<< | Thread Index | >> ]    [ << | Date Index | >> ]

To: cipe-l,AT,inka,DOT,de
Subject: Re: Slow file sharing performance
From: James Knott <james.knott,AT,rogers,DOT,com>
Date: Mon, 01 Sep 2003 07:59:15 -0400

Hans Steegers wrote:
1. Suspect your firewall(s) dropping ICMP or other (SMB/NFS) protocol
related packets. Try it without the firewalls, to be sure.

There are no firewall rules that apply to the VPN traffic. The internet connection, that the VPN passes through doesnsn't see the SMB or NFS traffic, because they're encrypted in the tunnel packets.

2. Set on both sides cttl in your options file: cttl 64
Encryption doesn't require a fast CPU: a 486 is sufficient for a
3. Or (maybe) you have got a MTU problem: search the CIPE archives for more

Cttl is already set to 64. CIPE automatically adjusts the MTU as required, but I have also tried smaller packets, without any improvement.

I hope this helps..

Hans Steegers
-----Original Message-----
From: James Knott <james.knott,AT,rogers,DOT,com>
To: CIPE <cipe-l,AT,inka,DOT,de>
Date: Sunday, August 31, 2003 1:53 PM
Subject: Re: Slow file sharing performance

Jon Bendtsen wrote:

James Knott wrote:

I've notice that while my CIPE VPN works, that SMB and NFS access of
my home network from my notebook is slow.  However, going the other
way, accessing file shares on my notebook, from my home lan is fine.
I'm connecting from my notebook, via dialup ISP and cable modem to my
home network.

Why is this problem in only one direction?  Is it due to the speed
difference between my home network and dial up modem?

Well, i can think of 2 reasons. The most likely is that you have a
different upload and download speed, like 2048kbits down, and 512 up.
The other reason could be that one end is much much faster than at home.
Suppose you have a recent notebook, then you have at least 500mhz+, if
not 1ghz+. At home you might have your old pentium 90mhz as a cipe gw.
Thus, when you send stuff from home, the p90 has to encrypt it, and
when you send from your notebook that one has to encrypt it. (I'm
guessing here that encryption takes longer time than decryption.

One computer is a 1.113 GHz PIII, the other is an Athlon XP 1700. I'd suspect both ends have sufficient horsepower. Also, when watching the data lights flash, it's apparent that the data transfer stops entirely for quite a while. I would expect transfers to be slower due to the dial up connection, but not stopped. The vastly slower dialup connection would rule out the asymetrical cable modem speeds as a cause of the problem. As I mentioned, it only happens in the one direction.

The firewall is a 166 MHz Pentium and is running about 99% idle.  Also,
ftp transfers work fine, along with other protocols, such as telnet, ssh
and X.  The problem appears to occur only with SMB and NFS and only in
that one direction.

tnx jk

Message sent by the cipe-l,AT,inka,DOT,de mailing list.
Unsubscribe: mail majordomo,AT,inka,DOT,de, "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive:


<< | Thread Index | >> ]    [ << | Date Index | >> ]