Planning a Cisco network..

jlee

Lifer
Sep 12, 2001
48,518
223
106
Considering a 3825, 2970, and maybe a PIX firewall for home (unsure which model). I'm going to bounce it off the security guys at work and see what I should do, but does anyone have any recommendations? I'm planning steering towards network security (and I'm going to be wiring my house), so I figure I might as well knock out a few things at once. I have a Cisco IDS 4215 I can play with as well.
 

seepy83

Platinum Member
Nov 12, 2003
2,132
3
71
If you're just trying to get your feet wet and comfortable with basic IOS, then go for it. But, honestly, all of that stuff is old (i.e. the PIX and 4215 have been EOL for 8 years now). I'm sure you're working with a limited budget, and that's why you're trying to build something with old equipment...but you definitely want to get the newest equipment you can.
 

jlee

Lifer
Sep 12, 2001
48,518
223
106
Most of our customers are still on 2800/2900 routers. I understand the 4215/pix are old, but I don't have the cash kicking around to drop on an ASA 5510. :( If we leave IDS/IPS/FW out of the equation, how's everything else?
 

azazel1024

Senior member
Jan 6, 2014
901
2
76
If the goal is to reuse free equipment, sure. If the goal is to become familar with Cisco products sure. If the goal is an inexpensive network, NO.

As pointed out, its all old gear. Even used, its on par or more expensive than a lot of basic managed switches and router gear that's on the market right now from SOHO vendors like DLink, TP-Link and Trendnet.

Looking at just the 2970 as an example, looking at gently used copies, they are in the $200 range. That's more expensive than, for example, a TP-Link SG-2424 24-port Gigabit switch with roughly comparable features.

Also for cost of ownership, that SG-2424 is listed as a maximum power consumption of something around 25w and ACTUAL power consumption should be around 15w with all ports link active (based on my experience with the 16 port model). That Cisco 2970 is 160 or 190W maximum power consumption, depending on the SFP or non SFP version. I am sure its lower than that in real world use...but I bet its still at least 3-5 times higher power consumption that that TP-Link switch.

That means, cost of ownership, that Cisco switch might be guzzling anything from $20-30 per year up to $100 per year (or more) in extra electricity, depending on the exact real figures on power consumption (I can't find them searching).

I'd assume that the Cisco router is the same way.

So...just in a year or two's time, you could pay for new equipment, even if this is gifted/free equipment. For stuff that runs 24/7 you really, really, really want to pay attention to things like power consumption.

Want a new router with great configurability, try the Ubiquity Edge Lite. Its supposed to be great, good support, pretty inexpensive and low power consumption. It can easily double as a firewall.

For the switch(s), go with something newer and semi-managed/managed.

My TP-Link SG-2216 is decently powerful (check the review here on smallnetbuilder), very cheap (I got mine for $100 on sale, regularly goes for $139) and good warranty (5 year). I have a just bought a Trendnet TEG-160ws 16-port switch to expand my network as I ran out of ports on my SG-2216 use, about 2 years old for $60 shipped. Not quite as good as the SG-2216, but decent and dirt cheap.

It uses about 8w with just a few ports occupied. Decent management options.

Honestly, even if this stuff is free and you just want to learn Cisco stuff, setup a seperate network to test and play with and then turn it off at the end of the day, using something else as your actual core.

You do not want to be using 8+ year old networking equipment for a lot of reasons, primary being because it is an energy hog and will cost you significant money to keep it up and running. Some of it is also a reliability/feature issue. What Cisco offered 8+ years ago on an access switch is pretty standard fair on most semi-managed/managed SOHO access switches these days, and/or BETTER features on the newer gear.
 

azazel1024

Senior member
Jan 6, 2014
901
2
76
Meant to put the links. My switch (the SG-2424 is near identical, just 24 GbE ports and 4 SFP, in case you have a real need for a 24 port switch, or you can stack some of the 16 port switches). http://www.smallnetbuilder.com/lanw...-link-tl-sg2216-gigabit-smart-switch-reviewed

If you want to look at the Trendnet TEG-160ws, here is the review http://www.smallnetbuilder.com/lanw...0ws-16-port-gigabit-web-smart-switch-reviewed

That is a review of the C.02 hardware revision that was EOL just this past December. Go with that over C.01 if you can. The C.01 has an internal fan and slight differences in hardware and firmware. C.02 has slightly better feature set and is passively cooled (and it seems like/I assume lower power consumption based in part on that and that the maximum power draw numbers on the C.01 is 30w and 23w is the max on the C.02). I found mine for $40+20 shipped on fleabay used. I've seen a few others move for roughly the same $60-70 range shipped. Heck, I just saw a 48-port version of the switch go for only a little over $100. and the 24 port version often goes for under $100 used. Seems to be a lot of them for some reason on there. Not exactly sure why. I haven't heard of too many reliability issues with them and they seem to perform pretty well for an entry level L2 managed switch.
 

jlee

Lifer
Sep 12, 2001
48,518
223
106
Thanks! Are they going to translate well into Cisco, or will it be a completely different learning curve? We're over 90% Cisco equipment with our customers, so I want something that'll be relevant. Unless I'm better off doing my own network as its own project, and then virtualizing a Cisco lab to learn that.
 

imagoon

Diamond Member
Feb 19, 2003
5,199
0
0
You can pickup ASA5505 for cheap on ebay. There are *cough* key gens *cough* out there to unlock it for you to learn on. I in no way recommend this for business use (the keygen part) but for a learning box, ASA5505 + 8.2.5(46) and asdm 7.1 is pretty good.

Cisco will give you the OS and asdm versions if you put in a ticket with them. You want to tell them the unit has a version on it that has a security vulnerability. They grant free updates for that.

If you "need" ASA5510 / 5520 you can emulate those with GNS.

--edit--

You also likely don't have enough equipment at your house to max out an unlocked ASA5505 where you need to move up to ASA5510 or above. However you do need those models to work with IOS9.x on them. Again it is best to emulate them really. They all run x86 processors so GNS does 1/2 decent job at it.
 
Last edited:

jlee

Lifer
Sep 12, 2001
48,518
223
106
What does that have to do with Cisco gear?

Have you read the thread? :p

I may just virtualize Cisco stuff for now or borrow a friend's lab when I need it, as it seems impractical/inefficient to run it all at home.
 

CubanlB

Senior member
Oct 24, 2003
562
0
76
This is basically what I have done for my home lab/network, put together a reasonable analog to the Cisco gear without the pricetag.

If you are comfortable getting used stuff on ebay I have pretty decent luck getting really cheap network gear.

If you can understand the principles of the network, you can lookup the Cisco instructions to make it applicable at work.
 

kevnich2

Platinum Member
Apr 10, 2004
2,465
8
76
Why go with the long range ubiquiti AP and what is the separate POE injector for? Ubiquiti AP's come with the necessary injector and those run passive 24v POE anyway.

As others have stated, if you want to learn cisco equipment, pick up a few cheap pieces off ebay and put together a make shift temp lab. You don't want to integrate that into your home network anyway for all reasons stated above by other posters. Keep your test lab separate from everything.
 

jlee

Lifer
Sep 12, 2001
48,518
223
106
Oh nice, I wasn't aware that it came with an injector. Thanks! I was looking at the long range one because why not, but the regular one would likely be just fine and save 20 bucks.
 

CubanlB

Senior member
Oct 24, 2003
562
0
76
Long range usually means I higher gain antenna, which if its a whip, means it flattens out the coverage area giving more horizontal coverage, and less vertical coverage.

If its just higher output you could wind up with hidden node issues, or devices that can hear the AP but the AP cannot hear the devices.

Extended wifi range is never quite that simple.
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
Have you read the thread? :p

I may just virtualize Cisco stuff for now or borrow a friend's lab when I need it, as it seems impractical/inefficient to run it all at home.

Definitely go the virtual route for Cisco...almost no one deals with real gear anymore. Even the latest CCIE R&S is going entirely virtualized.