VPN Bandwidth?

[briwang]

Hi all,

I have a question for how a site to site vpn tunnel will utilize the bandwidth? And where to check the current utilization? Thanks!

[ShadowPeak.com]

Originally Posted by briwang

Hi all,

I have a question for how a site to site vpn tunnel will utilize the bandwidth? And where to check the current utilization? Thanks!

The easiest way to check the real-time bandwidth utilization in a particular tunnel is in SmartView Monitor. Select Tunnels->Tunnels on Community-> (Your VPN Community name here) and hit OK. On the next screen you will see a list of active VPN tunnels. Right click on the tunnel you want to measure and select "Monitor Traffic of this Tunnel->Top Services". On the upper right of the running report you'll see a counter called "all services" that shows how much bandwidth that particular tunnel is using right now.

If you don't see a "Tunnels" menu in SmartView Monitor then you do not have the correct "Monitoring" license to use this feature. If you want long-term historical data about how much bandwidth a tunnel is using, you need Eventia Reporter.

[briwang]

thanks for your reply.

The reason why I ask is I did a ISP change for site in EMEA and this went successfully. But a guy there is keep on asking why the speed is limited to 7.5Mbit/s after the migtation (when he did this test nobody is utilize this line at the same moment) and if this line is connected to laptop directly, the speed is 20Mbit/s... Which means 2/3 bandwidth is vanished. The firewall is connected with another 20 firewall with site to site vpn (Mesh Topology). I didn't see any wrong configuration

[ShadowPeak.com]

Originally Posted by briwang

thanks for your reply.

The reason why I ask is I did a ISP change for site in EMEA and this went successfully. But a guy there is keep on asking why the speed is limited to 7.5Mbit/s after the migtation (when he did this test nobody is utilize this line at the same moment) and if this line is connected to laptop directly, the speed is 20Mbit/s... Which means 2/3 bandwidth is vanished. The firewall is connected with another 20 firewall with site to site vpn (Mesh Topology). I didn't see any wrong configuration

- Make sure you do not have the QoS checkbox enabled on the firewall. If you do you'll need to update the amount of bandwidth available under the firewall/cluster object under Topology/(interface name)/QoS. Or you can just turn it off for now.

- Look for a fast ethernet duplex mismatch on the outside interface of your firewall. If you do several "netstat -ni" commands in a row on the firewall, are you actively accumulating TX-ERR's or RX-ERR's?

- Run some continuous pings to your ISP's router. Try to identify if the performance problem is constantly high latency, occasional spikes in latency or flat-out packet loss.

[briwang]

some badaxx checked qos on this firewall WITHOUT notifying me............

thanks, and simply I love this place

[lammbo]

Originally Posted by briwang

thanks, and simply I love this place

So do we :D

It keeps us as sane as we can possibly be while working on firewalls.