From: royhills@hotmail.com   
      
   On Thu, 22 Mar 2007 10:12:08 -0700, "Aaron Gitlin"   
    wrote:   
   >We would like to purchase a router to handle multiple (3)VPN tunnels using   
   >IKE / IPSec. Previously, we had used Netopia R9100s, but since they appear   
   >to no longer be supported properly by Motorola, we've decided to look   
   >elsewhere. The two routers that we have our eyes on are the Cisco 871 and   
   >the 3Com 3036. Does anyone have any specific recommendations on a router to   
   >perform these tasks?   
      
   Even though three tunnels is relatively small, it's worth thinking about   
   the maximum aggregate IPsec traffic rate that will be involved to ensure   
   that the solution will cope. The encryption algorithm may make a   
   difference here, with AES/128 generally being the fastest and 3DES   
   generally the slowest (at least for software implementations; the situation   
   can be reversed for some systems with hardware acceleration that only   
   supports 3DES).   
      
   One additional product I'd consider is the Juniper NetScreen Firewall/VPN   
   device. I've found the 5 series (e.g. 5GT) to be good low-end devices   
   (they have larger systems too, but I've never used them).   
      
   I've also used Cisco routers, but not the 871 model. However, it will use   
   Cisco IOS software which has just about all the features that you're likely   
   to need.   
      
   I can't comment on the 3Com, having never used it.   
      
   Beware that many of the low-end ADSL routers also offer IPsec, but the   
   functionallity is often very limited (e.g. no RSA authentication support,   
   problems with multiple tunnels Etc.).   
      
   Roy Hills   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)   
|