[afnog] NAT and Routing Engine on Juniper

[James Swales]

You can compare the various models here;
http://www.cisco.com/c/en/us/products/routers/asr-1000-series-aggregation-se
rvices-routers/models-comparison.html

The ASR 1001-X Router includes high-performance security for crypto,
firewall, and Network Address Translation (NAT) sessions

-----Original Message-----
From: afnog [mailto:afnog-bounces at afnog.org] On Behalf Of Mark Tinka
Sent: 16 September 2014 07:58
To: Tarig Yassin
Cc: afnog at afnog.org
Subject: Re: [afnog] NAT and Routing Engine on Juniper

On Tuesday, September 16, 2014 08:53:06 AM Tarig Yassin
wrote:

> Thanks Mark
> 
> what bout Cisco 7206 VXR NPE-G1?

Certainly a cheaper (and IMHO, simpler) option if you want basic NAT that
won't scale beyond a couple of tens of Mbps.

NAT on Juniper's can be pricey if you aren't doing tons of bandwidth due to
the extra hardware required to do so. Of course, current generation
platforms such as the MX have in- built "Services" modules that can offload
much (but not all) of these additional services. But again, those boxes
aren't cheap by any means.

You can also consider pfSense. It can carry quite a bit of NAT traffic on a
decently-spec'ed server.

Mark.