Solved

Should I go with a router or a switch?

Posted on 2008-11-01
8
263 Views
Last Modified: 2010-04-21
We have a datacenter and are getting our internet connection from a vendor in the datacenter.  The question is, do I want to get my own router (Cisco) or should I just take an ethernet drop and plug into a Catalyst L3 switch?  What are the benefits of having my own router?  I've historically plugged into a L3 switch.  Just looking for what the benefits are for either solution.
0
Comment
Question by:wbrooksjr
8 Comments
 
LVL 4

Expert Comment

by:zack4x4
Comment Utility
If you are getting a totally unfirewalls unfiltered internet connection from the vendor in the datacentre I would tend to want to put a good cisco firewall before my servers.  However if you are happy with their firewall setup and you feel it's secure you can just get a switch.
0
 
LVL 10

Expert Comment

by:ampranti
Comment Utility
Internet connection is usually plugged to a router , which is the outside zone of the firewall..
Firewall then filters the traffic.

By plugging on a L3 switch (probably the inside LAN) you are exposed to potential security risks.

However, is it MetroEthernet and you are usinga MetroEthernet Switch ??


0
 

Author Comment

by:wbrooksjr
Comment Utility
I will have a firewall (Cisco ASA) before my servers.  What benefits do I get putting a router in front of it versus just taking an ethernet drop and connecting to my firewall?
0
 
LVL 28

Accepted Solution

by:
batry_boy earned 125 total points
Comment Utility
In your scenario, you won't get much added value by utilizing a router in front of the firewall.  If you had multiple public IP blocks you were wanting to advertise public services for, e.g. ftp server(s), web serves, mail servers for different customers or organizations that were sharing this same Internet connection, then you would need to segment that address space with a router or L3 switch.  Another reason you may want a router in front is to terminate WAN media types other than Ethernet, for example a T1 or ATM.  Since your firewall or a L3 switch will only do Ethernet, you would need a router to terminate the connection in those cases.

However, it sounds like the termination is already being handled for you and you are just being handed an Ethernet drop.  In this case, I think you're firewall would be just fine by itself.
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 
LVL 5

Expert Comment

by:devangshroff
Comment Utility
Its recommnded you should go for Router , as its a pure L3 device , in future expantion , router will help , in routing.
0
 
LVL 79

Expert Comment

by:lrmoore
Comment Utility
>What benefits do I get putting a router in front of it versus just taking an ethernet drop and connecting to my firewall?
None. Zero. Nada.
A router in between the ethernet handoff from the colo and your ASA firewall serves no purpose. Plug the feed directly into the ASA.
0
 
LVL 10

Expert Comment

by:ampranti
Comment Utility
I will have a firewall (Cisco ASA) before my servers.  What benefits do I get putting a router in front of it versus just taking an ethernet drop and connecting to my firewall?

If you have a firewall you will not get any additional benefits.
You can use a switch (an unmanaged L2) just in case you want to connect temporary a device before firewall for testing purposes or troubleshooting.

0
 

Author Closing Comment

by:wbrooksjr
Comment Utility
Thanks.  Your solution was the most informative and concise.  Thanks again.
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

I have seen some questions on problems with SSH/telnet access to Cisco routers that may occur despite the fact that from a PC connected to your LAN, Internet connectivity is in place and users can access Internet sites without any issues.  There are…
There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now