GETVPN - Slow Windows Logins

[jecker]

Hello,

I've deployed GETVPN across a private MPLS network and everything is working great.  However, windows logins are taking 20 - 30 minutes.  If I turn the encryption off login times are close to 2 - 3 minutes.

I've enabled "ip tcp adjust-mss 1360" and "mtu 1400" on all LAN facing interfaces on all group member routers.

Has anyone seen this issue before?

I have not tried path MTU, clearing the DF bit, or adjusting the MTU on the workstations yet, I was hoping there was an easy fix.

Thanks for the help.

[Diego Armando Cambronero Arias]

You will need to enable logging at level 7. Do some test and check what the problem is. CHeck the acl in the key server and make sure the right lines are in there.