Replacing Cisco 1841 with PFsense



  • Hi all,

    Many years ago, I setup a Cisco 1841 for client to route a public range from their ISP to the internal firewall. That 1841 maxes out at Fast Ethernet on both Ethernet interfaces so it's time either to upgrade to a new Cisco router or, possibly, replace it with a PFsense based solution as the business wants to go well above 100 Mbps from their ISP. I use PFsense as a firewall / NAT router all the time so I'm fairly well versed in its use. However, I'm a little weak on whether this is a good idea or not. Those Cisco's are simple and reliable - they just run forever it seems without a hitch. Then again, PFsense has proven itself to be reliable as well.

    Here's most of the running config on the Cisco:

    service tcp-keepalives-in
    service tcp-keepalives-out
    service timestamps debug datetime msec
    service timestamps log datetime msec
    !
    no aaa new-model
    !
    no ip source-route
    ip cef
    ip tcp synwait-time 10
    !
    interface Null0
    no ip unreachables
    !
    interface FastEthernet0/0
    description $ETH-WAN$
    ip address 209.1.83.70 255.255.255.252
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    ip route-cache flow
    speed 100
    full-duplex
    no mop enabled
    !
    interface FastEthernet0/1
    description $ETH-LAN$
    ip address 209.0.231.33 255.255.255.224
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    ip route-cache flow
    speed 100
    full-duplex
    no mop enabled
    ip route 0.0.0.0 0.0.0.0 209.1.83.69
    !
    end

    So, my feeling is that this is feasible as it's really a simple function. Any advice or recommendations on a corresponding PFsense based configuration?

    Thanks,

    Matt


Log in to reply