Darin, Sounds like the IOS zone based firewall might be applicable to what you are after - there is support for NAT.
http://www.cisco.com/en/US/products/ps6441/products_feature_guide09186a008060f6dd.html Note: I haven't configured this before so YMMV :-) Steve On Wed, Apr 15, 2009 at 15:35, Jeffrey Ollie <j...@ocjtech.us> wrote: > On Wed, Apr 15, 2009 at 9:24 AM, Darin Herteen <syn...@live.com> wrote: >> >> I have a customer who's firewall recently bricked and is unusable. This >> device had previously served as a VPN to their LAN from the outside >> world, restricted access between internal VLAN's, and provided NAT for >> internal addresses to reach the internet. They happened to have a Cisco >> 3825 laying around and I've been attempting to get this router >> configured to duplicate the functionality of the now deceased firewall. >> [...] >> Does anybody have any recommendations or advice to offer regarding this >> setup and whether or not it can be accomplished. > > The 3825 is a fairly nice router, but it can't handle a lot of > throughput. I don't recall the exact specs (and can't find on a quick > search), but I think that it can only handle <100Mb/s. That seems > kinda low but I think it wasn't really designed as a packet pusher, > but instead is designed as a platform for services like VoIP etc. > It'll can probably be configured to do what you want, but I'm sure > you'll be disappointed with the performance, especially for LAN->LAN > traffic. > > -- > Jeff Ollie > _______________________________________________ > cisco-nsp mailing list cisco-...@puck.nether.net > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/