Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Decision between Cisco 2811 or 2821 or 3825? (GRE and IPSec)

Hello Community.

I hope you can help me, because searching the cisco.com site wasn't really helpful for solving my problem.

I have a customer, that wants to have a network deployed with about 15 locations. (up to 30 GRE and IPSec tunnels on each device)

Now I don't know, how many GRE- and IPSEC-tunnels a Cisco 2811 can handle.

Is it necessary to buy 2821 or 3825?

I hope that anybody of you can help me.

PS: I already tryied google and cisco.com

1 ACCEPTED SOLUTION

Accepted Solutions
Super Bronze

Re: Decision between Cisco 2811 or 2821 or 3825? (GRE and IPSec)

5 REPLIES
Hall of Fame Super Silver

Re: Decision between Cisco 2811 or 2821 or 3825? (GRE and IPSec)

Hello Monti,

I would suggest you to consider DMVPN as a possible solution.

There are some performance data in table 4.3 of the following

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/DMVPN_4_Phase2.html

Using at least a 2851 is recommended

Hope to help

Giuseppe

New Member

Re: Decision between Cisco 2811 or 2821 or 3825? (GRE and IPSec)

DMVPN would be a decision, but we have to make it with the traditional ipsec and GRE tunnels, because the customer is only part of a network witch 15 companys and they want it.

Cisco Employee

Re: Decision between Cisco 2811 or 2821 or 3825? (GRE and IPSec)

2811 would not survive with even 5 GRE over IPSEC tunnels unless you have an AIM VPN module on it. 3825 might survive the 15 GRE/IPSEC tunnels but again it would be just a comment without checking the exact configuration/traffic. I would agree with the above poster and would certainly look for DMVPN phase-1 config to have static point-point IPSEC tuneel between the HUB and the branch sites. Please make sure that you have AIM module on the routers before implementing it.

Super Bronze

Re: Decision between Cisco 2811 or 2821 or 3825? (GRE and IPSec)

New Member

Re: Decision between Cisco 2811 or 2821 or 3825? (GRE and IPSec)

Thank you all for your urgent help.

I have now ordered some 3825 with AIM modules (3825 HSEC/K9 Bundle)

In the next time I want to set up a Lab with a DMVPN config, to get some Know-how on that issue.

Thanks a lot.

1504
Views
6
Helpful
5
Replies
CreatePlease to create content