IPsec hardware encryption

RouterOS General
1

good evening, I need advice on VPN, I have two routers RB1100AHx4 and RB750gr3 and I want to ask how to turn on IPsec hardware encryption?

on OVPN with certificate I have 1.5Mbps on L2TP/IPSec I have 7Mbps

I couldn’t find instructions here on the forum, if there is, please direct me

2

please refer to this table

if you use a compatible encryption algorithm and hash then it will be offloaded, if you don’t then it won’t be.

3

I use SHA 1 and AES-CBC 256, I also tried AES 128 and it didn’t help, IPSec is automatically accelerated, or do I need to do something?

4

Are you sure it’s the (possible lack of) acceleration? Those numbers look way low even for non-accelerated.

5

Can you please give me the config of your VPN here? Delete the WAN IP address, I would like to compare it with mine to see what I am doing wrong.

6

I don’t have anything special that would be different from examples in manual:

https://wiki.mikrotik.com/wiki/Manual:Interface/OVPN
https://wiki.mikrotik.com/wiki/Manual:Interface/L2TP

My point is that even historic RB433AH, that I can do quick test with, can do ~20 Mbps with OVPN and ~25 Mbps with IPSec (without L2TP, but it shouldn’t make much difference). And that device has much weaker CPU than yours and no HW acceleration at all. So your problem is probably elsewhere.

Also, posting configs works better the other way, when you post yours and someone might spot what’s wrong.