使用環境多媒體影音傳輸(4K影音播放及4K IPCamera影像回傳24FPS 16000kbps)初步設定完成尋求穩定設定參數。
網路服務:今網寬頻
A端: UniFi Dream Machine    網路速率:400/400
B端: UniFi Cloud Gateway Ultra  網路速率:300/300
VPN 類型	IPSec			
VPN 方法  基於路由
隧道 IP   A: 192.168.229.1/30 | B: 192.168.229.2/30
UDM/UCG 進階設定若採用預設“Auto"會無法連線,改為手動參數若維持原廠預設會持續產生中斷連線告警,以下目前配置參數。
金鑰交換版本 IKEv2
IKE
加密 AES-256
雜湊 SHA256
DH 群組 15
生命週期 86400
ESP
加密 AES-256
雜湊 SHA256
DH 群組 15
生命週期 86400
完整轉寄密碼(PFS)  Enable
最大傳輸單元    Auto (預設值1419) 位元組
路由距離 30
A端:
admin@admin ~ % ping 192.168.2.1 -c 10
PING 192.168.2.1 (192.168.2.1): 56 data bytes
64 bytes from 192.168.2.1: icmp_seq=0 ttl=63 time=2.472 ms
64 bytes from 192.168.2.1: icmp_seq=1 ttl=63 time=1.558 ms
64 bytes from 192.168.2.1: icmp_seq=2 ttl=63 time=1.589 ms
64 bytes from 192.168.2.1: icmp_seq=3 ttl=63 time=1.569 ms
64 bytes from 192.168.2.1: icmp_seq=4 ttl=63 time=4.100 ms
64 bytes from 192.168.2.1: icmp_seq=5 ttl=63 time=3.513 ms
64 bytes from 192.168.2.1: icmp_seq=6 ttl=63 time=5.837 ms
64 bytes from 192.168.2.1: icmp_seq=7 ttl=63 time=2.652 ms
64 bytes from 192.168.2.1: icmp_seq=8 ttl=63 time=1.643 ms
64 bytes from 192.168.2.1: icmp_seq=9 ttl=63 time=1.458 ms
--- 192.168.2.1 ping statistics ---
10 packets transmitted, 10 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 1.458/2.639/5.837/1.377 ms
admin@admin ~ % iperf3 -c 192.168.2.6
Connecting to host 192.168.2.6, port 5201
[  5] local 192.168.1.190 port 58548 connected to 192.168.2.6 port 5201
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.00   sec  9.62 MBytes  80.4 Mbits/sec
[  5]   1.00-2.00   sec  9.50 MBytes  79.7 Mbits/sec
[  5]   2.00-3.00   sec  8.88 MBytes  74.6 Mbits/sec
[  5]   3.00-4.00   sec  9.38 MBytes  78.5 Mbits/sec
[  5]   4.00-5.00   sec  9.50 MBytes  79.8 Mbits/sec
[  5]   5.00-6.00   sec  9.25 MBytes  77.9 Mbits/sec
[  5]   6.00-7.00   sec  9.75 MBytes  81.7 Mbits/sec
[  5]   7.00-8.00   sec  9.75 MBytes  81.7 Mbits/sec
[  5]   8.00-9.00   sec  8.50 MBytes  71.1 Mbits/sec
[  5]   9.00-10.00  sec  9.62 MBytes  80.8 Mbits/sec
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-10.00  sec  93.8 MBytes  78.6 Mbits/sec                  sender
[  5]   0.00-10.01  sec  93.5 MBytes  78.3 Mbits/sec                  receiver
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
B端:
PS C:\iperf3> ping -n 10 192.168.1.1
Ping 192.168.1.1 (使用 32 位元組的資料):
回覆自 192.168.1.1: 位元組=32 時間=2ms TTL=63
回覆自 192.168.1.1: 位元組=32 時間=4ms TTL=63
回覆自 192.168.1.1: 位元組=32 時間=2ms TTL=63
回覆自 192.168.1.1: 位元組=32 時間=40ms TTL=63
回覆自 192.168.1.1: 位元組=32 時間=38ms TTL=63
回覆自 192.168.1.1: 位元組=32 時間=2ms TTL=63
回覆自 192.168.1.1: 位元組=32 時間=2ms TTL=63
回覆自 192.168.1.1: 位元組=32 時間=83ms TTL=63
回覆自 192.168.1.1: 位元組=32 時間=61ms TTL=63
回覆自 192.168.1.1: 位元組=32 時間=37ms TTL=63
192.168.1.1 的 Ping 統計資料:
封包: 已傳送 = 10,已收到 = 10, 已遺失 = 0 (0% 遺失),
大約的來回時間 (毫秒):
最小值 = 2ms,最大值 = 83ms,平均 = 27ms
PS C:\iperf3> ./iperf3 -c 192.168.1.190
Connecting to host 192.168.1.190, port 5201
[  5] local 192.168.2.6 port 49765 connected to 192.168.1.190 port 5201
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.01   sec  5.25 MBytes  43.4 Mbits/sec
[  5]   1.01-2.00   sec  7.50 MBytes  63.9 Mbits/sec
[  5]   2.00-3.00   sec  7.50 MBytes  62.9 Mbits/sec
[  5]   3.00-4.00   sec  8.25 MBytes  69.2 Mbits/sec
[  5]   4.00-5.01   sec  8.12 MBytes  67.6 Mbits/sec
[  5]   5.01-6.01   sec  8.25 MBytes  68.9 Mbits/sec
[  5]   6.01-7.01   sec  8.25 MBytes  69.6 Mbits/sec
[  5]   7.01-8.00   sec  7.62 MBytes  64.4 Mbits/sec
[  5]   8.00-9.01   sec  7.88 MBytes  65.7 Mbits/sec
[  5]   9.01-10.02  sec  8.50 MBytes  70.6 Mbits/sec
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-10.02  sec  77.1 MBytes  64.6 Mbits/sec                  sender
[  5]   0.00-10.04  sec  77.1 MBytes  64.4 Mbits/sec                  receiver
以UDM/UCG對測

單純看參數倒是沒什麼問題, 可以改用IKE V1, AGGRESIVE MODE 試試有沒比較穩比
AGGRESIVE 最好是由其中一方主動去找對方並同時以LOCAL/PEER ID作驗證