Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: vpnc: devel

connecting to cisco with compression on

 

 

vpnc devel RSS feed   Index | Next | Previous | View Threaded


matt at lickham

Jan 21, 2009, 9:24 AM

Post #1 of 5 (1959 views)
Permalink
connecting to cisco with compression on

Hi,

just wondering how much work it would take to enable IP compression in vpnc?

My office has replaced its cisco concentrator with a cisco 3825 ISR router, complete with VPN accelerator cards and prefer to run with compression on as the VPN accelerator cards stop the compression lowering throughput due to memory/cpu concerns, in fact they say it improves throughput.

any thoughts on how much work this would be? is anyone else in the same boat?



thanks
Matt



_______________________________________________
vpnc-devel mailing list
vpnc-devel [at] unix-ag
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/


dwmw2 at infradead

Jan 21, 2009, 4:58 PM

Post #2 of 5 (1838 views)
Permalink
Re: connecting to cisco with compression on [In reply to]

On Wed, 2009-01-21 at 17:24 +0000, Matt Clements wrote:
>
> just wondering how much work it would take to enable IP compression in
> vpnc?
>
> My office has replaced its cisco concentrator with a cisco 3825 ISR
> router, complete with VPN accelerator cards and prefer to run with
> compression on as the VPN accelerator cards stop the compression
> lowering throughput due to memory/cpu concerns, in fact they say it
> improves throughput.

I think the 3825 supports the AnyConnect SSL VPN? If so, we have
compression working for that already.

--
dwmw2

_______________________________________________
vpnc-devel mailing list
vpnc-devel [at] unix-ag
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/


mgalgoci at redhat

Jan 21, 2009, 7:16 PM

Post #3 of 5 (1829 views)
Permalink
Re: connecting to cisco with compression on [In reply to]

> > My office has replaced its cisco concentrator with a cisco 3825 ISR
> > router, complete with VPN accelerator cards and prefer to run with
> > compression on as the VPN accelerator cards stop the compression
> > lowering throughput due to memory/cpu concerns, in fact they say it
> > improves throughput.
>
> I think the 3825 supports the AnyConnect SSL VPN?

I believe you are correct sir.

--
Matthew Galgoci
Network Operations
Red Hat, Inc
919.754.3700 x44155
_______________________________________________
vpnc-devel mailing list
vpnc-devel [at] unix-ag
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/


Matt_Clements at adp

Jan 22, 2009, 12:10 AM

Post #4 of 5 (1834 views)
Permalink
connecting to cisco with compression on [In reply to]

> > > My office has replaced its cisco concentrator with a cisco 3825
ISR
> > > router, complete with VPN accelerator cards and prefer to run with
> > > compression on as the VPN accelerator cards stop the compression
> > > lowering throughput due to memory/cpu concerns, in fact they say
it
> > > improves throughput.
> >
> > I think the 3825 supports the AnyConnect SSL VPN?
>
> I believe you are correct sir.
>

and can I make my own routing arrangements when using the AnyConnect SSL
VPN as to what does & doesn't go down the VPN, regardless of whether the
3825 tells me local LAN and split tunellig and not allowed?

thanks for the help
Matt

--
This message and any attachments are intended only for the use of the addressee(s) and may contain information that is privileged and/or confidential. If the reader of the message is not the intended recipient(s) or an authorized representative of the intended recipient(s), please do not use, copy, distribute this email or its attachments or take action based on them. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system.

ADP Dealer Services UK Limited registered office - Herongate, Charnham Park, Hungerford, Berkshire, RG17 0YU, United Kingdom registered number - 01281651

_______________________________________________
vpnc-devel mailing list
vpnc-devel [at] unix-ag
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/


dwmw2 at infradead

Jan 22, 2009, 12:07 PM

Post #5 of 5 (1825 views)
Permalink
Re: connecting to cisco with compression on [In reply to]

On Thu, 2009-01-22 at 08:10 +0000, Clements, Matt (ADP DSI) wrote:
> and can I make my own routing arrangements when using the AnyConnect SSL
> VPN as to what does & doesn't go down the VPN, regardless of whether the
> 3825 tells me local LAN and split tunellig and not allowed?

Yes. The openconnect VPN client¹ is designed to use vpnc's 'vpnc-script'
for setting up routing. You can make a wrapper round vonc-script which
'adjusts' the environment variables which indicate routing.

Or if you're using the NetworkManager support, you can set up your
desired routing in the config GUI.

--
dwmw2

_______________________________________________
vpnc-devel mailing list
vpnc-devel [at] unix-ag
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/

vpnc devel RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.