Solved

VPN Speeds Slow

Posted on 2013-12-31
5
248 Views
Last Modified: 2014-02-05
Internet connection at home is around 20mb down and around 10 up. Internet connection at work is around 20 down and around 20 up. Tested via speedtest.net.

When I connect to my VPN from home, the speedtest I get is 3mb down and 3 up. I understand there will be a little latency because of running through the VPN and my corporate internet, but that seems drastic.

Any thoughts on troubleshooting speeds? Where to start?

Cisco equipment (Older Concentrator) IPSEC
0
Comment
Question by:bcrosby007
  • 3
  • 2
5 Comments
 
LVL 6

Expert Comment

by:Jordan Medlen
ID: 39748318
First, speedtest.net is not reliable for an accurate test. There are way too many variables in play such as the browser in use, multiple threads, TCP vs UDP, load on the far end test server, etc.

That all being said, I am assuming from what you are stating, that to get to the Internet test site, it is as follows.

PC --> BB Router --> Internet --> VPN Concentrator --> Internet --> Speedtest.net....

and the return path is...

Speedtest.net --> Internet --> VPN Concentrator --> Internet --> BB Router --> PC

Now there may be a router/gateway device in front of your VPN concentrator, but you didn't mention that. Is this correct?

As you can see, getting to and from Speedtest.net, your using up/down bandwidth bi-directionally each test, upload and download, which will cut down the amount of available bandwidth for the work side Internet capacity. Not to mention that other users at the office are using that capacity as well, depending on if there are users there during this time. You didn't mention a specific time, so again I am assuming here.

Yes, there would be encryption latency going over the VPN, however your concentrator is probably NAT'ing/routing as well to get your traffic to the destination, which may increase the overhead on the older concentrator as well.

Again, I am making some assumptions here based on the information provided. If you have additional information, please provide and I can help further. I hope this helps to understand what may be occurring here.
0
 
LVL 7

Author Comment

by:bcrosby007
ID: 39748342
Correct on the data path. I do not employ any split tunneling. The concentrator basically straddles my ASA.
It takes around 5-10 seconds to open a 2 mb image file over the vpn. Whereas when you open an image from the internet (not connected to the vpn), it is almost instantaneous. It just seems like there is a ton of overhead even though the internet connections are decent.
We have fiber built into my corporate network and we pay for 20 down and 20 up, but actually receive 20 down and over 150 up..
 
Wasn't sure if there was a easy way to make sure that the concentrator isn't junk.
0
 
LVL 6

Expert Comment

by:Jordan Medlen
ID: 39748377
What does the "sh proc cpu" output look like on the concentrator while connected? What about the memory utilization? Can you provide "sh int" output as well?
0
 
LVL 7

Author Comment

by:bcrosby007
ID: 39748405
The concentrator only has 64 mb of ram. CPU utilization is virtually zero.
0
 
LVL 6

Accepted Solution

by:
Jordan Medlen earned 500 total points
ID: 39748412
What about Internet consumption by the rest of the users? Where does that sit?
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
Resolve DNS query failed errors for Exchange
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now