Solved

increasing performance of IPSEC L2L vpn

Posted on 2011-09-12
5
528 Views
Last Modified: 2012-06-22
I have a remote site in the UK that is getting slow speeds through our L2L IPSEC VPN. We have a 50 mb/50mb connection here (in NY) and they have a 10mb/8mb connection on their end.

However with testing, the highest connection speeds that I am seeing are about 1.5 mb/s. Are there any settings that I can change to speed things up?

Currently my interfaces have a 1500 MTU. Is there are way to lower VPN traffic to a MSS of 1420, so large packets wont be split into two packets?
0
Comment
Question by:ryan80
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 12

Author Comment

by:ryan80
ID: 36524567
Forgot to mention that it is between 2 ASA 5510's
0
 
LVL 16

Expert Comment

by:poweruser32
ID: 36528318
is all your internet traffic going through 1 site/router ?
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 36528372
Hi,

It seems there is delay problem, how many is the average ping time between two ASA endpoints?

Best regards,
IStvan
0
 
LVL 12

Accepted Solution

by:
ryan80 earned 0 total points
ID: 36532241
@poweruser32

Yes, all the traffic goes through one router

@ikalmar

The ping time is 105 on average.
0
 
LVL 12

Author Closing Comment

by:ryan80
ID: 36597778
no answer
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question