Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

slow degraded throughput on ipsec tunnel between fg-80C units

Good day.

Kindly assist with the following "issue" I have.

Short story, investigating slow performance on customer site. They have a Ubiquiti Af-5X link between two offices. The Air fiber link runs at about 130Mbps. I have tested with my Linux micro server at each end, and confirmed the Link is 100% fine.


Site A:

Fortigate 80C

Firmware: v5.6.5 build1600 (GA)

Site B:

Fortigate 80C

Firmware: v5.6.5 build1600 (GA)



When I do a copy from one Windows server on Site A to another Windows server on Site B, via the IPSEC tunnel between the two firewalls, I get nothing more than 2.6 M/sec, basically about 25% utilization of the link. Doing the same copy test outside of this IPSEC tunnel between two server, I get 8-10 M/sec speed, which is fine.


Firewalls are just there to inter connect the two offices. 

Phase 1 Proposal (IPSEC Tunnel):

Algorithms: AES256-SHA256

Diffie-Hellman Group: 5 ( I tried from 21 to 1, MARGINAL difference )

Authentication Method: Pre-shared Key, IKE version 2


Even on the Ubiquiti equipment, it shows the link bandwidth, and then the traffic throughput, you can clearly see the IPSEC tunnel uses only 25% max of the link. 


Please assist with some help, it would be much appreciated.

Top Kudoed Authors