VPN client won't be possible for this project (no software installation, need vpn lan to lan). Pix can't be used due to managerial issues, doesn't like them :(. So the only remaining possibilities (beside stuff like D-Link I really wouldn't bet my security on) are routers or possibly a nokia fw-1 box.
400kb/s should probably be ok, otherwise a 831 will be more than enough I think. I'll discover soon if my testing budget gets approved, I'd hate to research and drool and then later hear "we'll outsource this" just when I hope to get hands-on experience on this stuff :(. Bye Heiko -- -- PREVINET S.p.A. www.previnet.it -- Heiko Herold [EMAIL PROTECTED] -- +39-041-5907073 ph -- +39-041-5907472 fax > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 07, 2003 11:30 AM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: RE: Cisco 806 ? [7:73613] > > > Just let them go on performance, not on command set? > > I remember about 400Kb/s 3des for the 806/820's > the 830's should do 2Mb/s for 3des. > > 1700's VPN bundle carry a xtra crypto card. At least 2Mbit. > Watch for the > amount of VPN connections, too many access-lists's etc. (cpu power) > > A pix 501 or small vpn client could also do the job? > > Martijn > > -----Oorspronkelijk bericht----- > Van: Herold Heiko [mailto:[EMAIL PROTECTED] > Verzonden: donderdag 7 augustus 2003 11:04 > Aan: Jansen, M; [EMAIL PROTECTED] > Onderwerp: RE: Cisco 806 ? [7:73613] > > > No, it is unrelated - I just remembered the 1000 series being limited > (regarding at least NTP) and feared the 800 series, being the > replacement > for the 1000 series, could have the same limitations. > > Heiko > > -- > -- PREVINET S.p.A. www.previnet.it > -- Heiko Herold [EMAIL PROTECTED] > -- +39-041-5907073 ph > -- +39-041-5907472 fax > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > > Sent: Thursday, August 07, 2003 10:51 AM > > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > > Subject: RE: Cisco 806 ? [7:73613] > > > > > > What about NTP? Should it read NAT? > > > > Martijn > > > > -----Oorspronkelijk bericht----- > > Van: Herold Heiko [mailto:[EMAIL PROTECTED] > > Verzonden: donderdag 7 augustus 2003 8:10 > > Aan: [EMAIL PROTECTED] > > Onderwerp: RE: Cisco 806 ? [7:73613] > > > > > > Thanks! > > I just wanted to double check - some hears ago I got burnt in > > a similar > > situation, with a 1003 and (no) NTP if I remember correctly. > > Heiko > > > > -- > > -- PREVINET S.p.A. www.previnet.it > > -- Heiko Herold [EMAIL PROTECTED] > > -- +39-041-5907073 ph > > -- +39-041-5907472 fax > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > > > Sent: Thursday, August 07, 2003 8:04 AM > > > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > > > Subject: RE: Cisco 806 ? [7:73613] > > > > > > > > > It does. It is IOS. Just do your CLI thing. > > > > > > Martijn > > > > > > -----Oorspronkelijk bericht----- > > > Van: Herold Heiko [mailto:[EMAIL PROTECTED] > > > Verzonden: woensdag 6 augustus 2003 17:21 > > > Aan: [EMAIL PROTECTED] > > > Onderwerp: Cisco 806 ? [7:73613] > > > > > > > > > Hi, > > > > > > for some tests I need something cheap to play with, having 2 > > > eth, vpn and > > > (static) nat capability. Could anybody confirm if a 806 with > > > a "IP/FW PLUS > > > 3DES" image does support IPSEC and NAT at the same time ? > > > From the docs I'd say it does support both but can I have a > > > vpn tunnel, and > > > nat inside the local network, and nat outside the remote (on > > > the other end > > > of the tunnel) network ? > > > The other endpoint would be a pix or a fw-1 although that > > > shouldn't matter. > > > Couldn't find any configrmation of this in the docs :( > > > Thanks > > > Heiko > > > > > > -- > > > -- PREVINET S.p.A. www.previnet.it > > > -- Heiko Herold [EMAIL PROTECTED] > > > -- +39-041-5907073 ph > > > -- +39-041-5907472 fax > > > **Please support GroupStudy by purchasing from the > GroupStudy Store: > > > http://shop.groupstudy.com > > > FAQ, list archives, and subscription info: > > > http://www.groupstudy.com/list/cisco.html > > **Please support GroupStudy by purchasing from the GroupStudy Store: > > http://shop.groupstudy.com > > FAQ, list archives, and subscription info: > > http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73655&t=73613 -------------------------------------------------- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
