High count of packet retransmissions/Dups over IPSEC/VPN

SteinbacherDaemmstoffGmbH — Tue, 15 Sep 2015 13:03:01 GMT

Hi!

I'm running IPSEC-VPN (AES256/SHA256/DH14) tunnel between a PaloAlto PA-500 and a Fortigate 110C via Internet (10MBit up/down guaranteed both sides - latency between 40 and 50ms).

90% connections are ICA/HDX connections (TCP 1494 and 2598) for XenDesktop connections.

The connection is working not very well. The ICA-sessions are quite stable most of the time but some hangs and freezes from time to time and very low file transfer speeds of physical clients. So I captured data at a tunnel end and saw that I have a huge amount of retransmissions/duplicates ACKs/reassembly errors/...). There are about 15 to 40% of all packets through my tunnel are Dups ands Retrans packets.

Can anybody help me where to start my debugging/solving? I think this are the causes of my problems - right?

e.g. ICA-Traffic

e.g. RDP-Traffic

Thanks a lot for any help!

Stony

Re: High count of packet retransmissions/Dups over IPSEC/VPN

ItdeskBDO — Wed, 23 Mar 2016 10:33:41 GMT

Hello,

I have the same problme. Have you solve it?

Re: High count of packet retransmissions/Dups over IPSEC/VPN

PanIst — Mon, 04 Apr 2016 13:30:39 GMT

Hello

any solution for that ?

Regards

topic Re: High count of packet retransmissions/Dups over IPSEC/VPN in General Topics

High count of packet retransmissions/Dups over IPSEC/VPN

Re: High count of packet retransmissions/Dups over IPSEC/VPN

Re: High count of packet retransmissions/Dups over IPSEC/VPN