ER8411 VPN Asymmetric Performance

ER8411 VPN Asymmetric Performance

ER8411 VPN Asymmetric Performance
ER8411 VPN Asymmetric Performance
Sunday - last edited Monday
Tags: #VPN
Model: ER8411  
Hardware Version: V1
Firmware Version: 1.2.2

I have two ER8411: Router A, and Router B.

 

  • Router A has a public IP address and acts as an L2TP Server (encrypted).
  • Router B (at a different site) is behind a NAT and runs as an L2TP LAN-LAN client (encrypted).
  • Each of the two routers is on a 1GbE connection. Speed tests from devices behind both routers (before any VPN is configured) show symmetric 1GbE speeds to public speed test servers.
  • When I enable the VPN and configure full tunneling through it with a Routing Policy, traffic from devices behind Router B is appropriately routed through Router A.
  • Traffic from devices behind Router A (L2TP server) continue to have full symmetric 1GbE speeds to public servers.
  • Traffic from devices behind Router B (L2TP LAN-LAN client) now have extremely asymmetric speeds (72Mbps down, 710Mbps up).
  • The ER8411 advertises an encrypted L2TP speed of 2274.74 Mbps.

 

So my question is: what's the deal? Why am I losing 93% of my download speed on the VPN client on the VPN, when the advertised VPN throughput is more than double my link bandwidth?

 

I tried an OpenVPN config as well, seeing almost exactly the same asymmetric speeds.

  0      
  0      
#1
Options
1 Reply
Re:ER8411 VPN Asymmetric Performance
Monday

Hi @SomeNetEngineer 

Thanks for posting in our business forum.

1. Place it in bridge mode and test it bypassing the first NAT. Result is helpful for troubleshooting only when it is in a desired and controlled environment.

2. Diagram.

 

Select the tags that relate to the issue.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#2
Options