05-07-2009 03:30 AM - edited 03-04-2019 04:40 AM
Hello Community.
I hope you can help me, because searching the cisco.com site wasn't really helpful for solving my problem.
I have a customer, that wants to have a network deployed with about 15 locations. (up to 30 GRE and IPSec tunnels on each device)
Now I don't know, how many GRE- and IPSEC-tunnels a Cisco 2811 can handle.
Is it necessary to buy 2821 or 3825?
I hope that anybody of you can help me.
PS: I already tryied google and cisco.com
Solved! Go to Solution.
05-07-2009 06:46 AM
05-07-2009 04:36 AM
Hello Monti,
I would suggest you to consider DMVPN as a possible solution.
There are some performance data in table 4.3 of the following
http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/DMVPN_4_Phase2.html
Using at least a 2851 is recommended
Hope to help
Giuseppe
05-07-2009 05:35 AM
DMVPN would be a decision, but we have to make it with the traditional ipsec and GRE tunnels, because the customer is only part of a network witch 15 companys and they want it.
05-07-2009 06:02 AM
2811 would not survive with even 5 GRE over IPSEC tunnels unless you have an AIM VPN module on it. 3825 might survive the 15 GRE/IPSEC tunnels but again it would be just a comment without checking the exact configuration/traffic. I would agree with the above poster and would certainly look for DMVPN phase-1 config to have static point-point IPSEC tuneel between the HUB and the branch sites. Please make sure that you have AIM module on the routers before implementing it.
05-07-2009 06:46 AM
See if Table 5 in http://www.cisco.com/web/partners/downloads/765/tools/quickreference/vpn_performance_eng.pdf helps.
05-07-2009 11:47 AM
Thank you all for your urgent help.
I have now ordered some 3825 with AIM modules (3825 HSEC/K9 Bundle)
In the next time I want to set up a Lab with a DMVPN config, to get some Know-how on that issue.
Thanks a lot.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: