Hello,
We have 2 virtual fortigates - one is deployed in Azure environment, second in our local datacenter on ESXi infrastructure. On these 2 fortigates we have installed trial licenses (provided by vendor). We have configured IPsec over GRE between these 2 fortigates. Connection is stable but speed is very low, maximum in peak was 15 mbp\s. Not sure there is the problem..
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Use the following doc to troubleshoot : https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-troubleshoot-speed-or-bandwid...
@1mm try to force nat-t under ipsec phase1 config
Technical Tip: IPSec VPN nattraversal - Fortinet Community
I would suggest setting up a lower TCP-MSS ~ 1350 for both directions .
This is recommended for IPsec tunnels on FGTs hosted in Azure Cloud
https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/255100/ipsec-vpn-to-azure-with-virtual-...
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Setting-TCP-MSS-value/ta-p/194518
Thanks for your replies,
I have one question, can it be referred to trial license? Are there any limitation of trial licenses provided by vendor?
@1mm , Based on my knowledge, we do not impose any resource limitations for trial licenses.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1641 | |
1069 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.