Hello everyone,
I'm trying to design a LAN for a office that I do some side work for. I've got a Cisco 1720 Router with a T1 connection since they will be hosting their own email and web pages.
Since they will be hosting these services, I'll need a firewall of some sort. They really like their wireless and I'm fairly new to Cisco networking. Can someone please advise on a product/model that I'll be able to use as a firewall from Cisco to acheive a secure LAN, and if it has WiFi included, that is even better.
Thanks a lot
Chris
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Depends on your requirements. If you want a PIX with 3 interfaces, go with a 515E. This will give you a DMZ for your hosted servers. The PIX 501 would work if you have a small number of users in the office and don't have a need for a DMZ. You'll have to supplement the PIX with a wireless access-point as Cisco doesn't offer a wireless firewall solution. The Aironet series are nice but can cost quite a bit. Again, depending on your requirements, a SOHO WAP (Linksys, Netgear, etc...) may work fine for you at a fraction of the cost.
>Cisco doesn't offer a wireless firewall solution
Not quite true, my friend...
http://www.cisco.com/en/US
You can easily get by with a PIX506e to support mid-size company. If you have a VLAN capable switch, you can even setup DMZ virtual interfaces (2).
Then just add any generic Access point into the DMZ vlan, or get a Cisco Aironet product that also does vlans and have a guest wireless capability that puts guests into the DMZ giving them Internet access but no access to your LAN.
Assuming <50 users total
Pix 506e
Catalyst 2950 switch 10/100
Aironet 1200 series Access Point
If more than 50 users total
PIX 515e
Catalyst 2970 10/100/1000
Aironet 1200 x n
So say I have a T1 brought in from the ISP...
What does it look like as far as the layout:
ISP ------> Router--------->Firewalll-
To clarify, are there any more components between the ISP and the Router besides the DSU/CSU card in the routers modular bay?
That should about do it if you answer that.
Thanks a lot
Business Accounts
Answer for Membership
by: jajjonesPosted on 2005-08-16 at 11:46:30ID: 14685626
First things first - the 1720 is now end of life, so if possible I would have a look into upgrading. Maybe an 1841.....
For a firewall, I would look at the PIX if you want a completely Cisco solution.
For wireless, Cisco Aironet 1200 access points would be the way to go.........
Just need to plan out your DMZ etc etc......
hope this helps and good luck