nanog mailing list archives

Re: Comcast Bussiness Class and GRE Tunnels


From: Matthew Palmer <mpalmer () hezmatt org>
Date: Wed, 27 Jul 2011 20:15:16 +1000

On Wed, Jul 27, 2011 at 12:30:36PM +0300, Denys Fedoryshchenko wrote:
On Wed, 27 Jul 2011 19:23:33 +1000, Matthew Palmer wrote:
On Wed, Jul 27, 2011 at 12:17:16PM +0300, Denys Fedoryshchenko wrote:
I can recommend you to try to use openvpn, if you are "Mikrotik
only". At least it doesn't have fragmentation issues, as
IPIP/GRE/PPTP has, and also it will run smoothly over NAT/SPI. Cons,
that it is a bit more laggy, because it runs over TCP.

Au contraire, OpenVPN only runs over TCP if you explicitly tell it
to;
default configuration, and widespread practice, is to run it over
UDP.

On Linux, yes, it is by default configuration is UDP, but in current
case , on Mikrotik, it is working _only_ in TCP mode, and has few
more limitations.
http://forum.mikrotik.com/viewtopic.php?f=1&t=20537

WT*F*?  I've never understood the appeal of Microtik, and now I understand
it even less.

- Matt



Current thread: