IPSEC Tunnel causing high internet traffic!!!!

Hi Guys,

I have the following setup
Head office is the domain controller with a 4mb ADSL LINE, a billion b7402gx establishes the adsl connection.
Branch office has two workstations that is connected to another billion b7402gx with adsl. Two connect the two sites the billion router establishes a permanent ipsec tunnel between head office and branch office. the reason for the tunnel is
: Head office is antivirus server with trend micro server and branches need to be in sync
: The branch logs into the Head office dc
: Branch workstations use Head office ip as primary dns to resolve domain
: Branch uses RDP to use accounting software at head office

WHENEVER THIS TUNNEL IS ESTABLISHED THE USAGE OF INTERNET BANDWIDTH INCREASES BY AT LEAST 400MB PER DAY ON BOTH THE HEAD OFFICE AND BRANCH??? AUTO UPDATES TURNED OFF, ALL TORRENTS AND KNOWN SITES BLOCKED, ACCOUNTING SOFTWARE NOT USED YET SO NO RDP SESSIONS CAUSING THIS EITHER, WHAT COULD THIS BE?
LVL 2
Reinert WentzelManaging MemberAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

rhandelsCommented:
Hi,
Are both machines on the branch office connected to the network when the VPN tunnel starts clogging up?? If ytou don;t have a DC at the branch office you should keep in mind that all networktraffic will be going over that line.. A lot of network traffic tends to be overhead.. But, e.g. if users open up Outlook and try to send an e-mail and press to, Outlook queries the GC, which is in the main office.. Nor only that, also DHCP and DNS overhead will generate heavy traffic.. The downside to a VPN tunnel is that you cannot see what traffic is being send  through the tunnel..

If you would really like to know what is going thorugh that tunnel, i'd suggest installing a tool like WireShark on a branch machine and monitor what traffic the machine is generating..

Also, as a best pratice, it is always a good idea to have a DC at any branch office,specially when you connected the machines to the domain directly by using VPN, this is known to generate heavy traffic.. Or make sure that the desktops in the branch office are no domain members and only let them work with a Terminal Server that's at the main office.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Reinert WentzelManaging MemberAuthor Commented:
Thanks alot for the feedback. ok so you say If i do take the two workstations of the dc and still maintain the ipsec vpn tunnel and use your suggested terminal server method,this will work? Sorry i will only be able to test this on monday.
0
rhandelsCommented:
It is working now allready right?? The only downside to the config you have now is a lot of network traffic over the VPN tunnel?

If so, then either removing them from the domain and using Terminal server to connect to your domain (dont install it on the DC btw, very very bad practice :)) or installing a very very small DC on the branch office will do the trick..

THough imho is it a tremendous issue if you have some extra traffic generated over the VPN tunnel?? The prices you pay for internetconnetions being that low these days it might be a cheaper solution to just upgrade the line...
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Broadband

From novice to tech pro — start learning today.