[c-nsp] recommended Cisco router/firewall for 10 to 100Mbps, dual homed

Dan Letkeman danletkeman at gmail.com
Sun Feb 3 15:02:41 EST 2008


I'm running a 2801, with nat, nbar and netflow's.  Daily average
traffic is around 15-20mbps and ~650 workstations.  Cpu usually
doesn't go over ~15%

On Jan 31, 2008 11:03 AM, Adrian Minta <adrian.minta at gmail.com> wrote:
> Patrick Giagnocavo wrote:
> > Hi
> >
> > Currently I am using an OpenBSD box which has given no problems, as a
> > router/firewall for some colocated systems.
> >
> > However, I would like to take advantage of some of the Cisco features
> > like NBAR, and the FTP proxy code (systems needing FTP with the
> > OpenBSD router lose most of their firewall protection because the FTP
> > proxy is not very good, so we just open a large range of ports).
> >
> > We are using 10Mbps currently but want to buy something that can
> > handle 100Mbps as that is the next jump we will make.
> >
> > Would a non-VXR 7204 do it?  1841?  We don't need VPN sessions, but
> > being able to SSH into the Cisco would be preferred.
> >
> > Cordially
> >
> >
> Are you doing NAT ?
> If you are, keep in mind that a 28xx router seems to have a problem when
> the translation number exceed 10000.
>
> --
> Best regards,
> Adrian Minta    MA3173-RIPE, MA314-ROTLD, www.minta.ro
>
>
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


More information about the cisco-nsp mailing list