[c-nsp] PPTP devices

Arie Vayner (avayner) avayner at cisco.com
Mon Jul 20 17:06:57 EDT 2009


Actually, this is not true... PPTP is not process switched on IOS, and
is it treated in a very similar way to L2TP on software based routers.

The CPU load would be still related to the amount of traffic, and not
really to the number of sessions, as software based routers still have
to spend cycles to switch packets.
If your 3825 router is having a hard time taking care of the load, I
would recommend you look at a 7201 (or at an older 7301).

7301 is basically a 1RU version of 7200 with NPE-G1, while 7201 is a 1RU
version of 7200 with NPE-G2.
Both of them should be able to handle about 200-300Mbps of PPTP traffic
with no trouble (NPE-G2 should be more or less double than NPE-G1).

Arie

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of
masood at nexlinx.net.pk
Sent: Monday, July 20, 2009 21:00
To: Daryl G. Jurbala
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] PPTP devices

since all the pptp traffic gets process switched, Cisco would not meet
the
feasibility condition on Router; if i were you i will use a linux (Intel
Core 2 Duo,4 Gig Mem) box running poptop (http://www.poptop.org/) for
such
a huge and increasing number of pptp users.

Regards,
Masood
Blog: http://weblogs.com.pk/jahil/


> I'm in the unfortunate position of having to support a bunch (100 or
> so now, 300 or so very soon) PPTP connections.
>
> Right now I'm using a 3825, and based on CPU performance it looks like
> I'll be lucky to get 200 on this thing with my typical end use usage
> patterns.
>
> Cisco seems to be pretty poor with rating PPTP performance on their
> devices, and would rather talk about L2TP (I don't blame them - it
> appears that pptp support has been dropped from the ASAs entirely).
>
> Does anyone have any idea what would be a good box for 300 to 500 (or
> even more) PPTP connections?  The old VPN3000s seem to support this,
> but I can't get any real numbers on how many connections I can
> realistically support.  I was thinking of just finding some powerful
> CPU IOS boxes and calling it a day on this one.  Any better ideas?
>
> Thanks,
> Daryl
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


More information about the cisco-nsp mailing list