advice on router models and capabilites

[iemerick]

Could you guys give me some advice on what equipment i should start looking at? I'm revamping my companies network. Right now we have 2 little(dlink/linksys) routers going to multiple computers so they can both have public IP's, and then those servers are multihoned so they're also on our network...basically, its ghetto.

I'm looking for a router on which I can configure multiple public IP's on the external interface and then create static paths to the corresponding private IP's for my servers, and then leave the rest up to NAT.

General network info.
-internet connect = (T1)ethernet coming from another router in the building
-4-5 servers (2 public web servers)
-8-10 workstations
-internal DNS/DHCP running on my Domain Controler


I'm wanting to stick with CISCO stuff because those are the only business level routers i've worked with in the past.

I can just go internet -> router -> switch right?
Then have my router run NAT, throw in some static routes for my servers and slap on an ACL for a firewall right?

What model router should i be looking at for this stuff? I havent kept up with routing equipment since 2001 or so. cisco 1600 series? cisco 2500? cisco 2600? not enough power? overkill?

what do you guys think?

Any advice or specific model numbers is greatly appreciated.

./ian

 

[JOAMON]

For that setup I would recommend the 1841 or 2801 router. These are the new ISR (Integrated Service Router) from Cisco. They are a little pricy but a good long term investment. They have a pretty good feature called SDM(Security Device Manager) that will aid in configuring the router. It is a web based GUI with some great features. Match this up with a Cisco 2950 managed switch and you would have a great network. Look at those routers with the advanced security bundle as that feature set will include firewall and IPS(Intrusion Prevention System). Those routers are also very easy to configure a DMZ for your public servers. These routers are also able to be configured as a VPN server so remote users with Cisco VPN client software could connect to the network remotely.