Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

ASA-5505 / S2S good / RemoteAccess with AnyConnect slow

Hi all,

i am using two ASA 5505 at to sites. VPN between both works fine and fast as our ISP allows (~10MBit up/down).

At home i have normal ADSL (~600kbit up / 6MBit down)

Downloading files from home on internal server is fast, but when i connect through AnyConnect it's horrible slow.

Both with the same zipfile on http-server:

Download-Speed with AnyConnect: 90-120KB/s

Download-Speed without AnyConnect: 660KB/s

Downloading the same file on client at the other site of the server of the Site-2-Site VPN works fast with 945KB/s.

I thought it might be an ServicePolicyRule with QoS, but there is only the default Rule, where the QoS tab is not available and only ProtocolInspections are selectable.

ASA 9.1.2

ASDM 7.1.3

AnyConnect Client 3.1.04063

Any idea or suggestions?

Kindly regards

Chris

1 ACCEPTED SOLUTION

Accepted Solutions
Silver

ASA-5505 / S2S good / RemoteAccess with AnyConnect slow

Hi Chris,

Try to lower down the anyconnect mtu value "anyconnect mtu 1300" in group-policy and then test the issue.

You are seeing slowness for internet traffic or for accessinng the servers behind ASA?

Are you using split-tunnel on ASA?

Regards,

Naresh

7 REPLIES
Hall of Fame Super Gold

ASA-5505 / S2S good / RemoteAccess with AnyConnect slow

Wrong forum, post in "Security - VPN". You can move your posting with the Actions panel on the right.

ASA-5505 / S2S good / RemoteAccess with AnyConnect slow

Has nobody any idea what i can do or try?

Silver

ASA-5505 / S2S good / RemoteAccess with AnyConnect slow

Hi Christian,

Try to enable DTLS in group-policy and  disable compression.

You can do it usiong following commands:-

group-policy test attributes

webvpn     

  anyconnect ssl dtls enable

anyconnect ssl compression none

anyconnect dtls compression none

Regards,

Naresh

ASA-5505 / S2S good / RemoteAccess with AnyConnect slow

Hi Naresh,

thank u for your answer.

I tried it, but unfortunately it doesn't fix my problem.

The configuration seems to be ok, because in the Statistics window of the AnyConnect Client is now DTLS the used Transport Protocoll with None compression.

Any other things i can try ?

Too many Users are not connected - I am the only one who actually connects through anyconnect.

Regards,

Chris

Silver

ASA-5505 / S2S good / RemoteAccess with AnyConnect slow

Hi Chris,

Try to lower down the anyconnect mtu value "anyconnect mtu 1300" in group-policy and then test the issue.

You are seeing slowness for internet traffic or for accessinng the servers behind ASA?

Are you using split-tunnel on ASA?

Regards,

Naresh

Silver

ASA-5505 / S2S good / RemoteAccess with AnyConnect slow

Try this command as well and check the performance "sysopt connection tcpmss 1300".

ASA-5505 / S2S good / RemoteAccess with AnyConnect slow

Hi Naresh,

I am waiting for "Please wait while ASDM is retrieving the latest AnyConnect schemas ...."-Dialog ...

It is shown for up to 5 minutes at moment accessing ASDM via AnyConnect 6M AsynchronDSL.

Accessing ASDM from internal is fast that i can't read the whole sentence of the "Please wait ...."-Dialog

Accessing ASDM from other SITE ( via 10M Synchron DSL) is same like internal.

Same while accessing internal Server from external. For example i try downloading a file from server to my client by scp and by http, too.

Forwarding port 22 to the same server and accessing it directly without anyconnect - it's 3times faster with 660kb/s.

And accessing the rdp server, which works for 2 years is actually very slow.

Sooo, now the result of the first:

Try to lower down the anyconnect mtu value "anyconnect mtu 1300" in group-policy and then test the issue.

Instead of 200kb/s i have now 462kb/s - without anyconnect i have still ~660kb/s

And result of the second:

Try this command as well and check the performance "sysopt connection tcpmss 1300".

No change - still ~460kb/s

Big THX for your help :-)

You have some more good ideas to get the last 200kb ? 

1273
Views
24
Helpful
7
Replies
CreatePlease login to create content