Router to Router VPN

[crazyabd]

I am wanting to configure multiple sites to have a router to router vpn to a central site. don't need much on the remote sites, was thinking something like the Cisco RV042, and maybe just a RV082 for corporate as we already have a switch in place.

are these devices capable of multiple router to router vpn connections? or are there some other devices that would be recommended?

the multiple wan links are not a necessity, so any device recommendations is appreciated.

 

[w4nn4b1337]

The Cisco RV042 looks like it supports up to 50 remote office/mobiles users. However, you may want to consider the bandwidth requirments of the out offices and how much is available at the concentrator. You'll have to ask yourself what kind of traffic will be going through the tunnels to consider if your home office concentrator has enough bandwidth to handle multiple point to point VPN circuits. With VPN's every little bit counts as I'm sure you know the encrypted tunnels do add some bandwidth overhead and latency to each circuit.

I manage a small campus with approx. 100 or so high use systems scattered about which access the

http://WWW via

a single T1. We have one point to point VPN circuit via 2 ASA5510's. This single p2p VPN tunnel uses up to 20 to 30% of the available bandwidth at any given time. (there is a lot of backend server replication going through the pipe.) The point to point VPN solution is not scalable in my environment. Adding more p2p VPN circuits would crush the network.

I can only suggest that you strongly consider other options such as point to point T1's (fractional T1's) to your WAN sites. We use the DSL/VPN option as the very last resort if nothing else is available. We have found that DSL/VPN solutions can be unreliable and have the potential to take up a lot of admin maintenance/repair time.

I do understand the IT budget issues but spend the money if you can on your WAN. You'll save yourself some headaches and be the hero in the long run.

 

[crazyabd]

Yes i have considered the traffic bandwidth, there is currently only 4 machines remote, and 2 more coming in the short term. their bandwidth requirements for the type of traffic is minimal.

ideally the only traffic that would need to be transmitted through the tunnel is the corporate traffic, and the standard internet traffic can just go directly out.

the biggest purpose for the question was on the devices, the RV042/RV082 and i read that they were capable of router to router vpn connections, but based on the setting screenshots i saw, it looked like only a single connection could be made. And i'm needing at least 2 at the moment, 3 in the upcoming.

I know i can do this with os software solutions, just trying to see if there is a hardware solution that may work better.

 

[w4nn4b1337]

I apologize for moving away from the topic question.

It appears you can have 5 point to point connections with this device. The same goes for the RV082.

 

[crazyabd]

ok, and the 2nd part was, is there another device that would be better for the job that would be somewhat close in price range, that may offer better stability / feature set ?

 

[w4nn4b1337]

There are a lot of options out there for the SO/HO or SMB type environments but you're at the bottom rung of the price ranges. To me that means I wouldn't mess around with "cheap" and just stick to tried and true. Cisco/Linksys makes a good product to hedge your bets on.

You may want to take a look at the Cisco 800 series router for a comparison.

 

[crazyabd]

Thanks, i was looking at the 800 series, and i do like this option better. Do you know where a guide on the router to router vpn tunnel could be found for this ?

 

[w4nn4b1337]

There are a lot of variables when considering VPN's. I would look at information on the Cisco website to begin with. Do a search for 'IPSec LAN-to-LAN tunnels between 800 series routers' and then on the left hand pane filter the results by "configuration guides".

I found this one which may fit the bill;

http://www.cisco.com/en/US/docs/routers/access/800/850/software/configuration/guide/vpnezvpn.html