Hello Captain, it's good that you narrow the problem down to the encryption as the bottle neck. The most feasible issue maybe at the hardware level. Here's a remedy that you might want to try, if this customer has to have encryption. Turn off all encryption at the AP point while leave the MAC filter running. Then, deploy a separate VPN box behind both AP and see balancing the work load on the hardware helps. From your description, I'm guessing that the AP's processor is taking on too much load. This maybe caused by traffic volume, or hardware overheat. The separate VPN box would cost $ of course, you'll be the judge. Good luck.
Steve Chen -----Original Message----- From: "The Captain" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Date: Mon, 24 Nov 2003 23:31:55 +0000 Subject: [SOCALWUG] Wireless encryption > I thought I knew quite a bit about encryption, apparently wrong. > > I always run with 64-bit encryption, everything perfect, except 1 site. > Get > excellent signal strength, excellent down/uploads with dslreports. > > Turns out this 1 site (smithbarney.com) that is extremely slow, or, > most of > the time, doesn't even come up, uses SSL, 128-bit https encryption at > the > browser level. > > As an experiment, I temporally turned encryption off both at the router > & at > the client. Now this site runs very fast, as it should. Since I want to > run > w/encryption, I tried 128-bit wireless encryption. Has same problem as > 64-bit encryption. Switched back to no encryption, 64-bit several > times. > Quite consistent, this 1 secure site only runs well with no wireless > encryption. > > I've tried other https sites (while wireless encryption was 64-bit), > run > fine. Only problem I see is with smithbarney site. > > My understanding is the wireless encryption runs just above the > physical > layer. And that it totally unrelated to the browser 128-bit encryption, > I > would guess at the application layer. > > I am also running with MAC address filtering, feel that is not part of > the > equation. > > I went 1 step further & dialed up to the Internet with this 1 problem > machine. Ran the troubled site just fine, slower, but in the range of > dialup. > > Is my understanding correct? Can anyone think of why this 1 site has a > problem? Can anyone think of something I can try to diagnose this, I > really > want to run with encryption on? > > ~~~~_/)~~~~ > > Norm Perron > > _________________________________________________________________ > Is there a gadget-lover on your gift list? MSN Shopping has lined up > some > good bets! http://shopping.msn.com >
