Hi 

Which encryption, negotiation mode and authentication methode do you use in
IPSEC ?

 

Regards

Vincent

 

De : S S [mailto:n3tr1n0 at hotmail dot com] 
Envoyé : mardi 28 octobre 2008 11:16
À : Vincent Hämmerli - EXES sàrl
Objet : RE: [m0n0wall] CPU at 100% with IPSec Tunnel

 

Hello guys,
I am running monowall on ALix pc board and i am using VPN (Ipsec)

In my monowall racoon runs smoothly. I am expecting that CPU will work
harder but never reached 100% (!!).





  _____  

> Date: Tue, 28 Oct 2008 07:09:42 +0100
> From: vhaemmerli at exes dot ch
> To: m0n0wall at lists dot m0n0 dot ch
> Subject: RE: [m0n0wall] CPU at 100% with IPSec Tunnel
> 
> 
> 
> -----Message d'origine-----
> De : Chris Buechler [mailto:cbuechler at gmail dot com] 
> Envoyé : vendredi, 24. octobre 2008 23:42
> À : m0n0wall at lists dot m0n0 dot ch
> Objet : Re: [m0n0wall] CPU at 100% with IPSec Tunnel
> 
> 
> On Fri, Oct 24, 2008 at 4:59 AM, Vincent Hämmerli - EXES sàrl
> <vhaemmerli at exes dot ch> wrote:
> > Hello,
> >
> > I'm using m0n0wall version 1.3b15 on platform PC Engines ALIX and I
> have one
> > IPSec Tunnel
> >
> > After some hours, the CPU will goes to 100%. If I stop the IPSec
> Tunnel the
> > CPU utilisation goes back to 1 - 5%
> >
> > And after some time it will use 100% again.
> >
> > In the process list we can see the racoon process (used for IPSec
> tunnel) is
> > using a lot of CPU.
> >
> > Has someone had the same problem ?
> >
> 
> Only if pushing more VPN throughput than the CPU can handle. With an
> ALIX, that should be in excess of 10 Mb (depending on encryption
> protocol), which would be difficult to achieve in most environments,
> but is what I would look at first.
> 
> -Chris
> 
> Hello Chris
> Thank you for your reply.
> 
> But in my case, this occurs even if there is no traffic through the VPN
> link
> I think something is wrong with the process racoon, as if he was running
> in a loop or something like that
> 
> Vincent
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> 

  _____  

Get the best wallpapers on the Web - FREE. Click
<http://wallpapers.msn.com/?ocid=%5bB001MSN42A0716B%5d>  here!