Is there Bandwidth limitation using IPSec ?

We have an office in Asia which is connected to our New York location using l2l IPSec through the internet. They claim that they have guaranteed bandwidth of 2MB with their local ISP. They are using MRTG apllication to monitor the bandwith and it is reporting that only 512K is being utilized on the link. They think it is something with the firewall or it is because of the IPSec. We have the IPSec interface set to auto negotiation and the interface stats does not seem to be anything out of the ordinary. What could it be ?

It could be the application. The latency between Asia and New York might be to high to let the TCP frame size
ramp up.Try putting some sort of WAN killer behind it and see what your true non-application restricted throughput is.
To your original question. No, there is no bandwidth limitation in IPSEC. Only hardware limitations of the crypto engin, but that only applies when you get into much higher BW numbers. (Unless you have a 2611 which does under 1M of 3DES throughput.)
Another thing your may want to consider is the MTU of the link. Try setting the MTU down to 1360 on the incoming interfaces or ip tcp adjust-mss 1360. This will prevent the applications from over ramping the TCP windows.

Similar Messages

Is there any limitation of memory uses for apps in iPad2 or iPad3 ?

Hi,
Is there any limitation of memory uses for apps in ipad2 or ipad3 .For example an application can use 10% or 20% of available memory , is there anything like that or the apps can use the total available memory or like 90% of it ?
I want to know about the memory distribution to the apps in ios .
Would anyone suggest a right way ?
Thanks

iOS manages all memory. You should test your app in Instruments to be sure it is playing nice.
See Advanced Memory Management Programming Guide

Why there is a bandwidth limitations in serial ports

hi all
why there is a bandwidth limitations in serial ports ??
like the highest one is 45 mbps
but Ethernet ports reach 100 GB !!
thanks,

Dear,
each standard has its own specification about media, connectors and protocols. Depending on the type of media and technologies that ware available when the standard has been defined, a maximum speed has also been defined. The speed depends on the specific media (copper or optical, twisted pair or coax, cat 5 or cat 6), electrical signals (volts, waveform, clock), distance between device,.... each protocol defines a maximum speed. It's true that ethernet protocols have a very high speed but over a copper line they are also limited to 100 meters while other serial protocols, xDSL for example, can transmit up to 20Mbps over copper line over a distance of some kilometre. So speed reduction is often a way to have longer connections.
Bye,
enrico
PS: please rate if useful

Is there any limitation

Is there any limitation to number of parameters to be passed to a procedure (when submitted using htp post )
Thanks,
NPR

I believe Oracle has a imit of like 32k parameters, but there shouldn't be anything beyond that imposed by the way you're calling the procedure.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Is there a limitation of characters in a String variable in 8.0.2?

Is there a limitation of characters in a String variable?
I'm trying to create an email within my script and when I paste my text into my parameter, which is a String variable, it will only paste up to 80 characters (including spaces).
In 7.0 I was able to paste my paragraphs and the larges paragraph had 346 characters (including spaces).
Thanks,
Debbie

Greg,
Ah.... that's it.
I modified the value of the parameter within the script and added the text that I needed. I added the following:
"To transfer the file over to the router's flash you will need an TFTP or FTP program. Start your application and make sure that the default directory is pointed to the directory where you copied the greeting. Now log into the router that needs to be updated. Once you are in the router issue one of these commands:"
It accepted it and was able to use the entire value. So it must be the web page that will not allow me to enter more then 40 characters.
Do I need to get this submitted as a bug?
Thank you,
Debbie

Is there anyway to use the kerning in a selected sentence?

Is there anyway to use the kerning in a selected sentence instead of selecting each space between the characters?

ok that is understandable and fully reasonable. but tech is tech. when one is made to do everything it can also be limited through the code.
Would anyone be able to make or program something to override the code and just use it to send/receive through the hardware. like said the bluetooth tether feature was not doable but mywi was able to through jailbreaking.
what i am asking is, would be it possible?
( edit: didn't read the part of the profiles. )
profiles are not editable? ... or even replaceable?
or is it really just too much work ?

Is there any limitation of nested select.

Is there any limitation of nested select.If yes please let me know.

Hi,
There are no practical limits to nested SELECTs, but as other repliers have already pointed out they quickly become a performance hog. I have stopped using them for years, and when I teach ABAP performance classes I also quote them as one of the top "don'ts". With nested selects, the number of calls to the DBMS can easily become enormous, putting the database server under stress.
A good alternative - the one I favour most myself - is to use SELECT INTO TABLE for the"outer" select, followed by appropriate SELECT FOR ALL ENTRIES statements to handle the inner levels.
ABAP joins are another alternative. When properly written, a join will be faster than a nested select. The problem is however that very often joins are not properly written. SELECT statements should always respect the KISS principle (keep it simple, stupid) and with a join it is very easy to violate that rule. A join over 2 tables should probably be OK, but with 3 or more tables you want to be very careful. If you really want to code a complex join, I recommend that you also code the same logic with different means (INTO TABLE/FOR ALL ENTRIES or even nested selects) and then compare that with the join. By the way: don't just compare the performance, also make sure that the two return the same data. You wouldn't be the first to code a really fast join which unfortunately returns incorrect results.

Limitation using infotype 0302

hi experts,
I have one question. I want to change current report instead of using infotype 0000 to use infotype 0302. This is because infotype 0000 not store 2 action in same days. my question is, if I change to infotype 0302, what impact wil happened. Is it same infotype except it allow multiple action in same days or there is limitation in infotype 0302
Thanks in advance

Hi MJ,
I believe you have a custom report which right now fetches from PA 0000 and now you want to fetch from PA 0302.
The basic differences is as told by other experts in their comments but I would like to highlight some specific points.
1. IT 0302 will only have action type and action reason for a key date i.e. start date of action
2. It doesn't have employment status fields.
So, in case your reports needs data related to various statuses then you will have to read both IT 0000 and IT 0302 in the date range.
cheers
Ajay

Alert Rules vs Alert Category - Is there any limitations for multiple rules

I have an alert configuration implemented already and i want to add few more rules for the same alert category. While creating the rules for new set of scenarios, I am able to create only one rule . Is there any limitations for having the rules per category ?

Hi,
If the Suppress Multiple Alerts of This Rule checkbox is selected (default setting), then no further alerts are generated once the rule has been met until the first alert has been confirmed.
There is no limitation of creating alert rule for a particular alert category.
Check out the steps of Alert rule configuration.
Creating Alert Rules
To create an alert rule in which you use a defined alert category, proceed as follows:
       1.      Give the rule a name (Description).
       2.      Select the alert category that you want to use by clicking the corresponding category in the alert category table.
       3.      If necessary, specify conditions for the sender or receiver, or both.
○       If your rule results in alerts that must be assigned to a specific message, select the option Yes for the Bound to Message condition.
○       If your rule results in alerts that are not assigned to a message, that is, they are caused by errors that occurred before the message was sent, select the option No for the Bound to Message condition.
In this case you cannot enter any further details about the sender or receiver.
○       If the rule is to cover both cases, select the Not Relevant option.
       4.      If required, restrict the errors further to:
○       Errors reported from the Integration Engine (with or without error category or error code)
○       Errors reported from the Adapter Engine (with or without adapter type)
You can enter an asterisk (*) in steps 3 and 4. You can enter just the asterisk, or enter it at the start, end, or start and end of a string.
       5.      To add the new rule to the list of alert rules, choose Add Rule.
If the Rule Activated check box is selected (default setting), the rule is automatically activated when you add it and is displayed as active.
If the Suppress Multiple Alerts of This Rule checkbox is selected (default setting), then no further alerts are generated once the rule has been met until the first alert has been confirmed.
Once you have created a rule, it is automatically displayed in the list of alert rules. If you want to display the conditions of a rule, select a rule in the list and choose Show Conditions.
Hope this will help you.
Regards
Aashish Sinha
PS : reward point if helpful

Is there any limitation in xtract structure,while doing enhancement.

is there any limitation in xtract structure, while doing enhancement.

Hello Satish
There is no limitation as such defined by SAP but let me teel you one thing, if your extract structure contains a lot of enhancement than it s better you go for using two extractor and then use Multiprovider for viewing all the data....basically when you enhance structure you customer exits which slower down the performence....
For example you have 0FI_GL_4 extructure and want to see the payment detail by some SD attributes like sales office divisoion..bla bla bla...if small enhancement is there you can include these field in 0FI_GL_4 extract structure but if it is significant than you should create another extractor for getting SD related data and merge them in BW side in Multiprovider
Thanks
Tripple k

"bufferbloat", Airport Extreme, and bandwidth limiting?

I have a somewhat complex network setup at home. I have a Cable connection with 20Mbps down, 2 Mbps up, my own Motorola SB6141 cable modem upstream. Plugged into that, I have a recent model Airport Extreme (802.11ac), and an older Airport Extreme set up with a roaming network. The primary clients are recent vintage macbooks, iOS devices, with a smattering of other connected devices (DVR, windows, Synology NAS, etc.
The problem that I'm running into is that network connectivity has lots of issues if I run a large upload that saturates the outbound connection, e.g. with Dropbox or another online backup tool like Arq. When that happens, inbound traffic gets super spotty, and things like Netflix become unusable. peer-to-peer within the network continues to work fine.
As near as I can tell, these are the classic symptoms of "bufferbloat" and from what I've read, the solution to the problem would be to introduce an outbound bandwidth limit (say at 1.98 Mbps) at the first outbound bottleneck, in this case, at the Airport Extreme (ac) connected to the cable modem.
Is there any way to do this? I couldn't find any kind of bandwidth limitation mechanism in the Airport Utility.

Is there any way to do this?
Sorry, but no. The AirPorts are all very simple, bare bones routers with a minimum of functionality.

VPN Using IPSec

Hi,
I am trying to connect to my company's network through 3rd party VPN client using IPSec with authenticated headers. This doesn't seem to be supported by AirPort Express. Is there anything I can do to get this to work?
Thanks,
Charly

I am having the same problem. Cannot connect to the VPN with Airport Express. My IT guys says it's because Airport doesn't support IPSec passthrough, even though the specs page clearly states that it does. Apple?
http://www.apple.com/airportexpress/specs.html

Is there a limitation ?

Hi,
Using the following query I got some strange error. Using max 5 queries everything works fine but adding more than 5 queries the sql stops to work and returns nothing at all.
WORKS:
select TWITTER_FILTER_NAME, DateAdd(minute,-2,System.TimeStamp) AS TWITTER_INTIME,System.TimeStamp AS TWITTER_OUTTIME,count(*) as TWITTER_NUMBER_POSTS from (
SELECT 'ZURN' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]ZURN%'
union
SELECT 'GIVN' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]GIVN%'
union
SELECT 'SYNN' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]SYNN%'
union
SELECT 'UHR' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]UHR%'
union
SELECT 'NOVN' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]NOVN%'
) x
GROUP BY TumblingWindow(minute,2),TWITTER_FILTER_NAME
DOESNT WORK:
select TWITTER_FILTER_NAME, DateAdd(minute,-2,System.TimeStamp) AS TWITTER_INTIME,System.TimeStamp AS TWITTER_OUTTIME,count(*) as TWITTER_NUMBER_POSTS from (
SELECT 'ZURN' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]ZURN%'
union
SELECT 'GIVN' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]GIVN%'
union
SELECT 'SYNN' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]SYNN%'
union
SELECT 'UHR' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]UHR%'
union
SELECT 'NOVN' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]NOVN%'
union
SELECT 'NOVN2' as TWITTER_FILTER_NAME FROM twitterhubanalytics2 where text like '%[$]NOVN2%'
) x
GROUP BY TumblingWindow(minute,2),TWITTER_FILTER_NAME
Any preview limitation ??
Markus
Markus Christen IT-Architect Microsoft Brasil http://blogs.technet.com/b/markuschristen/

I just wanted to mention that there is a much more efficient way to issue this query that will also skirt this limitation: use CASE rather than UNION:
SELECT
CASE
WHEN text like '%[$]ZURN%' THEN 'ZURN'
WHEN text like '%[$]GIVN%' THEN 'GIVN'
WHEN text like '%[$]SYNN%' THEN 'SYNN'
WHEN text like '%[$]UHR%' THEN 'UHR'
WHEN text like '%[$]NOVN2%' THEN 'NOVN2'
WHEN text like '%[$]NOVN%' THEN 'NOVN'
ELSE 'None'
END as TWITTER_FILTER_NAME
This query will run much faster.
Thanks,
--Lev

Using IPSec on TMG to secure access to Exchange not working

Hello,
I am trying to following the
MS white paper to use IPsec to secure Exchange 2010 Outlook Anywhere via TMG.
However, I am having trouble with getting IPsec configured properly on the TMG server. When I configure the IPsec Connection rule, Exchange site is still accessible without any restrictions.
- I assigned an additional IP to the TMG server and created a new Web Listener
- As a first step to ensure that everything works without IPsec, I have published Exchange on TMG and verified that I can access the server normally using OWA and Outlook Anywhere
- The Root CA have been imported on the TMG servers.
- I then follow the steps to create the Connection Security Rules where endpoint1 is any IP, and endpoint-2 is the IP of the TMG server, and configured it for computer authentication for inbound and outbound
- At this point I believe that the published Exchange site should no longer be accessible since it requires IPsec for HTTPS access to the Web Listener. However, this is not the case. I suspect that it is ignoring the Connection Security Rule that was configured
within Windows 2008 R2 and not TMG
The part I am confused with is that the white paper outlines adding the Connection Security Rule in the Windows Firewall advanced security. However, I thought that TMG basically overrides any Windows firewall configuration with the firewall policies within
TMG. So is there another way to set this up on TMG without having to configure any IPsec rules on the actual Exchange server.

Lutz,
I already have "Require inbound and outbound" selected. It seems like TMG is just ignoring the connection security rule.
Environment:
TMG: Workgroup
External NIC: x.x.1.1, gw set, no DNS
- additional IP binded to external NIC x.x.1.2 dedicated for the web listener
- Public NAT: x.1.1.2 translates to x.x.1.2
ran "netsh advfirewall set global ipsec ipsecthroughnat serverandclientbehindnat"
Internal NIC: x.x.2.1, no gw, DNS set
The Web listener network is set to x.x.1.2
OWA publishing rule is set to use the Web listener
I verified that OWA is working normally without IPSec. The TMG logs shows HTTPS connections to the destination IP for x.x.1.2 (listener) during logon. After successful logon the log shows the Exchange server in the destination IP address column.
I create a Connection Security Rule
- Endpoint 1: any IP
- Endpoint 2: x.x.1.2 (listener IP)
- Protocols: TCP, endpoint 1: all ports, Endpoint 2: Specific: 443 (I also tried selecting the protocol to ANY)
- Authentication: Require inbound and outbound
- Advanced: all profiles selected
When I enable this Connection filter, I can still access Exchange normally without using IPSec on the client. I can see that TMG still allows 443 access to the web listener without requiring IPSec authentication. It behalves exactly the same as before I
created the connection filter.

Are there time limits onstreaming Itunes radio? If so, can it be disabled?

Are there time limits onstreaming Itunes radio? If so, can it be disabled?

Unfortunately the Time Capsule is missing the circuitry that the AirPort Express has that processes the AirTunes stream to get it out to your amp. So, whether the Time Capsule or your iMac is hosting the iTunes Library, in order for your amp to be able to use it, you will need the Express.

Is there Bandwidth limitation using IPSec ?

Similar Messages

Maybe you are looking for