From: Marvin Greenlee (marvingreenlee@yahoo.com)
Date: Fri Feb 09 2007 - 07:17:37 ART
Check the latency/delay from client PC to terminal
server.
--- Mohammad Saeed <mzsaeed@gmail.com> wrote:
> How can I check the latency on vpn3002 and vpn 3000
> devices?
>
> Regards,
>
> Mohammad Zahed Saeed
>
> On 2/8/07, Marvin Greenlee
> <marvingreenlee@yahoo.com> wrote:
> > Have you looked at the latency on the "slow" sites
> > compared to the faster ones?
> >
> > Have you tried MTU adjustments on either the end
> hosts
> > or remote router/conc clients?
> >
> >
> > --- Mohammad Saeed <mzsaeed@gmail.com> wrote:
> >
> > > Thank you very much Marvin.
> > >
> > > On the sites which are slow there are only two
> to
> > > three users using
> > > terminal services.
> > >
> > > Previously they were pointing their MSTSC to
> > > external IP of headoffice
> > > linksys router that was mappning the MSTSC port
> to
> > > internal server and
> > > there was no problem of slow response.
> > >
> > > Yes, I configured split tunneling so only
> traffic
> > > going to Head Office
> > > will be sent through the tunnel.
> > >
> > > No, VPN 3000 is behind linksys router, and
> linksys
> > > router is mapping
> > > to all IPSec ports to external interface of
> VPN3000,
> > > all the clients
> > > have their tunnels up.
> > >
> > > Regards,
> > >
> > > Mohammad Zahed Saeed
> > >
> > > On 2/8/07, Marvin Greenlee
> > > <marvingreenlee@yahoo.com> wrote:
> > > > Terminal services is much more sensitive about
> > > latency
> > > > than bandwidth. How many users do you have at
> > > each of
> > > > the locations that are accessing the terminal
> > > > services? During internal tests, Microsoft
> had
> > > > something like 10 users on a 56k link with
> windows
> > > > 2003.
> > > >
> > > > What was the setup before? Were users only
> > > connecting
> > > > to the head office for applications? Are you
> > > split
> > > > tunneling on the concentrator so only traffic
> to
> > > the
> > > > head office is tunneled, and internet traffic
> > > passes
> > > > via the local internet connection?
> > > >
> > > > Do you have the ability to enable NBAR or
> netflow
> > > on
> > > > the egress router at the head office site to
> see
> > > what
> > > > the outgoing traffic is?
> > > >
> > > >
> > > >
> > > > Marvin Greenlee
> > > > Senior Technical Instructor - IPexpert, Inc.
> > > > "When Will You Be an IP Expert?!"
> > > > marvin@ipexpert.com
> > > > http://www.IPexpert.com
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > --- Mohammad Saeed <mzsaeed@gmail.com> wrote:
> > > >
> > > > > Hi Every One,
> > > > >
> > > > > I setup VPN3000 with 5 VPN3002 HW clients in
> > > remote
> > > > > offices
> > > > > establishing tunnles to VPN3000 over the
> > > internet.
> > > > > Now users from
> > > > > behind one and some time two 3002 cleints,
> when
> > > they
> > > > > try to access
> > > > > Windows Terminal Services in the Head Office
> > > from
> > > > > behind 3000,
> > > > > response is painfully slow. Before this VPN
> > > Setup
> > > > > the response was
> > > > > fine. Now tunnel is up, they can access any
> > > machine
> > > > > in Head Office.
> > > > > The users behind rest of the 3 HW cleints
> are
> > > fine
> > > > > and response of
> > > > > same Terminal Services is fine.
> > > > >
> > > > > Do you think if I setup bandwidth policy
> under
> > > > > Configuration->Ploicy
> > > > > Management-> Traffic Management -> Bandwidth
> > > Policy
> > > > > and set minimum
> > > > > bandwith to may be 128Kbps per session,
> would
> > > that
> > > > > help???
> > > > >
> > > > > The Head Office is connected using DLS link
> at
> > > 4Mbps
> > > > > and sites are
> > > > > connecting at 2Mbps to the Internet.
> > > > >
> > > > > Any help is appreciated.
> > > > >
> > > > > Regards,
> > > > >
> > > > > Mohammad Zahed Saeed
> > > > >
> > > > >
> > > >
> > >
> >
>
This archive was generated by hypermail 2.1.4 : Thu Mar 01 2007 - 07:38:46 ART