Reply to: 40+ Site Unmanaged WAN

[portseven]

Just been having a good look at that stuff today, very impressed. Know a few places that would be very suitable for, looks like rolling out a good WAN would be relatively easy for someone with that.

BTW - They went with Meraki, good a good deal and will be using MX65W's plus the device management, its good stuff.

[Lance]

Run out some DMVPN between the hub and spokes and make things easier than running lots of p2p VPN's

or hub and spoke it via Azure or AWS.
Still means managing the VPNs but there will be a lot less of them and also leaves a central, sensible place for new services.

[jimjamuk]

Run out some DMVPN between the hub and spokes and make things easier than running lots of p2p VPN's

[vetran]

Indeed outsource to a decent firm.

Plenty of big suppliers BT/AT&T etc.



Let them do the security properly & any running about.

[portseven]

+1 For Meraki

Depending on how big each of the sites are there should be a suitable option for all, not cheap but they will have to realise if they want it done right it will cost them

Just been having a good look at that stuff today, very impressed. Know a few places that would be very suitable for, looks like rolling out a good WAN would be relatively easy for someone with that.

[MrMarkyMark]

+1 - this is something you employ someone to do and run for you. It ain't worth the hassle doing it yourself even if you have suitable IT staff which by the sounds of it they don't

I was actually going to suggest he gave my Mum a call, she's at a loose end and I can supply her all the relevant pages from Wiki

[eek]

If there is not an IT team with a networking skill set this is most probably something you want to bring in a 3rd party to do for you. There are lots of companies that can do this as a service for cheaper than this company can do it themselves. They key is not to get to bogged down in the technical solution at first but to focus on what the requirements are and how the service will be managed once everything is rolled out. I'm on the bench at the moment so would be happy to have a quick phone call to go through what your options and approach could be. PM me if you are interested,

+1 - this is something you employ a company to do and run for you. It ain't worth the hassle doing it yourself even if you have suitable IT staff which by the sounds of it they don't

[davetza]

[QUOTE=portseven;2378686]She was hired as head of marketing!!! Getting involved due to previous job having 'IT' in the title

The Meraki stuff looks interesting, they just need some segments in place with some ACL's plus some central VPN[/QUO

If there is not an IT team with a networking skill set this is most probably something you want to bring in a 3rd party to do for you. There are lots of companies that can do this as a service for cheaper than this company can do it themselves. They key is not to get to bogged down in the technical solution at first but to focus on what the requirements are and how the service will be managed once everything is rolled out. I'm on the bench at the moment so would be happy to have a quick phone call to go through what your options and approach could be. PM me if you are interested,

[sal]

She was hired as head of marketing!!! Getting involved due to previous job having 'IT' in the title

The Meraki stuff looks interesting, they just need some segments in place with some ACL's plus some central VPN

Tell her to stay away if she can. Otherwise she will be saddled with managing/supporting this forever and i kinda doubt it will be reflected in her pay.

Taking additional responsibilities in the area you were hired to build up your career is one thing, getting saddled with random unrelated crap, just because you have done something remotely similar in the past is entirely different.

Unless of course she is happy/looking forward to do it and prefers IT to Marketing.

[portseven]

So you friend is not IT or was she hired as the first IT to sort this out?

She was hired as head of marketing!!! Getting involved due to previous job having 'IT' in the title

The Meraki stuff looks interesting, they just need some segments in place with some ACL's plus some central VPN

[MrMarkyMark]

So you friend is not IT or was she hired as the first IT to sort this out?

If she doesn't have significant knowledge of networking, better not to get involved or she might be used as a scapegoat if (more like when) something goes wrong.

If they went along without any proper network security so far and a re stingy/stupid enough to have no IT staff with 40+ sites and no network security. Cisco is an overkill for them, there are alternatives like Ubiquiti that can achieve the same results for a fraction of the cost.

The alternative is for the OP to PM Suity.

He specialises in such matters

[sal]

Helping a friend of mine out who is working for an SME
~snip~
They have no IT staff at all, but now realise they need to take care of it a bit more.
~snip~

So you friend is not IT or was she hired as the first IT to sort this out?

If she doesn't have significant knowledge of networking, better not to get involved or she might be used as a scapegoat if (more like when) something goes wrong.

If they went along without any proper network security so far and a re stingy/stupid enough to have no IT staff with 40+ sites and no network security. Cisco is an overkill for them, there are alternatives like Ubiquiti that can achieve the same results for a fraction of the cost.

[SimonMac]

Try looking at Meraki (they are Cisco owned) or the cheaper and without the yearly license cost Ubiquiti.

+1 For Meraki

Depending on how big each of the sites are there should be a suitable option for all, not cheap but they will have to realise if they want it done right it will cost them

[davetza]

Try looking at Meraki (they are Cisco owned) or the cheaper and without the yearly license cost Ubiquiti.

[portseven]

If they want to do it on the cheap and don't realise how important security is, I would run a mile or 100.

Have given her a quick lesson in how to give risks a cost, given the sort of data moving round this network, it should be a no-brainer to do this right.