Hello, I'm new to the forum and new to the company I work for. I am currently over seeing a small network set up with 5 remote sites that is experiencing very slow VPN tunnel speeds.
Our Main site is has a ASA 5510 (50/50 fiber) and the remotes all have 5505's (10/10 fiber) with one being a newer 5506-x. Our problem is absolutely creeping speeds. File transfers average 700-800 Kbps and peak at maybe 1.1Mbps. Bootups and Logins are slow due to the DC being at the main branch. Our main program is very database reliant and is so slow it's unusable if you are on the otherside of the tunnel. This caused them to invest in remote desktops to seem like they are working from the main office.
We recently swapped out the 5510 to a same model with the upgraded security license to get the full 1000Mbps speed at the port. But file transfers still averaged 800-900Kbps, maxing out at maybe 1.4Mbps.
In the data sheets it says the max VPN tunnel throughput is 170Mbps so that shouldn't be the bottleneck.
Lots of research always points to messing with the MTU and running some ping tests from either side of our tunnels, it does seem that packets that are 1500 MTU get fragmented.
1400 seems to be the only packet size that works in cmd ping tests, but what interfaces do you change for MTU size in the tunnels? Do I change MTU for both firewalls on both sides of the tunnel?
And then MSS somehow factors into it which I don't really understand too well.
I can post whatever configs or tests you need to see. Just have to edit out first before I post.
1. Log into CLI of DNAC:
ssh maglev@< DNAC appliance IP> -p 2222
2. Run this curl command to get token to get member id:
curl -X POST -u admin:<admin user password> -H -V https://<CLUSTER-IP>/api/system/v1/identitymgmt/token
Enterprise Switching Business Unit is glad to announce Beta release 16.12.2 for all Catalyst 9200/9300/9400/9500/9600 and Catalyst 3650/3850 Platforms. This release is made available to allow users to test, evaluate and share fee...
Do you currently have hands-on networking experience? If you do, we'd love to hear from you!
Your feedback will be reviewed and analyzed by our team to directly influence a networking management and monitoring product.
Take the 20-min or les...