Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: High Speed IP-Sec - Summary

  • From: Leo Bicknell
  • Date: Tue Jun 10 15:10:13 2003

Here's a summary of answers I received, thanks to all:

* Netscreen

  Wide variety of products from low end 10Mbps boxes to high end 1000Mbps
  boxes.  Generally also firewalls, have VPN client support, and other

  From a site-to-site VPN perspective the low end is priced reasonably,
  where as the high end gets a bit expensive due to kitchen sink

* Cisco PIX

  Good variety of products from 50Mbps to 1000Mbps.  Also firewalls and
  in some cases IDS like boxes.

  A bit high in price across the board for site-to-site VPN's, mainly
  due to kitchen sink functionality.

* CipherOptics

  Dedicated full duplex gige IPSec box, with very minimal firewall

  Very good price for a site-to-site VPN and no other junk to get in the
  way.  A good contender for high speed IPSec.

* Cisco Accelerator Cards

  There are two varieties, the VAM for a 7200, and the VPNSM for a

  Pricing is good for a site-to-site VPN if you already have the chassis
  for other reasons and have free slots.  If you have to include the
  chassis and interfaces in the cost they are both a pretty expensive

* Juniper Accelerator Cards

  There are IPSec cards for all of the M-series boxes.

  Pricing is a similar situation to Cisco.  Not too bad for site-to-site
  if you have the chassis, but if you're adding in the cost of a chassis
  and interface cards as well you're back to a pretty expensive

* ET/R4000

  FreeBSD box with an accelerator card.  Comes in 100Mbps and Gigabit
  versions, probably can't quite do full gigabit, but could come close.

  Priced very attractively for site-to-site VPN's, a bit of a concern
  that while it's sold as a complete box with support, it's a bit less
  of a "solution" than the other companies offer.

* IWill motherboards.

  These don't meet my qualification, but if you're into roll your own
  I will has motherboards with IPSec coprocessors onboard supported
  by some free OS's:

       Leo Bicknell - - CCIE 3440
        PGP keys at
Read TMBG List -,

Attachment: pgp00009.pgp
Description: PGP signature

Discussion Communities

About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home

Merit Network, Inc.