MPLS vs. Cisco Pix

[jake29]

If this is posted in the wrong forum please let me know.


We have 5 locations currently tied together with spoke and hub Frame that I manage with Pots lines for voice. We are looking at possibly going to a managed VPN solution with integrated voice and we are down to two providers or the possibility of re-upping with our current provider/s.

One solution is about 500.00 (Cisco Pix 501s) less then our current data/voice configuration the other (MPLS) is about 500.00 per month more.

The Cisco config is dynamic and as calls come in they take a +64k worth of bandwidth then when completed reallocates back to data.

The MPLS is static a certain number of line are allocated to Voice and Data.


I have done some research in the different flavors of MPLS and the Cisco VPN.

Our Frame config is simple, reliable. A bit pricey and has 384k bandwidth restraint. We also own all our own hardware Cisco 2600 and 1700 series router with Adtran TSUs.

I guess what I am looking for is a heads up on the +/- of the two VPNs. Is it possible and or feasible to set something up with the existing hardware??


Any help would be appreciated.

Thanks

 

[IPKONFIG]

Trade in your existing 2600 and 1700 series routers for the newer Cisco ISR routers. You'll want to look at the 1800 series of ISR's. They have VPN functionality built in and you can stick with an interface that your comfortable with. You'll get good trade if you work with a Cisco Gold partner and you can get those routers with Firewall feature sets built into them. You can have 1 box that does it all. And in my opinion, a lot better than the PIX 501 for this type of solution.

"I can picture a world without war. A world without hate. A world without fear. And I can picture us attacking that world, because they'd never expect it."
- Jack Handey, Deep Thoughts

 

[JOAMON]

Take a look at the CISCO1841-SEC/K9 bundle. It comes the the anvanced security IOS and has hardware VPN encryption and IPS capabilities. Smartnet also a good idea to keep the IOS up to date. You could setup VPN over internet with your routers as long as they have the correct image on them. 3DES would be best. Something like:IP/FW/IDS PLUS IPSEC 3DES BASIC.