the hub have to support the sum of all the branches, hence definetely more than 1 Gbs... you're arrived to my same conclusion, I'd a look to MX but it's a bit more expensive...
tks > From: [email protected] > To: [email protected] > CC: [email protected] > Subject: Re: [j-nsp] Best device to fit for a project > Date: Tue, 1 Apr 2014 07:36:37 +0000 > > SRX550 is pretty much your only option in the branch if you require dual > power supply, but is in every other way overspecced (and thus priced) for the > remainder of your branch requirements. If you can do without the RPS, then > I'd go with either an SRX220 or 240, which will easily handle the remainder > of your requirements. > > Are you sure you want 7-10GBps of IPSEC? I'm not sure what market you're in, > but I don't imagine a 10Gbps WAN port is particularly cheap from your carrier > (since you list price as being important). > > If you absolutely need this much crypto though, then you'll be looking at > somewhere between an SRX650 and an SRX1400 plus appropriate 10G XPM/IOC. > > As for scalability - no issues - the 650 will support up to 3,000 tunnels and > the 1400 was good for about 15,000 last time I looked - it's probably gotten > better since then. > > Ben > > On 1 Apr 2014, at 4:37 pm, R S <[email protected]> wrote: > > > For a project (70 branch offices and 2 Headquarters connected in an > > hub&spoke topology with IPSEC over MPLS among branch and HQ) I’m looking > > for the best device which cover the following items: > > > > Branch: > > Single device > > At least two Ethernet interfaces (WAN/LAN) > > Ipsec supporting 10-50-100 Mbs > > Routing protocols such as BGP-OSPF > > NAT > > Redundant power supply (some site not but in principle I need it) > > > > HeadQuarter: > > Single device with XE intf > > At least two Ethernet interfaces (WAN/LAN) > > IPSEC supporting up to 7-10 Gbs of IPSEC (the sum of branches) > > Routing protocols such as BGP-OSPF > > NAT > > Redundant power supply > > > > Firewall is not needed, MPLS will be runned by the carrier, the devices and > > IPSEC are on-top of MPLS. > > I’m looking for the best solution in terms of scalability and price (very > > important). > > > > Also any advice with experience for the decision is appreciated. > > > > Regards > > > > _______________________________________________ > > juniper-nsp mailing list [email protected] > > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
