IDIOT DISCLAIMER: I am new to Extreme Networks, so forgive me if there is something obvious I am missing.
I have a central site which is presently 100% Cisco (ASA 5520's as the firewall and Catalyst switches) and then at my remote sites (for which there are many) I am running ASA 5505's.
I am trying to wrap my head around how I will go about replacing all of the facets of my network and making them better. And I feel like there HAS to be a better way of connecting remote sites. Right now I am using leased lines (mostly cable modems, and a few fiber) and then connecting them via VPN tunnels back to my main site. The ASA 5505's are really ... *not good* ... and I keep running into stupid limitations that hinder my tracking and management. Such as - you cannot pull the ARP table through SNMP. What? Or how about - no DHCP reservations? WHY?!?!
I am presently reading about NAC, policies, etc. And I have one extreme switch to play with (along with some evaluation VM's to run Netsight and Purview). It seems to me like there should be a way to extend these policies out to a remote site. What would I use to do that with, and where would the VPN terminate? Or - better yet - is there a better option than VPN to accomplish remote site connections?
I feel like I am sacrificing a lot of speed to the encryption mechanisms and bandwidth to the overhead. All the while, I could be doing this faster and more efficiently with a low end workstation running IPCop. But again ... I am looking for the BETTER way and not a hack job.