I have a site-to-site ipsec connection which has low throughput, but the ethernet connection itself between the same endpoints is good (ie without ipsec there is high throughput). The ipsec routers have low cpu load during the tests. The vpn tunnel negotiation works fine, so no trouble there.
I'm thinking of doing a wireshark capture but I'm not quite sure what to look for there. Do I look for anything in particular when it comes to potential ipsec problems? What are typical signs to look for?
Appreciate your thoughts