This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

traffic issues for VPN Clients

Hi there,
I´m running UTM 9.105-9 connected to a 155MBit line.
Roadwarriors can connect via IPSEC with PSK (ISO/OSX/ANDROID/LINUX/XP) autenticated against AD or L2TP/IPSEC (WinVista/7/8) authenticated via Radius against AD.
The VPN-Pools are NATed to external GW-Address for surfing - this works as expected.
But every traffic to the LAN is very limited, more than 1 - 2 MB/s is never been seen.

QoS is deactivated
IPS is deactivated

It is client independent.

Any ideas to look for?

thnx - Chris

This thread was automatically locked due to age.

0 BarryG over 11 years ago

Hi, try testing with NetPerf or similar.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Chris69 over 11 years ago in reply to BarryG

Update:

The really painful handbrake is while SMB-Filetransfers only - my testing yesterday was unfortunately limited by LTE-Speed.
Using HTTP clients behind a 50Mbit/s VDSL connection shows up to 6MB/s with a saw tooth pattern from 1 raising to 6 falling down on 1MB/s. But still only 0,9 - 1,6MB/s at SMB-Transfers.

Any idea especially WHERE I have to look at?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 11 years ago

Check #1 in https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/22065

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 maxsecobj over 11 years ago

also check ping times and traceroutes

are you getting the full 155mbs from the usual speed test type sites when you from outside in?
Cancel
Vote Up 0 Vote Down

Cancel
0 Chris69 over 11 years ago

Update:
I figured out, that this is only with smb / cifs transfers: the netto-bandwidth goes down to 1/5 - 1/4 on EVERY line and WITHOUT any VPN, IPS and proxy.
It seems to be an issue of SMB being a blockmode protocol - there are massive reporting about slow smb out there and it brings absolutely nothing to play day after day with MTU, Packetsize, registry-hacks etc. - smb is slow over WAN by design.
Cancel
Vote Up 0 Vote Down

Cancel
0 maxsecobj over 11 years ago

Yes smb is just about usable up to 90ms latency . Over 150ms its unusable apart from occassional small tranfers
Cancel
Vote Up 0 Vote Down

Cancel