Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 23 replies
  • Subscribers 4 subscribers
  • Views 63366 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC Site-To-Site VPN Slow

TKITFrank
Hi,

I have an strange issue, When I download a file from internet I get the maximum speed of my ADSL connection (13Mbit) But when I download from my remote site using a IPSEC tunnel i only get 2-4Mbit per stream.
If I download via multiple streams every stream get 2-4Mbit and I can get the maximum speed.

The CPU is never close to maxed. Only 1-2%.

I have Path MTU enabled and also ECN on both sites. I have tried without also but the same result.

Anyone got an idea on what could be the cause of this?

Best Regards
Frank


This thread was automatically locked due to age.
  • 0 in reply to BAlfson

    We have had the same problem in our company for about 4 weeks.

    Two locations Site to Site VPN:

     

    Location 1: SG135, 500/500 Mbit, FW: 9.605-1

    Location 2: SG125, 100/30 Mbit   FW: 9.605-1

     

    Since the last firmware update the SitetoSite VPN is extremely slow. I can only get a speed of exactly 780 KB/s.

    Before the update we were able to use the full bandwidth.

     

    Both tunnels have already been deleted, restarted the Firewall´s and tunnels newly set up. No improvement.

    IPS is not used at either site and MTU support is also active.

     

    Any ideas?

    Thanks

  • 0 in reply to Johannes Lang1

    I responded on your thread in the German Forum.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to TKITFrank

    Try to reduce the MTU at the client drastically.

    Possible you got usable speed with MTU 1200.

    next try to send and receive data.

    Is one direction good/ok and the other poor ... possible a duplex-mismatch-problem.


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Unfiltered HTML