Business Community > All Threads > Extremely slooooow LAN-to-LAN IPSec download
< All Threads

Extremely slooooow LAN-to-LAN IPSec download

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Extremely slooooow LAN-to-LAN IPSec download

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Extremely slooooow LAN-to-LAN IPSec download
Extremely slooooow LAN-to-LAN IPSec download
2023-03-02 13:24:59
Tags: #VPN
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version: 2.1.2 Build 20230210 Rel.62992

Router A <== internet ==> Router B, internet speed 100Mbps

 

Router A: ER605 v2 , Vigor2926 (for troubleshooting)

Router B: Fortigate v7.2

 

A NAS is connected to Site B,

 

Both routers are direct connect to internet, no NAT

IPsec tunnel is successfully connected, both side can ping each other subnet

 

upload file from A => B, good speed, ~10MB/s 

download file from B, extremely sloooooow, ~0.2MB/s, and always stop download over a few seconds

 

Download means SMB, https, etc from the NAS

 

Tested TWO ER605 v2, exactly same result.

 

Replace ER605 v2 with a very old Vigor2926, both upload and download speed normal, reach ~10MB/s, so, no issue with site B configuration.

 

 

 

 

 

 

  0      
 
  0      
 
#1
Options
4 Reply
Re:Extremely slooooow LAN-to-LAN IPSec download
2023-03-03 08:50:22

  @kkyyww 

 

what encryption are you using?
I have ER605v2 against Cisco ASA5515 and there I get download at 200 Mbps Upload 180 Mbps

same between ER8411 and ER605v2

 

My encryption is like this

phase1
SHA-256 - AES256 - DH14
phase2
ESP - SHA-256 - AES256
dh5

 

  0  
  0  
#2
Options
Re:Extremely slooooow LAN-to-LAN IPSec download
2023-03-03 08:51:13

Hello @kkyyww ，

 

The issue you are experiencing sounds weird, can you use Iperf tool to test it?

If you can share the result of Iperf test,  it will be useful.

Best Regards! >> Omada EAP Firmware Trial Available Here << >> Get the Latest Omada SDN Controller Releases Here << *Try filtering posts on each forum by Label of [Early Access]*
  0  
  0  
#3
Options
Re:Extremely slooooow LAN-to-LAN IPSec download
2023-03-03 16:11:47 - last edited 2023-03-03 16:13:58

  @shberge 

shberge wrote

  @kkyyww 

 

what encryption are you using?
I have ER605v2 against Cisco ASA5515 and there I get download at 200 Mbps Upload 180 Mbps

same between ER8411 and ER605v2

 

My encryption is like this

phase1
SHA-256 - AES256 - DH14
phase2
ESP - SHA-256 - AES256
dh5

 

I tried many different combinations, will try yours, thanks

btw, what is your firmware version?

 

 

  0  
  0  
#4
Options
Re:Extremely slooooow LAN-to-LAN IPSec download
2023-03-03 16:41:13

  @kkyyww 

 

I use 

Firmware Version:

2.1.2 Build 20230221 Rel.41247

 

but I have alway have good site to site speed on ER605v2, 

  0  
  0  
#5
Options

Information

Helpful: 0

Views: 500

Replies: 4

Tags

VPN
Related Articles
VPN LAN-LAN and LAN-USER at same time
491 0
IPSec LAN-LAN Full Tunnel
165 0
VPN lan to lan not ping
1618 0
VPN IPSec LAN-to-LAN
125 0
Lan-Lan IPsec tunnel with two ER605, each behind ISP routers
566 0
ER605 IPSEC LAN to LAN VPN establishes connection but not routing traffic
1204 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.