Time to move on?

[bubarooni1]

For the last eight years i have used cisco 1750 routers with a WIC-1ENET card to create site-to-site vpns between our branches and main site. They have been rock solid.

I'm perfectly happy with them. However, i know i'm falling behind the times here on my IOS skills, probably missing out on new features and i'm sure the hardware/software (processor, memory, interfaces, IOS feature set) on the new switches are vastly improved.

The branches contain anywhere from 8 to 25 ip devices (printers, switches, workstations, access points, etc.). internet access to the branches ranges from dsl to t1 (hence my need for the WIC-1ENET card on the 1750's). The vpn's terminate on a PIX 506 (i'm ready to try and replace it sometime next year).

The branches mainly do rdp client sessions back to servers at the main site, send receive/email back to a server at the main site, some file sharing and also access other vendors internet pages. Each site has access back to the main site only (no meshed network).

If you were to buy a brand new router or slightly used router today to replace these 1750's, what would you get? We don't 'do' voip yet, but i can see it coming down the pike and would like to have something that will have that ability or is at least upgradeable to support it.

We are opening a new branch in january that is only about 20 minutes from our main site where i work. This is going to allow me the freedom to spend some time there or even run over there if i break it while experimenting so i kinda feel like this is a golden opportunity for me get my hands dirty.

Anyway, just wondering if those of you with experience with newer routers might share your opinion/experience with me.

 

[bobbyforhire]

Well, i don't know what your budget looks like but i would take a gander at the 2800 series of routers. They might look backwards (power is in the front) but they pack a punch and can also keep you going for future years. For the tree legs that have dsl i would look at getting some layer 4 switches. But if they have plans on getting a t1 in the future i would just go out and get 2800 series for the whole lot.

As for your pix...i have a 501 at my house and i love it but if i could i would get an ASA unit, from the sounds of it you could get the ASA5505. I have had a chance to play around with one and it makes my pix look like old junk. Also just a perk on the asa units they have a built in syslog..no more wondering where to put the logs!

If budget is on your mind you could always move over to the 2600 series of routers, they are tried and true and can keep your budget lower.


As for the IOS, yeah there have been alot of changes but one thing remains the same...the IOS commands are 95% the same from the last time you have touched your 1700 series but now you have more to play around with.

I personaly have just moved a company off of the 1720's and moved them over to a MetroE link and used layer 4 switches to handle the traffic.


Hope this helps, have fun with the new equipment.

 

[baddos]

Honestly I wouldn't replace those routers unless you needed more features out of them or the hardware was failing.

I use the 1800 series in a couple of remote sites. There is one model that has both an ADSL interface and an ethernet interface which would fill your roll nicely. That model doesn't have a WIC slot, so you couldn't put a real T1 in it, but it doesn't look like thats what you are doing if I read correctly.

 

[maczen]

Bobby,
Why would you recommend a session switch (L4) for DSL???

I thought that they were pretty much application specific.. just place one in front of your servers (cluster) and let them perform app specific (server load based) load balancing...

What type/model of L4 switches did you guys use?

Bub,
I agree with Baddos and Bobby... I would stick with the 1750's.. no real difference in IOS but if you do so feel inclined then I would look one of the newer ISR (Integrated Service Routers) such as the 18xx or 28xx series... Also, Bobby is right about the ASA! They are sweet.. i am looking at buying an ASA-5505 although there are some huge advantages to the ASA-5510.. Just look at the modules it can use!

B Haines
CCNA R&S, ETA FOI

 

[dearingkr]

The ASA 5500's are the best things to come out of Cisco for a long time.
I have three 5505's in my network and they work great.
And the pricing very good.

I strongly recommend them.

MCSE CCNA CCDA