On Apr 1, 2014, at 2:37 AM, R S <[email protected]> wrote: > For a project (70 branch offices and 2 Headquarters connected in an hub&spoke > topology with IPSEC over MPLS among branch and HQ) I’m looking for the best > device which cover the following items: > > Branch: > Single device > At least two Ethernet interfaces (WAN/LAN) > Ipsec supporting 10-50-100 Mbs > Routing protocols such as BGP-OSPF > NAT > Redundant power supply (some site not but in principle I need it) > > HeadQuarter: > Single device with XE intf > At least two Ethernet interfaces (WAN/LAN) > IPSEC supporting up to 7-10 Gbs of IPSEC (the sum of branches) > Routing protocols such as BGP-OSPF > NAT > Redundant power supply > > Firewall is not needed, MPLS will be runned by the carrier, the devices and > IPSEC are on-top of MPLS. > I’m looking for the best solution in terms of scalability and price (very > important). > > Also any advice with experience for the decision is appreciated.
If you're not opposed to something "newer", you may want to look at the UBNT EdgeRouter devices. They're basically a Linux box with Vyatta on it, with the ability to do OpenVPN. Because of the CLI, etc.. you can do automation/SDN against them. They're also inexpensive and can support pluggable optics with the right "pro" model. I know one person replacing their J2300 with this, and I similarly use one at home now. Supports BGP/OSPF without issue. - Jared _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
