Community discussions

MikroTik App
 
josu
Member Candidate
Member Candidate
Topic Author
Posts: 152
Joined: Wed May 27, 2015 6:20 pm

100Mbps VPN

Tue May 24, 2016 11:24 pm

Hello all,

I have a RB450G router with a 300Mbps/300Mbps internet connection. In other place I have a 100Mbps/10Mbps internet connection and I want to join them with a VPN.

I read in the IPSec wiki that it depend on which hardware I use I could get different results.

If I put the RB 450G and a RB750UP r2, could I get a 100Mbps VPN?

Which VPN do you recommend? OpenVPN? IPSec? PPTP?

I really appreciate your help, best regards.
 
User avatar
chechito
Forum Guru
Forum Guru
Posts: 3006
Joined: Sun Aug 24, 2014 3:14 am
Location: Bogota Colombia
Contact:

Re: 100Mbps VPN

Wed May 25, 2016 4:38 am

i have tested on mikrotik mipsbe devices the maximum ipsec throughput is less than 40mbps using aes-128 with cpu usage 100%

second batch of rb850gx2 have ipsec acceleration but i have dont tested

http://wiki.mikrotik.com/wiki/Manual:IP ... encryption
 
josu
Member Candidate
Member Candidate
Topic Author
Posts: 152
Joined: Wed May 27, 2015 6:20 pm

Re: 100Mbps VPN

Wed May 25, 2016 11:42 am

Thanks chechito.

Is there other VPN that could handle more bandwidth, I don't need to mush security in the link.

Regards.
 
mada3k
Long time Member
Long time Member
Posts: 697
Joined: Mon Jul 13, 2015 10:53 am
Location: Sweden

Re: 100Mbps VPN

Wed May 25, 2016 2:50 pm

I use two hAP with IPSec tunnel. Since it lacks crypto-offload, it maxes out about ~30Mbps

I suggest IPSec with some board with crypto-offload in hardware. OpenVPN support on RouterOS isn't that great (and IPSec is much better for permanent/static tunnels)

If security is not a concern, you could use an plain GRE/IP-IP tunnel.
 
josu
Member Candidate
Member Candidate
Topic Author
Posts: 152
Joined: Wed May 27, 2015 6:20 pm

Re: 100Mbps VPN

Wed May 25, 2016 5:28 pm

I use two hAP with IPSec tunnel. Since it lacks crypto-offload, it maxes out about ~30Mbps

I suggest IPSec with some board with crypto-offload in hardware. OpenVPN support on RouterOS isn't that great (and IPSec is much better for permanent/static tunnels)

If security is not a concern, you could use an plain GRE/IP-IP tunnel.
Thanks for the reply.

Which RB has board with crypto-offload in hardware? I want to use the RB450G that I bought.

Kind regards.
 
Feklar
Forum Guru
Forum Guru
Posts: 1724
Joined: Tue Dec 01, 2009 11:46 pm

Re: 100Mbps VPN

Wed May 25, 2016 9:52 pm

Thanks for the reply.

Which RB has board with crypto-offload in hardware? I want to use the RB450G that I bought.

Kind regards.
Currently these 3 kinds of boards have the acceleration hardware:
CCR line of boards
850Gx2
1100AHx2

The 3011 has acceleration hardware on the CPU, but it has not been implemented yet in the OS, it might be an added feature once ROS 7.x comes out.

The 450G does not have the necessary hardware and will cap out at around 30-40 Mbps of encrypted traffic.
 
josu
Member Candidate
Member Candidate
Topic Author
Posts: 152
Joined: Wed May 27, 2015 6:20 pm

Re: 100Mbps VPN

Wed May 25, 2016 11:51 pm

Thanks!

So 850Gx2 is the hardware a need.

Best regards.

Who is online

Users browsing this forum: No registered users and 67 guests