Always on VPN Device Slow

[OLPTech]

Hi we have been using PDQ Link and smoothwall VPN that have worked fine, however we are testing Always On VPN Device tunnel (IKEv2) and getting slow download speeds (via smb and an internal web server) (speeds of 300-800KBps)

 

 

Our upload speed is 50Mbps and download is 300Mbps, we have another site with 1Gb each way with the same issue

 

What I have done so far to test is:

 

While connected to the AO VPN from hotspot:

Downloaded a file from our web server both via the internal IP and external IP. The internal IP gets speeds of 300KB-800KB where as when downloading from the external IP bypassing the VPN as we have split tunnel getting a constant 4.5/5MB download speed. SMB also gets the same speed on the AO VPN

 

Connected to the VPN internally (by making another VPN on the client) to see if it was the smoothwall (not using spilt tunnel so it would go through the VPN) and still got 300-800KBps speeds.

 

Connected to the AO VPN from hotspot again but had another idea:

 

While downloading from the web servers internal IP I found out if I downloaded the file multiple times at once each file would be downloading between 300KB-800KB and task manager would show its using more of the bandwidth.

 

I hope this makes sense but really struggling at the moment using Always On VPN device tunnel is too slow to be usable but our internet and the hotspot connection is more than capable to do much faster than 4Mbps for a file.

 

The RAS server is Server 2019 on hyper v

And clients are Windows 10 Education

 

Thanks

[JackCPickup]

Can you setup an iPerf server internally and test from clients to that? As a comparison to SMB.

 

Is SSTP an option too? Even if just for comparing tests?

[OLPTech]

Hi thanks for your reply

 

I will setup a iperf server tonight and let you know how I get on.

 

PDQ link was using SSTP and that seemed to work absolutely fine but can try again just for testing as AO device tunnel doesn't support SSTP only IKEv2

 

Thanks

[JackCPickup]

I've set up AO with SSTP before; device tunnel not user. Not sure if something somewhere says it doesn't work but I don't remember any troubles during setup, the PowerShell script to set it up on the client just included the address for their SSTP server.

 

Might be worth trying.

[OLPTech]

Oh you managed to get device tunnel working on SSTP? Thats very interesting, we would certainly like to go down this route if it is possible.

 

Do you know which guide you used?

 

Thanks

[Guest Guest]

We were having the same issue when using an IKEv2 device tunnel but only when using WiFi. In the end we pushed out a user tunnel and everything's been fine since

[OLPTech]

Hi all just an update I'll try using the IKE vpn over ethernet to see if its any quicker as a test but we tried SSTP and the speeds were way faster.