Sybase NNTP forums - End Of Life (EOL)

The NNTP forums from Sybase - forums.sybase.com - are now closed.

All new questions should be directed to the appropriate forum at the SAP Community Network (SCN).

Individual products have links to the respective forums on SCN, or you can go to SCN and search for your product in the search box (upper right corner) to find your specific developer center.

remote connection via ipsec

4 posts in General Discussion Last posting was on 2003-10-30 14:12:35.0Z
Raphael Posted on 2003-10-28 00:17:44.0Z
Sender: 5958.3f9dc315.1804289383@sybase.com
From: Raphael
Newsgroups: ianywhere.public.general
Subject: remote connection via ipsec
X-Mailer: WebNews to Mail Gateway v1.1s
Message-ID: <3f9dc3b8.5959.846930886@sybase.com>
NNTP-Posting-Host: 10.22.241.41
X-Original-NNTP-Posting-Host: 10.22.241.41
Date: 27 Oct 2003 17:17:44 -0700
X-Trace: forums-1-dub 1067303864 10.22.241.41 (27 Oct 2003 17:17:44 -0700)
X-Original-Trace: 27 Oct 2003 17:17:44 -0700, 10.22.241.41
Lines: 19
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub ianywhere.public.general:1930
Article PK: 4166

I am running SQL anywhere studio version 6.3 under Windows
NT 4.0 server. I have another server at a remote location
also running windows nt 4.0 server from wich I also run some
applications including an SQL anywhere studio application.
Locally, the system performs beautifully. My problem arises
when I try to connect from a remote location via vpn (ipsec
with 3-des encryption which I must have), the connection
becomes very slow taking up to 2 + minutes to bring up any
information.
About my hardware, technical support tells me my
configuration is correct and pinging response is reasonably
fast thus eliminating the hardware questions or so I think.

Is there a secure and faster way of connecting to an SQL
anywhere studio version 6.3 database? Keep in mind I have to
have Ipsec with 3-des encryption or some kind security
encryption. Any suggestions?

Thank you.


Greg Fenton Posted on 2003-10-28 14:25:58.0Z
From: Greg Fenton <greg.fenton_NOSPAM_@ianywhere.com>
Organization: iAnywhere Solutions Inc.
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4; MultiZilla v1.4.0.4A) Gecko/20030624
X-Accept-Language: en-us, en
MIME-Version: 1.0
Newsgroups: ianywhere.public.general
Subject: Re: remote connection via ipsec
References: <3f9dc3b8.5959.846930886@sybase.com>
In-Reply-To: <3f9dc3b8.5959.846930886@sybase.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: gfenton-xp.sybase.com
X-Original-NNTP-Posting-Host: gfenton-xp.sybase.com
Message-ID: <3f9e8a86@forums-1-dub>
Date: 28 Oct 2003 07:25:58 -0700
X-Trace: forums-1-dub 1067354758 172.31.140.253 (28 Oct 2003 07:25:58 -0700)
X-Original-Trace: 28 Oct 2003 07:25:58 -0700, gfenton-xp.sybase.com
Lines: 30
X-Authenticated-User: techsupp
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub ianywhere.public.general:1934
Article PK: 4173


Raphael wrote:

> My problem arises
> when I try to connect from a remote location via vpn (ipsec
> with 3-des encryption which I must have), the connection
> becomes very slow taking up to 2 + minutes to bring up any
> information.

Is it possible that your application is just moving that much data that
it takes 2 minutes over your VPN? Do you have some network load
monitoring tool that you can use to see the amount of data moving back
and forth?

Have you tried moving a large-ish file to and from the remote location
(via FTP or network file system) over the VPN? How long does it take to
transfer, say, a 1MB file? The network may be fast, but it is possible
that the bandwidth is low, so pings would be fast but file transfers slow.

What happens if you connect to the remote via ISQL and issue some simple
queries, ones that do not move much data (like COUNT(*) queries)?

greg.fenton
--
Greg Fenton
Consultant, Solution Services, iAnywhere Solutions
--------
Visit the iAnywhere Solutions Developer Community
Whitepapers, TechDocs, Downloads
http://www.ianywhere.com/developer/


CoronaBVW Posted on 2003-10-29 20:48:27.0Z
Sender: 7bd9.3fa034c3.1804289383@sybase.com
From: CoronaBVW
Newsgroups: ianywhere.public.general
Subject: Re: remote connection via ipsec
X-Mailer: WebNews to Mail Gateway v1.1s
Message-ID: <3fa035ab.7bee.846930886@sybase.com>
References: <3f9dc3b8.5959.846930886@sybase.com>
NNTP-Posting-Host: 10.22.241.41
X-Original-NNTP-Posting-Host: 10.22.241.41
Date: 29 Oct 2003 13:48:27 -0700
X-Trace: forums-1-dub 1067464107 10.22.241.41 (29 Oct 2003 13:48:27 -0700)
X-Original-Trace: 29 Oct 2003 13:48:27 -0700, 10.22.241.41
Lines: 14
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub ianywhere.public.general:1956
Article PK: 4193

We have had a similiar problem running ASA over a VPN
on DSL to our company's T1. It turned out not to be an ASA
issue, but an MTU issue. We adjusted our MTU for the
network card on the remote workstation to 1392 and that
increased our performance several fold. You can get a free
tool to adjust your MTU from http://www.speedguide.net .
Try pinging with different packet sizes across your VPN
connection with the don't fragment flag on and see what the
largest size you get regularly across the connection.
That's the size you will want to use. You may or may not
need to adjust your ASA network packet size. Hope this
helps,

Billy Willoughby


Raphael Posted on 2003-10-30 14:12:35.0Z
Sender: 9cc.3fa12a0c.1804289383@sybase.com
From: Raphael
Newsgroups: ianywhere.public.general
Subject: Re: remote connection via ipsec
X-Mailer: WebNews to Mail Gateway v1.1s
Message-ID: <3fa12a63.9d5.846930886@sybase.com>
References: <3f9dc3b8.5959.846930886@sybase.com><3fa035ab.7bee.846930886@sybase.com>
NNTP-Posting-Host: 10.22.241.41
X-Original-NNTP-Posting-Host: 10.22.241.41
Date: 30 Oct 2003 07:12:35 -0700
X-Trace: forums-1-dub 1067526755 10.22.241.41 (30 Oct 2003 07:12:35 -0700)
X-Original-Trace: 30 Oct 2003 07:12:35 -0700, 10.22.241.41
Lines: 19
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub ianywhere.public.general:1967
Article PK: 31455


> We have had a similiar problem running ASA over a VPN
> on DSL to our company's T1. It turned out not to be an
> ASA issue, but an MTU issue. We adjusted our MTU for the
> network card on the remote workstation to 1392 and that
> increased our performance several fold. You can get a
> free tool to adjust your MTU from
> http://www.speedguide.net . Try pinging with different
> packet sizes across your VPN connection with the don't
> fragment flag on and see what the largest size you get
> regularly across the connection. That's the size you will
> want to use. You may or may not need to adjust your ASA
> network packet size. Hope this helps,
>
> Billy Willoughby

Billy,
Thank you very much for your input, it seems like you had
the same problem I now have. Do you still have the specific
tool used in your MTU adjustment?
Raphael.