with the 7.x IOS.. to establish VPN, the IOS really does not matter.. u can still establish VPN between a PIX with 6.3 OS and ASA with 7.x IOS...

For 3 DES , just see in the show version of the boxes, if it is enabled.. if not, u can get it free by mailing to licensing@cisco.com, with ur serial numbers...

Hope this helps.. rate replies if found useful..

Raj

[binoyjosephstanly]

hi sachin tnxs for ur reply

im planning for 1mb dsl line at branch office and at HQ 12k kbps internet leased line with public ip, so when i establish a hardware vpn what will be my bandwidth.

[m.sir]

Bandwidth will be same but you get higher latency thanks encryption overhead (firewall must encrypt/decrypt packet and it takes some time)

You can get VAC or VAC+ card in place (its additional HW for improving of encryption performance)

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet09186a0080210cd9.html

in this document you have some tables with encryption performance impact

M.

Hope that helps rate if it does