DComTalk.com

This is the setup I have

I have a 1821 router configured for vpn FE0 is my internet connection and vlan1 is configured for 172.20.50.1...I have a pc connected directly to this router on port 2 with an IP of 172.20.50.100

on the other side I have a pix 515E configured..on the outside I have internet connection going out on a 72.x.x.x and on the inside I also have internet connection going out on a 67.x.x.x.

I have established a vpn connection with this config...the tunnel is up...

for 172.20.50.100 pc I am able to ping the outside world...but to open a browers I am not able to view webpages....I managed to do a speed test and was able to get 300kbps....

the connection speed to the 172.20.50.1 router is a 5MB connection and the pix is connected to a 30MB connection...

So my question is why do the remote users get slow speeds...is there a config problem of is this hardware related?

Thanks

Did you ever figure this out?

I didnt see your config.. but my guess is the encryption algorithm you chose.

The total bi-direction throughput capacity of a 515 is 190mbs.. 190mbs = about 23.8Mbs. Keep in mind b-directional, so if you got 10 coming in, you only have 13.8 left goin out.

Now on top of that fact you have your encryption overhead. It takes a lot of work encrypting and decrypting all those packets.

AES256 is one of your best options which at max on a 515 gives you up to 130mbs or ~16Mbs.

Dont forget the bi-directional limiting factor.. if you got 10Mbs goin in and 10Mbs going out of regular traffic... that doesnt leave much for the VPN traffic to contend for.