Help me select a basic router?

[PaulMThomas]

We have a 100MBps internet leased line at work, this plugs into our corporate firewall.
Our existing guest Wi-Fi solution uses a slow 3.5Mbps ADSL circuit and keeps falling over due to the amount of users.

What I am looking for is a simple Cisco router that I can connect to the 100MBps internet connection before the corporate firewall (We have a couple of spare public IP addresses that can be assigned to the router), I can then plug a couple of Cisco access points into the router for the users to use as a guest network.
The router will need to be able to do NAT and provide DHCP for the Wi-Fi clients.

I have requested that the Global Firewall team provide a DMZ port on the primary Firewall for this purpose, but I need a fall-back if this is refused or delayed.

Any advice/suggestions gratefully appreciated.

 

[imbadatthis]

if your waps are going to bridge you wont need a controller...

may i ask why CISCO ?

if you have to go cisco , then i would go with an ASA 5515X .. if you dont have to and like something nicer, look at the fortinet devices, fortigate 300 i think should be more than enough and is probably cheaper.


We must go always forward, not backward
always up, not down and always twirling twirling towards infinity.

 

[PaulMThomas]

Thanks for your response, I was thinking router because I do not have enough public IP's to give out for all clients. I would need to have a separate non-public IP range for the clients with a DHCP server. Then NAT them out through one Public IP address.
Is this not the correct way to do it?

Doesn't have to be Cisco router if something else is more affordable. I;m in the UK by the way if that makes any difference to equipment availability.

 

[imbadatthis]

the ASA will do a better job of securing your clients than a router would ... it can NAT and it can inspect traffic properly ..

no clue.. im in canada... find out if you have any fortinet reps around you ..


We must go always forward, not backward
always up, not down and always twirling twirling towards infinity.

 

[PaulMThomas]

This is replacing a simple ADSL modem/router, its only for guests/visitors and Staff's mobiles/iPad's. Security is not a concern for me with this. Just a simple router to provide a private IP range and DHCP.

 

[imbadatthis]

these are nice and least expensive:

http://www.cisco.com/c/dam/en/us/pr...grated-services-router-isr/aag_c45_498061.pdf

We must go always forward, not backward
always up, not down and always twirling twirling towards infinity.