0

I have VPN with two routers (ZyXEL) connecter in different places. It worked fine until yesterday, both routers have high outgoing traffic (maximum from provider).

In Port statistics I can see, that LAN traffic is very low, just WAN is about 10Mbps (especially Tx). VPN and internet connection is overburdened.

Port statistics - 1: WAN, 4: LAN

What can be cause of this problem? What I should check?

Improve this question
7
  • For clarification, your issue is slow WAN (and hence the VPN) throughput?
    – Joe
    Feb 8, 2016 at 21:06
  • It is no slow, but fully busy (especially upload). But provider checked the connection and point out to high upload traffic (105%). How is possible that WAN port have so high traffic when LAN port is almost vacant?
    – Francis
    Feb 8, 2016 at 21:27
  • And it sounds like its only egress traffic from the ZyXEL. You'll have to capture the traffic to see the nature of the traffic. Check to see whether the firewall you have can capture and export to a pcap file, then deep-dive with wireshark. Just curious, do you see the same traffic when connecting (say) a Laptop directly to the ISP
    – Joe
    Feb 8, 2016 at 21:34
  • 1
    It could be an attack on the router coming from the Internet. Your router may be being used to attack someone else too.
    – David Schwartz
    Feb 8, 2016 at 21:45
  • There seem to be quite a few Zyxel vulnerabilities out there. Are you up-to-date on your firmware?
    – EEAA
    Feb 8, 2016 at 21:50

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .