Monday, August 27, 2018

Slow IPSEC VPN over Spectrum/Charter

Has anyone else had issues with IPSEC site to site VPNs being slow over Spectrum/Charter business cable internet? I seem to never get more than 10% of the circuit rated download speed when the VPN is on. The weird thing is that I usually get 90% of the upload speed though. If I connect a client directly to the modem and fire up a client based SSL VPN , it works fine. Its only IPSEC site to site tunnels.

This happens with both ASAs and Meraki MXs as the endpoints/head ends.

I can take the same end point hardware, put it on another ISP like U-Verse, and the download speeds are immediately better. Since I changed nothing except the ISP, that leads me to point the finger at Charter/Spectrum. However, they claim nothing is wrong.

All cabling tests fine. No duplex mismatches. Messing with MTUs didn't do anything either.



No comments:

Post a Comment