Question : VPN with a Cisco 2611

Hello,
I work at a small company. We have 2 DC with DHCP, DNS, and AD. We also have an Exchange server and a Web server. We have a T1 line coming in and our domain is behind a Netgear firewall and the webserver is behind another Netgear firewall. We have a single new Cisco 2611 router that was here before I started and is presently not hooked up. The company has about 35 salesmen that are across 2 states that will need access to the network. Is it possible to use the Cisco router to let the salesmen VPN into the network with just client software on their end so they can connect any where there is an internet connection? And how would this be configured? The router has IOS v 12.2

Answer : VPN with a Cisco 2611

Yes, but...
You need the IPSEC feature set on the 2611 router, which probably means a memory upgrade, both flash and DRAM - mucho $$. Plus, you have to have a CCO account with some type SmartNet to get the VPN client software.
Then you will have the problem of terminating the VPN's on the outside of the Netgear firewall and trying to permit traffic into the local LAN...
Suggest swapping out the Netgear for a Cisco PIX 506e or 515e if you can afford it. Virtually unlimited VPN client connections.
Replacing both netgears with a single 515e with DMZ interface will give you the most robust control over your network. The 515 supports up to 2000 simultaneous VPN connections. List price or Restricted license and 3 interfaces is $3695
Random Solutions  
 
programming4us programming4us