Solved

Cisco 871 performance after ipsec vpn enable

Posted on 2011-09-14
6
959 Views
Last Modified: 2013-11-05
HI,

I have a strange problem with my Cisco 871 router.
After enabling Ipsec VPN on the router the internet speed drops to 50% of the original, even when no clients are connected.

Did any one heard or had experience with this issue?

See below for VPN config:

crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp client configuration group teleworker
 key *****
 pool VPNIPPOOL
 acl 105
 netmask 255.255.255.0
!
!
crypto ipsec transform-set myset esp-3des esp-sha-hmac
!
crypto dynamic-map DYNMAP 1
 set transform-set myset
 reverse-route
!
!
!
crypto map VPNMAP client authentication list default
crypto map VPNMAP isakmp authorization list default
crypto map VPNMAP client configuration address respond
crypto map VPNMAP 10 ipsec-isakmp dynamic DYNMAP


Thanks,
0
Comment
Question by:nvdkloor
6 Comments
 
LVL 21

Assisted Solution

by:eeRoot
eeRoot earned 250 total points
ID: 36540785
What is the CPU and memory utilization?  Any errors in the log?  Do you notice the speed decrease when connecting to an internet site by the IP address, DNS name, or both?  If you roll back the config to an earlier version that does not have the VPN enabled, does  your speed improve?  
0
 
LVL 16

Expert Comment

by:SteveJ
ID: 36542844
Remove the crypto mao from the interface and see whst happens. 3des and group2 should not crater your router

Steve
0
 

Author Comment

by:nvdkloor
ID: 36910574
yes the speed gets back to normal when disabling vpn or removing the crypto map command.
Maybe the hardware is not powefull enough for ipsec.

Let me try using a less secure vpn setup.
0
 
LVL 16

Accepted Solution

by:
SteveJ earned 250 total points
ID: 36910630
Yep, thats a lot of work for a small router. For, grins try DES

Steve
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 37426499
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now