VPN Very Slow

I

Ian E

Could one of the MVPs comment on this please?

I am looking to setup a PPTP VPN for a client so that he can access files at
the office remotely.

Client & Server PCs both Running Windows XP Professional
Server PC is on a small LAN implemented via a Linksys WRT54G Router

VPN is implemented using built-in networking of Windows XP:
- on the client go into Network Connections, click "Create a new
connection", choose "Connect to the network at my workplace"
- on the server go into Network Connections, click "Create a new
connection", choose "Set up an advanced connection", "Accept incoming
connections", "Allow virtual private connections"
- the router is configured to allow inbound connection on port 1723 (TCP &
UDP) and port 1723 traffic is directed to the server PC's local IP address
(192.168.1.100)


The connection works. I can bring up & access shared folders on the server
PC. The problem is that it is *extremely slow*.


For a test I setup something similar in my lab environment. My high speed
Internet provider allows me 2 public IP addresses. So, I connected a 10
Mbit/s hub to my cable modem and then split my connection off to two
routers - one the Linksys WRT54G and the other a D-Link DI704P, with 1 PC on
each LAN. I then proceded to configure the PC on LAN #1 to "Accept incoming
(VPN) connections", and the PC on LAN #2 to "Connect to the network at my
workplace". I made sure that all the IP addresses were correct. On LAN #1
I opened up port 1723 (PPTP) and routed it to the "server" PC on that LAN.
I then proceded to connect from PC on LAN #2 to PC on LAN #1. No problems.
I accessed a shared folder on PC #1 - no problems. I tried to transfer a
file - again, it was *extremely slow*.

To quantify what I mean by *slow* - the file which I originally obtained
from a software vendor's site took only about 1 minute to download on my
high speed Internet connection. When I tried to pass the same file from PC
#1 to PC #2 using VPN and purely within my ISP's network infrastructure
(both of my routers on the same subnet) it took over 40x longer to transfer.

Is this just what you have to expect in using the VPN software that's
built-in to Windows XP? Would I be better off in obtaining one of those
routers that's advertised as a "VPN Router" (examples being the Linksys
BEFVP41, RV082, etc.) Would VPN implemented in the router's hardware be any
faster???

I would appreciate any & all comments - but especially those of the MVPs.

Thanks.
 
R

Robert L [MS-MVP]

I would check the MTU settings.

How to change mtu ... with these default MTU settings, especially if you are using DSL line. This step-by-step article describes how to modify the default MTU size settings ...
www.howtonetworking.com/VPN/mtu1.htm

black screen when rdp over vpn Troubleshooting: Since this is DSL line, we suspect this is MTU issue. ... Resolution: Use the ping to test and lower MTU. Finally, We reduce MTU from 1500 ...
www.howtonetworking.com/casestudy/mtu1.htm


vpn connection issues after 2003 sp1 Resolution: Set my VPN client MTU to 1400. To modify MTU, please refer to this page, How to change MTU settings for PPP or VPN. Related Topics ...
www.howtonetworking.com/casestudy/2003sp1&mtu.htm




Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Could one of the MVPs comment on this please?

I am looking to setup a PPTP VPN for a client so that he can access files at
the office remotely.

Client & Server PCs both Running Windows XP Professional
Server PC is on a small LAN implemented via a Linksys WRT54G Router

VPN is implemented using built-in networking of Windows XP:
- on the client go into Network Connections, click "Create a new
connection", choose "Connect to the network at my workplace"
- on the server go into Network Connections, click "Create a new
connection", choose "Set up an advanced connection", "Accept incoming
connections", "Allow virtual private connections"
- the router is configured to allow inbound connection on port 1723 (TCP &
UDP) and port 1723 traffic is directed to the server PC's local IP address
(192.168.1.100)


The connection works. I can bring up & access shared folders on the server
PC. The problem is that it is *extremely slow*.


For a test I setup something similar in my lab environment. My high speed
Internet provider allows me 2 public IP addresses. So, I connected a 10
Mbit/s hub to my cable modem and then split my connection off to two
routers - one the Linksys WRT54G and the other a D-Link DI704P, with 1 PC on
each LAN. I then proceded to configure the PC on LAN #1 to "Accept incoming
(VPN) connections", and the PC on LAN #2 to "Connect to the network at my
workplace". I made sure that all the IP addresses were correct. On LAN #1
I opened up port 1723 (PPTP) and routed it to the "server" PC on that LAN.
I then proceded to connect from PC on LAN #2 to PC on LAN #1. No problems.
I accessed a shared folder on PC #1 - no problems. I tried to transfer a
file - again, it was *extremely slow*.

To quantify what I mean by *slow* - the file which I originally obtained
from a software vendor's site took only about 1 minute to download on my
high speed Internet connection. When I tried to pass the same file from PC
#1 to PC #2 using VPN and purely within my ISP's network infrastructure
(both of my routers on the same subnet) it took over 40x longer to transfer.

Is this just what you have to expect in using the VPN software that's
built-in to Windows XP? Would I be better off in obtaining one of those
routers that's advertised as a "VPN Router" (examples being the Linksys
BEFVP41, RV082, etc.) Would VPN implemented in the router's hardware be any
faster???

I would appreciate any & all comments - but especially those of the MVPs.

Thanks.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top