Solved

Slow BOVPN between fireboxes, watchguard

Posted on 2009-05-18
3
2,810 Views
Last Modified: 2013-11-16
Hi -

I've recently set up a BOVPN between an Watchguard Firebox X1250e (Site A) and X550e (Site B). Performance between the two sites is very poor now. This is at University, site A has a 100mb connection, site B has a 10mb connection. FTP'ing 100mb dummy file from Site A to Site B runs at 100kb/s which I think is way too slow.

When I do a speed test to the internet from Site B (using DSL reports) I get about 250kb/s for up/down. Site A does 7500kb/s down 1000kb/s up.

Does anyone have ideas for ways to speed up the connection?
0
Comment
Question by:futureman0
  • 2
3 Comments
 
LVL 32

Expert Comment

by:dpk_wal
ID: 24414494
Slowest speed among devices would determine the overall transfer speed on the tunnel; as you get 250 kbps @ site B; getting 100kbps using VPN, i would say, is a good speed.

When you configure VPN, you configure encryption and this slows down things, higher the encryption-bit lower the speed. With lower strength cipher, the speed would be better, but the security would be less.

Thank you.
0
 

Accepted Solution

by:
futureman0 earned 0 total points
ID: 24414711
Hi,

Well it turns out it was a pretty quick fix. The firebox at Site B needed to have 10mb full duplex set manually on the external interface. Once the change was made, the massive amount of packet loss ended and traffic from Site B to A increased from 100kb/s to 8.5mbits/s :)
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 24420483
Good to know that problem is solved; thank you for the update! :)
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

One of the Top 10  common Cisco VPN problems are not-matching shared keys. This is an easy one to fix, but not always easy to notice, see the case below. A simple IPsec tunnel between fast Ethernet interfaces of routers SW1 (f1/1) and R1(f0/0). …
Some of you may have heard that SonicWALL has finally released an app for iOS devices giving us long awaited connectivity for our iPhone's, iPod's, and iPad's. This guide is just a quick rundown on how to get up and running quickly using the app. …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now