Topic 'What to get for the house' in forum 'Cisco' - dslreports.com http://www.dslreports.com/forum/What-to-get-for-the-house-27462685 en Sun, 26 May 2013 01:32:50 EDT Sun, 26 May 2013 01:32:50 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27593525 http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27593525 Fri, 05 Oct 2012 11:09:40 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27480671 http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27480671 Fri, 31 Aug 2012 13:10:37 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27480630
Regards]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27480630 Fri, 31 Aug 2012 13:01:36 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27477594 http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27477594 Thu, 30 Aug 2012 14:49:07 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27477278 From the two or three sources I checked, the delta between a 220 and a 240 was about 1K... so up to the buyer's wallet / purchase order.

I also have to question about Juniper -- and indeed any vendor's -- claim that a device can move more than 100Mbps
traffic with only FE interfaces. I'm not sure what they're smoking or what math they're using...

Regards]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27477278 Thu, 30 Aug 2012 13:27:47 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27473048 said by cramer:

Gig speeds means much more expensive Cisco kit, or looking at non-Cisco stuff. Cisco is shooting themselves in the foot here, but they have so many cooks in so many kitchens they don't know where they are or need to be.

There are a lot of companies that feel comfortable only when they deal with Cisco equipment, either because Cisco is the only standard network gear of the company, the company consists of engineers and managers that only know "the Cisco way", or of Cisco brand marketing. In some ways, Cisco counts on these companies to keep buying Cisco and only Cisco though Cisco has been competing head-to-head with Juniper especially when Cisco lost contract to Juniper with one of the Cisco's giant customers :)]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27473048 Wed, 29 Aug 2012 09:38:11 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27471687 http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27471687 Tue, 28 Aug 2012 19:59:13 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27470607 Cisco ROUTERS. The 5505 is tiny, underpowered (cheap) SOHO device. Powered by a 500MHz GEODE, it's not designed for IPS -- there's an SSM for that, but it's WAY expensive. Plus, the 5505 only has 100meg interfaces, so 150Mbps is sufficient.

Gig speeds means much more expensive Cisco kit, or looking at non-Cisco stuff. Cisco is shooting themselves in the foot here, but they have so many cooks in so many kitchens they don't know where they are or need to be.]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27470607 Tue, 28 Aug 2012 14:45:46 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27466753 said by cramer:

You aren't going to get 100M+ speeds with services (esp. IPS/IDS) on a Cisco router -- for less than 5 figures. They simply aren't designed for that. That's the market for dedicated firewalls -- 5510 and above with an SSM to do full traffic inspection.

A Juniper SRX 100 costs significantly less than 1K and is able to push 700 Mbps firewall traffic throughput. A Cisco ASA 5505 (comparable price of the SRX 100) is only able to push up to 150 Mbps. These numbers came from the their websites.

»www.juniper.net/us/en/local/pdf/···1-en.pdf
»www.cisco.com/en/US/prod/collate···0c5.html

We did some internal testing between Juniper SRX and Cisco ASA where the ASA took significant load with IPS work while SRX did not even blip. The choice then was no brainer :)

So with the right solution, you could get decent firewall for less than 5 figures :D]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27466753 Mon, 27 Aug 2012 14:50:39 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27466102 http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27466102 Mon, 27 Aug 2012 12:33:56 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27465612 said by HELLFIRE:

On the Juniper side, the SRX220 is VERY tempting at 8x GigE interfaces and 950Mbps (claimed) thruput.

I recently asked for quote between SRX 210, 220, and 240. The price difference between 220 and 240 are not much, however 240 is much more powerful. I would not recommend anyone to use 220 model since people should jump to 240 when 210 model is insufficient unless Juniper can lower the price :)]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27465612 Mon, 27 Aug 2012 10:21:33 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27465106 www.smoothwall.org/ which is very capable of pushing those speeds and more...]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27465106 Mon, 27 Aug 2012 06:38:44 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27464668
You aren't going to get 100M+ speeds with services (esp. IPS/IDS) on a Cisco router -- for less than 5 figures. They simply aren't designed for that. That's the market for dedicated firewalls -- 5510 and above with an SSM to do full traffic inspection.

For the money... build it yourself. Any linux/*bsd box can do it with ease. ('tho full gig will take a bit more power, but even an old P4 should handle it.) However, this is trading money for effort.]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27464668 Sun, 26 Aug 2012 21:55:04 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27464664 http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27464664 Sun, 26 Aug 2012 21:52:26 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27464614
What would one do in Kansas City with 1GB connections for $70? Buy a $20k router? I guess everyone will need a PC with 2 interfaces doing firewall and routing. I wonder how much a PC could pump out? Perhaps someone could make some bucks with a generic Linux build with an easy to use router and firewall configuration interface.

Fiber to the premises is just being installed around my area now, it is not at my house yet, but probably in the next couple years. So, I expect speeds to increase, not to KC's 1GB, but probably over 100mbit. So, I really do not want to limit myself to equipment that only does 100mbit.]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27464614 Sun, 26 Aug 2012 21:25:31 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27464600 http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27464600 Sun, 26 Aug 2012 21:19:04 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27464068 http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27464068 Sun, 26 Aug 2012 16:16:26 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27463996
I use a 1941 ISR at home with my Comcast connection, it is more than likely over kill for home use. It has a gig connection for the outside and inside interfaces so I know I would never have a problem for connection speed. I think I paid something like 700 to 800 for it with the base license. I wanted the ASA5510 because of the 1 gig interface connection but the price plus the security license is expensive just for a home appliance.

The ASA5550 is as you stated is a 10/100 connection and I just can't see putting this in front of my router. Besides I would just be cutting my teeth on the ASA model. ]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27463996 Sun, 26 Aug 2012 15:34:39 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27463819 said by macallah:

The 3745 is very noisy with all its cooling fans running at full speed 24/7.

Agreed with you there macallah, though IIRC when I was looking into a 3745 I did come across a webpage where a
person replaced the fans with quiet / lowflow fans with no impact to performance or temp alarms, and got a MUCH
quieter device overall.

said by macallah:

it does not run a modern IOS and I like to tinker with it

Define 'modern'. IIRC Cisco did bring it up to the last revisions of the 12.4T IOS, and there's not much in
15.x that 12.4T can't do in my view.

said by macallah:

Third it only has 100mbit connections if the cable system gets an upgrade eventually

said by macallah:

what if the provider goes up in speed in the future? A 5510 with secplus license is over 2k.

Agree with you there. Don't know when consumer GigE connectivity will be available, but I want to be prepared for it,
and Cisco products seem to lag on it -- ASA5550 if that -- or are bloody expensive to do it -- ASR 1K w/ ESP2.5.

On the Juniper side, the SRX220 is VERY tempting at 8x GigE interfaces and 950Mbps (claimed) thruput.

Not sure what else in the enterprise arena people have come across that has GigE interfaces and Gig thruput with services on.

Regards]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27463819 Sun, 26 Aug 2012 13:58:00 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27463137 you network will work fine for you required 5 users and it will also be cost effective.
you can also purchase Cisco 2900 series route with security license but it is always recommended to use separate device for routing and firewall.
Do let me know if you have any query]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27463137 Sun, 26 Aug 2012 08:15:45 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27463163 said by HELLFIRE:

3745 is long in tooth but still quite beefy for 100Mbit internet not requireing GigE interfaces. What's making you
look at new equipment macallah, if you don't mind me asking?

Regards

A few things. The 3745 is very noisy with all its cooling fans running at full speed 24/7. I have it down in a basement closet, but still it is annoying when down in the basement. Second it does not run a modern IOS and I like to tinker with it. I use 800 series routers in my businesses, so I am more familiar with ZBF. Third it only has 100mbit connections if the cable system gets an upgrade eventually, it will be a problem.

I do most of my configuring with CCP, but then hand put in some custom stuff. CCP has made a lot of progress and now it can just about do everything that I need. CCP of course rejects the 3745.

The ISR G2s seem to be drifting down in price. Are G3s about to come out?

Also further reading in the 5505 thread, I realized that the ports on a 5505 are only 100mbit. While it covers the cable modem now, what if the provider goes up in speed in the future? A 5510 with secplus license is over 2k.]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27463163 Sun, 26 Aug 2012 08:04:48 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27463059 said by macallah:

keep up with 100mbit with NAT/PAT+Firewall+minor QOS (VOIP)

For a home user with that kind of config, 89x or 180x / 181x minimum, bar none, if you were ebaying.

Buying brand new I'd consider a x9xx ISR G2 if possible, depending on your budget. My 00000010bits

3745 is long in tooth but still quite beefy for 100Mbit internet not requireing GigE interfaces. What's making you
look at new equipment macallah, if you don't mind me asking?

Regards]]> http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27463059 Sun, 26 Aug 2012 03:45:59 EDT Re: What to get for the house http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27462896 http://www.dslreports.com/forum/Re-What-to-get-for-the-house-27462896 Sun, 26 Aug 2012 00:06:00 EDT What to get for the house http://www.dslreports.com/forum/What-to-get-for-the-house-27462685
I really do not want to spend the $$ of a 3900 series router. As recommended by Cisco for a 100mbit connection.

I was looking at the 2911. I like it because it has 3 ports, so I could do a DMZ. But I guess the question is that if for 1-5 users (most of the time 1 user working from home) will it be satisfactory for a router and firewall.

I realize as an option I could pair it up with a 5505, but I rather just buy one box. As a consideration an ASA 5505 and 19xx?

I have read a lot of documents including:

»anticisco.ru/pubs/ISR_G2_Perfomance.pdf
which shows NAT + QoS + ACL Performance by Platform, IMIX Traffic at 75-Percent CPU doing 77mbit, which implies it could do 100mbit at just under 100% cpu

and »www.miercom.com/pdf/reports/20100528.pdf
which shows it at 57mbit with sevices and 75%, which implies 76 mbit at 100% cpu.

So, I guess the question comes down to will a 2911 keep up with 100mbit with NAT/PAT+Firewall+minor QOS (VOIP) for 1 user with up to 5 on occasion? Or, is it best to get the maxed out 5505 firewall addition with unlimited users (ASA5505-SEC-BUN-K9) and let it do the DMZ and vlan with a 19xx series router just for NAT/routing (also which 19xx?).

I will be connecting into work via VPN but the office only has a 15mbit connection, so I assume it will not be the bottleneck. I just do not want the rest of my connection going to waste for other network activity.

Currently I have a 3745. It has no trouble keeping up, but it is getting pretty old.]]> http://www.dslreports.com/forum/What-to-get-for-the-house-27462685 Sat, 25 Aug 2012 22:33:38 EDT