ssft
@mellon.com
| Cisco VPN transparent tunneling options
I have a D-Link DGL-4500 router and using a Cisco VPN client to connect to my company's network. I can successfully connect using both of the TCP or UDP transparent tunneling options in the Cisco client, as well as not using them (relying on the D-Link router IPSEC passthru).
Question is...since all of these options work, which is the best? They all appear to be stable, and I can't tell a performance difference. |
|
Caedmon
@cox.net
| I would avoid ipsec passthru. It is buggy on most home routers. Even though it works for you now a firmware upgrade or a router swap could break the functionality.
The standard is NAT-T which is similar to Cisco's "UDP transparent tunneling" (Cisco does not follow the standard in some areas) and is the most commonly mode for users behind home routers. Cisco's "TCP transparent tunneling" is not used as often since it creates more overhead on the concentrator thus reducing the total number of clients able to connect at the same time. However it can be more reliable then UDP in the face of poor connections.
I'd start with UDP and if you encounter problems staying connecting try TCP. |
|
