F
F
fotonboxx2014-04-04 19:10:50
VPN
fotonboxx, 2014-04-04 19:10:50

Mikrotik\RouterOS - very high pings through vpn tunnels, what is the reason?

Good evening!
There are two offices connected in the following way:
vpn.jpg
Tunnel to ISP office 1 - l2tp, ISP2 - pptp.
Stock ROS config:
i.piccy.info/i9/edc59b63cc5c437159d0224a4d0d48e3/1...
Plus this:

/ip firewall mangle
add chain=input in-interface=wan1-out action=mark-connection new-connection-mark=wan1
add chain=input in-interface=wan2-out action=mark-connection new-connection-mark=wan2
add chain=output connection-mark=wan1 action=mark-routing new-routing-mark=wan1     
add chain=output connection-mark=wan2 action=mark-routing new-routing-mark=wan2
/ip route
add dst-address=0.0.0.0/0 gateway=10.0.0.1 routing-mark=wan1 
add dst-address=0.0.0.0/0 gateway=10.0.0.2 routing-mark=wan2

In the office, everything is the same, with their ISPs.
Problem (I apologize for the copy-paste, but this is to remove all misunderstandings):
1. Ping from the warehouse through ISP4 my static address issued by ISP1 - up to 20 ms.
2. Ping from warehouse via ISP4 to my static address given by ISP2 - up to 20ms.
3. Ping from the office through ISP1 my static address issued by ISP3 - up to 20 ms.
4. Ping from the office through ISP1 my static address issued by ISP4 - up to 20 ms.
ISP 3 and 4 are radio channels, that's why such high pings.
5. Ping from one end of the tunnel to the other - about 70-80(!) ms, maximum up to half a second.
6. The same if through tunnels (l2tp or pptp) ping internal ip routers (10.0.1.2 and 10.1.1.2).
ROS versions 6.10 and 6.11 respectively.
What could it be?
UPD:
From ISP 1 to ISP 3 - pings are normal. Both ISPs are the main ones in the office and in the warehouse, respectively (distance for routes is 1), but ISP 3 was disabled due to setup.

Answer the question

In order to leave comments, you need to log in

3 answer(s)
F
fotonboxx, 2014-04-04
@fotonboxx

Config:
i.piccy.info/i9/edc59b63cc5c437159d0224a4d0d48e3/1...

K
Kirill Vasiliev, 2014-04-14
@vasilevkirill

something you messed up with the marking, it seems to me, show the trace between networks

G
Grims, 2014-05-16
@grims

To start with Update:
Can't ping external addresses from client machines (Mikrotik)

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question