cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
478
Views
0
Helpful
1
Replies

VPN ping problem with big sizes

blackswans
Level 1
Level 1

Hi,

I have vpn configured between ASA firewall and a 877 branch router. But I cannot ping the other site with big sizes and this causes connection problems (like RDP, HTTP). What can be the cause of this issue?

Thanks.

Branch#ping x.x.x.x source vlan 1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to x.x.x.x, timeout is 2 seconds:

Packet sent with a source address of 10.155.33.1

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/13/16 ms

Branch#ping x.x.x.x source vlan 1 size 800

Type escape sequence to abort.

Sending 5, 800-byte ICMP Echos to x.x.x.x , timeout is 2 seconds:

Packet sent with a source address of 10.155.33.1

.....

Success rate is 0 percent (0/5)

Branch#ping x.x.x.x source vlan 1 size 300

Type escape sequence to abort.

Sending 5, 300-byte ICMP Echos to x.x.x.x, timeout is 2 seconds:

Packet sent with a source address of 10.155.33.1

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/16/20 ms

Branch#ping x.x.x.x source vlan 1 size 350

Type escape sequence to abort.

Sending 5, 350-byte ICMP Echos to x.x.x.x , timeout is 2 seconds:

Packet sent with a source address of 10.155.33.1

..!!!

Success rate is 60 percent (3/5), round-trip min/avg/max = 16/17/20 ms

1 Reply 1

blackswans
Level 1
Level 1

I disabled hardware encryption (no crypto engine accelerator) on the branch router, after disabling the problem is resolved. so Is there a hardware problem in the router?