Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


Cisco 1721 upgrade to 10Mb Fiber and Amazon VPC

Posted on 2010-08-31
Medium Priority
Last Modified: 2012-05-10
I have a bit of a newb double question on routers which are related.

We're in the process of upgrading our current T1 to a 10 Mb fiber.  From the research that I've done, it looks like I can still buy the WIC-1ENET and MOD1700-VPN cards.  Before I spend the money I want to be sure it can handle a VPN connection to Amazon's VPC and the upgrade to 10Mb fiber.  It looks like the WIC-1ENET can support a 10Mb Ethernet.  

1)  Can anyone confirm if the 1721 VPN is capable of connecting to Amazon's AWS VPC?  
2)  Or if there is a more appropriate product for our network?  Of course, we are hoping to limit costs.

I've noticed that some of the routers include Fiber support (I don't believe the 1721 does?), but is there that much benefit to cutting out the Ethernet/Fiber media converter?  

Locally we have 3 - 24 port and 1 - 16 port, unmanaged Linksys switches (4124, 4116, 3124), connected to the Cisco 1721 with a Watchguard e550 in the middle.  Watchguard also has VPN capabilities but can not handle the BGP routing over a VPN interface, so it'll have to be the router that connects to AWS VPC.  The AWS documentation provides configuration examples for Cisco and Juniper, but I would imagine other's work as well.

During the upgrade to fiber, I'd like to support both connections simultaneously with the T1 in a fail-over capacity, though I could be talked out of this.
Question by:augercast
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 22

Expert Comment

by:Matt V
ID: 33572567

The exact througput of a 860MPC based (1721) Cisco router is based on  a number of factors.  Type of encryption/encapsulation, version of  code, etc.
3DES  IPSec router to router "in the lab" with 1400 byte packets came out to  be 8Mb I believe.  If your network isn't "in the lab" you can expect  less (probably much less) than that.


Considering this, you may want to look at an 1800 or even 2800 series to make sure you can actually get 10Mbps through the router.
LVL 34

Accepted Solution

Istvan Kalmar earned 500 total points
ID: 33573852

forget 1721 it is a weak router for your scenario, please refer the attachment!

Best regards,

Assisted Solution

nblancpain earned 500 total points
ID: 33574804

And this file shows perfs for just CEF routing, with VPN (if used), you don't have hardware encryption in 1721 router, you will get 1 or 2 Mbps max with CPU at 100%.
I strongly advise 2821 or 1941 as minimum router.


Author Closing Comment

ID: 33631650
Answers were fairly sparse, leaving me to interpret data supplied and no mention was made of connecting to AWS VPC which leaves me assuming when I was looking for confirmation.

Featured Post

Looking for the Wi-Fi vendor that's right for you?

We know how difficult it can be to evaluate Wi-Fi vendors, so we created this helpful Wi-Fi Buyer's Guide to help you find the Wi-Fi vendor that's right for your business! Download the guide and get started on our checklist today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question