Hi, i am trying to create VPN between my server in France and my home router (Routerboard 2011UAS-2HnD)
At first, i’ve tried to create L2TP/IPSec tunnel, but even with aes-128 encryption RB’s CPU was 100% loaded.
Now, i’ve disabled IPSec, but now I got troubles with speed - it’s even lower than with IPSec:
france-public is a public IP of server without vpn
france-local is a local IP (192.168.0.2)
#pscp sk@france-public:/home/sk/testfile .
testfile | 102400 kB | 9309.1 kB/s | ETA: 00:00:00 | 100%
#pscp sk@france-local:/home/sk/testfile .
testfile | 102400 kB | 5688.9 kB/s | ETA: 00:00:00 | 100%
#pscp testfile sk@france-public:/home/sk/tfile1
testfile | 22480 kB | 2810.0 kB/s | ETA: 00:00:00 | 100%
#pscp testfile sk@france-local:/home/sk/tfile1
testfile | 23496 kB | 559.4 kB/s | ETA: 00:00:00 | 100%
With IPSec it was possible to get speed about 2MB/s for upload.
Also, download speed is twice as lower if connected directly to server.
Here is configuration of router
/interface l2tp-server server
set authentication=mschap2 enabled=yes
/ip firewall filter
add chain=input connection-state=new dst-port=1701 in-interface=ether1 protocol=udp
add chain=input connection-state=new dst-port=4500 in-interface=ether1 protocol=udp
add chain=input connection-state=new dst-port=500 in-interface=ether1 protocol=udp
add chain=input connection-state=new in-interface=ether1 protocol=ipsec-esp
/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.0.0/24
/ip ipsec peer
add enc-algorithm=aes-128 exchange-mode=main-l2tp generate-policy=port-override
nat-traversal=yes
/ppp secret
add local-address=192.168.0.1 name=France profile=l2tp-vpn remote-address=192.168.0.2
routes=“192.168.1.0/24 192.168.0.2 1” service=l2tpHere is configuration of pppd and xl2tpd on server:
# more /etc/xl2tpd/xl2tpd.conf
[global]
port = 1701
access control = yes
rand source = dev
[lac flex]
lns = moscow-public
redial timeout = 1
redial = yes
require chap = yes
require authentication = yes
name = France
require pap = no
ppp debug = yes
pppoptfile = /etc/ppp/options.xl2tpd
autodial = yes
# more /etc/ppp/options.xl2tpd
unit 0
name France
remotename l2tp
ipparam Mikrotik
connect /bin/true
mtu 1450
mru 1400
nodeflate
nobsdcomp
persist
maxfail 0
nopcomp
noaccomp
noauth
defaultroute
usepeerdns
Is there any way to increase speed of VPN? I tried to change MTU and MRU at server with no luck.