We currently have a Draytek Vigor 3200 Multi-Wan router which has 5 incoming VPN tunnels using IPSec AES encrypted configurations. All five sites are using Draytek Vigor routers, most are Vigor 2800's.
The bandwidth at the main site (Vigor 3200) is 70Mbps down and around 30Mbps up with a backup link of 10Mbps symmetrical. Each of the remote sites have between 5Mbps and 20Mbps connections.
The Draytek routers don't seem to be able to report CPU usage using the web interface, telnet nor SNMP. I am concerned that the encryption/decryption of the AES tunnels will overload the router and cause less desirable performance.
I originally configured the router whilst running IPerf over one single VPN tunnel. I tweaked the settings to get maximum throughput via the VPN tunnel and then duplicated those settings for each site that was added thereafter.
What is the best way of ensuring I'm not stressing the router too far? I have MRTG running locally to graph the uplinks of each router but they don't seem to show the VPN tunnel via SNMP - just the main WAN/LAN links.
I'm looking for advice on any calculations and/or ways of monitoring this kind of thing.