50H 1.39 uOS - Really really slow VPN

Options
GiuseppeR
GiuseppeR Posts: 782
Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula 500 Comments 5 Answers
image  Guru Member

Hello everyone, I config a VPN for a site where I have a 50H.

I have 3x 50H in VPN configurator, everything work pretty fine among sites in VPN Orchestrator but I have a problem with remote VPN via PC.

This is the speedtest from a server on that site:

IMG_0227.jpeg

So outbound perf are fine.

So I move a notebook from that site with 50H to an external site. I tested the external site perf:

IMG_0230.png

As you can see I have VPN off (bottom right corner) and the ul/dl speeds are very good.

When I switch on VPN tunnel I see a huge drop in performance:

IMG_0228.jpeg

Totally bad in ping and dl/ul speeds.

This is related to VPN only, because without it everything seems ok.

How can I fix it?

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 5,174
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    image  Zyxel Employee
    Options

    Hi @GiuseppeR

    IKEv2 remote access VPN should have better throughput. Please help to use it for instead first. About the SSLVPN part, please allow me to check with our team first.

    Zyxel Melen


  • GiuseppeR
    GiuseppeR Posts: 782
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula 500 Comments 5 Answers
    image  Guru Member
    Options

    Hi @Zyxel_Melen

    would you like to test it by yourself linking via VPN with my networks?

    SSLVPN is almost unusable with these performances.

    Please let me know if you want remote access

  • PeterUK
    PeterUK Posts: 4,796
    250 Answers 2500 Comments Friend Collector Ninth Anniversary
    image  Guru Member
    Options

    That does seem a bit slower then it should be?

    To test VPN without it going over the internet do a local VPN connection to FLEX 50H and do a speed test this way your testing VPN performance should external be rate limiting VPN tunnel

  • GiuseppeR
    GiuseppeR Posts: 782
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula 500 Comments 5 Answers
    image  Guru Member
    Options

    I need to test it remotely to link a notebook to an internal server. Why testing it locally?

  • PeterUK
    PeterUK Posts: 4,796
    250 Answers 2500 Comments Friend Collector Ninth Anniversary
    image  Guru Member
    Options

    Should external be rate limiting VPN tunnel meaning your speed test will be seen as normal but by a VPN tunnel locally to see the VPN real speed.