RV325 RDP lag trough IPSec VPN

[belcho_botev]

Hi,

I'm experiencing a problem with RDP traffic passing trough IPSec VPN configured on RV325. There is slow refresh and slow mouse/keyboard input when you connect to a remote desktop. The problem doesn't exist when RDP traffic passes trough NAT. Also there is no problem with other protocols like SSH and HTTP passing trough VPN.

The configuration of RV325 is as simple as possible:
Two ISP - one with PPPoE and other with DHCP both with static IPv4 addresses
IPSec VPN: Gateway To Gateway
Keying mode: IKE with Preshared key
Phase 1 DH Group:  Group2 - 1024Bit
Phase 1 Encryption:    3DES
Phase 1 Authentication: SHA1
Phase 2 DH Group:  Group2 - 1024Bit
Phase 2 Encryption:  3DES
Phase 2 Authentication: SHA1

On the other side there is Cisco 2821

I have tested the same configuration with router from different vendor and there is no problem with RDP.

Anyone experiencing the same problem?

[refrainfrombeinglame]

I've seen this problem with our RV320.

We used to have problems with the RV320's client to gateway IPSEC-VPN connections being unreliable, turned out it was NAT-traversal and / or the Double-NAT causing issues (although the update to firmware ver. 1.2.1.13 might have helped as well), now the RV320 is directly connected to WAN, no more problems. But i'm drifting on topic.

Before our RV320 was directly connected to the internet (and firmware ver 1.2.1.13 was installed), using Remmina to remotely administer Windows cliënts would cause the VPN-tunnel to disconnect and the RV320 would no longer accept incoming VPN-connections. Then the RV320 needed a reboot in most cases to function correctly again.

During the troubleshooting i've encountered the same or a similar problem once. Using Remmina would make the IPSEC VPN connection lag:  pinging devices on the remote network would take about 900ms and indeed the mouse and keyboard input would lag incredibly. 

Oddly enough i'm now unable to replicate the problem.

Do you have a double-NAT and what is you're firmware version?

[belcho_botev]

Hi,

My RV325 current firmware version is v1.2.1.14. I've upgraded my router with this latest release hoping that it will help but it isn't. Previous FW was v1.2.1.13 - same problem.

I do not have double-NAT - the router is directly connected to the Internet with static IPv4 address.

I do not have problems with VPN-tunnel - it stay connected all the time - I have Nagios to monitor the VPN state from Cisco 2821 side. 

The other router that I used to verify the poblem was Mikrotik hAP Lite - it worked perfectly - no RDP lag or any other issue.

I think that RV325 have MTU adjust problem, but I'm not sure.