cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
510
Views
0
Helpful
2
Replies

Slow IPSec tunnel bw ASA5505& RVl200

janos.csaszar
Level 1
Level 1

Hello,

I have to establish several VPN tunnels between different sites, all equipped with the above devices, the RVL is the point, there is one PC behind, that has to download and run an application. I can establish the tunnel with no errors in the logs, however with a 4 Mbit/s bandwith I cannot go beyond some 2,5 Mbit/s.

My best guess was the MTU, and it helped, I started with some 200 around K, and went up, as said to some 325 K.

I think that the point is on the Linksys RVL side, that has to reassemble the packets. The MTU is now set to 1380, as suggested in Cisco ASA docs. If I raise or lower this value on the RVL, or do the same on the ASA outer side, it won't help.

One more thing: the RVL seems to get busy within a day, the speed goes down to some 220 K, if I restart it, it goes up again to 320 K.

Other settings are left at default on the ASA, such as pre-segmentation, or DF bit (which is set to copy).

Could someone tell me what am I missing?

Thank you!

2 Replies 2

owillins
Level 6
Level 6

When configuring Security Appliance 2, enter the same values for each of the options that you chose for Security Appliance 1. Encryption mismatches are a common cause of VPN tunnel failures and can slow down the process.

http://www.cisco.com/en/US/docs/security/asa/asa72/getting_started/asa5505/quick/guide/sitesite.html">http://www.cisco.com/en/US/docs/security/asa/asa72/getting_started/asa5505/quick/guide/sitesite.html

Thanks owillins, but I checked that, those, that need to be the same, are exactly the same.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card