Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Undefineed

8 posts

Wannabe Geek


#284064 29-Mar-2021 10:24
Send private message

Hi Guys,

 

I have an EdgeRouter that I am using to connect to Spark. It has VLAN 10 tag and PPPoE working. Internet is working and is configured with the default settings.

 

The next step is to configure the router with Site to Site VPN so then we can link our work network (10.8.0.0/24) to PROD VPC (10.0.0.0/15).

 

We currently establish our VPN connection using a PFSense box however that keeps shitting itself every month.

 

I have followed the guide published by Ubiquiti:

 

https://help.ui.com/hc/en-us/articles/115015979787-EdgeRouter-Route-Based-Site-to-Site-VPN-to-AWS-VPC-VTI-over-IKEv1-IPsec-

 

 

 

The guide is good and we can establish connection however, once VPN is establish, LAN computers have really shitty internet. I mean packet loss (for example, ping google.co.nz with 50% loss), websites requiring refreshes before they load.

 

 

 

I have a feeling its to do with MTU/VTI interfaces however, my knowledge of this router and networking generally is quite shit.

 

 

 

Is there anything that you can suggest I try looking at? The boss is open to hiring someone to come and fix this mess. We are based in Wellington :)

 

 

 

Cheers for any suggestions.

 

 

 

Und.


Create new topic
marpada
487 posts

Ultimate Geek
+1 received by user: 182


  #2682381 29-Mar-2021 10:55
Send private message

It seems you might be routing all the traffic from the internal network through the tunnel, instead of just the VPC subnet?




Undefineed

8 posts

Wannabe Geek


  #2682383 29-Mar-2021 10:56
Send private message

Hey Marpada,

 

Thanks for your reply.

 

Nope - we are only routing traffic for the subnet. Internet still goes out through pppoe0.

 

Cheers.


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.