Community discussions

Search found 11 matches

by sallen
Thu Dec 22, 2016 10:41 pm
Forum: RouterBOARD hardware
Topic: RB750Gr3 - Report and questions
Replies: 112
Views: 33391

Re: RB750Gr3 - Report and questions

So just to confirm what i am reading, Hex v3 to Strongswan ipsec in transport will yeild somewhere around 100Mbits, and in tunnel can yield more? I want to put one of these in front of my 2011 for the aes128 HW encryption wanna make sure i can hit at least 75/75 Finally received a RB750Gr3 yesterda...
by sallen
Tue Nov 08, 2016 7:02 pm
Forum: General
Topic: Decline of Mikrotik?
Replies: 102
Views: 26958

Re: Decline of Mikrotik?

My ticket reporting IPsec driver issue on CCR has been open for nearly 1 year now with no resolution. Others are noticing too: http://forum.mikrotik.com/viewtopic.php?f=1&t=112545 The most frustrating part is that even with weeks between checking in, I repeatedly get told things like "I do not have...
by sallen
Thu Oct 20, 2016 11:17 pm
Forum: General
Topic: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)
Replies: 134
Views: 26796

Re: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)

Can someone tell me if this reasoning is correct? Even though the new hex r3 can support HW accelerated encryption without these reordering issues, it seems that there is no way to use one of those successfully on a site-to-site VPN with a CCR one one endpoint. As I understand it, the only way to fo...
by sallen
Tue May 03, 2016 9:51 pm
Forum: RouterBOARD hardware
Topic: wAP AC (General questions and experience)
Replies: 118
Views: 44671

Re: wAP AC (General questions and experience)

Thanks for this review!

Would love to get some of these units, but apparently not available in the US yet. Anyone know when distributors here might actually receive some?
by sallen
Fri Mar 13, 2015 7:59 pm
Forum: General
Topic: Cloud Core IPSEC performance
Replies: 15
Views: 6880

Re: Cloud Core IPSEC performance

I have this same problem with the RB850Gx2. It maxes out around 20 Mbps throughput on a 60 Mbps line when accessing a NATed machine behind the router. When I do a throughput test against the router itself, I get the full 60 Mbps. There is something seriously wrong with the IPSEC tunnel. The dumb thi...
by sallen
Wed Nov 26, 2014 11:19 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 - Release date?
Replies: 193
Views: 47724

Re: RB850Gx2 - Release date?

5. ~150-200Mbps I have tested all types of encryption and the max I have achieved is 20mbps. What settings you have used ? Agreed. The IPSEC performance is awful. Both with PPPoE and L2TP I also only get about 20mbps. Am going to try to return these things. My RB951G-2HnD outperforms them. I am ser...
by sallen
Wed Nov 05, 2014 11:14 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 - Release date?
Replies: 193
Views: 47724

Re: RB850Gx2 - Release date?

L2TP/IPsec performance in ROS 6.21.1 is currently garbage for the RB850Gx2. I cannot get greater than about 5Mbps using sha1/aes-256cbc. The CPU doesn't even seem to be maxed out. My RB951G-2HnD will outperform that and go up to ~30Mbps at 100% CPU.

Any plans to improve?
by sallen
Wed Nov 05, 2014 8:58 pm
Forum: RouterBOARD hardware
Topic: RB850gx2 MTU issue confirmed by me:)
Replies: 18
Views: 5395

Re: RB850gx2 MTU issue confirmed by me:)

It appears ROS 6.21.1 has bumped the L2 MTU to 1580.
by sallen
Wed Nov 05, 2014 8:11 am
Forum: RouterBOARD hardware
Topic: RB850Gx2 IPSEC Kernel Failure
Replies: 1
Views: 1077

Re: RB850Gx2 IPSEC Kernel Failure

Mikrotik just released ROS 6.21.1 which seems to fix this issue. Yay!
by sallen
Mon Nov 03, 2014 6:04 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 IPSEC Kernel Failure
Replies: 1
Views: 1077

RB850Gx2 IPSEC Kernel Failure

Has anyone been able to get the new RB850Gx2 working with an IPSEC tunnel? I get a kernel failure and the routers reboot at the end of phase 2 negotiation. I purchased two of these devices specifically because I was led to believe they would have hardware encryption and would be suitable for a site-...
by sallen
Tue Feb 25, 2014 12:59 am
Forum: General
Topic: IPsec tunnel is only established in one drirection.
Replies: 8
Views: 2149

Re: IPsec tunnel is only established in one drirection.

In firewall filter rules allow UDP on port 500 and protocol 50 (ipsec-esp).