_____ __ Windows users ___ _____ _____

[George Paschos]

Merikes dieykriniseis:

To pix pou anaferetai einai I "navarxida" tis cisco, to 535. Gia to poso
kanei, apla tha sas po oti to 515E (to psofio apo ta "megala") kanei konta
sta $9000, o kathenas as mantepsei...

Oso gia ta noumera, deste ayta:

# Compression, LZS and MPPC at 420 to 510 Mbps
# Encryption, 128/192/256 AES, DES, 3-DES and RC4 at 210 to 460 Mbps

Einai apo tin vpn1411 mini pci karta tis soekris, pou kanei $70
Vazontas kai alla $194 gia ena mikro soekris net4501-30 (Board and Case, 133
Mhz CPU), exoume sxedon to vpn throughput tou "megalou" PiX me  $264 :p

Kali i cisco alla kapou exei, periergws, ena dikio o Ricudis :p


<Flamebait>
 Simfono apolita sxetika me to oti kapoio sigxrono pc me iptables den tha
sigkrinotan me tin apodosi tou pix (opws ipothike se proigoumeno mail tou
thread).
Me pf einai grigorotero apo to pix
(kanw kakes parees teleytea :p)
</Flamebait>


Telos, an anoikseis ena pix (toulaxiston to 515) to mono pou tha deis einai
ena aplo motherboard, me enan aplo Pentium pano, me 2 apla pci slots ta
opoia pernoun aples intel pro 100 kartes (isws i moni diafora stis kartes
einai to mac address pou einai tis cisco kai I diplasia+ timi epidi einai
cisco. Pantws kai "apli" intel doulevei mia xara edw kai 2 xronia se pix)


Giorgos


> -----Original Message-----
> From: linux-greek-users-bounces at lists.hellug.gr [mailto:linux-greek-users-
> bounces at lists.hellug.gr] On Behalf Of Iakwbos Triantafillou
> Sent: Tuesday, July 13, 2004 8:42 PM
> To: Christos Ricudis
> Cc: linux-greek-users
> Subject: Re: _____ __ Windows users ___ _____ _____
> 
> Christos Ricudis wrote:
> 
> >On Tue, 13 Jul 2004 08:07:36 +0100
> >Iakwbos Triantafillou <ewsforos at styx.irc.gr> wrote:
> >
> >
> >
> >>Oso gia ta cisco, den mporeis na syggrineis kanena software me kapoio
> >>specialised (kai synithws optimised) hardware. Ta cisco einai >
> ftiagmena etsi wste na "shkwnoun" pollaplasia I/O apo osa tha
> >>epetrepe to "idio" hw se ena pc.
> >>
> >>
> >
> >Oxi akribws.
> >
> >H cisco kanei optimize to most common path - to most common path gia ena
> paketo einai na mpei apo ena interface, na ginei lookup se kapoio routing
> table, kai na bgei apo ena allo. Kala kanei kai to kanei etsi, giati
> ftiaxnei routers.
> >
> 
> Gia firewall milhse to palikari.  Ta PIX exoun hardware optimisation se
> polla parapanw shmeia. Including but not limited to vpn, crypto etc etc.
> (some via hw modules)
> 
> 
> >To perissotero intelligence ekei peftei sta idia ta interfaces - gi ayto
> kai to na les ti 8a epetrepe "to idio" hardware se ena PC den einai aplws
> la8os, einai KAI malakia KAI la8os.
> >
> 
> Einai lathos apo poia apopsh? Den sou eipa oti ena pc einai networking
> device. Sxoliazw omws th diafora se apodosh apo ena pc pou kanei
> firewalling (px me iptables) me ena specialised networking device. Kai
> pes mou oti den einai thema optimisation ki oti me ena P3 at 1Ghz me linux
> kai iptables tha exeis ayto to performance:
> 
> Specs apo PIX:
> 
>  Cleartext throughput: 1.7 Gbps
> 
>  Concurrent connections: 500,000
> 
>  168-bit 3DES IPsec VPN throughput: Up to 440 Mbps with VAC+ or 100 Mbps
> with VAC
> 
>  128-bit AES IPsec VPN throughput: Up to 535 Mbps with VAC+
> 
>  256-bit AES IPsec VPN throughput: Up to 440 Mbps with VAC+
> 
>  Simultaneous VPN tunnels: 2000
> 
>  Processor: 1-GHz Intel Pentium III Processor
> 
> 
> 
> >
> >
> >Ama ton baleis na kanei o,tidhpote poy bgazei to processing apo to common
> path, ton hpies. Rwta opoion prospa8hse na sthsei NBAR se under-specified
> hardware.
> >
> >
> 
> Sure thing. Alla pote milhsa gia under-specified hardware? Den sou eipa
> na baleis ena 1750 gia border router sto EDET na kanei routing kai
> firewalling kai tpt vlans me dynamic access lists klp.
> 
> >H8ikon Didagma : Epeidh sthsame ena 1750 de shmainei oti piasame kai ton
> CTO ths cisco apo t'arxidia.
> >
> 
> Hthikon Didagma: "The problem with the world is stupidity. I don't say
> that there should be like a capital punishment or anything but why don't
> we just remove the warning labels from everything and let the problem
> solve itself?" (c) TM bash.org