[j-nsp] st0 speeds

Tim Eberhard xmin0s at gmail.com
Wed Sep 15 15:00:56 EDT 2010


Nick,

A secure tunnel interface is only as fast the entire network path end to
end. You can have a ST interface configured on a 100meg link but if the VPN
is over the internet and your internet connection is only 10meg...

If the secure tunnel (VPN tunnel) Isn't on your local lan and you're not
100% on the health of the entire network path end to end (or these are not
cabled back to back with a VPN tunnel running over them). I would take a
look at configuring juniper RPM over the IPSEC tunnel. That will tell you
the latency, jitter and packet loss over that VPN tunnel.

Additionally speeds will never be as good through a vpn tunnel as not. With
IPSEC comes additional over head and packets in many cases will need to be
fragmented or the MTU made smaller. This is just a draw back of using an
IPSEC VPN.

I hope this helps,
-Tim Eberhard

On Wed, Sep 15, 2010 at 12:44 PM, Nick Ryce <Nick.Ryce at lumison.net> wrote:

> Hi Guys,
>
> Is there a set speed for the st0 interface.  The physical line is 100meg
> that the st0 is bound to but I only seem to get 10meg out of it.
>
> Any help appreciated.
>
> Nick
>
>
> ________________________________
> --
>
> This email and any files transmitted with it are confidential and intended
> solely for the use of the individual or entity to whom they are addressed.
> If you have received this email in error please notify the sender. Any
> offers or quotation of service are subject to formal specification.
> Errors and omissions excepted. Please note that any views or opinions
> presented in this email are solely those of the author and do not
> necessarily represent those of Lumison.
> Finally, the recipient should check this email and any attachments for the
> presence of viruses. Lumison accept no liability for any
> damage caused by any virus transmitted by this email.
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>


More information about the juniper-nsp mailing list