All,
I am noticing the following issue with one of our VPN connections:
Site A is connected to the Internet with an ISA Firewall
Site B is connected to the Internet with a CISCO 5505
Both sites are connected together via a VPN
Both sites have around a 6MB up and 6MB down connection to the Internet
If I sent a 100MB file from Site A to B it takes around 30-45 minutes to copy, which to me seems excessive.
I've run Wireshark on the server sending the file (from Site A) and the desktop receiving the file (Site B). Initially, the server sending the file was generating a large number of TCP DUP ACK, TCP FAST RETRANSMISSION, TCP PREVIOUS SEGMENT LOST AND TCP OUT-OF-ORDER messages. I narrowed it down to IPv4 Checksum Offload and IPv4 Large Send offload which I disabled on the server. This sped up the file copy and massively reduced the errors in Wireshark, but not to what I think it should be. I then performed Wireshark logging on the desktop receiving the file which was also generating a large amount of TCP DUP ACK, TCP FAST RETRANSMISSION, TCP PREVIOUS SEGMENT LOST AND TCP OUT-OF-ORDER messages. I disabled IPv4 Checksum Offload and IPv4 Large Send offload options on the network card of the desktop and tried resending the file, which made no difference in speed and still generated the above messages in Wireshark.
I have run an mturoute between site A and B and get the following:
C:\temp>mturoute.exe 10.0.66.2 (to PC on site B)
* ICMP Fragmentation is not permitted. *
* Speed optimization is enabled. *
* Maximum payload is 10000 bytes. *
.- ICMP payload of 1472 bytes is too big.
+ ICMP payload of 92 bytes succeeded.
+ ICMP payload of 782 bytes succeeded.
+ ICMP payload of 1127 bytes succeeded.
+ ICMP payload of 1299 bytes succeeded.
+ ICMP payload of 1385 bytes succeeded.
- ICMP payload of 1428 bytes is too big.
+ ICMP payload of 1406 bytes succeeded.
- ICMP payload of 1417 bytes is too big.
+ ICMP payload of 1411 bytes succeeded.
+ ICMP payload of 1414 bytes succeeded.
+ ICMP payload of 1415 bytes succeeded.
- ICMP payload of 1416 bytes is too big.
Path MTU: 1443 bytes
C:\temp>mturoute.exe 10.0.1.22 (to Firewall on Site A from PC on site B)
* ICMP Fragmentation is not permitted. *
* Speed optimization is enabled. *
* Maximum payload is 10000 bytes. *
...- ICMP payload of 1472 bytes failed. (IP_REQ_TIMED_OUT)
+ ICMP payload of 92 bytes succeeded.
+ ICMP payload of 782 bytes succeeded.
+ ICMP payload of 1127 bytes succeeded.
+ ICMP payload of 1299 bytes succeeded.
+ ICMP payload of 1385 bytes succeeded.
.- ICMP payload of 1428 bytes failed. (IP_REQ_TIMED_OUT)
+ ICMP payload of 1406 bytes succeeded.
.- ICMP payload of 1417 bytes failed. (IP_REQ_TIMED_OUT)
+ ICMP payload of 1411 bytes succeeded.
+ ICMP payload of 1414 bytes succeeded.
+ ICMP payload of 1415 bytes succeeded.
.- ICMP payload of 1416 bytes failed. (IP_REQ_TIMED_OUT)
Path MTU: 1443 bytes
Does anyone think I have an MTU problem somewhere?
Cheers,
Simon.
