@Clive_A 

Yes you have right. and i know, but this is Site to Site not L2TP. Sit To Site is very good but not L2TP, L2TP do abut 80-120 Mbps Not 650Mbps as Site to site do.

Clive_A wrote

Hi @MR.S 

MR.S wrote

  @Libik @Clive_A 

 

 

Its something strange, when I do Site To Site with much stronger encryption than L2TP the speed is almost 80MB/s

On S2S I use this encryption

SHA-384 - AES256 - DH14
ESP - SHA-384 - AES256

This test is done with ER707-M2 and remote is a Cisco FPR-1120

 

 

 

This is the correct value on computer science.. Mb to MB, you need to do the math.

 

  @Clive_A 

I have two but in difference location, there is Site to Site between this two ER707-M2 now  with very good speed 500/500Mbps that is max on my home net, if i have time I next weekend I can remove site to site and configure L2TP between site to test. 

  @MR.S 

This looks nice but i do not think it is in encryption algorithm, because PPTP is thé slowest in my situation.

  @Libik 

There must be somthing elst that slow down your vpn.

I configure one ER707 as PPTP-Server and the other ER707 as PPTP-Client and when I copy a file i get 130-150Mbps not grate but OK.  

When I rout all trafic thrue PPTP tunnel and out on remote site I have this speed

Clive_A wrote

Hi @MR.S @Libik 

MR.S wrote

  @Clive_A 

 

Yes you have right. and i know, but this is Site to Site not L2TP. Sit To Site is very good but not L2TP, L2TP do abut 80-120 Mbps Not 650Mbps as Site to site do.

My hands are tied because I don't have two 707-M2 for tests. If you have two, you can set it up in the LAN environment and run the test, iperf would be recommended for the test.

I am pretty much reaching the limit with this command. iperf3 -c server_ip -i 1

If you suspect this data is inaccurate, you may perform the test. As far as I know, the team told me the test is done similar environment to test its hardware limit and produce the performance data.

  @Clive_A 

OK, @Clive_A I do some testing between two ER707-M2,  they is in different location so this is real life test.

IPsec Site to Site and L2TP about the same when testing 350-500 Mbps (if I test between ER707-m2 and Cisco FPR1120 or ASA5515 the speed is mutch mutch faster)
PPTP is mutch slower 130-140 Mbps

use the strongest encryption on S2S so speed is very good on this device with IPsec.

So in short, I think ER707-M2 is a very good device for IPsec VPN, OpenVPN is even bether and faster than ER8411 to :-) but TP-Link have a big job to do with OpenVPN compatibility

and speed, 

@Libik 

How is your status on your VPN issue. I think you should ask TP-Link support about help to look at your problem. I don't understand why everything go so slow for you.

there must bes something other than ER707-M2 that slow down VPN speed.

  @MR.S 

Hi,

same bad results for me. Now I am thinking about returning device a look somewhere else. I am in contact with support. Maybe they will advice something. I have one week left for returning device.

Here is my configuration, I do not know what else I can do. I do not use any other routing, VLAN, etc. I just want several VPN tunnels (which could aggregate my internet connection) and a VPN server in a price around 250Euros. If I select routing instead of NAT, I cannot access remote server IP at all.

  @Libik 

its not much to configure on router vpn client so the problem is not there.

routing work probably only if you have omada router in both end, you have to crate a user with Network Extension Mode enabled in l2tp server to get this to work. then you have a site to site on a l2tp or pptp

 to be honest I don't think your problem is solved with a other brand. ER707 is very fast vpn router for the price. and much faster than udm-pro or uxg-pro. I have tested them all.

unifi have more vpn support now than earlier but have only openvpn client, there is no l2tp or pptp client on unifi any more. anyhow, unifi had never l2tp client only pptp on the old usg-pro and usg3p routers.

sorry that i cant help you, if you figure out of this you have to update this thread :-) you have a strange issue no question about that.