Creating VPN with VPN routers on each end

[Kent Crane]

I am trying to create a reliable VPN between 2 points using
identical VPN routers on each end. This may not sound like
a Windows problem, but hear me out please. After setting up
the VPN, I am getting around a 50% drop in pings when
pinging a computer at the other end. I get very slow
returns on the returned pings. When I ping my static IP
address or any other known Internet address, I always get
fast 100% pings. The problem only exsists inside the VPN
tunnel. I have tried 2 different brands of VPN routers
(each time using identicle hardware and firmware on each
end) and am getting the same result. My DSL provider
claims that nothing is wrong with the service and points to
the excellent ping results that I get outside my tunnel. I
have tried turning off all overhead (authentication etc.),
but get the same result. I was wondering if possibly it
could be something inside Windows that is causing the
problem. I have spent many hours on the phone with the
hardware tech support guys and they cannot suggest anything
to solve the problem.
Environment: Windows XP Pro with most recent upgrades,
static DSL service with 128 upload and 764 (I think)
download. Peer to peer network. Different subnets on each
end.

 

[Lanwench [MVP - Exchange]]

Might want to lower the MTU settings on each router (to match) to see if
that's the problem...

 

[Kent Crane]

I have lowered the MTU in small increments on both ends
from 1500 to 1300 with no improvement. I specifically used
the 1492 setting that my DSL provider recommended. The
hardware that I have tried is the Lynksys BEFVP41 and the
DLink DI-804HV. One suggestion that I got was to go to a
higher end router/VPN such as the SonicWall Tele3 or the
Symantec Firewall/VPN 100/200. Any ideas?

 

[Lanwench [MVP - Exchange]]

I have lowered the MTU in small increments on both ends
from 1500 to 1300 with no improvement. I specifically used
the 1492 setting that my DSL provider recommended. The
hardware that I have tried is the Lynksys BEFVP41 and the
DLink DI-804HV. One suggestion that I got was to go to a
higher end router/VPN such as the SonicWall Tele3 or the
Symantec Firewall/VPN 100/200. Any ideas?

I have always used Sonicwalls for this and haven't had any problems, but I
don't know that the router itself is the issue in your case. Have you tried
lowering the MTU further? What's the Internet connection speed on each side?
VPN can be tricky to troubleshoot, compared to point-to-point
connections....