Downloads Painfully Slow (Traffic going over VPN not Internet?)
I'm having the most frustrating problem and was hoping for some assistance?
I'm fairly new to the Cisco ASA. We recently had an ASA 5510 installed at our corporate office to replace our old VPN Concentrator & PIX 515e. At our remote sites, we've had all PIX 501s which all seem to be just fine.
My problem: I am setting up my first ASA 5505 at a remote site in place of where I used to use the PIX 501. I've got it all set up, the VPN tunnel established, everything seems to be working fine - with one exception. Traffic seems to be *painfully* slow when downloading from the internet. It almost seems as if all traffic is going through the VPN tunnel to our corporate office and THEN out???
Could this be possible? Is it a possible NAT rule missing? Do I need to turn on "split tunneling" (can you even do that for a Site-to-Site VPN?) Here's a copy of the configuration from the remote site ASA.
Also - just incase I'm barking up the wrong tree, I do notice a *few* packet drops but assume those are normal since there's so few.
[Edit]: I should also note that when running speed tests, Uploads are running a *lot* faster than Downloads (8Mb+ Upload speeds, less than 500Kb Download speed).
Thank you in advance!!!
(Attachments are my remote site's configuration as well as a 'show int' export.)
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :