Community discussions

MikroTik App
 
borex
just joined
Topic Author
Posts: 2
Joined: Thu Jul 29, 2021 9:28 pm

Packet loss when using ipsec on the mmips platform

Thu Jul 29, 2021 9:51 pm

Hello.

I have a problem with packet loss when using Site-To-Site IPSEC VPN on the MMIPS platform with RouterOS version 6.48.10 (long-term).
Connection diagram: PC1 - network - MikroTik hEX - internet - Cisco ASA - network - PC2
All packets from PC2 come to PC1.
I checked the transmission of ICMP packets from PC1 using ping, flood ping - all packets reach the destination. UDP packets are also fine. Perhaps there were not enough packets.
When I start sending TCP packets from PC1, about half of the packets reach their destination.
Very interesting: when I turn on Packet Sniffer on MikroTik hEX, the destinations reach all 100% of the packets.
Can someone help me with the problem?
 
andriys
Forum Guru
Forum Guru
Posts: 1526
Joined: Thu Nov 24, 2011 1:59 pm
Location: Kharkiv, Ukraine

Re: Packet loss when using ipsec on the mmips platform  [SOLVED]

Thu Jul 29, 2021 10:21 pm

Make sure you do not fasttrack the inner-tunnel traffic. Perhaps just try disabling all fasttrack rules first and see if it helps.
 
borex
just joined
Topic Author
Posts: 2
Joined: Thu Jul 29, 2021 9:28 pm

Re: Packet loss when using ipsec on the mmips platform

Thu Jul 29, 2021 10:38 pm

Thanks. The range of addresses behind the tunnel was included in the fasttrack rule.
It works now.

Who is online

Users browsing this forum: BinaryTB, Bing [Bot], Google [Bot] and 68 guests