Detailed introduction to the performance and characteristics of Cisco VPN Routers

With the development of China's routing industry, it also promotes the constant update and upgrade of routing technology. Here we mainly introduce the performance and characteristics of Cisco VPN Router, with the development of the Internet, online Communication and transactions have become an important way for people to work. At the same time, network security also mentions the agenda of various enterprises.

In the face of the severe challenges of data security, many companies have established firewalls and VPN networks, not to refuse, but to permit and communicate. VPN virtual private network is actually an encrypted channel between two mutually trusted entities. These entities can be firewalls, PCs installed with VPN Client software, servers, or routers. Generally, a VPN connects the local LAN of the company to the remote lan wan of a subsidiary or partner manufacturer, so that the two parties can establish mutual trust, thus, remote users can use the Internet to access the enterprise securely and transparently.

Cisco VPN Router is a highly integrated VPN solution that combines industry-leading high-speed routing technology and comprehensive advanced site-to-site VPN service suite. This series of Cisco VPN routers integrates key features of VPN tunnels (data encryption, security, firewall, advanced bandwidth management, and service-level validation) to provide self-healing and self-defense VPN platforms, public Data networks are used to better adapt to remote office and external network connection needs more economically and effectively, and specific hardware configurations optimized for VPN applications and network topologies are provided, the optional embedded Wan and Fast Ethernet interfaces, coupled with high-performance routing and a wide range of VPN services, provide a list of sub-VPN routing solutions. Compared with other types of Cisco VPN routers, the 7100 series is innovative in providing hardware encryption modules, greatly improving the performance of VPN, even in 3DES (168-bit) the exchange rate can also reach 90 Mbps under encryption conditions ,.

Take 7100 in the 7140 series as an example. The two Cisco VPN routers we detected this time contain the newly integrated service Module ISMIntegrated Services Module ), and there are optional ios ip, IPSEC/3DES and other software available along with the chassis. In addition to the routing functions of TCP/IP and IPX protocols, you can expand to more than 30 Cisco port adapters, such as serial ports and voice ports. The Routing functions of 7140 are mainly reflected in these protocols: BGP (Border Gated Protocol), EGPEnhanced Gateway Protocol), IGRPInterior Gated Routing Protocol, and Enhanced Interior Gated Routing Protocol), OSPFOpen Shortest Path First) and RIPRouting Information Protocol), and each interface is equipped with a network Address converter NATNetwork Address Translation ). However, the difference between 7140 and other Cisco VPN routers lies in the support of this device for the VPN network.

Using the ISM module Card 2), and IPSec software, 7140 can support 2000 sessions at the same time, and the transmission rate can reach 90 Mbps under 3DES encryption conditions, this speed has almost no performance loss compared with the network connected by a common cable. If you do not want to use the system's built-in IPSec software, even if it is based on Microsoft's Point-to-Point communication Protocol PPTPPoint-to-Point Tunneling) or L2 Channel Protocol L2TPLayer Two Tunneling Protocol ), it can also perform 2000 session communications at the same time. In combination with VPN networks, Cisco's PIX firewall software can also be used to configure 7140 as a firewall ), this means that Cisco 7140 provides dual-insurance-encryption and firewall for your LAN to avoid illegal attacks on the Internet.

Compared with other hardware-based firewalls, such as SonicWall Pro of SonicWall and NetScreen 100 of NetScreen technology, 7140 provides 2000 VPN sessions at the same time, which is indeed different. And although the Cisco VPN routers produced by the two companies can provide a considerable number of IPSec channels, their data throughput is far from 7140 fast. In the US, less than 7140 of the cost is twice that of the two devices. Therefore, if you only need a firewall and many channels, you may not need to buy a 7140 expensive device. The biggest feature of 7140 is its flexibility and scalability, which are reflected in the type and interface. This hardware-based firewall is not simply a WAN) router.

To test the performance of the series of routers in the field, we use two 7140 sets to connect them with our local LAN) and the external WAN, creates a small enterprise network model and connects 7140 of WAN interfaces to WAN, then, the local Ethernet interface on a 7140 instance is connected to a LAN with a speed of 7140 Mbps), and the remaining is connected to another Mbps local LAN in the same way. Figure 3 ). To detect how the 7140 ISM module transmits data after 3DES encryption, the first step is to generate an unencrypted signal transmitted over the LAN between the two LAN, then we build a VPN channel between Two LANs and generate the same amount of encrypted data for transmission.

As mentioned in the advertisement, even if the data encrypted in 3DES mode is still transmitted between the two LAN at a rate of 90 Mbps through a 7140 router with the ISM encryption module. Regardless of the data format we transmit, The HHTP, text, or image transmission rate reaches 90 Mbps. Without a doubt, this makes us deeply impressed if your enterprise needs advanced routing and site-to-site VPN support. Then the Cisco 7100 series VPN Router will be worth some money. For small users, this device is still a bit expensive, but Cisco 7140 is no longer suitable for data transmission under multi-protocol routing and 3DES encryption.