| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] VPN is painfully slow to internal LAN
- To: [email protected]
- Subject: Re: [FW-1] VPN is painfully slow to internal LAN
- From: Hal Dorsman <[email protected]>
- Date: Fri, 15 Feb 2002 14:04:09 -0700
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcG1t62B6jBpVjAmSJ6ldj792v1voQArA7sw
- Thread-topic: [FW-1] VPN is painfully slow to internal LAN
> -----Original Message-----
> From: Christopher Ferraro [mailto:[email protected]]
> Sent: Thursday, February 14, 2002 4:38 PM
> To: [email protected]
> Subject: [FW-1] VPN is painfully slow to internal LAN
>
>
> I've got a NT 4.0 sp 5, checkpoint 4.0 sp7 box VPN'd with a
> win 2k sp2,
> checkpoint 2k sp 4 box.
>
> I am using IKE encryption.
>
> Both boxes are dell servers, the remote office has a PE 1450
> SC (900 MHZ,
> 512 RAM) and the central office has a PE 2400 (500 MHz, 256 RAM)
>
> Ping times range from 50 ms to 500ms, with an average of
> approximately 217
> ms, in either direction.
can you ping by name or IP with the same response?
>
> A traceroute in either direction shows no problems, nor does
> access from the
> central office to the remote office.
>
> Access from the remote office to the central office is extremely slow.
>
> The central office has a full t1 to the internet as does the
> remote office.
> Bandwidth utilization is not a factor in either space.
>
> Are there any configuration changes I can make to the VPN to
> speed things up
You don't mention how you are resolving. If you can ping by IP
quickly but not by name you have a resolver problem. If you are
using Wins or DNS your problem may be there. Use nslookup or
nbtstat -n to see if you are resolving your names correctly.
Hal
> ?
>
> Any suggestions are much appreciated.
>
> Thanks in advance,
>
> CF
>
> Christopher A. Ferraro
> Senior Systems Engineer
> Hubbard One
> www.hubbardone.com
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
