Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Network slows down when VPN is in use

Posted on 2009-02-23
2
Medium Priority
?
395 Views
Last Modified: 2012-05-06
Background:
IPSec VPN between two offices. Both Netopia R910 routers. Office A is on a T1, Office B is on 3.0/1.5 DSL. Exchange servers on both ends (same domain).

I've been experiencing random traffic spikes on Office A's network over the last few weeks. After many packet captures, it appears that when any traffic (Exchange replication, smtp, basic file transfers, etc.) traverses the VPN, Office A's network compeltely bogs down. Local ping times from my workstation to the gateway range between 500ms and 1000ms.

I am able to replicate the problem by starting a ping to my gateway, and starting a small file transfer to the server in Office B. Before the transfer begings I get a 1ms ping, but after the file transfer starts, the ping time jumps up to 300ms or higher and brings any external traffic to a crawl.

I have already switched out the R910 in Office A, and that does not affect the issue. Could it have something to do with the encapsulation, or the IPsec not translating correctly?

 
0
Comment
Question by:Laenedo
2 Comments
 
LVL 29

Expert Comment

by:Bill Bach
ID: 23716614
The Netopia Router spec sheet (at http://www.netopia.com/equipment/pdf/spec/r910.pdf) does not indicate the type of CPU provided.  Is it possible that the unit has such a slow CPU that it cannot easily handle a VPN connection AND its other tasks?  Would seem unusual, but you might be able to check this with the management software included.

It would also be worthwhile to try flashing a new firmware onto the device, to see if code updates have alleviated this problem in the past.
0
 

Accepted Solution

by:
Laenedo earned 0 total points
ID: 24423084
Site A was using a model R910 and Site B was using a model R9120. Both had identical firmware. I found a spare R9120 and installed it at Site A. Once the VPN exchanged IKEs, it ran beautifully. I guess there is some kind of incompatibility between the R910 and R9120 because I tried multiple R910s with no luck.

Thanks for the help BillBach.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
This article will show how Aten was able to supply easy management and control for Artear's video walls and wide range display configurations of their newsroom.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Suggested Courses
Course of the Month10 days, 12 hours left to enroll

572 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question