topic Re: GP-VPN traffic is slow in General Topics

GP-VPN traffic is slow

Javith_Ali — Wed, 09 Aug 2017 20:16:03 GMT

GP VPN configured properly with IPSec enabled.

But all the GP-clients are fall-back to SSL tunnel mode soon after connected.

For testing purpose, give full access any-any allow in policy. one time connected as IPSec and when disconnect & connect again another time gp-client automatically fall-back to SSL mode.

Port 4501 UDP & TCP are allowed in policy. why not a single client is connected as IPsec. how to find out the proper reason for this fall-back.

Re: GP-VPN traffic is slow

BPry — Wed, 09 Aug 2017 20:35:15 GMT

Do you see anything in either

1) System log with ( subtype eq vpn ) query.

2) rasmgr.log (debug will help here 'debug rasmgr on debug'

Re: GP-VPN traffic is slow

DonohoeRobert — Wed, 09 Aug 2017 20:49:10 GMT

HI Mate,

Don't suppose ye have portal and / or gateway on a loopback address ? can cause issues sometimes with ipsec or xauth but works great for ssl..

Best regards,

Rob

Re: GP-VPN traffic is slow

Javith_Ali — Thu, 10 Aug 2017 05:43:25 GMT

Hi Robert,

Thanks for info.

yes, we have loopback interface configured.

Re: GP-VPN traffic is slow

Mick_Ball — Thu, 10 Aug 2017 07:52:15 GMT

are these users on internal or external gateways, if external then udp 4501 needs to be allowed on thier firwalls.

Re: GP-VPN traffic is slow

jdprovine — Tue, 22 Aug 2017 19:54:53 GMT

Not sure I understand what the solution was for this issue even though it was marked resolved