Link to home
Start Free TrialLog in
Avatar of Peter Wilson
Peter WilsonFlag for France

asked on

slow vpn connection

Hi Experts,

I have two SonicWALL firewalls, a nsa3600 and an nsa2600 that need to talk to each other in a site to site vpn. I set one up per sonicwall documentation but the tunnel will collapse randomly and when it is up it is slow. both firmware is current.

any ideas?

thx.
ASKER CERTIFIED SOLUTION
Avatar of Blue Street Tech
Blue Street Tech
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Peter Wilson

ASKER

Thanks for the quick response...i'll try it now and let you know.
What type of Internet connection do you have at each end and how many users do you have behind each firewall?
@ALL - I had some problems with uploading my questions so it failed multiple times and I forgot to add back in the lost details.

@Dave - on the 3600 side we have a 100x100 fiber and on the 2600 side we have a 100x100 cable.
Ok.  So it's unlikely that the Internet access circuits will be playing a part in this issue.

As it's already been suggested, I guess the MTU could be causing a problem, but if this were the case I would have expected you to report general Internet access problems also.

Which service provider/s supply your circuits?
Oh we do have internet issues too...I didn't know those were the same issue. our internet access is super slow to. another service provider said he thought it was the isp having issues causing both the vpn and interent to be slow but I checked with both isps and all is well.

spectrum for cable and megapath for fiber.
Ok.  I've found in the past that different service providers hardware requires the MTU to be modified on Sonicwalls to get the circuit to function effectively.  From memory, the last time I had this issue I had to reduce the MTU down to 1412 on both ends to get a stable connection.  This might be a good starting point for you, but do try other MTU sizes between 1412 & 1500 to see what works best for you.
Which ISP connection is having the issues? That's where you need to begin, especially if the problem is just with one of the ISPs. Also follow up on any tweaks you made. 'veI had to hunt down a provider (none of the ones you're working with) for weeks when I had an issue with a client... I could get the connection stablized for a time span by changing the MTU, but then it would mess up again within days and I had to keep changing it. Took them forever to figure out what it was. (Never was informed on what the issue was, it suddenly started working the way that it should)
Changing the mtu on both ends resolved the issue. thx!