Hi!
I've a setup where two 1100AH are connected via 100Mbit and I'm using IPsec with
/ip ipsec proposal add auth-algorithms=null disabled=no enc-algorithms=aes-128 lifetime=30m name=IPSec pfs-group=modp1024
And I'm getting 10mbyte/sec through the tunnel, but I don't understand following (during coping via ftp) on the Mikrotiks:
[admin@xxxx] /system resource cpu> /system resource cpu print
CPU LOAD IRQ DISK
0 87% 82% 0%
[admin@xxxx] /system resource cpu> /system resource cpu print
CPU LOAD IRQ DISK
0 90% 90% 0%
[admin@xxxx] /system resource cpu> /system resource cpu print
CPU LOAD IRQ DISK
0 95% 92% 0%
[admin@xxxx] /system resource cpu> /system resource cpu print
CPU LOAD IRQ DISK
0 91% 90% 0%
...........
As IPsec AES128 should be done in hardware, and the load is always near the IRQ value, i believe it is responsible for the high load. Why is that so? Do I use the wrong interface (for testing I'm using Eth1 and Eth13). Should I user others? Some other wrong setting? Or just normal?
Thx.