Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Cisco 881 or 1921 router

Posted on 2011-02-22
9
Medium Priority
?
2,562 Views
Last Modified: 2012-05-11
I am looking at solutions for a branch office.  Currently it has an ADSL connection, coming into an ASA 5505.  There are site to site vpns, some client vpn traffiic.  Office is 10 users.  We have a need to add more bandwidth but getting a T1 is cost prohibitive at the moment.  So I've added a second DSL line.  I need another device to perform some type of load balancing or traffic shaping as the 5505 cannot do that.  The 2nd DSL line is going to be reserved for one application or user.

I am choosing between the 881 and 1921.  Obviously the 1921 is a better device but is is overkill for this scenario?  Would I still use the 5505 as a firewall regardless.  Seems like neither device could replace the ASA firewall capabilities.  There also remains the possibility of going to a T1 down the line, maybe a year or so.
0
Comment
Question by:dmwynne
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +2
9 Comments
 
LVL 12

Expert Comment

by:Fidelius
ID: 34956631
Hello,

Cisco 1921 is maybe overkill for this scenario, but is more future proof concept if you will upgrade to T1, also it will easier support more users. Also, if you will using it as firewall, 1921 is definitely way to go. It can do almost everything ASA 5505 does, and regarding VPNs:
        
 Cisco Product Matrix
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635/ps7180/prod_brochure09186a00801f0a72_ns171_Networking_Solutions_Brochure.html

Hope this helps!
Regards!
0
 
LVL 6

Expert Comment

by:wpharaon
ID: 34958086
I would get the 1921, as you see future requirements would be fulfilled
0
 
LVL 34

Assisted Solution

by:Istvan Kalmar
Istvan Kalmar earned 200 total points
ID: 34958238
Hi,

you able to us 2 WAN with ASA 5505 if you buy SEC+ feature!
If you need T1 card you need to bux 19xx series!

Best regards,
Istvan
0
Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

 
LVL 14

Author Comment

by:dmwynne
ID: 34960638
Fidelius:

Is the firewall on the 1921 the exact same as the ASA?  I thought the ASA was more robust as its built as a firewall not a router then firewall.



ikalmar:

I believe you are able to use two WAN in a failover scenario but not use them simultaneously in a laod balance setup.
0
 

Expert Comment

by:ThomasChristory
ID: 34960680
I would still keep the asa as a firewall, maybe in transparent mode though.
0
 
LVL 14

Author Comment

by:dmwynne
ID: 34960890
It is not clear to me if the 881 can handle two internet connections.  Can anyone confirm that?  Seems like it can only handle 1 wan ethernet handoff.
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34960961
It knows 8 vlans so you able to do it:

http://www.cisco.com/en/US/prod/collateral/routers/ps380/data_sheet_c78_459542.html

So I think you able to use it with 2 WAN connections...
0
 
LVL 12

Accepted Solution

by:
Fidelius earned 1200 total points
ID: 34965890
Cisco IOS firewwall and ASA are almost the same.
Here you can find good discussion about it: https://learningnetwork.cisco.com/thread/4995 
I think it will answer all your questions regarding IOS firewall and ASA.

Regarding termination of 2 WAN connections on 881, it should be viable configuring VLANs for each DSL line, as Istvan suggested in his posr.

Other solution is to put L2 managed switch in front of 881. Create two VLANs, one for each DSL line, and connect it through trunk to WAN port of 881, on which you need to create sub-interfaces for each VLAN. I can send you config if you need it.

Regards!
0
 

Assisted Solution

by:ThomasChristory
ThomasChristory earned 600 total points
ID: 34966151
or you can go with one 891/2 which has 2 native wan ports :-)
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
On Feb. 28, Amazon’s Simple Storage Service (S3) went down after an employee issued the wrong command during a debugging exercise. Among those affected were big names like Netflix, Spotify and Expedia.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

664 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question