Advice wanted for ent grade router with openvpn support

[aiccc]

Hi

Client has a 300 Mbs internet circuit with 30 clients.

They want an enterprise grade router that can support openvpn and route traffic via the vpn if going to the UK and bypass the VPN for traffic if going locally. No SOHO routers

client will eventually have +500 users on network

What can you recommend?

tag
@mikewazar

 

[Oops!!!]

Any Mikrotik Cloud Core Router series has native support for OVPN and if you step up to the 1036 range you get a 36 core CPU/8GB ram that will easily handle those packet requirements for that many clients.

They only thing i dont like about them is the redundant PSU's are not hot-swappable.

Of course there is much better kit from the more established enterprise manufacturers but at this price point and ease of OVPN configs you cant beat it.

 

[mikewazar]

Hi

Client has a 300 Mbs internet circuit with 30 clients.

They want an enterprise grade router that can support openvpn and route traffic via the vpn if going to the UK and bypass the VPN for traffic if going locally. No SOHO routers

This is more of a configuration thing, how do you plan on filtering and routing UK tagged packets versus packets going elsewhere?

client will eventually have +500 users on network

What can you recommend?

tag
@mikewazar

Mikrotik Cloud Core or pfSense

 

[aiccc]

Client has 2 vlans atm. cisco 3800 layer 3 switch going into ISP provider router/firewall (ISR type). This will be returned tot he ISP on contract end.

Thank you Sir. i will look at that unit.

Is there any usa/uk made routers that support open vpn?

 

[aiccc]

Price is not a consideration for the client.

Thank you for the responses

 

[MAI_6R]

Sophos XGS firewall

Regarding the vpn functionality you looking for , are you referring to client connection or traffic forwarding via ipsec ?

 

[Oops!!!]

Is there any usa/uk made routers that support open vpn?

There are some Cisco routers that support OVPN but i think its a very small range and more spec'd for SOHO requirements.

 

[aiccc]

VPN will not be used for site to site comms.

I will look at the recommended devices. I also need to look at the client's current setup. Client does not have onsite tech support. I hope they have documentation.

It is not urgent atm as the current contract is still running.

 

[MAI_6R]

Any sophos xg firewall will support your needs for split tunnelling and open vpn

Unfortunately no perpetual license options are available