I have IPSec tunnel between Mikrotik RB952Ui-5ac2nD and Stormshield SN300.
Tunnel is established but transfer is very very slow. I don’t know why…
I check algorithms sha1/aes256, sha1/des etc… transfer is slow all time.
Maybe can I set some option in my Mikrotik?
Please help me fix it.


As there’s traffic passing, it’s obviously not a tunnel problem.
It’ll be good if you describe “very very slow” in actual throughput values.
If you mean the tunnel transfer rate being capped at around 5MBit with full CPU utilization, this is normal for mipsbe devices. In this case, you just need a more powerful router (consider any PPC- or TILE-based architecture).
-Chris