Community discussions

MikroTik App
 
Rockyboa
Member Candidate
Member Candidate
Topic Author
Posts: 108
Joined: Tue Jul 14, 2009 10:52 pm

IPSec dedicated hardware

Wed Jul 28, 2010 4:40 pm

As I understand RB1100 does not have the RB1000 capability of hardware accelerated IPSec cryp/decrype engine.

IS this dedicated hardware only use in IPsec or L2TP would also benefits from that?
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: IPSec dedicated hardware

Wed Jul 28, 2010 4:42 pm

L2TP provides absolutely no confidentiality and does not encrypt tunneled data.
 
Rockyboa
Member Candidate
Member Candidate
Topic Author
Posts: 108
Joined: Tue Jul 14, 2009 10:52 pm

Re: IPSec dedicated hardware

Wed Aug 11, 2010 5:05 pm

Fewi,

But when I use a PPP-Profile associated to this L2TP with default-encryption set to yes, I guess it is encryted and somewhat secure? Would that default-encryption setting benefits from the hardware assisted chip in the RB1000?

Martin
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: IPSec dedicated hardware

Wed Aug 11, 2010 5:25 pm

Yes, but that PPP security is technically outside of L2TP. L2TP is often used to transport PPP, which can offer some encryption (though by comparison to other protocols the encryption is not particularly strong, but it may well be sufficient).

I don't know if that can be hardware offloaded on the RB1000.

Who is online

Users browsing this forum: No registered users and 3 guests