The 3000's support fail-over just fine, and the new version even supports
"multi-entry point" VPNs (like Check Point has for years). Basically
meaning that at your main site you can have two 3030's with connections to
different ISP's and totally different external addresses.
See:
"Backup LAN-to-LAN
The Backup LAN-to-LAN feature lets you establish redundancy for your
LAN-to-LAN connection. Unlike VRRP, which provides a failover for the VPN
Concentrator, Backup LAN-to-LAN provides a failover for the connection
itself. Although VRRP and Backup LAN-to-LAN are both ways of establishing
continuity of service should a VPN Concentrator fail, Backup LAN-to-LAN
provides certain advantages that VRRP does not.
* You can configure Backup LAN-to-LAN and load balancing on the same
device, but you cannot configure VRRP and load balancing on the same VPN
Concentrator.
* Redundant Backup LAN-to-LAN peers do not have to be located at the
same site. VRRP backup peers cannot be geographically dispersed,
Note This feature does not work in conjunction with VRRP. If you
set up a Backup LAN-to-LAN configuration, disable VRRP."
I'm sure Cisco would entertain cutting a special deal on 2000 3002/3005
devices. If not, send me a note offline and I'll see if our sales guys are
interested. We usually only deal with hospitals, but they may make an
exception for a large number like that...
Fred Reimer - CCNA
Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050
NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.
-----Original Message-----
From: Andrey Tarasov [mailto:[EMAIL PROTECTED]
Sent: Sunday, August 10, 2003 10:27 PM
To: [EMAIL PROTECTED]
Subject: RE: VPN Best Hardware to use? [7:73793]
Hi Ryan,
For head-end 3030/3060 would be a better choice. PIX for example doesn't
provide connectivity between remote sites in hub-and-spoke topology.
On remote side 831 might be a best pick especially if you want to provide
some backup mechanism for VPN tunnel.
Regards,
Andrey.
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73875&t=73793
--------------------------------------------------
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
