packet loss across DVMPN tunnel on high latency link
We have a dmvpn hub in the states with 150 clients which are working well, but recently we installed a 881 in the UK that is giving me trouble.
I'm able to get consistant pings from my dmvpn hub's outside address to the 881 dmvpn hub's outside address but when we ping across the tunnel it is verrry inconsistant and dropping anywhere from 10-40% of the packets. The tunnel stays up. My though is there is some sort of timeout that need to be adjusted but I'm pretty new to DMVPN.
here are some pings from the spoke int the UK
ping to outside of dmpvn hub
VPN01#ping x.x.x.x r 500
Type escape sequence to abort.
Sending 500, 100-byte ICMP Echos to 126.96.36.199, timeout is 2 seconds:
DMVPN Packet Loss and High latency with IPSEC Applied (Cisco-899-LTE Router)
Hello Bob -
Wondering if you ever figured out what your issue is with the 881 router. We have some 899s in our lab doing the same thing. With Tunnel Protection latency erratic (high and low) and packet loss a huge problem. After removing tunnel protection everything works great.
We have ISR4331 routers running the same encryption scheme on this network using same Underlay with excellent results.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...