We have a CableOne business class service Internet connection in place.
The ISP has provided a locked down UBR900 for the modem/router. We
have been trying to run IPSEC through the the modem (Both S/W VPN and
HardWare IPSEC) and have noticed that the throughput decreases from 4M
to <800Kbs. Any ideas why this is happening? The ISP claims they are
not blocking IPSEC and clearly a tunnel is being esablished but the
throughput it terrible. Any help would be greatly appreciated. (By the
way, we are trying to use a Nokia IP130 running Checkpoint to another
checkpoint. We don't think the problem is the Checkpoint becasue we
have the same issue running our Nortel Contivity VPN through the modem)

Mike,
This is a uBR905 or 925 model as opposed to a 904 or 924 model, right?

As you are probably aware, the 905 and 925 have IPSEC implemented in
hardware, whereas the latter did not.

The only other thought is that MTU might be an issue and if so, packets
could be getting fragmented for transmission.

I was under the impression with IPSEC in hardware, the 905/925 would get
much better performance than what you describe.

Robert

<mike.gordon@lmco.com> wrote in message
news:1109728058.255305.286770@l41g2000cwc.googlegr oups.com...