1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Help me save face with my client!!

Discussion in 'Cisco Small Business Routers and VPN Solutions' started by markinsf, Apr 30, 2007.

  1. markinsf

    markinsf LI Guru Member

    Hey there,

    First post - hello all. Let start off by saying, I am not the strongest in networking. Mostly a Windows guy.

    The story goes: My client wanted a better firewall than the DSL router issued by the phone company as well as some VPN capabilities. A network engineer friend of mine recommended a Cisco PIX but my client balked at the price.

    Another friend said I should look at some Linksys stuff. I did and hastily ordered an RVL200 after reading on the site that it was both a firewall and a vpn router.

    Well, I got the router working today and was testing the SSL VPN - after tweaking some stuff on the DSL router I got it to work.

    But then in the interface and in the product datasheet I noticed the VPN concurrent connections were limited to 5. WTF? 5 connections? My client has 15 employees and expects to be at 40 by the end of the year. 5 will not do.

    Moreover, it seems that there is no way to assign a DNS server to the VPN address assignment and netbios is not routed. Seems sort of strange to me. No name resolution? How are people suppose to see the network and machines - am I missing something?

    I was expressing my displeasure with Linksys to a friend of mine and he mentioned there may be some different firmware out there that could support more VPN connections. Is this possible?

    The way it looks now, I think I am going to just go with Windows RRAS and not even mention the severely limited SSL VPN - jeeeeeeeez!

    Thanks for any help here!
  2. vpnuser

    vpnuser LI Guru Member

    If you need more tunnels RV042 is a good choice, which supports 50 IPSec tunnels and 10 QuickVPN users out of the box.
  3. ifican

    ifican Network Guru Member

    Well as you have already realized the soho market is just starting to experiment with ssl vpn's. The enterprise market is well versed in this area but you are going to pay severely for 40 plus connections. The cisco asa (basically a pix that is ssl capable) only does 25 if i remember right but it has a really nice price tag for the extra ssl user license. Also netbios is not routed with any linksys product that i am aware of and there is not 3rd party firmware for the RVL as of yet.

    Concerning dns, there are some pretty good vpn folks about that have used remote dns, though that has been through an ipsec tunnel. I can talk a little more about quickvpn but i am not sure if that is what the RVL implements so i will not go down that road just yet.
  4. YeOldeStonecat

    YeOldeStonecat Network Guru Member

    If they'll be at 40x VPN users soon...you're out of Linksys range. Time to step up to some beefier products.

    This week replacing an RV016 at a client with a Juniper SA box. You go from several hundred dollars to several thousand dollars...but...at a certain point it's time to step up out of the budget setup and into true business grade.
  5. markinsf

    markinsf LI Guru Member

    Should I go with the RV082 then? I see it supports 50 concurrent users.

    Are there any gotchas? Do the 50 user licenses for the client s/w come along with the router?

  6. ifican

    ifican Network Guru Member

    I believe the 50 users you are speaking of are for quickvpn, and there are a few gotchas with it. Still no netbios traffic for you, though it uses the standard windows ipsec plugin. Your clients will not get an ip from the quick vpn server, the application intercepts the traffic and determines if it is destined for the tunnel or not and acts accordingly. Other then that its works well, though i do not know if it yet works with vista.
  7. YeOldeStonecat

    YeOldeStonecat Network Guru Member

    Comes with 15 out of the box, you can upgrade the QuickVPN licensing to 50...additional cost.
  8. Coopsterman321

    Coopsterman321 LI Guru Member

    Looks like the original poster is talking about setting up his client's 40+ users with SSL VPN connectivity. Isn't that a little different from quickVPN which requires a client-side load?

Share This Page