WiredCountry strange behaviour - final resolution

[Tony Paterson]

Hi,

Just posting the final results of my setup, just in case anyone searches the archives.

It turns out that we needed to set the MTU to 1492 on the following devices: WiredCountry Router (D-Link), Proxy Server and our Web Server. The web server is running through a proxy server as a temporary measure to solve the problem with default gateways and two ISPs.

The thing I had missed before was that Proxy Server, a Win2K pro machine, also needed it's MTU set to 1492.

Interestingly we also have a firewall/VPN appliance, a SonicWall Pro, between our web server and proxy server, but we don't need to change it's MTU - still currently 1500.

Though not a perfect solution it is workable, especially given the exceptional business plans that we can get through Wired Country.

Just like to thank ICONZ techies for their help.

Cheers

Yours Tony P

[LEE Tet Yoon]

Post by Tony Paterson
Hi,
Just posting the final results of my setup, just in case anyone searches the archives.
It turns out that we needed to set the MTU to 1492 on the following devices: WiredCountry Router (D-Link), Proxy Server and our Web Server. The web server is running through a proxy server as a temporary measure to solve the problem with default gateways and two ISPs.

Ah so it was a PPPoE MTU issue then. Thought so :-)

Actually although this has nothing really do to with ADSL, it is relevant to some NZ ADSL users since I believe there are some TelstraClear ADSL customers who use PPPoE (cable users do as well I think but still off topic)

Post by Tony Paterson
The thing I had missed before was that Proxy Server, a Win2K pro machine, also needed it's MTU set to 1492.
Interestingly we also have a firewall/VPN appliance, a SonicWall Pro, between our web server and proxy server, but we don't need to change it's MTU - still currently 1500.
Though not a perfect solution it is workable, especially given the exceptional business plans that we can get through Wired Country.

Is there likely to be any other solution though? Given that PPPoE can only ever have a max MTU of 1492 and there is no other authentication option that I know of for WC ISPs to use, it seems to me as it'll always be the only solution.

Of course I'm not saying authentication is essential but most WC ISPs seem to think so...

[Robert McDonald]

Post by LEE Tet Yoon
Is there likely to be any other solution though? Given that PPPoE can only
ever have a max MTU of 1492 and there is no other authentication option
that I know of for WC ISPs to use, it seems to me as it'll always be the
only solution.
Of course I'm not saying authentication is essential but most WC ISPs seem to think so...

pptp(GRE) or ipsec, possibly a variety of other proprietry options. And
also many less common things (like vtun or ssh tunnels)

But really, is authentication necessary?

Cheers

Rob

[Tony Paterson]

According to ICONZ orginally they had everyone on static ips but there were a few people who didn't know what they were doing and using the wrong IP - the ip of other users, and I think we all know the result of this.

Thus ICONZ have decided that everyone has to go PPPoE

Guess it makes sense, just ain't isn't too pretty

-----Original Message-----
From: owner-***@unixathome.org [mailto:owner-***@unixathome.org]On
Behalf Of Robert McDonald
Sent: Friday, 24 September 2004 6:50 p.m.
To: LEE Tet Yoon
Cc: ***@lists.unixathome.org
Subject: Re: WiredCountry strange behaviour - final resolution

Post by LEE Tet Yoon
Is there likely to be any other solution though? Given that PPPoE can only
ever have a max MTU of 1492 and there is no other authentication option
that I know of for WC ISPs to use, it seems to me as it'll always be the
only solution.
Of course I'm not saying authentication is essential but most WC ISPs seem
to think so...

pptp(GRE) or ipsec, possibly a variety of other proprietry options. And
also many less common things (like vtun or ssh tunnels)

But really, is authentication necessary?

Cheers

Rob
--
This message is part of the NZ ADSL mailing list.
see http://unixathome.org/adsl/ for archives, FAQ,
and various documents.
To unsubscribe: send mail to ***@lists.unixathome.org
with "unsubscribe adsl" in the body of the message