Community discussions

MUM Europe 2020
 
mikruser
Member
Member
Topic Author
Posts: 392
Joined: Wed Jan 16, 2013 6:28 pm

Best way to create encrypted tunnel on CCR1009?

Thu Dec 10, 2015 3:33 pm

Hello,

What is the best way to create encrypted tunnel on CCR1009?

1) IPsec in tunnel mode (IP->IPsec)
2) IP Tunnel + IPsec (Interfaces->IP Tunnel)
3) GRE Tunnel + IPsec (Interfaces->GRE Tunnel)
4) ...some other?

i need maximum throughput, minimum latency, minimum cpu usage, minimum header overhead.
do not ask me why it is necessary.
 
rufee
newbie
Posts: 27
Joined: Mon Dec 10, 2012 2:41 pm

Re: Best way to create encrypted tunnel on CCR1009?

Thu Dec 10, 2015 5:42 pm

If it is just 1 tunnel it wont impact performance on a CCR1009 so you can use any method you prefer.
The more you "stack" the tunnels the more overhead you create in terms of MTU and CPU usage, going for the simplest option is usually the best way. Also i believe the 1009 has hardware acceleration for IPsec so i personally would go with that.
MTCNA

Who is online

Users browsing this forum: No registered users and 108 guests