Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We're a small (7 person) fast growing startup who just got our new office and we're having a 100 Mbps line installed from Cogent. I'm not familiar with Juniper devices, however the equivalent Cisco appears to be rather expensive.

Features we'd like:

  1. Offsite VPN access (PPTP or L2TP IPsec) - something Mac compatible
  2. IPv6 support
  3. NAT - ideally supporting multiple outside addresses mapped to VLANs
  4. DHCP
  5. DNS forwarding would be nice
  6. QoS to keep our SIP phones happy (managed through RingCentral)
  7. VLANs for guest/internal

The device is going to be connected to a set of SIP phones as well as two Ruckus 7962s for wireless access. Eventually I'd like to connect it to a Juniper ESX switch as we grow.

Would a Juniper SRX240 handle this ok?

share|improve this question

closed as not constructive by mgorven, Wesley, Ward, Lucas Kauffman, Chopper3 Jun 19 '12 at 8:16

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

The SRX240 will meet these requirements, and is probably overkill for 7 users. An SRX 100,210 or 220 will get the job done most likely.

However, I've found the "dynamic VPN" used for client connections to be a little less than easy to configure and I'm unsure if they have a Mac client. I gave up on it in the past and just setup a small linux box on the inside for PPTP connections.

share|improve this answer
We're adding 2-3 people per month to our team, so I hoping this could handle an office of ~25-30 in about a year. Good to know about Dynamic VPN. – Jordan Mendelson Jun 27 '11 at 19:45
I've used an SRX100 to handle over 100 users before. – SpacemanSpiff Nov 3 '11 at 4:50

Our office of about 30 people uses a SRX100 with no problems at all. Our BW in not as high as yours, but I agree that the 240 is most likely overkill. For roadwariors we use openvpn server, but the SRX is good for site2site vpn.

share|improve this answer
I haven't looked in a while, but I think their "dynamic vpn" for client connections is almost there. – SpacemanSpiff Jun 19 '12 at 3:11

Not the answer you're looking for? Browse other questions tagged or ask your own question.