Our company contracted with ERP support for building the server on AWS.
Recently, we try to use VPN to fetch the database’s data from the server to our local computer.
The reason we use the VPN is to want to fetch the database’s data to local PC’s excel for report propose.
The internet download speed is about 60mbps.
For testing, I try to copy a file from the server to the local PC, the transfer speed is about 6-7MB/s.
Also, I try to fetch the data to my local PC during the process I monitor the server’s network speed in the task manager, the transfer speed is only about 20mbps.
After I search through a lot of forums about this situation and I only get most users said the thing “MTU”.
But I am not a pro in networks and I cannot determine the problem is from the transport layer or the network layer.
Does anyone have any ideas? This is my headache for almost 2 months.
FortiGate info:-
FortiGate 100E v6.0.3 build0200 (GA)
IPsec Tunnel info:-
config system interface
edit “GSS AWS VPN”
set vdom “root”
set type tunnel
set snmp-index 12
set interface “wan1”
next
end
config vpn ipsec phase1-interface
edit “GSS AWS VPN”
set interface “wan1”
set keylife 28800
set peertype any
set proposal aes128-sha1
set dhgrp 2
next
end
config vpn ipsec phase2-interface
edit “GSS AWS VPN”
set phase1name “GSS AWS VPN”
set proposal aes128-sha1
set dhgrp 2
set auto-negotiate enable
set keylifeseconds 28800
set dst-subnet 172.16.100.0 255.255.255.0
next
end
config firewall policy
edit 18
set name “GSS to LAN”
set srcintf “GSS AWS VPN”
set dstintf “lan”
set srcaddr “all”
set dstaddr “all”
set action accept
set schedule “always”
set service “ALL”
set logtraffic all
set fsso disable
set profile-protocol-options “NoProxy”
next
edit 19
set name “LAN to GSS”
set srcintf “lan”
set dstintf “GSS AWS VPN”
set srcaddr “all”
set dstaddr “all”
set action accept
set schedule “always”
set service “ALL”
set logtraffic all
set fsso disable
set profile-protocol-options “NoProxy”
next
end
config router static
edit 8
set dst 172.16.100.0 255.255.255.0
set device “GSS AWS VPN”
next
end