DSU/router/switch/traffic-shaper gizmo (maybe OT)

[bscott at ntisys.com]

Hello list,

  Got a question for the many experts here.

  We have a need to divide up an Internet feed among several tenants in a
building.  The feed will come in on a T1 or similar.  Upstream provider
gives us a CSU and a routable IP block.  So we need to plug into the CSU and
be a router.  Each tenant will need to be on an isolated Ethernet.  We will
need to do NAT for some (but not all) tenants.  We need to do traffic
shaping/bandwidth limiting/whatever, so that no one tenant can hog the pipe.

  We're specifically not interested in advanced security features like
firewall, VPN, etc.  Those will be offered as an option using separate
equipment on a per-tenant basis.

  Now, I know I could do this with some expensive box from Cisco, NetScreen,
or the like.  What I'm curious about is if anyone on this list has done this
sort of thing with Linux?  I know, in theory, Linux should be able of doing
this.  I know there are WAN interface boards, multi-port Ethernet cards, and
traffic shaping software for Linux.  But from past experience, I know that
having all the pieces doesn't always add up to a stable, cost-effective
solution.  So I'm looking to hear about people who have actually done it,
and can comment on how well it worked.  Pointers to reviews and other
third-party sources are welcomed as well as first-hand accounts.

  Anyone who wants to chime in with recommendations for their favorite
hardware vendor/product/etc, please feel free.  I'll even listen to sales
pitches for appliances.  :-)

  advTHANKSance

-- 
Ben Scott           | Net Technologies, Inc.  | 978-462-8795
Network Engineer    | Salisbury, MA, USA      | 866-NTI-LINUX (684-5468)
bscott at ntilinux.com | http://www.ntilinux.com | Fax: 978-499-7839