cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1013
Views
0
Helpful
1
Replies

DMVPN between two ISR4431 Throughput performance

Paw_Paw
Level 1
Level 1

Hello

 

My Name is Cedric. I have a customer which two sites. On every site is an ISR4431. I use a DMVPN tunnel with NHRP Protocol.

On both side is a line with 500Mbit/s WAN access. My problem is now, that I have not more then 200Mbit/s over the VPN Tunnel. 

When I make a speedtest directly to Internet, I receive my full 500Mbit/s.

 

I checked the licenses and there is no fragementation problem. Below the Tunnelconfig and additional information. 

Is there a licensing problem or technical problem?

 

Main Site:

interface Tunnel1
description ID:VP-1111-Main-Tunnel
bandwidth 500000
ip address 172.19.1.1 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication DMVPN
ip nhrp network-id 1007599
ip nhrp holdtime 300
ip nhrp redirect
ip tcp adjust-mss 1360
ip ospf authentication
ip ospf authentication-key 0 1553
ip ospf network broadcast
ip ospf hello-interval 5
ip ospf mtu-ignore
tunnel source Loopback79
tunnel mode gre multipoint
tunnel key 8895321
tunnel vrf EXTERNAL
tunnel protection ipsec profile GREEN-CRYPTO-PROFILE-AES shared
end

 

 

 

Decentral Site:

interface Tunnel1
description ID:VP-1111-8-MAINTUNNEL
bandwidth 500000
ip address 172.19.1.199 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication DMVPN
ip nhrp map 172.19.1.1 195.49.79.17
ip nhrp map multicast 195.49.79.17
ip nhrp network-id 1007599
ip nhrp holdtime 300
ip nhrp nhs 172.19.1.1
ip tcp adjust-mss 1360
ip ospf authentication
ip ospf authentication-key 0 1553
ip ospf network broadcast
ip ospf hello-interval 5
ip ospf priority 0
ip ospf mtu-ignore
tunnel source Loopback79
tunnel mode gre multipoint
tunnel key 8895321
tunnel vrf EXTERNAL
tunnel protection ipsec profile GREEN-CRYPTO-PROFILE-AES shared

 

 

 

Feature name Enforcement Evaluation Subscription Enabled RightToUse
appxk9 yes yes no no yes
uck9 yes yes no no yes
securityk9 yes yes no yes yes
ipbasek9 no no no yes no
FoundationSuiteK9 yes yes no no yes
AdvUCSuiteK9 yes yes no no yes
cme-srst yes yes no no yes
hseck9 yes no no yes no
throughput yes yes no yes yes
internal_service yes no no no no


 

Throughput Level is : show platform hardware throughput level
The current throughput level is 1000000 kb/s

 

 

 

1 Reply 1

Hello,

 

the hseck9 license should boost your throughput to 400MB. Try and configure:

 

4331(config)#platform hardware throughput level 400000

 

and reboot the router.

Review Cisco Networking products for a $25 gift card