TL-R600VPN IPsec Tunnel Extremely Slow

TL-R600VPN IPsec Tunnel Extremely Slow
TL-R600VPN IPsec Tunnel Extremely Slow
a week ago
Model: TL-R600VPN
Hardware Version: V4
Firmware Version: 4.0.3 Build 20180530 Rel.63202

I have a situation where I was trying to divide a couple of networks by adding a router in between them (Company LAN = 192.168.1.0/24 & Private LAN = 10.10.1.0/24). Originally my intention was to just set a firewall rule to allow all inbound traffic from the the Company LAN to the Private LAN. For what ever reason the firewall would only allow me to ping to the Private LAN gateway of 10.10.1.254, no further than that. I attempted to work with TP-Link support to resolve this, but after many wasted hours with them I decided to just throw in the towel and configure an IPsec VPN from the SonicWall to the TL-R600VPN across the Company LAN. The VPN works and passes traffic, but it never reaches even close to full speed, currently it is peaking at about 5-10 kbps. 

 

A user in Oregon connects to the Company LAN via NetExtender SSL VPN to access the Private LAN. 

I am not sure why these speeds are so low. I have tried to reduce the proposals down to P1: md5-des-dh1 & P2: esp-md5-des. None of proposal adjustments I have made have had any difference at all. I started at P1: sha1-aes256-dh2 & P2: esp-sha1-aes256. 

 

The transfer speeds to the Company LAN are fine, it is only when we communicate with the Private LAN that I run into the bottleneck. 

 

I need to either how to configured the IPsec VPN to work at full speed (20 ish mbps), or how to properly configure the TP-Link TL-R600VPN to allow traffic from the Company LAN to the Private LAN with routing or NAT.

 

I have made configurations like this in the past with SonicWalls and Cisco devices, but this device is giving me nothing but trouble trying to get it to respect my settings and work the way I expect it to. 

 

 

 

0
0
#1
Options
3 Replies
Re:TL-R600VPN IPsec Tunnel Extremely Slow
a week ago

@SSI_LDC 

 

Hello, the first thing coming on my mind is to check for a firmware upgrade from the TP-Link website. The latest firmware is released in May.

https://www.tp-link.com/us/support/download/tl-r600vpn/#Firmware

0
0
#2
Options
Re:TL-R600VPN IPsec Tunnel Extremely Slow
a week ago

@Yannie Just updated to: 4.0.4 Build 20200313 Rel.41831 and there is no improvement as I was expecting. 

0
0
#3
Options
Re:TL-R600VPN IPsec Tunnel Extremely Slow
a week ago

@SSI_LDC So just investigating some more, and I saw in another thread that someone recommend trying to "ping -l 10000" to a device, this created a response of request timed out. Could it be an MTU issue, if so how do I know where to set the MTU to?

0
0
#4
Options