[jwhat]

The Cisco 3600 series were last sold 20 years ago, and have been unsupported for 15 years. They apparently use up to 140W of power. I'm sure it was a fine choice in it's day, but just because OP wanted a firewall for his IRIX system(s) does not mean the firewall has to be of similar vintage as the IRIX system...

Hi Jan-Jaap,

shameless plug on my blog post on migrating old IOS configuration from 2901 to 4331: https://just.graphica.com.au/tips/cisco-...migration/

The reason I changed routers were due to:
- 2901 being EOL and
- Wanting to have 1GbE for internet facing interface

I believe same approach would need to be applied for migration of 36XX / 38xx series routers.

4331 is also heading EOL but based on review of known vulnerabilities, looks ok for most (non IP-MPLS and non "Jumbo" packet based configurations) uses and security updates continue to 2028.

For those interested if you quote the right CERT bulletin details you can get CISCO to provide you with new IOS-XE release (without need for support contract), but it takes some considerable persistence... ;-) .

Cheers from Oz,


jwhat/John