• February 23, 2025, 02:01:19 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: DFL-210 ipsec vpn slow?  (Read 7349 times)

Darazsweb

  • Level 1 Member
  • *
  • Posts: 1
DFL-210 ipsec vpn slow?
« on: November 14, 2011, 06:03:44 PM »
Hi
I have lan-to-lan ipsec vpn with 2 DFL-210 units. On side A the wan is 10Mbit optical, side B is 120/10Mbit cable. IPsec encryption is AES. If I configure PPTP vpn at side A or B, the average speed is about the nominal wan (upload) speed around 9Mbit. But with the ipsec vpn config the max speed is about 2Mbit. At the same time the CPU load is only 10-15%. Is this normal with these units? Is there any parameter to allow more processing power to ipsec?
Logged

chechito

  • Level 3 Member
  • ***
  • Posts: 193
Re: DFL-210 ipsec vpn slow?
« Reply #1 on: November 30, 2011, 08:58:52 PM »
try 3des encryption to discard a ipsec performance problem.

try connectin 2 dfl 210 directly in lan to validate the scenario
Logged

b0rk

  • Level 1 Member
  • *
  • Posts: 8
Re: DFL-210 ipsec vpn slow?
« Reply #2 on: December 09, 2011, 05:03:04 AM »
AES is faster than 3DES.

If the CPU is only around 15% it sounds like the issue orginate from somewhere else than the firewall.

Try lowering the TPCMSSVPNMax value to 1380 or 1360.
Logged

juanjo

  • Level 2 Member
  • **
  • Posts: 52
Re: DFL-210 ipsec vpn slow?
« Reply #3 on: January 14, 2012, 12:50:48 PM »
The same is for me, ipsec lan to lan is more slow than expected, in may case the ipsec is based on certificates and ... may be for the certificates, but .... CPU load is slow,

Any suggestion??
Logged

juanjo

  • Level 2 Member
  • **
  • Posts: 52
Re: DFL-210 ipsec vpn slow?
« Reply #4 on: January 17, 2012, 11:26:15 AM »
Quote from: juanjo on January 14, 2012, 12:50:48 PM
The same is for me, ipsec lan to lan is more slow than expected, in may case the ipsec is based on certificates and ... may be for the certificates, but .... CPU load is slow,

Any suggestion??

I take back what I said.

Now I can see that the CPU load is low because it is necessary to be it.
If i download one big file the speed amount is right, in other words it is the upload speed of the other end; and it is very good, because such as i said you in previous post, i am using certificates. The CPU is enough powerfull for me for the moment..

All right
Regards
« Last Edit: January 17, 2012, 01:49:21 PM by juanjo »
Logged

jonem

  • Level 1 Member
  • *
  • Posts: 1
Re: DFL-210 ipsec vpn slow?
« Reply #5 on: February 08, 2012, 07:03:03 AM »
Hi,

We also have this problem. Has anyone resolved it?

Best,
Jon
Logged