RDP through L2L problems.

[Cybervex3]

Having a strange issue with RDP to an XP machine through a L2L tunnel.

Tunnel is between an ASA5505 and ASA5510. Site A 5510, Site B 5505

I have a handful of Win7 and XP Dev machines running on ESXi 4.1 within Site A.

Site B to Site A

1. I can RDP to all Server 2008 and W7 machines(physical and virtual).
   
2. I can also RDP to a physical XP machine.
   
3. I can ping the XP VMs by name and IP successfully.
   
4. I cannot RDP to the 5 XP VMs running on the ESXi 4.1 host
   

Site A to Site B

1. I can RDP from the XP VMs on the ESXi 4.1 host to any machine within Site B.
   
2. Within Site A I can RDP to these XP VMs
   

AnyConnect

1. I can AnyConnect into Site A and RDP to the XP VMs
   

I have tried to Telnet on 3389 to the XP VMs with no success.

Any ideas?

[Maykol Rojas]

Hello,

Have you check the MTU on the regular RDP using the IPsec tunnel? Fragmentation are known issues when using RDP across IPsec

Mike

[Julio Carvajal]

Hello Cybervex3,

This sounds like a fragmentation issue.

Can you do the following on Site A:

     crypto ipsec df-bit clear-df outside

Then try to connect, if this does not work change the MTU size manually 
on the client to a value of 1300 

Let us know the result,

Regards,

[Cybervex3]

Ran the command on Site A ASA

Set the MTU on the XP VM and the Machine I am trying to RDP from to 1300.  No changes

[Julio Carvajal]

Hello,

Please refer to the following documment :

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008081e621.shtml#task1

We need to determine if this is a fragmentation issue, follow the Discover Fragmentation section

Julio