I have one Soekris box running 1.2b2 that terminates 4 IPSEC tunnels (2
m0n0 / 2 FreeSwan) all of which see a fairly steady flow of traffic, as
well as up to 10-12 PPTP connections all across 2xT1 (3Mb), while also
providing firewall/NAT services to about 30 internal hosts. I've never
seen load avg exceed 30% (Generally more like 20%). I'm using a 4801 w/
the 1211 VPN accelerator card. Total cost < $350 and it's been ROCK
solid for about 9 months and counting.
Hope that helps...
Josh McAllister
-----Original Message-----
From: James W. McKeand [mailto:james at mckeand dot biz]
Sent: Friday, January 14, 2005 7:08 AM
To: m0n0wall at lists dot m0n0 dot ch
Subject: RE: [m0n0wall] Question about Point to Point VPN Using M0n0wall
Jeb Barger wrote:
> This a great product, however, I need to setup some point to point
> boxes around my work's wan. I knew that one mwall will ipsec nicely
> to another, however, can it handle two connections? For example,
> node A IPSEC===> Node B
> node A IPSEC===> Node C
>
> with only having one mwall at each site. Can it be done?
>
>
> Jeb
Yes, it can be done. I would even suggest a Node B ===> Node C
connection to simplify the routing. This has been discussed before on
the list. If I remember correctly, the biggest question has been
sizing of the m0n0walls. I do not think embedded platforms are
suggested for this application. I may be wrong, someone correct if I
am...
Does anyone know the if there is a limit on tunnels you can establish,
or is it up to your hardware?
_________________________________
James W. McKeand
---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch |