we are currently replacing our wan with vpn. So, we are installing fw/vpn routers at each location. I have prices for both 1721 and 1760. The 1721 has a more attractive price but I am not sure if the 1721 would be powerful enough. The office is small but we will be sending AD replication traffic, ssh/telnet traffic, printing traffic, terminal server traffic and email over the vpn tunnel. We have about 30 people at each site.
Would the 1721 be sufficient? Or should I just buy the 1760 (3k more)
if you do not plan to significantly increase the number of users, the 1721 should be plenty. The 1760 is more of a multiservice platform, but if you are just worried about site-to-site VPN traffic, your potential bottleneck would be the xDSL or WAN connection, and since the 1721 and the 1760 use the same cards, it would not make a difference. Of course this kind of advice is always somewhat arbitrary, but from experience I would say you can go with the 1721.
Will the 1721 be doing the IPSec encryption? I ask because software encryption is extremely slow -- I don't know offhand if there's a VPN encryption module for the 1700 series. If the router is going to be doing software encryption then you need to take a long look at what your traffic patterns will be and come up with a maximum bandwidth that the router needs to be able to push. Note that a 2621 can only do around 800kbit/s doing software 3DES, barely half of a T1 -- a 1721 would likely be slower.
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...