I have a MX85 configured as a one arm concentrator at work. The internet gateway is a Cisco ASA and both devices are connected to a Cisco 3750 2 switch stack. There is a file server also connected to the 3750. All three of these are on the same class C internal network. The internet circuit is 100/100. I have a MX64 at a remote site (at home for testing) with a single PC connected. I have it configured as a vpn spoke and the tunnel is up and working. I have defualt route checked so all traffic, even internet, is tunneled through the work site. This is on a 1000/50 circuit. If I do an internet speed test I get ~40Mbps both ways, which I consider good through the VPN. If I download a file from the internet I get around 40Mbps download. The problem is a Windows file transfer (SMB). From Work to Home I can only get 355kbps (~3Mbps) but copying from Home to Work I get almost 20Mbps. You would think if it was slower one way it would be in the opposite direction since my home upload is 50Mbps, but that's the direction I'm getting decent file transfer speeds. I also installed a FTP server and client on both ends and FTP has the same speed issues as SMB, while HTTP downloads are fast from Work to Home. I did a packet capture on the tunnel using the build in capture on the Meraki dashboard and there are a lot of out of order packets. But I don't know how much is too much or what is normal, and if that's what is causing the slow copy in one direction but not the other. Thoughts? I've talked to Meraki support about it but they didn't have much to offer. I want to roll these out to 10-12 home workers but I'm worried its going to be too slow. Edited to add: I also tore down the MX85 config and tried it as a VPN hub in routed mode, with one interface having it own public IP and one interface on the internal network, to eliminate the hair-pinning and take the ASA out of the equation and it was the same exact speed resutls, so I set it back up as one armed.
... View more