Cisco 881 or 1921 router

I am looking at solutions for a branch office.  Currently it has an ADSL connection, coming into an ASA 5505.  There are site to site vpns, some client vpn traffiic.  Office is 10 users.  We have a need to add more bandwidth but getting a T1 is cost prohibitive at the moment.  So I've added a second DSL line.  I need another device to perform some type of load balancing or traffic shaping as the 5505 cannot do that.  The 2nd DSL line is going to be reserved for one application or user.

I am choosing between the 881 and 1921.  Obviously the 1921 is a better device but is is overkill for this scenario?  Would I still use the 5505 as a firewall regardless.  Seems like neither device could replace the ASA firewall capabilities.  There also remains the possibility of going to a T1 down the line, maybe a year or so.
LVL 14
dmwynneAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

FideliusCommented:
Hello,

Cisco 1921 is maybe overkill for this scenario, but is more future proof concept if you will upgrade to T1, also it will easier support more users. Also, if you will using it as firewall, 1921 is definitely way to go. It can do almost everything ASA 5505 does, and regarding VPNs:
        
 Cisco Product Matrix
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635/ps7180/prod_brochure09186a00801f0a72_ns171_Networking_Solutions_Brochure.html

Hope this helps!
Regards!
0
WissamSenior Network EngineerCommented:
I would get the 1921, as you see future requirements would be fulfilled
0
Istvan KalmarHead of IT Security Division Commented:
Hi,

you able to us 2 WAN with ASA 5505 if you buy SEC+ feature!
If you need T1 card you need to bux 19xx series!

Best regards,
Istvan
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

dmwynneAuthor Commented:
Fidelius:

Is the firewall on the 1921 the exact same as the ASA?  I thought the ASA was more robust as its built as a firewall not a router then firewall.



ikalmar:

I believe you are able to use two WAN in a failover scenario but not use them simultaneously in a laod balance setup.
0
ThomasChristoryCommented:
I would still keep the asa as a firewall, maybe in transparent mode though.
0
dmwynneAuthor Commented:
It is not clear to me if the 881 can handle two internet connections.  Can anyone confirm that?  Seems like it can only handle 1 wan ethernet handoff.
0
Istvan KalmarHead of IT Security Division Commented:
It knows 8 vlans so you able to do it:

http://www.cisco.com/en/US/prod/collateral/routers/ps380/data_sheet_c78_459542.html

So I think you able to use it with 2 WAN connections...
0
FideliusCommented:
Cisco IOS firewwall and ASA are almost the same.
Here you can find good discussion about it: https://learningnetwork.cisco.com/thread/4995 
I think it will answer all your questions regarding IOS firewall and ASA.

Regarding termination of 2 WAN connections on 881, it should be viable configuring VLANs for each DSL line, as Istvan suggested in his posr.

Other solution is to put L2 managed switch in front of 881. Create two VLANs, one for each DSL line, and connect it through trunk to WAN port of 881, on which you need to create sub-interfaces for each VLAN. I can send you config if you need it.

Regards!
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ThomasChristoryCommented:
or you can go with one 891/2 which has 2 native wan ports :-)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.