IPSEC and more ISP Bandwidth (Best Practices)

[txcahoon]

We have a 3015 concentrator which is being upgraded to a 3030. We have one T1 line from our ISP supplying bandwidth. We want to add more bandwidth but keep the cost reasonable. Our ISP (and another we used for another connection) can supply a 3meg link using 2-T1's but they use IP PER PACKET load sharing which I understand is bad for performance (IPSEC reasons).

How do you provide more bandwidth? Is the only option going to a fractional T3?

Tim Cahoon

Federal-Mogul Corporation

[blackey]

Yes there is a great possibility for packets out of sequence with balanced t1's and IPSEC wont put up with it, you have loads of retry's and time outs.

Fractional T3 if that all they have in larger pipes might be only way to go.

any tech they can offer that has one pipe - one flow is going to be best for IPSEC