At 05:26 PM 6/19/2002 -0500, you wrote:
>On Wed, 2002-06-19 at 16:53, Edmund Cramp wrote:
>10.x.x.x      intern. interface 10.x.x.x    external interface 130.x.x.x
>
>and then reverse when it reaches the other gateway.  Seems like that
>would add some latency!

Yes, but in your case, the question is how much? Is a slowdown by a factor 
of 20 usual? As I have never worked with an IPSec VPN I couldn't say. I 
would suggest digging around the Internet to see what the current rule of 
thumb is based on the implementation and your hardware. But, I would hazard 
a guess that what you are experiencing is atypical. Frankly, the 
performance hit you are experiencing seems rather harsh.

>Can anyone agree or disagree with (and/or enlighten) me on this?

Well, it would seem that you get the fun task of finding out for us! Please 
let us know what you find out. :)

Regards, Dustin


---
Dustin Puryear <[EMAIL PROTECTED]>
UNIX and Network Consultant
http://members.telocity.com/~dpuryear
PGP Key available at http://www.us.pgp.net
In the beginning the Universe was created.
This has been widely regarded as a bad move. - Douglas Adams


Reply via email to