cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1284
Views
7
Helpful
3
Replies

GRE/IPSec tunnel problems with Vista/Win7

tato386
Level 6
Level 6

I have an IPSec encrypted GRE tunnel between two LANs that has worked great for literally years. Recently we started adding Windows Vista and Windows 7 machines to the mix. The new Vista and Win7 machines have TERRIBLE performance across the WAN/tunnel. I have tried using "ip mtu" and "tcp adjust-mss" commands on the routers LAN and tunnel interfaces (and also messed with MTU and MTUDiscovery on the machines themselves) but I haven't managed to get the Vista and Win7 machines to work as well as the XP and 2003 machines. Anybody have any ideas?

Thanks,

Diego

3 Replies 3

Istvan_Rabai
Level 7
Level 7

Are you sure the problem is with fragmentation of packets?

In your place I would do a packet capture analysis or packet debug first to see what is exactly happening there.

Cheers:

Istvan

Joseph W. Doherty
Hall of Fame
Hall of Fame

Microsoft implemented a "NextGen" stack, starting with Vista. I don't recall anything specific with tunnels, but network interaction can be quite different (of course, all for the better [at least that's the intent]).

You might want to review both Microsoft and Cisco for "known" behavior differences and see if any apply to your experience. I know for Vista, there's a couple of configuration settings to make it behave more like XP. Again, whether any of this is specific for tunnels, don't know.

After more testing it seems like the bad WAN performance is not limited to the tunnels. All WAN traffic is slow from the Vista and Win7 machines. I'll look into configuring Vista like XP.

Thanks,

Diego

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco