IPSec 2 hosts (preshared key) - network shares very slow

Posted by LxFlip on Server Fault See other posts from Server Fault or by LxFlip
Published on 2013-06-28T10:03:09Z Indexed on 2013/06/28 10:22 UTC
Read the original article Hit count: 150

Filed under:

network-share

|

ipsec

|

slow-connection

I'm testing a IPSec config between 2 hosts, using ipsec auth with preshared key, very simple configuration.

(I want to start with a IPSec simple preshared key config, and then step up to a Certificate or kerberos...)

The problem is:

The connection is working but when accessing network file shares the first time it's very slow.
On the same host i'm testing the shares, i have an IIS site running, and the performance seems very normal, fast.

Does anybody know why does SMB shares are soo slow?

Is there any ipsec policy options that should be tweaked?

Thanks

© Server Fault or respective owner

Related posts about network-share

Can't access network share with name defined in hosts file

as seen on Server Fault - Search for 'Server Fault'
I have a network share on a machine that I can only reach by IP address. I then defined an alias for the IP in my hosts file so I could use that instead of the IP but then I can't log on to the share, I just get the logon prompt again and again. So basically this: \\172.17.0.48\SomeShare works but… >>> More
Need for explanation: NetBIOS over TCP/IP on VMware network adapter disturbs access to network share

as seen on Super User - Search for 'Super User'
Some time ago nearly all workstations in our team (Windows XP SP2) exhibited intermittend but frequent delays when accessing shares on the network. Typically the first access to a share which hadn't been accessed for some time resulted in a nearly frozen workstation for up to 30 seconds. Then everything… >>> More
Windows 7 allow pinning exe on network share to taskbar

as seen on Server Fault - Search for 'Server Fault'
I am just configuring my new Windows 7 work machine and have discovered that I can't pin an exe on a network drive to the taskbar. Are there any work arounds to this e.g. Registry Edits. I can understand the reasoning it's not allowed by default for newbies as the network location may later not exist… >>> More
window login when web application is using network share in IIS 6

as seen on Server Fault - Search for 'Server Fault'
Hi, I have installed a web application which is configured using a network drive But i am keep getting a pop up asking for credentials looking in the event log, the network logon is set to my domain/account which looks fine however caller user name is empty (not sure if this is an issue) the application… >>> More
Mapping Drive Error - System Error 1808

as seen on Server Fault - Search for 'Server Fault'
A vendor is attempting to map and preserve a network drive using nt authority/system; so it stays persistent when the interactive session of the server is lost. They were able to do this on one server (Windows 2008 R2) but not a second computer (also Windows 2008 R2). D:\PsExec.exe -s cmd.exe PsExec… >>> More

Related posts about ipsec

Ipsec reload fails to load ipsec.conf Strongswan 5.0

as seen on Server Fault - Search for 'Server Fault'
I am having trouble configuring a connection to an Android device using a fedora 17 linux machine and strongSwanv5.0.1dr2. I have made some progress but when I try adding the configuration to support xauth authentication I receive an error when I try to reload the configuration file. I get a similar… >>> More
Connecting debian and windows via IPsec VPN with Racoon and ipsec-tools

as seen on Server Fault - Search for 'Server Fault'
I've some trouble with the IPsec configuration on my debian server (6 squeeze). This server should connect via IPsec VPN to an windows server, which is protected by an firewall. I've used racoon and ipsec-tools and this tutorial http://wiki.debian.org/IPsec. However, I am not quite sure, if this… >>> More
Specify IPSEC port range using ipsec-tools

as seen on Server Fault - Search for 'Server Fault'
Is it possible to require IPSEC on a port range ? I want to require IPSEC for all incoming connections except a few public ports like 80 and 443, but don't want to restrict outgoing connections. My SPD rules would look like: spdadd 0.0.0.0/0 0.0.0.0/0[80] tcp -P in none; spdadd 0.0.0.0/0 0.0.0.0/0[443]… >>> More
ASA hairpining: I basicaly want to allow 2 spokes to be able to communicate with each other.

as seen on Server Fault - Search for 'Server Fault'
ASA Spoke to Spoke Communication I have been looking at spke to spoke comms or "hairpining" for months and have posted on numerouse forums but to no avail. I have a Hub and spoke network where the HUB is an ASA Firewall version 8.2 * I basicaly want to allow 2 spokes to be able to communicate with… >>> More
Can't get the L2TP IPSEC up and running

as seen on Server Fault - Search for 'Server Fault'
i have an Ubuntu 11.10 (oneiric) server running on a ReadyNAS. Im planning to use this to accept ipsec+l2tp connections through a router. However, the connection is failing somewhere half through. Using Openswan IPsec U2.6.28/K3.0.0-12-generic and trying to connect with an iOS 5 iPhone 4S. This is… >>> More