RE: VPN based on CIPE

[Geoff Nordli <geoff@gnaa.net>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Bernd do you have the same stability problems that Mikael experiences??

> -----Original Message-----
> From: firewalls-owner@Lists.GNAC.NET
> [mailto:firewalls-owner@Lists.GNAC.NET]On Behalf Of Mikael Abrahamsson
> Sent: Saturday, May 13, 2000 6:07 AM
> To: GNAC firewall list (E-mail)
> Subject: Re: VPN based on CIPE
> 
> 
> On Fri, 12 May 2000, Geoff Nordli wrote:
> 
> > Does anyone have any comments on using CIPE for VPN's??
> 
> Pros:
> 
> I get 10-20mbit/s on medium speed Intel PentiumII/III 
> hardware. Good bang
> for the buck.
> 
> Fairly easy to set up, and works thru NAT (common UDP packets 
> that doesnt
> mind being adress translated).
> 
> Cons:
> 
> You cannot traceroute thru the tunnel (packets seem to be dropped).
> 
> You cannot use OSPF thru tunnel.
> 
> MTU is 1432 (or something around there) might be a problem 
> for some sites
> (Path MTU Discovery must work).
> 
> I've sometimes gotten some weird problems that require 
> bringing down the
> tunnel (I just reboot of the machine) in order to fix. 
> Happens approx once
> a month or so.
> 
> -- 
> Mikael Abrahamsson    email: swmike@swm.pp.se
> 
> -
> [To unsubscribe, send mail to majordomo@lists.gnac.net with
> "unsubscribe firewalls" in the body of the message.]
> 
-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]