Haow To Verify IPSEC VPN Throughput

stuart.baker · ‎06-07-2007

Hi,

I have a need to prove the throughput I'm getting through a recently installed VPN between an ASA5520 (failover pair) connected via a 34Mb internet pipe and an ASA5510 (single) connected to the internet via a 10Mb internet pipe. The VPN is all working well using AES-256 but users at the remote location (5510) are expressing concern over slowness.

What sort of speed 'should' I be seeing through the VPN ??

and what is the best method of testing/proving the connection ?

Many thanks in advance.

Stu

srue · ‎06-07-2007

if you have a cisco security manager license, you could use Performance monitor to do this i think.

Are these two endpoints connected to the same ISP?

stuart.baker · ‎06-08-2007

Not sure if I have a security manager license - how can I verify ?

Both the endpoints are indeed connected by the same ISP - BT ...

Stu

ciscors · ‎02-27-2008

I recently encountered a similar problem with AES 256 and downgraded to AES 128 and it got rid of the problem.

Let me know if this helps you