[c-nsp] recommended Cisco router/firewall for 10 to 100Mbps, dual homed

Seth Mattinen sethm at rollernet.us
Sun Feb 3 15:13:40 EST 2008


Adrian Minta wrote:
> Patrick Giagnocavo wrote:
>> Hi
>>
>> Currently I am using an OpenBSD box which has given no problems, as a  
>> router/firewall for some colocated systems.
>>
>> However, I would like to take advantage of some of the Cisco features  
>> like NBAR, and the FTP proxy code (systems needing FTP with the  
>> OpenBSD router lose most of their firewall protection because the FTP  
>> proxy is not very good, so we just open a large range of ports).
>>
>> We are using 10Mbps currently but want to buy something that can  
>> handle 100Mbps as that is the next jump we will make.
>>
>> Would a non-VXR 7204 do it?  1841?  We don't need VPN sessions, but  
>> being able to SSH into the Cisco would be preferred.
>>
>> Cordially
>>
>>   
> Are you doing NAT ?
> If you are, keep in mind that a 28xx router seems to have a problem when
> the translation number exceed 10000.
> 


Is that documented anywhere? Can someone from Cisco confirm that?

~Seth


More information about the cisco-nsp mailing list