Very slow VPN speed
Bello,
I have just replaced ER605v1 router with ER707-M2 to get higher Client-toSite VPN speed, but I am very dissapointed.
Using PPTP VPN i get max 1MB/s (even ER605v1 achieve 3MB/s). L2TP reaching 3MB/s and OpenVPN jumping between 10 and 5MB/s. Max 40 percent utilisation of router CPU. Gateway is controlled by Linux Software Controler V5.12.6
Using VPN client on Windows 11 PC I am reaching 10MB/s stable for all VPN protocols.
Is somehow possible to reach 10MB/s stable speed using this router? Is someone experiencing same behaviour?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hi @MR.S
MR.S wrote
I have two ER707-M2, they perform very well on IPsec Site to Site. I have a 500/500 Mbps line and it works fine on S2S. so it's a bit strange that L2TP is so bad.
I know there are many parameters when it comes to VPN, so slowness can be many places along the way.Do you have a UDM or is it UDM Pro? UDM is a little weaker, so there may also be some limitations on it. If you have UDM Pro, I think it is the same hardware as UXG-Pro
Is your router behind another router? if you have the opportunity to do so, you can try to disconnect this so that you get a public IP on the ER707
@Clive_A when you test in lab do you get Encrypted 561.0 Mbps on L2TP.
Since I don't have ER707-M2 for test now, I ran a test with ER605 V2 and L2TP VPN with the encrypted tunnel, I got a 63Mbps speed. 10Mbps less than the datasheet. I think 707-M2 should not be too off from the datasheet.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
MR.S wrote
Yes you have right. and i know, but this is Site to Site not L2TP. Sit To Site is very good but not L2TP, L2TP do abut 80-120 Mbps Not 650Mbps as Site to site do.
My hands are tied because I don't have two 707-M2 for tests. If you have two, you can set it up in the LAN environment and run the test, iperf would be recommended for the test.
I am pretty much reaching the limit with this command. iperf3 -c server_ip -i 1
If you suspect this data is inaccurate, you may perform the test. As far as I know, the team told me the test is done similar environment to test its hardware limit and produce the performance data.
- Copy Link
- Report Inappropriate Content
I have two but in difference location, there is Site to Site between this two ER707-M2 now with very good speed 500/500Mbps that is max on my home net, if i have time I next weekend I can remove site to site and configure L2TP between site to test.
- Copy Link
- Report Inappropriate Content
This looks nice but i do not think it is in encryption algorithm, because PPTP is thé slowest in my situation.
- Copy Link
- Report Inappropriate Content
There must be somthing elst that slow down your vpn.
I configure one ER707 as PPTP-Server and the other ER707 as PPTP-Client and when I copy a file i get 130-150Mbps not grate but OK.
When I rout all trafic thrue PPTP tunnel and out on remote site I have this speed
- Copy Link
- Report Inappropriate Content
Clive_A wrote
MR.S wrote
Yes you have right. and i know, but this is Site to Site not L2TP. Sit To Site is very good but not L2TP, L2TP do abut 80-120 Mbps Not 650Mbps as Site to site do.
My hands are tied because I don't have two 707-M2 for tests. If you have two, you can set it up in the LAN environment and run the test, iperf would be recommended for the test.
I am pretty much reaching the limit with this command. iperf3 -c server_ip -i 1
If you suspect this data is inaccurate, you may perform the test. As far as I know, the team told me the test is done similar environment to test its hardware limit and produce the performance data.
OK, @Clive_A I do some testing between two ER707-M2, they is in different location so this is real life test.
IPsec Site to Site and L2TP about the same when testing 350-500 Mbps (if I test between ER707-m2 and Cisco FPR1120 or ASA5515 the speed is mutch mutch faster)
PPTP is mutch slower 130-140 Mbps
use the strongest encryption on S2S so speed is very good on this device with IPsec.
So in short, I think ER707-M2 is a very good device for IPsec VPN, OpenVPN is even bether and faster than ER8411 to :-) but TP-Link have a big job to do with OpenVPN compatibility
and speed,
How is your status on your VPN issue. I think you should ask TP-Link support about help to look at your problem. I don't understand why everything go so slow for you.
there must bes something other than ER707-M2 that slow down VPN speed.
- Copy Link
- Report Inappropriate Content
Hi,
same bad results for me. Now I am thinking about returning device a look somewhere else. I am in contact with support. Maybe they will advice something. I have one week left for returning device.
Here is my configuration, I do not know what else I can do. I do not use any other routing, VLAN, etc. I just want several VPN tunnels (which could aggregate my internet connection) and a VPN server in a price around 250Euros. If I select routing instead of NAT, I cannot access remote server IP at all.
- Copy Link
- Report Inappropriate Content
its not much to configure on router vpn client so the problem is not there.
routing work probably only if you have omada router in both end, you have to crate a user with Network Extension Mode enabled in l2tp server to get this to work. then you have a site to site on a l2tp or pptp
to be honest I don't think your problem is solved with a other brand. ER707 is very fast vpn router for the price. and much faster than udm-pro or uxg-pro. I have tested them all.
unifi have more vpn support now than earlier but have only openvpn client, there is no l2tp or pptp client on unifi any more. anyhow, unifi had never l2tp client only pptp on the old usg-pro and usg3p routers.
sorry that i cant help you, if you figure out of this you have to update this thread :-) you have a strange issue no question about that.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 4550
Replies: 34
Voters 0
No one has voted for it yet.