ā04-30-2025 07:21 PM
Getting slow speed while sending traffic gre tunnel with ipsec
ā04-30-2025 07:53 PM - edited ā05-01-2025 05:27 AM
Not much information provided, but with IPSec/GRE additional encapsulation overhead can be a problem as might fragmentation. Many other possibilities too.
ā05-02-2025 12:39 PM
Show plat cerm-info <<- share this
MHM
ā05-02-2025 12:58 PM
@Joseph W. Doherty maybe MTU issues?
ā05-02-2025 02:56 PM
@Stefan Mihajlov wrote:
@Joseph W. Doherty maybe MTU issues?
Possibly. If the source and destination aren't directly using GRE/IPSec, but it's being done by a later transit devices, source will often fill MTU and then a transit device, needs to fragment, to allow for GRE/IPSec overhead. That can slow the overall transmission rate.
As I earlier noted, there are many possibilities, but given only "Getting slow speed while sending traffic gre tunnel with ipsec", provides little context for suggesting an actual cause, and possible mitigation.
OP has an ASR tag, but we don't know the model or the transmission rate being attempted. It's possible, the "slowness" isn't even directly related to the ASR or it's totally tied to it.
Another tag for WAN, but are we doing transfers across the street or across the world? It can matter, which it is.
I had originally only mentioned IPSec/GRE causing fragmentation, being a possible issue, as it's often encountered with tunnels that cannot extend the MTU.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide