This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

L2TP slow on XG

Hello Community,

I'm migrating from a SG550 (UTM) to a new XGS5500 (SFOS 19.5). Both firewalls connected to the same ISP. If I connect to the UTM via L2TP I can copy a file via CIFS with around 5 MB/s, which is almost equal to the bandwidth of the client. If I connect to the XG (same client, same internet connection on client side), I can only download with a speed of 1 ~ 1.5 MB/s. Other test users report the same problem.

I did some tests with different MTU sizes on XG (reduced from 1410 to 1320 in L2TP configuration), the same on the Windows L2TP Adapter from 1400 to 1300. All combinations did not speed up the CIFS download.

Has anybody the same issue and solved it?

Ben

This thread was automatically locked due to age.

0 Thomas_XG over 2 years ago

Hi Ben,

did you compare your encryption profiles with UTM and XGS?

_______________________________________________________

Sophos SG 210 with Sophos XG Home - 19.5 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 2 years ago

What are the IPS settings on the XG?

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to Thomas_XG

Hey, can you perform the iperf test and share the results ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ben@Network over 2 years ago in reply to Thomas_XG

Hi Thomas,

we use the "DefaultL2TP" profile on XGS.

Ben

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ben@Network over 2 years ago in reply to Vivek Jagad

Hi Vivek,

the iperf results are nearly the same:

iperf SG/UTM:

iperf on XGS:

Here the results with Windows file copy from server to client.

Copy over SG/UTM L2TP VPN:

Copy over XGS L2TP VPN:

Ben

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ben@Network over 2 years ago in reply to rfcat_vk

Hi Ian,

for testing I disabled "DoS attacks" with the same results.

Ben

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel