Results 1 to 10 of 10

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    SysAdmin Hibernate92's Avatar
    Join Date: May:2010
    Location: Ðóñå
    Posts: 499

    Ïðîáëåìè ñ Mikrotik L2TP/IPsec

    Çäðàâåéòå êîëåãè,
    Èìàì ñëåäíàòà ãðèæà ñ êîíôèãóðèðàíåòî íà íÿêîëêî ðóòåðà - âñè÷êè ñà Mikrotik.
    Ñõåìàòà å ñëåäíàòà:
    R1 å ãëàâíèÿò è êúì íåãî ñå ñâúðçâàò ïîñðåäñòâîì L2TP/IPsec íÿêîëêî äðóãè ðóòåðà, R2, R3, R4.
    Òóíåëúò ñå âäèãà, ðóòèðàíèÿòà ðàáîòÿò, íî ïðîèçâîäèòåëíîñòòà å ìíîãî ðåõàâà - ïîä 10 mbps, âúïðåêè, ÷å äîñòàâ÷èöèòå îñèãóðÿâàò ïî 100 mbps çà âñåêè êëèåíò îòäåëíî.
    Çà ñðàâíåíèå, êîãàòî ñúçäàì l2tp/ipsec íà ïðèíöèïà íà connection demand (çà ñâúðçâàíå ïðåç èíòåðôåéñà íàïð. îò windows), ïîäîáíè ïðîáëåìè íå ñå íàáëþäàâàò.
    Ïðîôèëèòå è åíêîäèðàíåòî íå ñå ðàçëè÷àâàò îñîáåíî íà 2-àòà òèïà. Êàêâî ùå å íóæíî äà ñïîäåëÿ êàòî êîíôèãóðàöèè, çà äà âèäèì äàëè èìàì ïðîïóñê â MTU, ðóòèðàíå íà ïàêåòè èëè íåùî ïîäîáíî?

    Áëàãîäàðÿ!
    Last edited by Hibernate92; 7th February 2022 at 11:35.
    i5 13500 + CM HYPER 212 BLK+ GIGABYTE B760M GAMING X DDR4 + 2X16GB DDR4 3200MHz KINGSTON BEAST + R9 290 Tri-X + Seasonic X-Series SS-660KM Gold + SAMSUNG 980 PRO SSD 500GB M.2 NVMe PCIe 4.0 + Samsung SSD 980 1TB PCIe 3.0 NVMe + FD FOCUS 2 BLACK TG CLEAR TINT

  2. #2
    Registered User badboybadboy's Avatar
    Join Date: Mar:2008
    Location: sofia
    Posts: 10,494
    Íàòîâàðâàíåòî êàê å? Íÿêàêâè ìîäåëè íÿìà ëè äà ñïîäåëèø?

  3. #3
    SysAdmin Hibernate92's Avatar
    Join Date: May:2010
    Location: Ðóñå
    Posts: 499
    Quote Originally Posted by badboybadboy View Post
    Íàòîâàðâàíåòî êàê å? Íÿêàêâè ìîäåëè íÿìà ëè äà ñïîäåëèø?
    Ðàçáèðà ñå,
    R1 - RB951Ui
    R2 - hAP Lite
    R3 - hAP Lite
    R4 - hAP ac2

    Íàòîâàðâàíåòî íà ïðîöåñîðèòå å ìèíèìàëíî. Íà R1 âàðèðà ìåæäó 2% è 5%, íà îñòàíàëèòå ðóòåðè å îêîëî 1-2%.
    Òðàôèêúò ïðè ïîêîé å íèùîæåí, îêîëî 1000 bps TX.

    Íàé-âå÷å ñå çàáåëÿçâà ïðîáëåì êàòî ãîëÿìà ëàòåíöèÿ, âúïðåêè, ÷å ïèíãà âúðâè áåç çàãóáè íà ïàêåòè:
    SEQ HOST SIZE TTL TIME STATUS
    0 172.16.10.1 56 65 17ms
    Ïîíåæå â ìðåæàòà íà R1 èìà SMB, çàáåëÿçâàì ãîëÿìî çàáàâÿíå ïðè browse-âàíå ìåæäó ïàïêèòå. À ñêîðîñòòà íà ïðåíîñ ðÿäêî ïðåâèøàâà íàä 1ìá/ñåê.

    - - - Àâòîìàòè÷íî ñëåòè ìíåíèÿ - - -

    Êîëåãà, òè íàïðàâî ìå íàñî÷è êúì ïðîáëåìà. Ðåøèõ äà ïðîñëåäÿ íàòîâàðâàíåòî ïî âðåìå íà ïðåõâúðëÿíå íà ôàéë (L2tp/ipsec) è ïðîöåñîðúò ñòèãíà íà 100%. Ñêîðîñòòà áå îðÿçàíà íà îêîëî 10-15 mbps. Ïîñëå îïèòàõ ÷ðåç PPtP - ïðîöåñîðúò ñòèãíà íà 100%, íî ñêîðîñòòà áåøå îêîëî 50 mbps. Èçâîäúò å, ÷å ðåñóðñèòå äàëå÷ íå ñòèãàò çà ïðåõâúðëÿíå íà äàííè ÷ðåç êðèïòèðàí òóíåë. Òðÿáâà äà ñå òúðñè ðóòåð ñ õàðäóåðíî óñêîðåíèå çà ipsec Ìíîãî áëàãîäàðÿ çà íàñîêàòà!
    i5 13500 + CM HYPER 212 BLK+ GIGABYTE B760M GAMING X DDR4 + 2X16GB DDR4 3200MHz KINGSTON BEAST + R9 290 Tri-X + Seasonic X-Series SS-660KM Gold + SAMSUNG 980 PRO SSD 500GB M.2 NVMe PCIe 4.0 + Samsung SSD 980 1TB PCIe 3.0 NVMe + FD FOCUS 2 BLACK TG CLEAR TINT

  4. #4
    Registered User badboybadboy's Avatar
    Join Date: Mar:2008
    Location: sofia
    Posts: 10,494
    Ñ ìàëêî ïîáóòâàíå â ïðàâèëíàòà ïîñîêà ñàì ñòèãíà äî èçâîäà, ÷å êîçàòà ñè èñêà ïðú÷.

  5. #5
    Ghost Member G-Point's Avatar
    Join Date: Jul:2001
    Location: Bourgas
    Posts: 4,372
    hAP ac2 ñè èìà õàðäóåðíî óñêîðåíèå, îñòàâà äà ñìåíèø è îñòàíàëèòå.
    Last edited by G-Point; 7th February 2022 at 13:26.

  6. #6
    Registered User
    Join Date: Jul:2011
    Location: Stara Zagora BG
    Posts: 38
    Ïðèâåò, è àç ãî èãðàõ òîâà ñ ïðîèçâîäèòåëíîñòòà íà òåçè ðóòåðè, ïðîáëåìà å ÷å êîãàòî å òóíåë âñåêè åäèí ïàêåò ñå îáðàáîòâà îò ïðîöåñîðà è òîé çàïî÷âà äà ðàáîòè íà 100%.
    Êàòî workaround ìîæå äà ñå èçïîëçâà fasttrack - â îáùè ëèíèè tunnel-a ñå âäèãà ì/ó ðóòåð-èòå è ñå ìàðêèðà òîçè òðàôèê äà íå ìèíàâà ïðåç firewall-a, ïî òîçè íà÷èí èçïîëçâàø âðúçêàòà íà 100% îò òîâà ñ êîåòî ðàçïîëàãàø êàòî òðàôèê, è cpu-òî ñè ñòîè íà 1-2%.
    https://schemen.me/mikrotik-fast-tra...xcludes-ipsec/
     îáùèÿ ñëó÷àé äîêàðàõ 100mbps ïðåç vpn ipsec ïî òîçè íà÷èí ( file transfer ) , èíà÷å áåøå ìàêñ 30mbps äîêàòî íåñìîãâàøå cpu-òî
    Çà ñúæàëåíèå îïðåäåëåíè óñëóãè íå ìîãàò äà ìèíàò ïðåç ôàñò òðàê-à, ïîíå àç íå óñïÿõ äà íàêàðàì MSSQL òðàôèêà äà ìèíå. Ïóñíàõ òåìà âúâ ôîðóìèòå íà mikrotik íî òàêà è íå ìè îòãîâîðèõà âå÷å 4 ìåñåöà
    Last edited by baykov84; 7th February 2022 at 14:18.
    Ryzen 7 3700x / GB x570 Aorus Master / Noctua NH-D15 / 4x8GB G.Skill 3800MHz / Samsung 970 EVO Plus 1TB / 4x4TB WD Red /Seasonic SSR-750FX Gold / MSI 3070ti / Creative X-Fi Titanium Fatal1ty Champion / Cooler Master HAF-932 Case

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Copyright © 1999-2011 Õàðäóåð ÁÃ. Âúçìîæíî å ñúäúðæàíèåòî íà òàçè ñòðàíèöà äà å îáåêò íà àâòîðñêè ïðàâà.
iskamPC.com | mobility.BG | Bloody's Techblog | Êðèïòîâàëóòè è ìàéíèíã | 3D Vision Blog | Ìàãàçèí çà åëåêòðîííè öèãàðè