PIX 506E with Satellite ISP reeeeaaalllllyyyy ssssllllooooww!!!

[pnc4me]

Brand new here, but I'm at the end of my rope with this!! I have a 506E and Satellite ISP (H...Net) with a Direcway modem. Speed tests are great when the PC is directly connected to the modem (1200 down and 300 up), but they slow to a crawl when I connect my PIX. I can still get to the WWW, but speeds are horrible (40 (yes that says 40) down and about 200 up). What could cause this??

 

[brianinms]

Duplex or speed mismatch? Post a copy of the pix config.

 

[pnc4me]

Will need to anonymize the config before I post it...but here is the speed/duplex portion:

PIX Version 6.3(5)
interface ethernet0 10full
interface ethernet1 100full

Is it possible that the Direcway modem interface is 10 or half? I have also wondered about MTU since this is satellite. Doesn't satelite use a larger MTU than default?

 

[brianinms]

Yes, it is possible. Try setting the ethernet0 to auto.

 

[garnetbobcat]

It's not much of a solution, but Broadband Reports says that Hughesnet customers are reporting MAJOR slowness in their connections:

http://www.dslreports.com/shownews/HughesNet-Customers-Say-Service-Sluggish-91591

MTU is another avenue to explore. My guess is that Satellite's MTU is lower than 1500. After a quick google I see people trying 1460.

Matt
CCIE Security

http://www.wr-mem.com

 

[pnc4me]

Thanks to all who responded! The issue was a speed mismatch. It didn't occur to me that the Interface on the Direcway modem was 100 Full until we started posting. My PIX config had the Outside interface as 10 Full as most routers I have worked with (Cisco) would have a 10 Full interface to connect to. All is working well now!

 

[rflanary]

any luck getting VPN to work on the Directway? I have hughesnet.

I have read some stuff are SSL vpn. Is there away to do a router to router ssl vpn tunnel?

 

[pnc4me]

I got it working using a couple of Cisco PIX 506Es. I have not had the opportunity (if you would call it that) to try it using any other gear. I wouldn't recommend doing anything over satelite if there is a way to avoid it! I think if you have a small number of users at some remote site, you may be better off using cellular (wireless broadband, EV-DO) Internet service!

 

[rflanary]

Well i would use cellular but this site is between 2 hills and no coverage for miles. There is only one computer there so it doesnt really matter about speed.

I have thought about everything short of fraction frame-relay or ISDN but they dont want to pay the money.

I currently have hughesnet installed and i have been to this remote site once but they did not setup my static ip correctly.

May i ask what type of vpn you used? Did you use DES encryption?

 

[rflanary]

?

 

[pnc4me]

Static pix-to-pix with 3DES encryption. This set up will require you to have a public IP address to assign to the outside interface of the PIX.