Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
gbrits
New Contributor

slow degraded throughput on ipsec tunnel between fg-80C units

Good day.

Kindly assist with the following "issue" I have.

Short story, investigating slow performance on customer site. They have a Ubiquiti Af-5X link between two offices. The Air fiber link runs at about 130Mbps. I have tested with my Linux micro server at each end, and confirmed the Link is 100% fine.

 

Site A:

Fortigate 80C

Firmware: v5.6.5 build1600 (GA)

Site B:

Fortigate 80C

Firmware: v5.6.5 build1600 (GA)

 

Problem:

When I do a copy from one Windows server on Site A to another Windows server on Site B, via the IPSEC tunnel between the two firewalls, I get nothing more than 2.6 M/sec, basically about 25% utilization of the link. Doing the same copy test outside of this IPSEC tunnel between two server, I get 8-10 M/sec speed, which is fine.

 

Firewalls are just there to inter connect the two offices. 

Phase 1 Proposal (IPSEC Tunnel):

Algorithms: AES256-SHA256

Diffie-Hellman Group: 5 ( I tried from 21 to 1, MARGINAL difference )

Authentication Method: Pre-shared Key, IKE version 2

 

Even on the Ubiquiti equipment, it shows the link bandwidth, and then the traffic throughput, you can clearly see the IPSEC tunnel uses only 25% max of the link. 

 

Please assist with some help, it would be much appreciated.

0 REPLIES 0
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors