Community discussions

Search found 12 matches

by nicku
Fri Jun 15, 2018 1:38 am
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

Without IPSec I get slightly better performance, but it is just a plus of about 1 Mbps at peak. For testing I copy a file from a SMB share of a QNAP NAS to my computer. Concerning WAN limits: I have a download of 50 MBit/s and on the other site I have a upload of 40 MBit/s. So the FTP speed I measur...
by nicku
Fri Jun 15, 2018 1:11 am
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

I changed my initial vpn configuration to a GRE Tunnel (Interface) with IPSec secret and set up a IP Route, like I wrote some posts ago. And yes ping and SMB is working. Just too slow.
by nicku
Fri Jun 15, 2018 12:06 am
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

@nichky: my Firewall settings are the defaults: /ip firewall filter add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid add action=acc...
by nicku
Tue Jun 12, 2018 5:34 pm
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

Sorry for this late reply. Had no time to test with VDSL modems. Now my setup looks like this: Local Network 1 -- Mikrotik -- Modem (100/40 Down/Up) -- Internet -- Modem (50/10 Down/Up) -- Mikrotik -- Local Network 2 The Mikrotik Routers are connected via a IPSec GRE Tunnel. If I ping from one Local...
by nicku
Sat Feb 17, 2018 7:49 pm
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

Hi, today I had time to build a small test network like this: Laptop -- hEX -- FritzBox (Ports forwarded) -- Switch (my "test internet") -- FritzBox -- hEX -- Laptop I tested some different configurations but end up by only 3 MByte/s through the IPsec tunnel (SMB data transfer). Then I tried another...
by nicku
Sun Feb 11, 2018 7:42 pm
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

I looked at the sniffed traffic while downloading a file over https: There are many many retransmissions (TCP Fast Retransmissions, TCP Retransmissions and TCP Dup ACK) ESP packet size is 1506 IP packet size (my download) 1436 I never saw IPsec traffic and I don't know what I have to expect, but the...
by nicku
Sun Feb 11, 2018 1:22 pm
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

Not sure how much knowledge / experience you have, but I would do some packet sniffing to see what is happening on the network
Which packets shall I sniff and where? How can I see if somethings wrong?
by nicku
Sun Feb 11, 2018 12:48 pm
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

Try it with a pre-Bridge firmware and that is 6.40.5. I had the strangest things happening with the 750Gr3 on the Bridged firmware version and RC. https://mikrotik.com/download/archive I downgraded both routers to 6.40.5, but the bridge option still exists and speed hadn't changed. Is this what you...
by nicku
Sun Feb 11, 2018 11:50 am
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

If those are the correct numbers I am surprised you get 16 MBit/s, since upload speed on site 1 is 10 MBit/s... I thought I would get 50 MBit/s bandwidth limit in one direction and 10 MBit/s in the other direction. Can you tell me why I am wrong? I think you have misunderstood my setup. Edit: Try i...
by nicku
Sat Feb 10, 2018 1:15 pm
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

Site 1 has 50/10 MBit/s (Down/up) and site 2 has 100/50 MBit/s. For testing I was at site 1 and downloaded (https) a file from site 2. So there is a bandwidth limit of 50 MBit/s but I only got 16 MBit/s through the IPsec tunnel. Some ideas: Would it be better to use IPv6 between the sites? Should I ...
by nicku
Sat Feb 10, 2018 11:58 am
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

Re: hEX - IPsec Tunnel slow

The data is more or less sensitive, but I want this strong encryption. Shouldn't the hEX routers be much more powerful at IPsec? Two cores of the CPU are just at about 8%.
by nicku
Fri Feb 09, 2018 9:01 pm
Forum: Beginner Basics
Topic: hEX - IPsec Tunnel slow
Replies: 30
Views: 4572

hEX - IPsec Tunnel slow

Hi, I just bought two hEX Routers (750G r3, 6.41.2) and set up an IPsec tunnel between them. Both are running in Bridge Mode behind another DSL Router. I only want to use them as a VPN Gateway. Problem is that I only get about 16 MBit/s throughput. Internet connection should allow 40 MBit/s. I disab...