Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IPSec inside of IPSec

Hello,

I have a scenario that has IPSec inside of IPSec. Below is how:

From our Data Center, we have IPSec to ISP. For our remote sites serviced by this IPS, ISP assigns a priavate IP Address to WAN port on Cisco router. Let this private IP Address be 10.254.254.29/24. All traffic that originates from remote site comes in to our data center. We do one-to-one private-public NAT for this 10.254.254.29 address. Let the public IP address be 172.16.16.16 (I know it is not public, but for sake of discussion).

Our customers establish IPSec tunnel from their HQ to this NAT'd IP Address (172.16.16.16).

What we are experiencing is about 75% degradation in data rate. Comparision is as below:

When we download a 5 MB file from Internet to PC at Remote site (10.254.254.29), it takes about a minute. But a 5MB file download from HQ, it takes between 4-5 minutes.

Any thoughts???

Thanks in advance,

Paresh.

2 REPLIES
Gold

Re: IPSec inside of IPSec

double encryption i'm sure is adding tons of overhead. check for fragmentation along the path.

New Member

Re: IPSec inside of IPSec

Thanks.

Is it desirable to have DF bit set or cleared in this situation?

109
Views
0
Helpful
2
Replies