To the best of my knowledge, all Cisco routers support VPN. It is just a question of having the right version of the IOS. Further, routers supporting VPN can be configured for VPN client support. The configuration for the same is available at http://www.cisco.com/warp/public/471/ipsecrouter_vpn.html. Also, a number of IOS versions support both the the Firewall feature set and 3DES encryption. Some of them are (supported on the 826 product family) are IOS 12.2(15)T1, 12.2(15)T, 12.2(8)YN, 12.2(8)T5, 12.2(8)T4, 12.2(8)T1, 12.2(2)T4, 12.2(2)T1, 12.2(2)T. Hope that helps.