Hi,
We have branch with 100Mb/s fiber.
As a router we have
HPE MSR954 version 7.1.064, Release 0821P11
The problem is that we need VPN for it, so we use IPSec/IKE.
ipsec transform-set BoxVPN
esp encryption-algorithm aes-cbc-256
esp authentication-algorithm sha1
ike proposal 65529
encryption-algorithm aes-cbc-256
dh group14
sa duration 28800
Normally the ping is about:
Reply from 192.168.144.1: bytes=32 time=3ms TTL=253
Reply from 192.168.144.1: bytes=32 time=2ms TTL=253
Reply from 192.168.144.1: bytes=32 time=2ms TTL=253
Reply from 192.168.144.1: bytes=32 time=3ms TTL=253
But when i we load the file with windows share (SMB), latency increases dramatically.
Reply from 192.168.144.1: bytes=32 time=195ms TTL=253
Reply from 192.168.144.1: bytes=32 time=322ms TTL=253
Reply from 192.168.144.1: bytes=32 time=322ms TTL=253
Reply from 192.168.144.1: bytes=32 time=227ms TTL=253
But when i download the same file with http(curl) latency increases somewhat.
Reply from 192.168.144.1: bytes=32 time=43ms TTL=253
Reply from 192.168.144.1: bytes=32 time=56ms TTL=253
Reply from 192.168.144.1: bytes=32 time=50ms TTL=253
Reply from 192.168.144.1: bytes=32 time=23ms TTL=253
If i download it from external sources example http(curl) latency does not increase much.
Reply from 192.168.161.1: bytes=32 time=7ms TTL=253
Reply from 192.168.161.1: bytes=32 time=2ms TTL=253
Reply from 192.168.161.1: bytes=32 time=4ms TTL=253
Reply from 192.168.161.1: bytes=32 time=2ms TTL=253
So my question is for hardware suggestions?
Would MSR2003 be enought or should we go MSR3000?
------------------------------
Matti Jaatinen
------------------------------