Contivity 1010 very slow

[mcpierce]

We have had our Contivity 1010 for almost 2 years, and it has been extremely reliable. Mostly it has been used for people traveling out of the office, so they can connect back for files, e-mail, etc. Now, however, we are using it for a couple of home office connections (me included) and are finding out it is EXTREMELY slow. I originally thought it might just be the encryption time, but I am hoping something else is wrong.

When not connected through the office VPN I am getting download throughputs of over 3.5Mbps at my house (DSL). Computers at the office get around 2Mbps. But when I connect to the Contivity with the Nortel Extranet Client my bandwidth drops to about 150kbps.

All the MTU settings are default, and I don't have bandwidth management enabled. We are also not seeing any errors. We have advanced routing (very basic configuration) and stateful firewall.

Does this sound normal? Where do I need to start looking for problems?

Thanks in advance.

- Michael

 

[Alainv]

Those numbers, do you mean downloads from the internet?
If you are connected throught the contivity, all traffic will go through the tunnel. Internet traffic will be originated from your corporate site.
You can avoid that using (reverse) split tunneling.

 

[mcpierce]

Alainv,
Correct - I was quoting download numbers. In my post I noted the (corporate) office download speed at 2Mbps because I would expect that to be the bottleneck, not my DSL connection. I could set up split-tunneling, but that won't help with getting files from our file servers.

I timed downloading the 3720KB Nortel Client install program this morning from our server. It took 130 seconds, for an effective rate of 229Kbps. At that rate I don't need to be paying for 5Mbps DSL.

Where could the bottleneck be?

- Michael

 

[Alainv]

Sorry, I won't know.
Perhaps try the tcp mss setting, but I would suspect that you would see errors if that would cause the problem.

Have you checked the release notes? I has been a year since I last installed it, but I remember that there was a throughput problem when you did an upgrade from 4.8 to 4.9.....but better check on it.

 

[norteldude78]

The errors would show if there were invalid checksums, corrupt packets. Segment size problems would not show errors. Try tcp mss, drop it to 1300 or so. How much RAM do you have, how much is free?

peace