MartC-n Coco wrote:
quoted text
>
> Hi misc,
>
> I'm currently looking for hardware alternatives for firewalls that
> should have more than four NICs.
>
> Currently we are buying R200s from Dell, but we have the 4 NIC
> limitation. We could tell Dell to install a quad port NIC (in addition
> to the two-port onboard card), but I haven't read good things about the
> way they work.
>
> I've also looked into soekris, but they don't seem to have enough CPU
> for what we want (this is pure speculation) as we also have intense
> IPSec traffic on some of these firewalls (I've seen that some of them
> could have encryption boards added to increase performance, but I don't
> know if it works for any kind of protocol, or at what rate).
>
> In any case, what I would like to have is firewalls with multiple NICs
> (at least 6 NICs) *and* sufficient CPU to let IPSec work alright at
> least at ~50Mbps (internal backbone firewalls). The multiple NICs are to
> use trunk, pfsync, real network interfaces, etc.
>
> Thanks,
> Martmn.
>
>
>
Hi Gang,
well heres my 3 cents,
first why use a stupid PC (any os) for routing...... REALY BAD jue,jue brake
down and buy a old Cisco 7200,  7500, 3600 they are all very good routers, I
used a 7500 for a while and now use a 3640
i use pf as a transparent bridge behind my router.. and protects my servers
I have 3 nics, (world, dmz, ssh)

you could put up a firewall before your router and put everything out one
vlan to the router.
and I have a cisco 2900-xl-en switch with 3 vlans on it... and no bleeding..
enjoy
Crazy Cris
:working:
--
View this message in context:
http://www.nabble.com/Hardware-recommendation-for-firewalls-%28more-than-4-NI
Cs%29-tp18413703p18899631.html
Sent from the openbsd user - misc mailing list archive at Nabble.com.