Link to home
Start Free TrialLog in
Avatar of bcrosby007
bcrosby007Flag for United States of America

asked on

VPN Speeds Slow

Internet connection at home is around 20mb down and around 10 up. Internet connection at work is around 20 down and around 20 up. Tested via speedtest.net.

When I connect to my VPN from home, the speedtest I get is 3mb down and 3 up. I understand there will be a little latency because of running through the VPN and my corporate internet, but that seems drastic.

Any thoughts on troubleshooting speeds? Where to start?

Cisco equipment (Older Concentrator) IPSEC
Avatar of Jordan Medlen
Jordan Medlen

First, speedtest.net is not reliable for an accurate test. There are way too many variables in play such as the browser in use, multiple threads, TCP vs UDP, load on the far end test server, etc.

That all being said, I am assuming from what you are stating, that to get to the Internet test site, it is as follows.

PC --> BB Router --> Internet --> VPN Concentrator --> Internet --> Speedtest.net....

and the return path is...

Speedtest.net --> Internet --> VPN Concentrator --> Internet --> BB Router --> PC

Now there may be a router/gateway device in front of your VPN concentrator, but you didn't mention that. Is this correct?

As you can see, getting to and from Speedtest.net, your using up/down bandwidth bi-directionally each test, upload and download, which will cut down the amount of available bandwidth for the work side Internet capacity. Not to mention that other users at the office are using that capacity as well, depending on if there are users there during this time. You didn't mention a specific time, so again I am assuming here.

Yes, there would be encryption latency going over the VPN, however your concentrator is probably NAT'ing/routing as well to get your traffic to the destination, which may increase the overhead on the older concentrator as well.

Again, I am making some assumptions here based on the information provided. If you have additional information, please provide and I can help further. I hope this helps to understand what may be occurring here.
Avatar of bcrosby007

ASKER

Correct on the data path. I do not employ any split tunneling. The concentrator basically straddles my ASA.
It takes around 5-10 seconds to open a 2 mb image file over the vpn. Whereas when you open an image from the internet (not connected to the vpn), it is almost instantaneous. It just seems like there is a ton of overhead even though the internet connections are decent.
We have fiber built into my corporate network and we pay for 20 down and 20 up, but actually receive 20 down and over 150 up..
 
Wasn't sure if there was a easy way to make sure that the concentrator isn't junk.
What does the "sh proc cpu" output look like on the concentrator while connected? What about the memory utilization? Can you provide "sh int" output as well?
The concentrator only has 64 mb of ram. CPU utilization is virtually zero.
ASKER CERTIFIED SOLUTION
Avatar of Jordan Medlen
Jordan Medlen

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial