ご家庭用のUTMとして
Sophos UTMを入れてみたのですが、

> df -h
Filesystem      Size  Used Avail Use% Mounted on
/dev/sda6       5.2G  2.7G  2.3G  55% /
udev            2.0G   72K  2.0G   1% /dev
tmpfs           2.0G     0  2.0G   0% /dev/shm
/dev/sda1       331M   16M  295M   5% /boot
/dev/sda5       1.9G  1.9G  0M  100% /var/storage
/dev/sda7       2.5G   47M  2.3G   2% /var/log
/dev/sda8       556M   13M  503M   3% /tmp
tmpfs           2.0G     0  2.0G   0% /var/sec/chroot-httpd/dev/shm
tmpfs           2.0G     0  2.0G   0% /var/storage/chroot-reverseproxy/dev/shm
tmpfs           2.0G  151M  1.8G   8% /var/storage/chroot-http/tmp
tmpfs           2.0G  112K  2.0G   1% /var/storage/chroot-smtp/tmp/ram

使っているうちにこんな感じに
/var/storage以下が0%。。。
Proxy cacheかなとも思ったのですが
そうでもないようで、、、

続きを読む →

以前の記事でSoftetherとつなぐことが出来たので、
今回は2811のVPNモジュール（AIM-VPN/SSL-2）で、
どれだけ変わるのかチェーック

AIM-VPN/SSL-2
http://www.cisco.com/web/JP/product/hs/routers/isr/isr3800/prodlit/pdf/vpnaimisr_ds.pdf

構成

Router#show crypto engine brief
        crypto engine name:  Virtual Private Network (VPN) Module
        crypto engine type:  hardware
                     State:  Enabled
                  Location:  aim 0
        VPN Module in slot:  0
              Product Name:  AIM-VPN/SSL-2
         Software Serial #:  ****
                 Device ID:  001F - revision 0000
                 Vendor ID:  0000
               Revision No:  0x001F0000
              VSK revision:  0
              Boot version:  255
               DPU version:  0
               HSP version:  3.4(3) (PRODUCTION)
              Time running:  00:33:27
               Compression:  Yes
                       DES:  Yes
                     3 DES:  Yes
                   AES CBC:  Yes (128,192,256)
                  AES CNTR:  No
     Maximum buffer length:  4096
          Maximum DH index:  2000
          Maximum SA index:  2000
        Maximum Flow index:  4000
      Maximum RSA key size:  2048

        crypto engine name:  Virtual Private Network (VPN) Module
        crypto engine type:  hardware
                     State:  Disabled
                  Location:  onboard 0
              Product Name:  Onboard-VPN
        Middleware Version:  ***
          Firmware Version:  ***
              Time running:  1982 seconds
               Compression:  Yes
                       DES:  Yes
                     3 DES:  Yes
                   AES CBC:  Yes (128,192,256)
                  AES CNTR:  No
     Maximum buffer length:  4096
          Maximum DH index:  0000
          Maximum SA index:  0000
        Maximum Flow index:  2400
      Maximum RSA key size:  2048

        crypto engine name:  Cisco VPN Software Implementation
        crypto engine type:  software
             serial number:  ******
       crypto engine state:  installed
     crypto engine in slot:  N/A

オンボードでもついています。

続きを読む →