Slow VPN on RV042

We have PPTP configured on our Cisco RV042 VPN router. About once a day we have a severe slow down with the VPN connection. I did a tracert from home and found this on the last hop:
13 900ms 1104ms 999ms wsip-[our ip address].dc.dc.cox.net
All hops leading to this are fine. Just the last hop to our ip address. Would this be a problem with our RV042 or with the Cox Cable Modem?

Hello mwsmith23,
I would check your Bandwidth settings first to make sure they are at least set to 10MB over your bandwidth provide by your ISP. So if you get 30 down and 10 up I would set the bandwidth for 40 down and 40 up to eliminate the RV042 throttling your traffic. As the RV042 bandwidth is set in Kbps just take your bandwidth and multiply it by 1024.
After that try the following:
To isolate where the latency is at I would do some pings from the local LAN of the RV042.
Each ping would be:
ping "LAN of RV042" -t -l 1500
ping "DG of the RV042's WAN IP addr" -t -l 1500
ping 8.8.8.8 -t -l 1500
Adjust the 1500 to 1472 or adjust by -10 until a ping goes out successfully. So if 1472 fails attempt with 1462 and so forth.
With this test you can see how the internal LAN is processing the traffic to the LAN of the Modem and then to the cloud. If you are seeing excessive traffic to the Modem and to the cloud then it probably is your modem and you should consult your ISP.
Hope this helps,
Michael D.

Similar Messages

Slow VPN throughput speeds using WRT54GX4

I have a WRT54GX4 and am experiencing slow VPN throughput.
When I connect from my home network to my work network via my companies VPN client I've noticed that the throughput drops significantly. Speed tests to DSL Reports are ~10500 kbit/s download and 950 kbit/s upload when going through the WRT54GX4 not using VPN, but only 250 kbit/s download and 95 kbit/s upload when I connect using my VPN client.
I have used the same laptop computer at various locations away from home and tested through my work VPN connection to DSL Reports and noted that the speeds don't change too much when I switch between direct and VPN.
Next I bypassed the WRT54GX4 router all together and connected directly to my cable modem at home and repeated the test. This time the speed test using my VPN client was ~9950 kbit/s download and 850 kbit/s upload.
My company has several DS-3 connections that are load sharing and as mentioned above testing from other locations has shown that my office isn't the bottleneck.
Everything points to the WRT54GX4.
Also, my previous router was an early Wireless-G Linksys router - forgot the model - and it did not slow down my VPN like this new one does.
The problem exists in either wired or wireless connection mode.
I recently upgraded with the latest firmware V 1.00.20 but that didn't help.
I have also tried various MTU sizes and auto but nope, no joy there.
By the way, we have both Cisco and Nortel VPN servers at work and I've tried each client on two separate host machines at home and both exhibit the same slow connection.
When I turn off the VPN client everything is great and my speeds are super.
Any ideas?

This may help significantly.
I have DSL, speed is 3 mb. I have a WRT54GS router. When I hardwired the connection from modem to laptop, speed was 3mb - ISP was doing it's job. Via wireless connection, speed dropped to 1 mb.
I spoke with Linksys and after some tweaks (upgrading Firmware etc ...) - they said that the drop was not unexpected and this is what I had to accept.
I spoke with my network specialist at work (I am in I.T. myself) and he thought that the router should not eat 2/3 of the speed. This was confirmed by the Geek Squad as well.
Combing through this forum, I came across an interesting article about some tweaks you can do with www.speedguide.net - they have an optimzing tool that has yielded the solution.
Try this ...
http://www.speedguide.net/files/TCPOptimizer.exe
This will download the tool. When you open this up you will see a number of tabs - the general tab yielded the most for me. You will see some radio buttons for current state and proposed state. When you choose apply you will see the registry settings that will be affected - a re-boot is necessary.
So after I did this, I noticed that my wireless speed was up to 2 mb - better but still only 2/3 of what I expected.
About an hour later I went to the basement, did a speedcheck ( www.speedtest.net ) - and I was getting 3 mb!! I went up to the kitchen and ... 3mb. I went to the access point and ... 3mb.
Bottom line: Re-boot helps - but it seems that there is some cycling involved ... so try a little later.
Message Edited by Shamrockoz on 11-09-2007 01:44 PM

Slow VPN Connection

I have had Windows Server 2012 Essentials setup and running now for over 12 months and have been using the Remote Web Access to share certain files with our employees. When using the RWA you can download files in seconds without issue.
I recently wanted to setup a VPN connection to the server so that I could remote manage the server if needed rather than have to go to the office all the time. I added the role on the server, forwarded port 1723 as needed whilst at the office. Then at home
created a VPN connection on my Windows 7 PC. The VPN connects very quickly without issue but when trying to do anything the lag is very slow. On the laptop I used the cmd prompt so I could ping the server to see what was going on, i get a lot of time outs
when doing anything, even when trying to just open a folder that is also shared by RWA and opens without issue.
If i use Remote Desktop it just constantly times out and closes, so cant do anything.
It appears this is just a VPN issue as RWA works perfectly. Any ideas as to what would cause this?

Hi,
Regarding the current issue, I suggest we could refer to the following similar thread to see if it helps. Please follow the suggestions Tiger provided in the thread.
Slow VPN Connection to Windows Server 2008
http://social.technet.microsoft.com/Forums/en-US/3e68223a-26d8-4f39-a476-e7092c44afd9/slow-vpn-connection-to-windows-server-2008?forum=winserversecurity
In addition, here is an article about how to troubleshoot VPN slowness issue.
Why is something so slow over a VPN connection?
http://projectdream.org/wordpress/2007/03/20/why-is-something-so-slow-over-a-vpn-connection/
Hope it helps.
Best Regards,
Andy Qi
Andy Qi
TechNet Community Support

Very Slow VPN

I have a pretty basic server setup. The same setup I've done many times before (although all the others have been on 10.5). Basically the server is also the router. VPN uses the high end of the IP range, DHCP uses the middle. The firewall is set up to give full access to the LAN including VPN connection. And public access is limited. I did map all the important ports, 1701, 4500, 500, GRE... (i forget the full list for L2TP but they're all checked). Oh yeah, I'm talking about L2TP. So I can connect to my VPN fine, but the speed is horribly slow. The most dramatic way to illustrate this is connecting to my server's external IP (i'm in another town currently) in Safari to load the default OS X page. It loads basically instantly. Then load the same page using my server's internal IP address, while connected to the VPN. It loads, but it takes about a full minute to full load. This is kind of an issue because I was planning on running the iCal servers over the VPN from user's iPhones and iPads. I can't think of anything else that could possibly be slowing this down. It's like my VPN pipe has been top-killed. Yippee for topical humor. Any suggestions?

Hello Shawn
I have joined the screenshots .Thank you !
Site1:
Site2:

Slow vpn

Hello All!
I'm wondering about my VPN.
Firstly, my modem stats are:
up/down
SNR (0.1dB): 69/93
Attenuation (0.1dB): 360/182
Output power: 0/128
Attainable Rate: 14084/1124
It seems to connect (speedtest) at 8Mbps on a good day. Sometimes more like 6. My modem is a TP-Link 8960N and I'm in Sydney.
What I have also found is that using a VPN to the UK (for work) I get down speeds of .8 Mbps only on a good run, and that is very very variable. I've tried three different VPN providers (at various price-points, including Vyprvpn), and they make no appreciable difference. I'd really like a more stable and faster VPN connection to the UK.
This is all on an ipad, since I don't have a desktop for a bit. I did try my ipad (not the VPN) on a friend's cable connection and it was faster, so I don't think it's the ipad... Or??? I'm wondering what I can do about getting the VPN to work better?
Any advice?? Do I need perhaps to open any ports or something?
Thanks!

If you're doing remote file access across a WAN, it's often noticeable slower than local LAN access due not only to usually much lower bandwidth but additional latency.
That noted, one issue that often impacts performance is fragmentation of packets. Ideally, hosts will detect the fragmentation and reduce their packet sizes, but it's better if it doesn't occur to begin with.
This Cisco White Paper will discuss the issue at length: http://www.cisco.com/warp/public/105/pmtud_ipfrag.html

Unable to VPN to RV042 in same location.

Setup is: Cable Modem ------> RV042 (WAN IP: 172.x.x.x, LAN IP: 192.x.x.x) ------> Wireless Router (LAN IP: 10.x.x.x, Wan: 192.x.x.x, Gateway: RV042) -----> Client (IP: 10.x.x.x, Gateway: Wireless Router).
I want to VPN to the RV042 but am unable, even if I put the RV042 WAN ip address. I am able to easily connect to RV042 using PPTP tunnel with built-in Microsoft VPN support; however, I actually want to create a more secure tunnel (VPN) to the RV042 but all I see in the Log is that the QuickVPN software is "Remote gateway wasn't reached". Has anyone been able to use QuickVPN to establish a VPN tunnel to their RV042 inside the network?

Ok, I have a lot of questions; basically I didn't understand the purpose of the VPN connection or how you are trying to accomplish it.
- First of all, why do you need a VPN connection on your internal LAN?
- Second, what is the other end of the connection? Where are you trying to connect from?
- How are you connecting using PPTP?
Please post some more information about this so we can understand it better.
Thanks

Slow vpn he speed on iPad 2 after latest iOS update

I have two iPads, an iPad 2 and an iPad 4. I updated both recently with the latest iOS update. Since then my ipad 4 has been fine, but my ipad 2 has been increadibly slow when trying to use a vpn.
I have the same vpn account on both iPads, and have contacted my vpn company and done all they suggested but it just will not work on my older ipad.
My ipad 2 has been switched off, reset, has 8gb memory available, had all other apps shutdown and I am now running out of ideas.
Why has this iOS update affected my ipad2 like this, yet not my 4, and what can I do to try and get it's original performance back, which was fine.
Thanks

Have had the same issue w/my iPad 2. It is an iOS issue. Waiting (an unusually long time) right now to finish today's 7.1.1 update and hope it's fixed! Apple has been aware of this issue, apparently.

Wifi internet too slow vpn

i have vpn client software installed. When the client software is NOT running, my internet is "dial-up" slow. When vpn is enabled and i am connected, internet runs at normal speeds.
i find this is usually the opposite of what happens. this happens at all locations, not just my house. i am quick to blame the vpn client. but not sure how it could be affecting me if the program is quit. thanks for the help

thanks for the reply. im using VPN tracker 5 from equinux. I checked the processes app but nothing that would lead me to think it was looking for the vpn stuff.

Slow VPN PPTP Transfer Speeds vs. Windows XP

I recently switched my father to a new unibody MacBook after years of Windows XP heartache. He uses a VPN (PPTP) connection to access files on the Windows 2003 server at work.
*On the Mac (10.5.5), the file transfer speed over VPN is so slow that it is unusable.* Leopard can connect to the SMB server easily enough but clicking on a volume shows nothing until, after a 2-3 minute wait, the file list finally populates. The old Windows XP machine loads the volumes far quicker and is noticeably faster.
We are using the same credentials and settings as on the old machine, but nothing we do will speed up the connection so that it is actually usable.
Any thoughts or suggestions? At this stage I am extremely disappointed in the Mac's ability to integrate with enterprise. I was so sure the transition would be seamless but Leopard is making basic tasks much more difficult. It's egg on my face!
Help would be much appreciated!
Thanks, jd.
P.S. My apologies if this has already been discussed. Searching didn't give me many relevant results...

Hi Joe,
College networks can have a lot of unusual security monitoring systems in place, so it's conceivable that they limit non-PC speed, but as you said, you've checked that.
There is a known issue with some Gigabit Ethernet capable Macintosh systems and some switches. This problem can be fixed by software configuration, so it's possible Windows automatically does it, but MacOS doesn't. Have a look at the instructions specified in this Apple article and see if it helps: http://docs.info.apple.com/article.html?artnum=303660

VPN between RV042 and Cisco 2801

HI
Kindly help me out. I'm configuring a p2p vpn between a cisco 2801 with IOS 12.3 and a linksys RV042. I'm getting following error on Linksys and Cisco respectively.
[Tunnel Negotiation Info] >>> Initiator Send Main Mode 1st packet
Dec 19 02:40:42 2011
     VPN Log
    Received informational payload, type NO_PROPOSAL_CHOSEN
dst             src             state               conn-id     slot    status
x.x.x.x       x.x.x.x   MM_NO_STATE          0        0       ACTIVE
Below are my config:
Linksys RV042:
Keying Mode: IKE with Preshared Key
Phase1 DH Group: Group2
Phase1 Encryption: 3DES
Phase1 Authentication: MD5
Phase1 SA Life Time: 28800
Perfect forward secrecy : enabled
Phase2 DH Group: Group2
Phase2 Encryption: 3DES
Phase2 Authentication: MD5
Phase2 SA Life Time: 28800
Preshared Key: xxxxxx
Cisco 2801:
crypto isakmp policy 11
encr 3des
authentication pre-share
group 2
lifetime 28800
crypto isakmp key xxxxxx address xxxxxx
no crypto isakmp ccm
crypto ipsec transform-set STRONGER esp-3des esp-md5-hmac
crypto map myvpn 10 ipsec-isakmp
set peer xxxxxx
set transform-set STRONGER
set pfs group2
match address 103
interface FastEthernet0/0
ip address 10.0.0.56 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
no mop enabled
interface FastEthernet0/1
ip address xxxx xxxx
ip nat outside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
crypto map myvpn
ip nat pool branch xxxxxx xxxxx netmask 255.255.255.240
ip nat inside source route-map nonat pool branch overload
access-list 103 permit ip 10.0.0.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 110 deny   ip 10.0.0.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 110 permit ip 10.0.0.0 0.0.0.255 any
snmp-server community public RO
route-map nonat permit 10
match ip address 110
Rgards
SAM

Hi,
It looks like you are using the default hash for the crypto isakmp policy and that your connection is failing on the phase 1 negotiation. The default hash on the crypto isakmp policy is sha. On the 2801 try adding hash md5.
crypto isakmp policy 11
encr 3des
hash md5
authentication pre-share
group 2
lifetime 28800
Let me know if that helps.
Thank you,
Jason NIckle

Problem connect Quick VPN with RV042

I have trouble connectin with the router RV042 Quick VPN. When you reset then router can initiate communication for a while and then returns to be imposible.

Could you please tell us which is Cisco device are you trying to connect to? In the logs, I see:
2012/05/25 12:40:15 [WARNING]Server's certificate doesn't exist on your local computer.
2012/05/25 12:40:17 [STATUS]Remote gateway was reached by https ...
2012/05/25 12:40:17 [WARNING]Remote gateway wasn't reached...
The highlighted lines says the complete story.
Could you please check if the certificate applied to the outside interface of the cisco device to which you are connecting is also present in the trusted root certificate store of the client machine.
Thanks,
Vishnu Sharma

ASA5510 dynamic VPN from RV042

So far I have a complete phase 1, and an almost complete phase 2, but one thing I can't figure out. I see this in the debug.
peer is not authenticated by xauth - drop connection.
I get it right after the proxy is setup.
Here is my config
group-policy DefaultRAGroup attributes
vpn-idle-timeout none
vpn-tunnel-protocol ikev1 l2tp-ipsec
password-storage enable
nem enable
tunnel-group DefaultRAGroup general-attributes
default-group-policy DefaultRAGroup
tunnel-group DefaultRAGroup ipsec-attributes
ikev1 pre-shared-key *****
ikev1 user-authentication none
I have tried many different configurations on both sides, but they all fail with the same error of peer not authenticated by xauth.

I have tried it with it on, with it off and always the same thing comes back.
Here is aaa common 50 debug
Initiating tunnel group policy lookup (Svr Grp: GROUP_POLICY_DB)
AAA FSM: In AAA_BindServer
AAA_BindServer: Using server:
AAA FSM: In AAA_SendMsg
User: DefaultRAGroup
Resp:
grp_policy_ioctl(0x0a250e40, 114698, 0xa9372788)
grp_policy_ioctl: Looking up DefaultRAGroup
callback_aaa_task: status = 1, msg =
AAA FSM: In aaa_backend_callback
aaa_backend_callback: Handle = 114, pAcb = 0xadae6da0
AAA task: aaa_process_msg(0xa9373220) received message type 1
AAA FSM: In AAA_ProcSvrResp
Back End response:
Tunnel Group Policy Status: 1 (ACCEPT)
AAA FSM: In AAA_NextFunction
AAA_NextFunction: i_fsm_state = IFSM_TUNN_GRP_POLICY, auth_status = ACCEPT
AAA_NextFunction: New i_fsm_state = IFSM_DONE,
AAA FSM: In AAA_ProcessFinal
AAA FSM: In AAA_Callback
user attributes:
1     User-Name(1)     14    "DefaultRAGroup"
2     User-Password(2)      0    0xae048023   ** Unresolved Attribute **
user policy attributes:
None
tunnel policy attributes:
1     Idle-Timeout(28)      4    0
2     Tunnelling-Protocol(4107)      4    12
3     Store-PW(4112)      4    1
4     Group-Policy(4121)     14    "DefaultRAGroup"
5     Network-Extension-Mode-Allowed(4160)      4    1
AAA API: In aaa_close
AAA API: In aaa_send_acct_start
AAA task: aaa_process_msg(0xa9373220) received message type 3
In aaai_close_session (114)
AAA API: In aaa_open
AAA session opened: handle = 115
AAA API: In aaa_process_async
aaa_process_async: sending AAA_MSG_PROCESS
AAA task: aaa_process_msg(0xa9373220) received message type 0
AAA FSM: In AAA_StartAAATransaction
AAA FSM: In AAA_InitTransaction
aaai_policy_name_to_server_id(DefaultRAGroup)
Got server ID 0 for group policy DB
and isakmp 127 with the relevant information. Up to this point it passes.
Feb 24 14:27:54 [IKEv1 DECODE]Group = DefaultRAGroup, IP = x.x.x.x, ID_IPV4_ADDR_SUBNET ID received--10.253.20.0--255.255.255.0
Feb 24 14:27:54 [IKEv1]Group = DefaultRAGroup, IP = x.x.x.x, Received remote IP Proxy Subnet data in ID Payload:   Address 10.253.20.0, Mask 255.255.255.0, Protocol 0, Port 0
Feb 24 14:27:54 [IKEv1 DEBUG]Group = DefaultRAGroup, IP = x.x.x.x, processing ID payload
Feb 24 14:27:54 [IKEv1 DECODE]Group = DefaultRAGroup, IP = x.x.x.x, ID_IPV4_ADDR ID received
66.252.79.16
Feb 24 14:27:54 [IKEv1]Group = DefaultRAGroup, IP = x.x.x.x., Received local Proxy Host data in ID Payload: Address x.x.x.x, Protocol 0, Port 0
Feb 24 14:27:54 [IKEv1]Group = DefaultRAGroup, IP = x.x.x.x, peer is not authenticated by xauth - drop connection.
Feb 24 14:27:54 [IKEv1]Group = DefaultRAGroup, IP = x.x.x.x, QM FSM error (P2 struct &0xace21cd8, mess id 0xb4d2530a)!
Feb 24 14:27:54 [IKEv1 DEBUG]Group = DefaultRAGroup, IP = x.x.x.x, IKE QM Responder FSM error history (struct &0xace21cd8) , : QM_DONE, EV_ERROR-->QM_BLD_MSG2, EV_PROC_MSG-->QM_BLD_MSG2, EV_HASH_OK-->QM_BLD_MSG2, NullEvent-->QM_BLD_MSG2, EV_COMP_HASH-->QM_BLD_MSG2, EV_VALIDATE_MSG-->QM_BLD_MSG2, EV_DECRYPT_OK-->QM_BLD_MSG2, NullEvent
Feb 24 14:27:54 [IKEv1 DEBUG]Group = DefaultRAGroup, IP = x.x.x.x, sending delete/delete with reason message

Error 789 when connected an L2TP VPN through RV042.

I'm attempting to create a VPN using L2TP. After a few minutes (the connection attempts multiple redials), I receive Error Message 789: The L2TP connection attempt failed because the security layer encountered a processing error during initial negotiations.

i've had trouble with outbound ipsec connections behind newer airport base stations as well. it has something to do with the way they handle IPv6, i believe.
also, you most likely need the base/router to support/pass more than the ports you mentioned, namely ESP (protocol 50).
i'd get a decent vpn/firewall and avoid the hassle of making an airport base station work for that function.

Site to Site VPN RV042

Hi Please could someone help me regarding my ISSUE with VPN site to site.
I have setup gateway to gateway unfortunetly I don't have any Static IPs so I setup 2 DynDNS.org Accounts at both Sites. Both RV042 Connect to another Router/Modem .
I have set them both as Router in the Router Mode and not as Gateway. On the VPN Tab the Status just stays at "waiting for connection" I can see the correct Dynamic IP for the remote connection in the main and remote site of the other. I can ping both dyndns names as well. But can't connect...
The VPN log states the following.
ERROR: asynchronous network error report on eth1 for message to 105.237.1.xx port 500, complainant 192.168.137.153: No route to host [errno 148, origin ICMP type 3 code 1 (not authenticated)]
With this being the main site and 192.168.138.0 the remote site, main site has a subnet of 192.168.137.0
Please could someone help me or point me in the right direction? Thanks In advance.

Hi Etienne, so there lies the problem. If you're not able to telnet the WAN IP address on port 500 or 4500, it means it is not making it to the VPN server (RV042). It means your upstream routers are blocking the connection. So... you will need to get that figured out or remove those routers. You may try to port forward ALL ports or try to set up a DMZ on the upstream routers.
A simple test you can try is setting the remote management on the RV042 to any port number you want then make a forwarding rule for that port number to the RV042 WAN IP address. If your upstream routers work correctly, you would be able to log in to the RV042 on whatever port you want.
An example is-
RV042 remote management is port 44333
RV042 WAN IP is whatever you have specified
Port forward rule on Netgear for port 44333 to RV042 WAN IP address
Dyndns address with port affixed on the end
https://dyndns.org:44333
With this, if your upstream router is configured correctly you can log in to the RV042 over the internet.
Additionally, by default, the RV042 WAN does not respond to ping. So if you're able to ping your dyndns it is because your upstream is replying, not because the RV042 replies.
-Tom
Please mark answered for helpful posts

Access to DFS root via VPN not working - error 0x80070035 keeps popping up

Dear all,
when trying to access the DFS root via VPN from a Windows 7 non-domain member computer I always receive an error stating "Windows cannot access \\eggs.local\dfs", Error Code: 0x80070035, The Network Path was not found.
I searched the internet as well as these forums in order to get to grips with this error message but didn't find anything to solve my problem.
I made sure, that NetBIOS over TCP/IP is enabled, that I have access to the VPN adapter's DNS as well as WINS servers, that DNS name resolution is working properly, DNS split tunneling is enabled, Windows Firewall is disabled, and so forth. Still no luck.
Any ideas?
Thanks Alex
Alexander Ollischer Diplom-Wirtschaftsinformatiker (FH) Citrix & Microsoft Certified Engineer (CCEA, CCEE, MCSA, MCSE, MCDBA, MCTS) Afontis IT+Services GmbH Baierbrunner Straße 15 81379 München Deutschland Telefon (089) 74 34 55-0 Fax (089) 74 34 55-55
mailto:[email protected] http://www.afontis.de http://www.itganzeinfach.de Amtsgericht München, HRB 109 005 Geschäftsführer: Thomas Klimmer

Hi,
Though you mentioned DNS is working properly, please check if DNS forwarder is set as set correctly.
And incase it is caused by authentication, please try to force Kerberos to use TCP - by default it using UDP and on a slow VPN connection, UDP packets may be dropped.
How to force Kerberos to use TCP instead of UDP in Windows
http://support.microsoft.com/kb/244474
Also check NTFS and Sharing permission on top of the DFS Namespace. At least give users a Read permission.
If you have any feedback on our support, please send to [email protected]

Slow VPN on RV042

Similar Messages

Maybe you are looking for