Good day.
Kindly assist with the following "issue" I have.
Short story, investigating slow performance on customer site. They have a Ubiquiti Af-5X link between two offices. The Air fiber link runs at about 130Mbps. I have tested with my Linux micro server at each end, and confirmed the Link is 100% fine.
Site A:
Fortigate 80C
Firmware: v5.6.5 build1600 (GA)
Site B:
Fortigate 80C
Firmware: v5.6.5 build1600 (GA)
Problem:
When I do a copy from one Windows server on Site A to another Windows server on Site B, via the IPSEC tunnel between the two firewalls, I get nothing more than 2.6 M/sec, basically about 25% utilization of the link. Doing the same copy test outside of this IPSEC tunnel between two server, I get 8-10 M/sec speed, which is fine.
Firewalls are just there to inter connect the two offices.
Phase 1 Proposal (IPSEC Tunnel):
Algorithms: AES256-SHA256
Diffie-Hellman Group: 5 ( I tried from 21 to 1, MARGINAL difference )
Authentication Method: Pre-shared Key, IKE version 2
Even on the Ubiquiti equipment, it shows the link bandwidth, and then the traffic throughput, you can clearly see the IPSEC tunnel uses only 25% max of the link.
Please assist with some help, it would be much appreciated.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1732 | |
1105 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.