cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
541
Views
0
Helpful
1
Replies

Excessive usage across VPN

sprocket10
Level 2
Level 2

 

I have a Cisco 819 router that connects to our ASA via easyvpn. The problem I am having is the data counters keep climbing even with no devices connected. The counters on the ASA and the router cellular interface are climbing approx 100Mb an hour. When I disable the vpn, the cellular counters almost stops climbing. The issue must be on the vpn, but I cant think whats causing it.

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

I'd suggest two methods.

1. If you have a Netflow tool, activate Netflow on the ASA and look for top talkers to the remote site.

2. If not, then capture traffic at the ASA inside interface going to and coming from the remote site. Open up the capture in Wireshark and analyze the conversations to sort out the high volume ones.