Slow VPN tunnels (SSL, PPTP, L2TP)

I’ve tried to search through the forums on this but I can’t seem to find anything with my specific issue and resolution.

I’ve tried an SSTP, PPTP and L2TP tunnel from three locations back to one central location and I seem to be VERY slow speeds. I’ve played around with MTU’s, encryption, compression but it’s all just about the same. SSTP seems to be the fastest where I’m getting about 10-15% of the max speed and 5-7% with L2TP and PPTP. The CPU on the VPN server RB is about 3-5% an the remote locations are 0-1%. All locations are RB750G’s at the moment. The central location will have a RB1200 soon.

Any suggestions on making things faster or more efficient?

On and I don’t think the RB750G’s are the issue. I set up a desktop with 2GB of Mem and Quad Core 2.3Ghz and 2 NICs and it’s still doing the exact same thing with the RouterOS 5.4 ISO demo image.

Anyone have any ideas?

When I do a BW Test to the internal SSTP/PPTP/L2TP address I get about 500k-700k. When I test the external IP of the Mikrotik I get about 5Mb-6Mb.

Hello,
I have the same problem did you get any solution for this?

No I have not. Another thing is I’ve tried is downgrading to 4.17 but I’m seeing the same issues.

I contacted the reseller I purchased the hardware from and they said they don’t provide support. I also contacted mikrotik support directly and I haven’t hard back from them.

is possiable to chat via massenger and to give me your mail

Yes, I guess there’s no PM on this forum but here’s my spam account. Just email me there and I’ll reply with my real email. kshive % yahoo*com

did you try to use another VPN account
there is site named bestfreevpn i tried it’s free vpn it works normally i don’t know why ??
i don’t know where is the error
i just want to hide my clients behind the VPN but i still i can’t

Bump - Anyone have any ideas?

I hope you do after last time we had a conversation. i still want to solve this problem. why no one from Mikrotikers help?

we have a big issue in VPN client in mikrotik, we connect from windows the VPN works normally but if we connect throw Mikrotik the VPN become very very slowly Why???

Please help in this case??

Still having problems with Mikrotik to Mikrotik VPN. I’ve tried to contact Mikrotik support directly with no response and the vendor I purchased the units from says they don’t provide technical support on their products and that I should contact Mikrotik directly.

Is there a forum moderator that can assist with this? It seems like I’m not the only one that’s having this issue.

There can be many reasons.
If a lot of packet retransmits occur due to unstable link then you will get low bandwidth.
MTU is bigger than interfaces between both VPN ends can handle. Check with ping what is the maximum packet size that can be sent without fragmentation.

I really tried to check the mtu with the ping utility and reconfigured it depending the results but it does not solve the problem.

We really facing a problem please help in it. Not just me and the topic owner but there is more in the forum with no solution also.

I found solution for L2TP, see
http://ask.metafilter.com/153863/Why-is-my-VPN-so-slow

there is no solution sstp gives me 7 Mbit over windows I get 20 Mbit, I have tweaked the MTU and the MRU and there is no gain that gets this to 20 Mbit, the fastest way to link up for me is creating a VPN appliance using a virtual machine to simply route my VPN internet via ICS to another ethernet port and distribute it via a switch,

I have the 751G with wireless router its a paperweight at this point

apparently this issue also exits with openvpn over udp, the solution however on openvpn if you have access to your own server, would be to add

net.inet.ip.fastforwarding = 1 on the server side it does help a bit, but for servers you do not have access to such as pay vpn gateways this will not be an option.

If you have a 20Mbit or better connection the only way you will get this speed is via windows on ICS ( internet connection sharing) although ugly it offers speeds over two network interfaces on either l2tp or sstp at around 17-19Mbit and my application is netflix. The MikroTik RB/751G Indoor Gigabit Wireless Router simply does surpass 7Mbit on the rls 6 Beta 2 router OS ( tried previous versions no diff), no matter what you do, also I do not consider myself a novice at networking or using mikrotik routers.

I am using Vmplayer created a windows XP virtual machine with the lowest requirements 512MB ram 10GB HD and the most minimal XP install to create a virtual machine designed only to route traffic, it works!


Until I discover something faster this is the only solution to break the 7Mbit download speed limit,

For the sake of information, changing the MTU to 1420 from 1460 upped our router-router PPTP connection speed from an average of 1.5 to 7mbit. This is between an 1100x2 and a 750G. The connection speeds are 25 on one end and 15 on the other, so this is better but still slower than what I would expect.

Hello,

Can someone tell me where exactly I should change the MTU and MRU (client/server, which interface etc.) and which values are the best for my connection?
I just have 10% of my Internet speed only through the L2TP/Ipsec connection (clean IPSEC is the same). Clean L2TP goes up to 4.5Mbps which is what I need through IPSEC too.
There’s no significant load on CPUs ~5-40%.

Mikrotik Server’s connection:
Internet - ADSL, with PPPoE through Ether1.
VPN - L2TP with Ipsec

  1. Mikrotik LAN-to-LAN connection:
    Internet - Ethernet on Ether1.
    VPN - L2TP with Ipsec

  2. Windows 7 Roadwarrior connection:
    Internet - Ethernet or WiFi.
    VPN - L2TP with Ipsec

Thank you,
T.P.

Same problem here. I have a 120/10 connection, and I can only using 12-13Mbps over it with NAT on L2TP /wo compression and encryption on my RB450G:

[oreggin@RB450G] > /interface monitor ether1
name: ether1
rx-packets-per-second: 2 020
rx-drops-per-second: 0
rx-errors-per-second: 0
rx-bits-per-second: 12.7Mbps
tx-packets-per-second: 605
tx-drops-per-second: 0
tx-errors-per-second: 0
tx-bits-per-second: 691.7kbps

[oreggin@RB450G] > /interface monitor l2tp
name: l2tp
rx-packets-per-second: 1 010
rx-drops-per-second: 0
rx-errors-per-second: 0
rx-bits-per-second: 11.8Mbps
tx-packets-per-second: 570
tx-drops-per-second: 0
tx-errors-per-second: 0
tx-bits-per-second: 341.8kbps

[oreggin@RB450G] > /system resource print
uptime: 23h7m39s
version: 6.4
build-time: Sep/12/2013 13:52:41
free-memory: 232.9MiB
total-memory: 256.0MiB
cpu: MIPS 24Kc V7.4
cpu-count: 1
cpu-frequency: 680MHz
cpu-load: 18%
free-hdd-space: 482.9MiB
total-hdd-space: 512.0MiB
write-sect-since-reboot: 505
write-sect-total: 2144719
bad-blocks: 0%
architecture-name: mipsbe
board-name: RB450G
platform: MikroTik

[oreggin@RB450G] > /interface l2tp-client export

oct/12/2013 15:37:13 by RouterOS 6.4

software id = XXXX-XXXX

/interface l2tp-client
add add-default-route=yes allow=pap connect-to=a.b.c.d disabled=no max-mru=1492 max-mtu=1492 name=l2tp password=xxx profile=default user=sb@sw.net

I would like to use the L2TP for primary internet connection at home. The MTU/MRU trick is ineffective. If I stop my torrent client then other FTP session is lagged but can continue transfer for some seconds later. The RB450G can use 120M speed over native connection or over GRE and NAT with 60% CPU. Only the L2TP is slow.

I found this topic and I would like to correct me. L2TP client MTU/MRU is 1460 if uplink MTU is 1500byte. This because L2TP uses UDP encapsulation (UDP port 1701). IPv4 + UDP header = 20+20 = 40 byte. 1500-40=1460.
With these options I can reach almost the maximum speed of the router capability @ 100% CPU.