Routers: Cisco vs. Linux?

[Michael Hipp]

Keith Morse wrote:
>>Any other comments on this design?
> 
> 
> The only problem I see with this design is the single point of failure.  
> But I recognize that this stems from political, logistical, and financial 
> pressures.

Yes. It will hopefully migrate to redundant boxes, switches, interfaces, 
but ya gotta start somewhere. Wish I had some really good "Best 
Practices" on making such a network redundant.

> Depends on the complexity of route tables, thinking BGP here, net-filter 
> rule-sets, and the number of hosts behind the nat'ing interfaces.  I run a 
> slightly less complex firewall, 7 Ethernet interfaces with 3 of those 
> seeing the most use.  It's a celeron 500 with 128 Mb ram and rarely see .1 
> in system load.  Services about 200-250 hosts and all are nat'ed and it 
> support ~ 6 ipsec vpns.

Thanks. Sounds like system performance is not that critical.

Michael