From owner-freebsd-questions@FreeBSD.ORG Thu May 5 20:15:11 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 036F0106566C for ; Thu, 5 May 2011 20:15:11 +0000 (UTC) (envelope-from gull@gull.us) Received: from mail-ey0-f182.google.com (mail-ey0-f182.google.com [209.85.215.182]) by mx1.freebsd.org (Postfix) with ESMTP id 86F9C8FC14 for ; Thu, 5 May 2011 20:15:10 +0000 (UTC) Received: by eyg7 with SMTP id 7so1012191eyg.13 for ; Thu, 05 May 2011 13:15:09 -0700 (PDT) MIME-Version: 1.0 Received: by 10.14.51.20 with SMTP id a20mr1415378eec.213.1304626509100; Thu, 05 May 2011 13:15:09 -0700 (PDT) Received: by 10.14.47.11 with HTTP; Thu, 5 May 2011 13:15:08 -0700 (PDT) X-Originating-IP: [173.250.142.186] In-Reply-To: <4DC2E0CA.9020902@gmx.com> References: <201105040519.56695.geoff@apro.com.au> <4DC2E0CA.9020902@gmx.com> Date: Thu, 5 May 2011 13:15:08 -0700 Message-ID: From: David Brodbeck To: Free BSD Questions list Content-Type: text/plain; charset=ISO-8859-1 Subject: Re: Can I bridge the same subnet across a VPN? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 May 2011 20:15:11 -0000 On Thu, May 5, 2011 at 10:39 AM, Nikos Vassiliadis wrote: > There is no inbuilt reason why a L2 VPN is more easily saturated > than a L3 VPN. I disagree slightly. With L2 you have broadcasts and non-routable protocols being sent over the wire. This is fortunately becoming less of an issue than it used to be, but it can (for example) be a problem for certain kinds of Windows networking. I have had severe congestion problems in the past when bridging wired interfaces to wireless. In general I think adding a slow hop that's invisible to clients is asking for trouble, but that's not to say it can't work well in certain environments. The main thing to remember is just because the clients can pretend it's a LAN doesn't mean you can. ;)