[119253] in North American Network Operators' Group
Re: Gig Throughput on IPSEC
daemon@ATHENA.MIT.EDU (Jian Gu)
Wed Nov 11 10:15:29 2009
In-Reply-To: <29660.1257933674@baklawasecrets.com>
Date: Wed, 11 Nov 2009 07:13:24 -0800
From: Jian Gu <guxiaojian@gmail.com>
To: adel@baklawasecrets.com
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
You can run L2TPv3 (available on IOS routers) between sites, not sure
about the throughput though.
On Wed, Nov 11, 2009 at 2:01 AM, <adel@baklawasecrets.com> wrote:
>
>
> =A0On second thoughts, thinking about this I am probably looking for some
> kind of Layer2 encryption devices.=A0 This will make things a lot easier
> for the deployment.=A0 Any experiences, thoughts on these types of device=
s,
> would be much appreciated.
>
> Adel
>
> =A0On Wed 9:25 AM , adel@baklawasecrets.com sent:
>
> =A0Hi,
>
> =A0I have a requirement to encrypt data using IPSEC over a p-t-p gig fibr=
e
> =A0link.=A0 In the past I've normally used Juniper to terminate VPNs, as =
I
> =A0have found them excellent devices and the route based VPN functionalit=
y
> =A0very useful.=A0 However looking at their range, only the ISG will do a=
gig
> =A0of IPSEC.=A0 I'm leaning towards keeping my exising Juniper SSG550's f=
or
> =A0firewall/routing capability at each site.=A0 Then having a separate
> =A0encryption devices to handle the site-to-site vpn requiring the gig
> =A0throughput.=A0 Does anyone have any suggestions on devices to use?
>
>
>
> =A0Adel
>
>
>
