please help, !

[Armegeden]

I didn't configure the router, but I was told to move router to another location and change WAN IP.

Changed and have it running, able to get out to net, but incredibly slow. Very, very slow.

I remove router and put in basic LinkSys router with same Static WAN IP and it's back up to normal 1.2MB/s downloads. With router it's at 60KB/s.

Can someone please take a look at the config and let me know if something could be causing major slowness? I'll worry about cleaning up the config later, right now I just need stability.

In a hurry, please help if possible.

[Richard Burts]

Scott

I agree that this concept of the nonat route map and the access list can be a bit confusing. The way that you verbalized it is actually fairly close to the real meaning.

First we need to clarify an aspect of access lists. We all first learned about access lists in terms of their ability to permit and deny certain traffic on an interface. And many of us tend to assume that is what they always do = permit and deny traffic on an interface. But access lists can actually do many things in addition to permit and deny traffic. In this case the access list is used to identify traffic that should go through address translation. If the access list permits the traffic then the traffic will be translated. And if the access list denies the traffic then the traffic will not be translated. The traffic still goes through the interface just fine, it is just not translated. So what the access list is really doing in this context is that it denies translation of traffic from your inside addresses to the VPN addresses. And it permits translation of other traffic.

If you are removing the VPN site to site then you probably can remove the nonat route map and access list 125 since you no longer need to deny those translations.

HTH

Rick