Re: VPN3000 Question

From: Mohammad Saeed (mzsaeed@gmail.com)
Date: Thu Feb 08 2007 - 20:05:49 ART


Thank you very much Marvin.

On the sites which are slow there are only two to three users using
terminal services.

Previously they were pointing their MSTSC to external IP of headoffice
linksys router that was mappning the MSTSC port to internal server and
there was no problem of slow response.

Yes, I configured split tunneling so only traffic going to Head Office
will be sent through the tunnel.

No, VPN 3000 is behind linksys router, and linksys router is mapping
to all IPSec ports to external interface of VPN3000, all the clients
have their tunnels up.

Regards,

Mohammad Zahed Saeed

On 2/8/07, Marvin Greenlee <marvingreenlee@yahoo.com> wrote:
> Terminal services is much more sensitive about latency
> than bandwidth. How many users do you have at each of
> the locations that are accessing the terminal
> services? During internal tests, Microsoft had
> something like 10 users on a 56k link with windows
> 2003.
>
> What was the setup before? Were users only connecting
> to the head office for applications? Are you split
> tunneling on the concentrator so only traffic to the
> head office is tunneled, and internet traffic passes
> via the local internet connection?
>
> Do you have the ability to enable NBAR or netflow on
> the egress router at the head office site to see what
> the outgoing traffic is?
>
>
>
> Marvin Greenlee
> Senior Technical Instructor - IPexpert, Inc.
> "When Will You Be an IP Expert?!"
> marvin@ipexpert.com
> http://www.IPexpert.com
>
>
>
>
>
> --- Mohammad Saeed <mzsaeed@gmail.com> wrote:
>
> > Hi Every One,
> >
> > I setup VPN3000 with 5 VPN3002 HW clients in remote
> > offices
> > establishing tunnles to VPN3000 over the internet.
> > Now users from
> > behind one and some time two 3002 cleints, when they
> > try to access
> > Windows Terminal Services in the Head Office from
> > behind 3000,
> > response is painfully slow. Before this VPN Setup
> > the response was
> > fine. Now tunnel is up, they can access any machine
> > in Head Office.
> > The users behind rest of the 3 HW cleints are fine
> > and response of
> > same Terminal Services is fine.
> >
> > Do you think if I setup bandwidth policy under
> > Configuration->Ploicy
> > Management-> Traffic Management -> Bandwidth Policy
> > and set minimum
> > bandwith to may be 128Kbps per session, would that
> > help???
> >
> > The Head Office is connected using DLS link at 4Mbps
> > and sites are
> > connecting at 2Mbps to the Internet.
> >
> > Any help is appreciated.
> >
> > Regards,
> >
> > Mohammad Zahed Saeed
> >
> >
> _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
>
>
>
>
> ____________________________________________________________________________________
> Get your own web address.
> Have a HUGE year through Yahoo! Small Business.
> http://smallbusiness.yahoo.com/domains/?p=BESTDEAL



This archive was generated by hypermail 2.1.4 : Thu Mar 01 2007 - 07:38:46 ART