[c-nsp] 7600 vs. 7200 vs. ASR1000 for multi-gigabit encryptedtraffic?

[Lasher, Donn]

>>From: Robert Blayzor [mailto:rblayzor.bulk at inoc.net] 
>>Subject: Re: [c-nsp] 7600 vs. 7200 vs. ASR1000 for multi-gigabit
encryptedtraffic?
>>On May 27, 2008, at 5:17 PM, Lasher, Donn wrote:
>> At least on paper, the SA-VAM2, and C7200 VSA modules, in a 7200/NPE-

>> G2
>> could at least make a good showing at what you're talking about here.

>Good showing, are you serious?
>"We're setting up a WAN connecting 12 main sites and maybe 100
>smaller sites. Each of the main sites will have 1Gbps links and
>the smaller will have on the order of < 100Mbps (average will
>probably start closer to 10Mbps and possibly climb towards
>100Mbps over time)."

As other posters have pointed out, you're talking about a couple of
different roles.

In a deployment this size, good design dictates more than (1)
termination device at each site.

"Smaller sites" would be completely fine with the VSA modules in the
7200. Depending on how many tunnels you wanted to terminate on each
"Main" site, you could use 7200's there as well, with smaller numbers of
tunnels per router. I suspect however, it may not scale well, and the
main sites would be better served with the 6500/7600 chassis.