?
Solved

VPN Speed, slower than dial up, how can i calculate what i should be able to get

Posted on 2009-04-18
9
Medium Priority
?
831 Views
Last Modified: 2012-05-06
Hi all,

I just checked the speed of 4 site to site tunnels our company has, then i checked the speed we should be getting from our ISP at each site

Site1 - Site2 | 2mb file transferred on average at 32kbps
Site1 - Site3 | 2mb file transferred on average at 18kbps
Site1 - Site4 | 2mb file transferred on average at 32kbps
Site2 - Site3 | 2mb file transferred on average at 32kbps

From ISP Download speeds:

Site 1 gets 16mbps
Site 2 gets 16mbps
Site 3 gets 16mbps
Site 4 gets 5mbps

dont know about upload speeds which i know will effect it, but they dont post uploads but i grabbed this info

Connection speeds are affected by line length, quality and peak internet usage periods and will range from 256kbps to a maximum of 18000kbps. Upload speeds will range from 256kbps to a maximum of 1000kbps

Site 1 uses a cisco 837 into a linksys vpn router, but with what i have learnt i plan on removing the linksys and placing the 837 in charge of the tunnels
Site 2 uses a cisco 837 that i set up the vpn on
Site 3 uses a draytek Vigor 2820
site 4 uses a spedtouch peice of crap that i cant log into, and a linksys vpn router i will replace this eventually

but can anyone maybe explain to me what should be happening, what i should expect and what to do about it?

i have also run a packet capture on through wire shark and have attached a screenshot of the output
i dont undertand what it means but it looks like there are errors? can anyone expain how to read this to me too?

Thanks alot for your help i know this will be a tough one!
VPN-Capture.jpg
0
Comment
Question by:awilderbeast
  • 5
  • 4
9 Comments
 
LVL 22

Expert Comment

by:robocat
ID: 24176124

You're probably using some kind of ADSL ? Your max. upload speed will greatly affect the transfer speed over the VPN, probably to 256kps if you have no other traffic at all.

Also I notice that you're measuring speed by copying files from Windows shares (SMB protocol). SMB is a very,very inefficient protocol to use over VPN/WAN connections because latency will slow things down to a crawl.

Try measing latency using ping and post the results here. Als try transfering files using ftp, this will probably be a bit faster.
0
 
LVL 1

Author Comment

by:awilderbeast
ID: 24182750
ok ive put Filezilla ftp server on one end and filezilla ftp client at my end

now i get 60-80kbps closer to 80kb most of the time, doubled the speed there
is this an acceptable speed for my connection?

i run a vpn capture on the transfter too (image below

what are these errors they normal?

i know smb is slower but staff use windows explorer to view and access files on different servers

which uses smb? what else can i provide as a solution for staff to access files on different servers that doesnt take 5-10 mins to open a word doc :|

thanks for your help so far
VPN-CaptureFTP.jpg
0
 
LVL 22

Expert Comment

by:robocat
ID: 24183159

1. the checksum errors are probably wireshark related and can be ignored:

http://wiki.wireshark.org/TCP_checksum_offload

2. 80kbps is probably the max. you can get because your upstream is limited. Getting more upstream bandwidth will help somewhat, but if latency is high this doesn't help with SMB.

3. SMB/CIFS (=all Microsoft based file sharing) is not suitable for WAN. I know of 3 possible solutions:

- use a WAN accelerator (e.g. riverbed, cisco, ...) but these are very expensive.
- use Citrix or Windows Terminal server to let your remote users access your central resources using a ICA/RDP session.
- using Windows server 2008 + Windows vista only clients, you can use a more efficient version of SMB/CIFS that should work a bit better. We don't have experience with this, though.



0
What Security Threats Are We Predicting for 2018?

Cryptocurrency, IoT botnets, MFA, and more! Hackers are already planning their next big attacks for 2018. Learn what you might face, and how to defend against it with our 2018 security predictions.

 
LVL 1

Author Comment

by:awilderbeast
ID: 24183193
ah right thanks for the wireshark info :)

my isp says that the upload limit is up to 1mbps surely it should be better than 80kb?

what do normal business using for file sharing over vpn then?
we have 4 servers in 4 offices each with files on that other offices like to access
what can i do?

i dont understand why the vpn would be soo slow... :S

THanks
0
 
LVL 22

Expert Comment

by:robocat
ID: 24187493

>my isp says that the upload limit is up to 1mbps surely it should be better than 80kb?

To make sure we're on the same page here:

You do know that 1 Mbps = 125KB/s ? I mean, when you measure speed you're talking about 80Kbit/s, not 80KByte/s ?



0
 
LVL 1

Author Comment

by:awilderbeast
ID: 24188710
1mbp is 1024 kb no?
0
 
LVL 22

Expert Comment

by:robocat
ID: 24189247

1Mbps = 1024Kbit/s = 128Kbyte/sec = 0,128 MByte/sec
0
 
LVL 1

Author Comment

by:awilderbeast
ID: 24192084
oh righ ti see, well where talking kilobits then it takes 1:30 to transfer a 2mb file to another server, but i can upload the samle file to the web in about 30 seconds
0
 
LVL 22

Accepted Solution

by:
robocat earned 1500 total points
ID: 24192185

ok, that seems about normal for a 1Mbit/s line, given that there's always some other traffic.

As said before, CIFS/SMB is unsuitable for use on a WAN. See possible solutions above.


0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Using Windows 2008 RRAS, I was able to successfully VPN into the network, but I was having problems restricting my test user from accessing certain things on the network.  I used Google in order to try to find out how to stop people from accessing c…
Overview Often, we set up VPN appliances where the connected clients are on a separate subnet and the company will have alternate internet connections and do not use this particular device as the gateway for certain servers or clients. In this case…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses
Course of the Month14 days, 4 hours left to enroll

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question