[25167] in North American Network Operators' Group
RE:
daemon@ATHENA.MIT.EDU (Roeland M.J. Meyer)
Tue Sep 21 23:41:06 1999
Reply-To: <rmeyer@mhsc.com>
From: "Roeland M.J. Meyer" <rmeyer@mhsc.com>
To: "Gerry McDonald" <gerry@injectronics.com>, <nanog@merit.edu>
Date: Tue, 21 Sep 1999 20:38:54 -0700
Message-ID: <NCBBJBALBKNODIJDEFMHGENLIBAA.rmeyer@mhsc.com>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
In-Reply-To: <199909211528.LAA25105@ligarius-fe0.ultra.net>
Errors-To: owner-nanog-outgoing@merit.edu
I'm looking similarly, but T1/PRI for dial-in support and a T3 to the
Internet.
Got Cisco 6509 on the Internet side and Ascend MAX 6000 on the WAN side.
Bothe managed by Checkpoint, on a Sun Ultra5.
> -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of
> Gerry McDonald
> Sent: Tuesday, September 21, 1999 9:13 AM
> To: nanog@merit.edu
> Subject:
>
>
>
> I have a question... I am currently expanding our network to
> accommodate a T1 to the
> Internet and a 512K frame connection to our WAN.. I need to
> purchase a router and spoke
> to several vendors. I have heard conflicting stories
> regarding the model of Cisco router I
> should get.
>
> One vendor <vendor a> tells me that I should get a 2620 with
> 2 Wan Ports and the other
> vendor <vendor b> is telling me that I might compromise my
> security by using one router for
> WAN and Internet connections. Their suggesting that I get 2
> routers one for my Wan and
> another for the Internet connection...
>
> Vendor B is telling me that it would be possible to enter our
> wan without touching our firewall
> should someone be able to hack into our IOS on the router...
>
> I decided to go the experts... I would appreciate any helpful
> suggestions.
>
> Thanks...
>
> -Gerry
>
>
>
>
