Skip to main content
Dido
New Member
October 15, 2018
Question

Slow l2tp/ipsec VPN

  • October 15, 2018
  • 1 reply
  • 3076 views

Hi,

I've very strange behaviour.

l2tp/ipsec VPN is very slow (sppedtest.net - under 2Mb/s) , the line is 100/50Mb. FortiGate client with SSL VPN is working as expected.

Version: FortiGate-60E v5.6.6,build1630,180913 (GA)

Clients - iOS/Android 8.1/Windows 10

 

Tested with LTE, just to confirm that line is OK (I've repeated tests using LTE , same speeds). FG is not overloaded.

 

Any ideas will be more than welcome.

    1 reply

    makco10
    Explorer II
    October 15, 2018

    Hello,

     

    Only for test purpose you can disable the hardware acceleration:

     

    Disabling NP acceleration for individual IPsec VPN phase 1s Use the following command to disable NP offloading for an interface-based IPsec VPN phase 1:

    config vpn ipsec phase1-interface
    edit phase-1-name
    set npu-offload disable
    end

     

    Use the following command to disable NP offloading for a policy-based IPsec VPN phase 1:

     

    config vpn ipsec phase1
    edit phase-1-name
    set npu-offload disable
    end

     

    The npu-offload option is enabled by default.

     

    http://help.fortinet.com/...eleration-overview.htm