2801 FW/VPN Capabilities?

[chipk]

Has anyone implemented a 2800 series router with the firewall/vpn/nac capabilities? Is that built into the IOS by default, or are there different images based on the capabilities? The reason I ask is I'm looking at replacing our current, old 2610 and our current Checkpoint firewall, and it would make more sense to me if I could have a single appliance to cover the router and firewall capabilities. Any feedback would be appreciated.

 

[burtsbees]

Why not just get an ASA 5505?

Burt

 

[chipk]

Hi Burt, thanks for the reply, I'm not sure that would work for me. I need an *edge* router (i.e. one that can carry a T-1 WIC), and was trying to do an all-in-one solution.

 

[burtsbees]

Got it.

I believe the 2800's come shipped with ip-base code, so no vpn capability. Cisco can answer your questions, unless you want one off of ebay, without smartnet coverage...

Burt

 

[chipk]

No, I have a fair degree of certainty that the 2801 with the advanced security will do what I need, but I was trying to find someone who has deployed one in a similar scenario. Better safe than sorry. Thanks,

 

[burtsbees]

Yes, one with advanced security will.

Burt

 

[ADB100]

As Burt says you will need Advanced Security IOS to enable the VPN/IPSec features, however all the hardware is there out of the box. Check the Q&A on CCO for the features list:

http://www.cisco.com/en/US/products/ps5854/products_qanda_item0900aecd80169bd6.shtml

HTH

Andy

 

[chipk]

Thanks for the replies. How about the firewall capabilities? Do you think that would be comparable to a Checkpoint? I've read the product datasheets and all the Q&As, but am trying to get a "second opinion." Of course Cisco is going to say their solution can make my coffee for me, but whether or not that's true...