[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Re[6]: ISAKMP performance

To: pcalhoun@usr.com
Subject: Re: Re[6]: ISAKMP performance
From: Bill Sommerfeld <sommerfeld@apollo.hp.com>
Date: Tue, 22 Jul 1997 15:12:45 -0400
Cc: ho@earth.hpc.org (Hilarie Orman), ipsec@tis.com
In-Reply-To: pcalhoun's message of Tue, 22 Jul 1997 08:09:33 -0500. <3D4C3000.3000@usr.com>
Sender: owner-ipsec@ex.tis.com

Hmm.  The scaling issues you're presenting seem to me to indicate more
of a problem with your architecture, not with ipsec.

I agree with Dan Harkins.. the correct place for ipsec in a
mobile/dialup environment is in the dialup end system, not in the
first-hop router (which is what the NAS effectively is).

There may still be scaling issues on the security gateways/firewalls
at the other end of the tunnel.. 

It's not clear what doing a secure tunnel from the NAS to the firewall
buys me as an end user, as I can't trust the phone network to be
secure.

					- Bill

Follow-Ups:

Re: ISAKMP performance

From: "C. Harald Koch" <chk@utcc.utoronto.ca>

References:

Re[6]: ISAKMP performance

From: pcalhoun@usr.com

Prev by Date: Re: "Default" cipher and authenticator
Next by Date: Re: ISAKMP performance
Prev by thread: Re: Re[6]: ISAKMP performance
Next by thread: Re: ISAKMP performance
Index(es):
- Main
- Thread