Slow l2tp/ipsec VPN

[Dido]

Hi,

I've very strange behaviour.

l2tp/ipsec VPN is very slow (sppedtest.net - under 2Mb/s) , the line is 100/50Mb. FortiGate client with SSL VPN is working as expected.

Version: FortiGate-60E v5.6.6,build1630,180913 (GA)

Clients - iOS/Android 8.1/Windows 10

Tested with LTE, just to confirm that line is OK (I've repeated tests using LTE , same speeds). FG is not overloaded.

Any ideas will be more than welcome.

[makco10]

Hello,

Only for test purpose you can disable the hardware acceleration:

Disabling NP acceleration for individual IPsec VPN phase 1s Use the following command to disable NP offloading for an interface-based IPsec VPN phase 1:

config vpn ipsec phase1-interface

edit phase-1-name

set npu-offload disable

end

Use the following command to disable NP offloading for a policy-based IPsec VPN phase 1:

config vpn ipsec phase1

edit phase-1-name

set npu-offload disable

end

The npu-offload option is enabled by default.

http://help.fortinet.com/...eleration-overview.htm