I have the current situation. A remote office has an ADSL connection (6Mbps down, 512kbps up) and we use a Cisco 831 router to establish a site-to-site VPN to our HQ. The connection works fine, VPN as well, we have connectivity between the two sites. My problem is that they can only download with about 1.5Mbps, via the VPN, from the HQ. The upload is fine, they can send for the full 512kbps over the VPN.
We have tested the connection and we can download with 6Mbps from the internet, via the same Cisco router so the connection is fine. Why am I seeing slow throughput via the VPN ? There is no limitation on the HQ side where we have a 100Mbps connection.
The config on the cisco 831 is pretty basic, no rate-limiting, just a crypto map applied to the external interface. The router is acting as a PPPoE client as well, not sure if this impacts on anything.
Clear interface counters with "clear counters". Perform the download test and then issue a the "show proc cpu hist" command to look at CPU usage. Then do "show int" and see if you are getting dropped packets. This is only a start but see what that turns up. Maybe there is a CPU bottleneck when it comes to doing encryption. The 831 does have a hardware encryption module, but depending on your VPN setup, it may not be doing all the work and putting some strain on the CPU. Let us know what you find.
The solution to this might be a lot easier than expected, as always. We're investigating with our datacenter ISP, there are indication they use some kind of QoS policies we were not aware of. I'll get back on this if that's the case.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...