GP-VPN traffic is slow

[Javith_Ali]

GP VPN configured properly with IPSec enabled.

But all the GP-clients are fall-back to SSL tunnel mode soon after connected.

For testing purpose, give full access any-any allow in policy. one time connected as IPSec and when disconnect & connect again another time gp-client automatically fall-back to SSL mode.

Port 4501 UDP & TCP are allowed in policy. why not a single client is connected as IPsec. how to find out the proper reason for this fall-back. 

[BPry]

Do you see anything in either

1) System log with ( subtype eq vpn ) query. 

2) rasmgr.log (debug will help here 'debug rasmgr on debug' 

[DonohoeRobert · Accepted solution]

HI Mate, 

Don't suppose ye have portal and / or gateway on a loopback address ? can cause issues sometimes with ipsec or xauth but works great for ssl..  

Best regards, 

Rob 

[Javith_Ali]

Hi Robert,

Thanks for info.

yes, we have loopback interface configured. 

[Mick_Ball]

are these users on internal or external gateways, if external then udp 4501 needs to be allowed on thier firwalls.

[jdprovine]

Not sure I understand what the solution was for this issue even though it was marked resolved