Manta
Premium
join:2003-11-04
UK
|  [HELP] tunnel bandwidth aggregation
Can anyone point me in the right direction to aggregate bandwidth please? I have the following situation between two sites:
The ADSL links are 8Mbps/832kbps and the SDSL is 2Mbps. I have configured two tunnel interfaces that run from the 877 to the 871 and run within IPSec. I need to max out the bandwidth available from the 871 to the 877 so I can do a nightly off-site backup. Currently I've tried adding " ip load-sharing per-packet" to each tunnel interface and setting a two static routes with the same metric over each tunnel. I'm a bit confused as to why there is very little gain in speed though. Over just the SDSL tunnel I get about 100kb/s (the line is in use for other things) and over just the ADSL I get 60kb/s. When I combine them I get 70kb/s.....and that's what confuses me.
These are the relevant portions of config. The SDSL line is in use for 'more important things' than the backup so I'd like to primarily use the ADSL and just use say 1Mbps of the SDSL's upstream bandwidth to boost the bandwidth - it's a backup so almost all the traffic is going one way. Because it's equal load-balancing at the moment I'd have thought this would give me an effective bandwidth of about 1600kbps/800kbps....but it just doesn't seem to give me much more than just the adsl line alone.
Many thanks for any pointers you can give me.
Gareth
|
|
TomS_
debugger it
Premium,MVM
join:2002-07-19
Australia
| Well for one, your two routes point to Tunnel 0 and 5, but you have configured Tunnel 0 and 1.
And secondly, since you have two tunnels going to the same router, you will probably need to differentiate the two through the use of the "tunnel key" command.
See how it goes once youve fixed those two bits up.  |
|
Manta
Premium
join:2003-11-04
UK
| Thanks for that TomS. Sorry, the mistake eith the route pointing to Tunnel5 was just where I'd simplified some of the config to post and missed that bit - the tunnels involved in this are actually 0 and 5. I've tried adding a "tunnel key 0" to each of the tunnel 0's - they're the same number at each end for simplicity - and a "tunnel key 5" to each of the tunnel 5's. It doesn't seem to have made noticable difference though.
The gre traffic gets wrapped in IPSec before they go out but I wouldn't have thought that would make a difference....would it? |
|
Manta
Premium
join:2003-11-04
UK
edit:
July 24th, @01:19PM
| Strangely it seems to have started working now. Two things have happened - I've wiped the 2003 server involved at one end and installed 2008 (for the learning curve, not just because I like the pain!) and a UPS self-test failed resulting in an unexpected reboot of the router at the other end. I suspect the latter is what made it start working!
Thanks for the tunnel key hint Tom. I'm not sure if it fixed it or not to be honest. If I get a break in the workload I'll try taking it out and see what happens.
Gareth |
|
