Slow L2TP VPN on ER8411?
Slow L2TP VPN on ER8411?
Hi! I had an ER605, running an L2TP VPN. It was slow, at 45Mbps, but within specs.
I changed it for an ER8411, and it's a bit better, at around 200Mbps, or 25MBps file transfer. I was expecting much more, since it's rated for over 2Gbps, and I have 1Gbps fiber connections on both sides.
I also tried OpenVPN but it's barely 10Mbps.
Any idea?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
What sort of latency do you experience between sites (ie what's the ping time to the far end)? SMB is protocol heavy and not great for transferring over high latency connections.
Chances are you are hitting TCP windowing issues, which will limit the maximum usable throughput PER TCP session:
- Copy Link
- Report Inappropriate Content
@d0ugmac1 I get about 3ms. Tried different sites at different distances and latencies, always the same speed.
- Copy Link
- Report Inappropriate Content
I do have to ask, are you sure that wasn't 25MBps because that would be 200Mbps.
- Copy Link
- Report Inappropriate Content
@d0ugmac1 Yes, like I said in my first post, I get 200mbps, so 25MBps when transfering files. I wanted to get more, since my connections are 1Gbps.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
@d0ugmac1 If I transfer multiple files at once, it shares the total 25MBps bandwidth, so it splits the speed.
I would like to use WireGuard, but AFAIK, it does not exist on the ER8411, even in standalone mode.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
@d0ugmac1 A computer, I was actually able to get much better speeds using IPsec, but now I'm facing another issue, much worse, so I made another post.
Thanks for the help!
- Copy Link
- Report Inappropriate Content
@Remy4409 one more thing to consider is fragmentation. Nominally 1500 bytes for ethernet interfaces, the encapsulation and encryption headers needed for L2TP + IPsec make 1400 a safer number for the MSS, maybe set the interface MTU to be 1420 or so. Not sure if this is exposed to users though.
Fragmentation means breaking 1 packet into 2 for transmission, and then reassembling. It slows things down for sure!
- Copy Link
- Report Inappropriate Content
Hi @Remy4409
Could you please run IPerf test, to check if it is your ER8411 hardware issue? Our SPEC is based on Iperf testing result.
Connect a test PC to one of the ER8411 WAN port directly. PC and ER8411 WAN should have the static IP in the same subnet.
Then configure the VPN on test PC;
And run IPerf from test PC to the server in ER8411 LAN network.
Abour how to use IPerf, guide link.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 1497
Replies: 13
Voters 0
No one has voted for it yet.