Slow negotiations w/3005

[dave.drolett]

I have 4.03(d) clients connecting to my 3005 concentrator and a lot of times experience slow negotiation times, especially during the "negotiating security policies" phase of the client. Sometimes up to 20-30 seconds but it's not always consistent.

Does anyone have any suggestions as to why this might be happening and tips on debugging it?

Thanks!

[ehirsel]

I would turn up event logging on both the client end and the 3005 end and monitor what messages result when the clients connect.

Is there a firewall in front of the 3005? If so, I would like to run a line or sniffer trace between the firewall and 3005 and compare the packet timestamps to see where the delay is.