Solved

Cisco 881 or 1921 router

Posted on 2011-02-22
9
2,492 Views
Last Modified: 2012-05-11
I am looking at solutions for a branch office.  Currently it has an ADSL connection, coming into an ASA 5505.  There are site to site vpns, some client vpn traffiic.  Office is 10 users.  We have a need to add more bandwidth but getting a T1 is cost prohibitive at the moment.  So I've added a second DSL line.  I need another device to perform some type of load balancing or traffic shaping as the 5505 cannot do that.  The 2nd DSL line is going to be reserved for one application or user.

I am choosing between the 881 and 1921.  Obviously the 1921 is a better device but is is overkill for this scenario?  Would I still use the 5505 as a firewall regardless.  Seems like neither device could replace the ASA firewall capabilities.  There also remains the possibility of going to a T1 down the line, maybe a year or so.
0
Comment
Question by:dmwynne
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +2
9 Comments
 
LVL 12

Expert Comment

by:Fidelius
ID: 34956631
Hello,

Cisco 1921 is maybe overkill for this scenario, but is more future proof concept if you will upgrade to T1, also it will easier support more users. Also, if you will using it as firewall, 1921 is definitely way to go. It can do almost everything ASA 5505 does, and regarding VPNs:
        
 Cisco Product Matrix
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635/ps7180/prod_brochure09186a00801f0a72_ns171_Networking_Solutions_Brochure.html

Hope this helps!
Regards!
0
 
LVL 6

Expert Comment

by:wpharaon
ID: 34958086
I would get the 1921, as you see future requirements would be fulfilled
0
 
LVL 34

Assisted Solution

by:Istvan Kalmar
Istvan Kalmar earned 50 total points
ID: 34958238
Hi,

you able to us 2 WAN with ASA 5505 if you buy SEC+ feature!
If you need T1 card you need to bux 19xx series!

Best regards,
Istvan
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 14

Author Comment

by:dmwynne
ID: 34960638
Fidelius:

Is the firewall on the 1921 the exact same as the ASA?  I thought the ASA was more robust as its built as a firewall not a router then firewall.



ikalmar:

I believe you are able to use two WAN in a failover scenario but not use them simultaneously in a laod balance setup.
0
 

Expert Comment

by:ThomasChristory
ID: 34960680
I would still keep the asa as a firewall, maybe in transparent mode though.
0
 
LVL 14

Author Comment

by:dmwynne
ID: 34960890
It is not clear to me if the 881 can handle two internet connections.  Can anyone confirm that?  Seems like it can only handle 1 wan ethernet handoff.
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34960961
It knows 8 vlans so you able to do it:

http://www.cisco.com/en/US/prod/collateral/routers/ps380/data_sheet_c78_459542.html

So I think you able to use it with 2 WAN connections...
0
 
LVL 12

Accepted Solution

by:
Fidelius earned 300 total points
ID: 34965890
Cisco IOS firewwall and ASA are almost the same.
Here you can find good discussion about it: https://learningnetwork.cisco.com/thread/4995 
I think it will answer all your questions regarding IOS firewall and ASA.

Regarding termination of 2 WAN connections on 881, it should be viable configuring VLANs for each DSL line, as Istvan suggested in his posr.

Other solution is to put L2 managed switch in front of 881. Create two VLANs, one for each DSL line, and connect it through trunk to WAN port of 881, on which you need to create sub-interfaces for each VLAN. I can send you config if you need it.

Regards!
0
 

Assisted Solution

by:ThomasChristory
ThomasChristory earned 150 total points
ID: 34966151
or you can go with one 891/2 which has 2 native wan ports :-)
0

Featured Post

Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question