D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: Darazsweb on November 14, 2011, 06:03:44 PM

Title: DFL-210 ipsec vpn slow?
Post by: Darazsweb on November 14, 2011, 06:03:44 PM
Hi
I have lan-to-lan ipsec vpn with 2 DFL-210 units. On side A the wan is 10Mbit optical, side B is 120/10Mbit cable. IPsec encryption is AES. If I configure PPTP vpn at side A or B, the average speed is about the nominal wan (upload) speed around 9Mbit. But with the ipsec vpn config the max speed is about 2Mbit. At the same time the CPU load is only 10-15%. Is this normal with these units? Is there any parameter to allow more processing power to ipsec?
Title: Re: DFL-210 ipsec vpn slow?
Post by: chechito on November 30, 2011, 08:58:52 PM
try 3des encryption to discard a ipsec performance problem.

try connectin 2 dfl 210 directly in lan to validate the scenario
Title: Re: DFL-210 ipsec vpn slow?
Post by: b0rk on December 09, 2011, 05:03:04 AM
AES is faster than 3DES.

If the CPU is only around 15% it sounds like the issue orginate from somewhere else than the firewall.

Try lowering the TPCMSSVPNMax value to 1380 or 1360.
Title: Re: DFL-210 ipsec vpn slow?
Post by: juanjo on January 14, 2012, 12:50:48 PM
The same is for me, ipsec lan to lan is more slow than expected, in may case the ipsec is based on certificates and ... may be for the certificates, but .... CPU load is slow,

Any suggestion??
Title: Re: DFL-210 ipsec vpn slow?
Post by: juanjo on January 17, 2012, 11:26:15 AM
Quote from: juanjo on January 14, 2012, 12:50:48 PM
The same is for me, ipsec lan to lan is more slow than expected, in may case the ipsec is based on certificates and ... may be for the certificates, but .... CPU load is slow,

Any suggestion??

I take back what I said.

Now I can see that the CPU load is low because it is necessary to be it.
If i download one big file the speed amount is right, in other words it is the upload speed of the other end; and it is very good, because such as i said you in previous post, i am using certificates. The CPU is enough powerfull for me for the moment..

All right
Regards
Title: Re: DFL-210 ipsec vpn slow?
Post by: jonem on February 08, 2012, 07:03:03 AM
Hi,

We also have this problem. Has anyone resolved it?

Best,
Jon