Re: VPN connection using ISA Server 2000
- From: "Marrow K.L. Yung" <marrow.yung@xxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 12 Jan 2004 23:14:43 +0800
I think what you mean is even I have a 10Mbps/10Mbps connection and VPN
overhead still present. I agree with that. It means if my firewall has horse
power to handle it and I use the NIC which can offload the IPSec overhead from
the CPU and use the VPN bypass function in the router, I can create as much as
VPN connection as my ISA Server 2000 can handle.
I mean really look for as much as VPN connection as possible solution. What do
you suggest? keep adding VPN router if more VPN connection need ? or really
depends on the power of the hardware ISA Server 2000 installed and the Intel
10/100 Pro S Server adapter. Just tell me what you think as the most expensive
solution in my mind now is a LinkSys VPN router which can handle 70 VPN
connection at the same time and link up VPN routers if more than 70+ is need.
Very best regards,
Marrow Yung.
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Monday, January 12, 2004 6:09 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: VPN connection using ISA Server 2000
http://www.ISAserver.org
No one will ever acheive "unlimited" VPN connections; that's what is called
"infinite".
You will always be limited by (in this order):
1. Internet Bandwidth - the shopkeeper is right; you can only support the
maximum traffic of the smallest pipe. In this case, it's
your Internet connection.
2. CPU speed - Even with a NIC or co-processor board to offload the encryption
duties, there is still an upper limit to the number
of encryption calculations per second that can be achieved
Take a read here for more information regarding this NIC and IPSec:
http://www.intel.com/support/network/adapter/faq.htm
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Marrow K.L. Yung" <marrow.yung@xxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Cc: <isalist@xxxxxxxxxxxxx>
Sent: Sunday, January 11, 2004 08:58
Subject: [isalist] VPN connection using ISA Server 2000
http://www.ISAserver.org
I am looking for a VPN unlimited connection solution, I see that all the VPN
broadband router can only support maximum 70 VPN
Connections in the router level. However, I need the unlimited one for my own
company. What I am thinking is, I buy a Intel 10/100
Pro S Server Adapter , which can support hardware IPSec in the NIC card itself(
the spec. in intel says that, that's why it is
Server NIC , not desktop NIC), then I use the VPN function in the ISA Server
2000 to create VPN connection for all of my client. In
the router level I will only let the router enable the VPN bypass function ,
which is a common function in all router in Hong Kong.
What do you think about my VPN unlimited solution? The pricing of this
combination will only cost 100-200 more Hong Kong dollar when
compare with using VPN router. Which is very good if I need more than 70 VPN
connections.
the shop keeper tell me it is impossible to have unlimited VPN connection (I
think he mean in the router level), he say even it can,
the bandwidth for 70+ VPN connection can't handled by broadband connection. Is
that true ? I will have a broadband connection of
10Mbps upstream 10Mbps downstream. It still not enough ? I am not going to
assume they all connnect at the same time (through you
can say why I don't use VPN router if I don't assume it will handle all at the
same time, but I want to make it unlimited in the
lowest price, the hightest price is I link up all VPN router to make it support
more than 70 VPN Connections if one VPN router is
over limited).
Very best regards,
Marrow Yung.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
marrow.yung@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
