We have multiple sites that have either fiber 20mb d/u or cable 50/10 d/u. Recently we have upgraded our head end router to a 2921 security based router and noticed that no matter if we are sending or receiving the most we can push is 1.6Mb. I would expect this number to be at least 8Mb for uploading and at least 18mb for downloading from other sites.
I have included parts of my config and screen shots of bandwidth usage to help with the troubleshooting.
Head End - 2921
(config)
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 2
lifetime 1440
!
crypto isakmp key secret address 0.0.0.0 0.0.0.0
crypto isakmp invalid-spi-recovery
crypto isakmp keepalive 10
!
crypto ipsec transform-set ERS-AES-SHA esp-aes 256 esp-sha-hmac
!
interface Tunnel0
bandwidth 10000
bandwidth receive 50000
ip address 172.16.1.1 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication ERS2Way
ip nhrp map multicast dynamic
ip nhrp network-id 990
ip nhrp holdtime 360
ip tcp adjust-mss 1360
delay 1000
cdp enable
tunnel source GigabitEthernet0/0
tunnel mode gre multipoint
tunnel key 4515
tunnel protection ipsec profile ersvpn
!
router eigrp 100
network 172.16.0.0
redistribute static
Remote End - 2811
(config)
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 2
lifetime 1440
crypto isakmp key secret address 1.1.1.1
!
!
crypto ipsec transform-set ERS-AES-SHA esp-aes 256 esp-sha-hmac
!
crypto ipsec profile ersvpn
set transform-set ERS-AES-SHA
!
interface Tunnel0
bandwidth 20000
bandwidth receive 20000
ip address 172.16.1.4 255.255.255.0
ip mtu 1400
ip nhrp authentication ERS2Way
ip nhrp map 172.16.1.1
ip nhrp network-id 990
ip nhrp holdtime 360
ip nhrp nhs 172.16.1.1
ip tcp adjust-mss 1360
no ip mroute-cache
delay 1000
qos pre-classify
cdp enable
tunnel source FastEthernet0/0
tunnel destination 1.1.1.1
tunnel key 4515
tunnel protection ipsec profile ersvpn
!
router eigrp 100
network 172.16.0.0
network 192.168.34.0
auto-summary
