<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; "><DIV>This has been kicked around for a while since we moved to CallManager but not much thought has been given to it. I'm trying to understand how your hardware is setup. How would it look, similar to one of these?</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>87x router <---DSL or Cable---> INTERNET <--T1 connection---> 3845 <--Ethernet--> LAN</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>or</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>87x router <---DSL or Cable---> INTERNET <--T1 connection---> 3845 <---> ASA or PIX Firewall <--Ethernet--> LAN</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Is the 3800 used for all your firewalling needs in lieu of something like an ASA or PIX? Sonicwall's are currently in place and haven't worked very well for the remote users it was tested with. The Sonicwalls we have don't have anything similar to what the 871's seem to have in regards to vlans and packet tagging. We would probably kick the Sonicwalls out if something else would work better.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>jeff</DIV><BR><DIV><DIV>On Oct 16, 2007, at 8:16 AM, Linsemier, Matthew wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"> <DIV class="Section1"><P class="MsoNormal"><SPAN style="color:#1F497D">We currently have about 40 production remote home teleworkers that have been deployed using Cisco 871/877 wireless routers and a 7960 phones. We are using a Cisco 3845 series router at the head-end so that we can control QoS tagging on the egress / ingress points of both sides of the VPN tunnel. We are using a phase 2 DMVPN solution dual-homed to two sites to provide secure redundant connectivity.<O:P></O:P></SPAN></P><P class="MsoNormal"><SPAN style="color:#1F497D"><O:P> </O:P></SPAN></P><P class="MsoNormal"><SPAN style="color:#1F497D">It took me a bit to tweak my router configurations (I started on Cisco 831/837 routers) to get the results that we wanted, but all and all our users are happy. There is the occasional jitter and packet loss (it is the Internet mind you) but g.729 is working quite well coupled with business cable and DSL services.<O:P></O:P></SPAN></P><P class="MsoNormal"><SPAN style="color:#1F497D"><O:P> </O:P></SPAN></P><P class="MsoNormal"><SPAN style="color:#1F497D">If you have any other questions, feel free to ask.<O:P></O:P></SPAN></P><P class="MsoNormal"><SPAN style="color:#1F497D"><O:P> </O:P></SPAN></P><P class="MsoNormal"><SPAN style="color:#1F497D">Matt<O:P></O:P></SPAN></P><P class="MsoNormal"><SPAN style="color:#1F497D"><O:P> </O:P></SPAN></P> <DIV> <DIV style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"><P class="MsoNormal"><B><SPAN style="font-size:10.0pt;font-family:" tahoma","sans-serif""="">From:</SPAN></B><SPAN style="font-size:10.0pt;font-family:" tahoma","sans-serif""=""> cisco-voip-bounces@puck.nether.net [<A href="mailto:cisco-voip-bounces@puck.nether.net">mailto:cisco-voip-bounces@puck.nether.net</A>] <B>On Behalf Of </B>Curt Shaffer<BR> <B>Sent:</B> Monday, October 15, 2007 6:37 PM<BR> <B>To:</B> <A href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</A><BR> <B>Subject:</B> [cisco-voip] Home user<O:P></O:P></SPAN></P> </DIV> </DIV><P class="MsoNormal"><O:P> </O:P></P><P class="MsoNormal">I was wondering want everyone out there is using for the situation where you have someone on your CCM or CCME that has 1 phone at a home office. Something tells me an ASA is overkill and I haven’t found solid information that any of the 87x routers support tagging QoS of packets going through the VPN tunnel. We would obviously like to have QoS in place even though it’s not respected at their ISP just to make sure the VPN/Voice packets are leaving their routers first as a best effort to get some quality. <O:P></O:P></P><P class="MsoNormal"><O:P> </O:P></P><P class="MsoNormal">Thanks<O:P></O:P></P><P class="MsoNormal"><O:P> </O:P></P><P class="MsoNormal"><O:P> </O:P></P> </DIV><P><FONT face="Arial" color="#808080" size="1"> <HR> </FONT></P><P><FONT color="#808080"><FONT face="Arial" size="1">CONFIDENTIALITY STATEMENT<BR>This communication and any attachments are CONFIDENTIAL and may be protected by one or more legal privileges. It is intended solely for the use of the addressee identified above. If you are not the intended recipient, any use, disclosure, copying or distribution of this communication is UNAUTHORIZED. Neither this information block, the typed name of the sender, nor anything else in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message. If you have received this communication in error, please immediately contact me and delete this communication from your computer. Thank you.</FONT> </FONT></P><P><FONT color="#808080"> <HR> </FONT></P><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">_______________________________________________</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">cisco-voip mailing list</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</A></DIV> </BLOCKQUOTE></DIV><BR></BODY></HTML>