[ale] VPN's

Gary Maltzen maltzen at mm.com
Tue May 25 13:25:00 EDT 1999


I would guess that SSH telnet is more reliable because it uses short
packets. What you may need is a way to decrease the MTU of packets routed
through the VPN, if that's even possible...

How does a conventional ftp session between Atlanta and Austin compare to
the same between Atlanta and Canada?

(We're using NT-based Aventail VPN between Minneapolis and Seattle;
traceroute says we're routed through New York).

-----Original Message-----
 From: Steve Tynor <tynor at outside.atlanta.twr.com>


This is exactly what we do (and your guess even happens to match the
subnet numbers we are using on each subnet :-)).

Only traffic destined from one subnet to the other gets routed through
the tunnel.  That's all happening correctly.  The problem is that the
tunnel itself (10.0.1<->1.0.2) is unreliable.

Steve






More information about the Ale mailing list