Iperf Bandwith tests with Fortigate and VPN

[RolandBaumgaertner72]

Hi,

today we tried to get information about our interface bandwith with iperf and Fortigates. We would like to get information about a FG location in South America. Our main office are in Europe and we use FG100Fs and 7.2.X. All our offices have at least 2 x 1000/1000mb access but in South America we can only do speedtest on browsers where we get like 800/800 at the most.

Firts, we could not run iperf within the VPN from FG Europe <> FG South America. We set up a iperf server on windows on our side but doing diag traffictest run -c x.x.x.x we could not connect. We checked Windows FW, AV and policies and there was no way. As iperf-int we tried all interfaces (internal, WAN and the VPN interface).

After that we tried with a linux in our network and we created a VIP with 5201 and trying from our FG with WAN as interfaces we got like maximum 12mb trying at least 10 times. Doing the same from our FG locationes in EU we got like 300-700 mbs. 

We would like to know why we cant connect via the VPN interface and try the bandwith within. We checked policies and everything, we have ping, etc. What are we missing?

Getting only 10-20mbs means it doenst look good to connect this office with the main HQ, any suggestions?

Thanks!

[Anthony_E]

Hello Roland,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello Roland,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[Anthony_E · Accepted solution]

Hi Roland,

Did you already have a look at this KB article?:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-verify-bandwidth-passing-through-a/...

Regards,

[RolandBaumgaertner72]

Hi,

yes I saw this article and when we did the testing we did exactly the same with Vips.

But I was refering to check iperf within the IPsec connection. So we have a VPN established and I thought it would be nice using the iperf server in the local network but it would not work. 

Thanks!