[119249] in North American Network Operators' Group
Re: Gig Throughput on IPSEC
daemon@ATHENA.MIT.EDU (adel@baklawasecrets.com)
Wed Nov 11 05:02:02 2009
To: <nanog@nanog.org>
Date: Wed, 11 Nov 2009 10:01:14 +0000
From: adel@baklawasecrets.com
Reply-To: adel@baklawasecrets.com
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
=20
On second thoughts, thinking about this I am probably looking for some
kind of Layer2 encryption devices.=C2=A0 This will make things a lot easier
for the deployment.=C2=A0 Any experiences, thoughts on these types of devic=
es,
would be much appreciated.=20
Adel
On Wed 9:25 AM , adel@baklawasecrets.com sent:
Hi,=20
I have a requirement to encrypt data using IPSEC over a p-t-p gig fibre
link.=C2=A0 In the past I've normally used Juniper to terminate VPNs, as I
have found them excellent devices and the route based VPN functionality
very useful.=C2=A0 However looking at their range, only the ISG will do a =
gig
of IPSEC.=C2=A0 I'm leaning towards keeping my exising Juniper SSG550's fo=
r
firewall/routing capability at each site.=C2=A0 Then having a separate
encryption devices to handle the site-to-site vpn requiring the gig
throughput.=C2=A0 Does anyone have any suggestions on devices to use?=20
=C2=A0=20
Adel
=20
