I have followed this tutorial http://gregsowell.com/?p=787 to create an IPSEC tunnel between two locations. Each location is on its own subnet (192.168.1.0/24 and 192.168.2.0/24). I can ping remote hosts through the tunnel and even browse file shares remotely. SMB transfers work great can D/L at 3mbit/sec from one location and 5mbit/sec from other location (one side has 3mbit of upload and the other has 5mbit).
Largest packet I can send over tunnel is 1438 (verified using ping tool and don't fragment). Also added the following to each router:
Site-A: RB750G
Code: Select all
/ip firewall mangle add chain=forward action=change-mss new-mss=1418 passthrough=yes tcp-flags=syn protocol=tcp src-address=192.168.1.0/24 dst-address=192.168.2.0/24 tcp-mss=!0-1418
Code: Select all
/ip firewall mangle add chain=forward action=change-mss new-mss=1418 passthrough=yes tcp-flags=syn protocol=tcp src-address=192.168.2.0/24 dst-address=192.168.1.0/24 tcp-mss=!0-1418
Any ideas why this is so slow? As I said before a windows file share will download at 3 or 5 mbit/sec depending on location because upload speed differs at each location.