RE: Any Firewalls work well with PPPoE?

[Lucas Thompson <Lucas.Thompson () watchguard com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

One issue that I have found that tends to be problematic is that
there is a PPPoE header that takes up 8 bytes, effectively reducing a
1500-byte MTU to 1492.  
It also seems like the the ISPs that do PPPoE also tend to filter AH,
ESP, and/or GRE.
or do NAT, and that's even worse!  :)

- -----Original Message-----
From: Whitlock, Teresa [mailto:Teresa.Whitlock () dionex com]
Sent: Friday, June 15, 2001 6:02 AM
To: 'firewall-wizards () nfr com'
Subject: [fw-wiz] Any Firewalls work well with PPPoE?


We are currently using Raptor with people coming in via VPN using the
RaptorMobile client.  Unfortunately, we are having some major issues
with
several remote users located in various areas across the country due
to the
problems with DSL with PPPoE.

We've tried changing the MTU size, having them change routers,
switching
settings on the Firewall and client end.  Dialup works fine, but DSL
doesn't
work so well.  Most of the time we give up and have them switch
service
providers to one that does not use PPPoE.  We've had some success
lately
with Nexland routers on the client end, but the process is still
difficult.

I have a couple of questions.  First, are there any of the major
players
that have a good solution for this kind of situation?  I wouldn't be
opposed
to switching products if we could actually find one that worked well.

Second, could someone explain to me a bit about what PPPoE actually
is and
whether it is likely to stick around to become a bigger pain?  I've
read the
bits I can find, but I'd like more.

Teresa



_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBOzJCYBkEZcnI1admEQKVHQCfUfQxdQWMKXhnzJkQjqAHc+TrFCgAoNqF
cCNvd3JP4pTm30dc6pjOkwj0
=dYeC
-----END PGP SIGNATURE-----
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards