---
title: "How we test IPsec and IKEv2: tunnels and rekeys | TEST4NET"
description: "IPsec and IKEv2 on the CloudLAB bench: 1 to 5,000 tunnels brought up and rekeyed, mixed cipher suites, NAT traversal, throughput and failover with traffic inside"
image: https://test4net.com/hubfs/blog-covers/how-we-test-ipsec-and-ikev2.png
---

[Skip to content](https://test4net.com/blog/how-we-test-ipsec-and-ikev2#main-content)

[![TEST4NET](https://test4net.com/hubfs/test4net-logo-fixed-2.svg)](https://test4net.com/?hsLang=en)

- Services
- Products
- Resources
- Company

- [English](https://test4net.com/blog/how-we-test-ipsec-and-ikev2)
- [Русский](https://test4net.com/ru/blog/how-we-test-ipsec-and-ikev2)
- [Հայերեն](https://test4net.com/hy/blog/how-we-test-ipsec-and-ikev2)

[News](https://test4net.com/news?hsLang=en) [Login](https://lab.test4net.com) [Support](https://test4net.com/support?hsLang=en)

- [English](https://test4net.com/blog/how-we-test-ipsec-and-ikev2)
- [Русский](https://test4net.com/ru/blog/how-we-test-ipsec-and-ikev2)
- [Հայերեն](https://test4net.com/hy/blog/how-we-test-ipsec-and-ikev2)

What we test

By technology

Industries

[Load & Performance Testing Throughput, sessions and latency up to and past the rated limit](https://test4net.com/services/load-performance-testing?hsLang=en) [Functional & Conformance Testing Features against the spec, RFC compliance with evidence](https://test4net.com/services/functional-conformance-testing?hsLang=en) [Interoperability Testing Multi-vendor behaviour, before it reaches production](https://test4net.com/services/interoperability-testing?hsLang=en) [Security & Resilience Testing NGFW, IPS and VPN efficacy and performance with threats on the wire](https://test4net.com/services/security-resilience-testing?hsLang=en) [Test Plan & Methodology Design What to test, how, and what counts as a pass](https://test4net.com/services/test-plan-design?hsLang=en) [Test Automation & CI/CD Regression suites wired into your release pipeline](https://test4net.com/services/test-automation?hsLang=en) [Training Programs Hands-on courses for your test engineers](https://test4net.com/services#training) [Equipment Repair Diagnostics and repair of test equipment](https://test4net.com/services#repair) [All services](https://test4net.com/services?hsLang=en)

[Routing & Switching RFC 2544 and RFC 2889 on real ports, 1G to 100G](https://test4net.com/solutions/routing-switching?hsLang=en) [Firewalls & NGFW RFC 9411 throughput with inspection switched on](https://test4net.com/solutions/firewalls-ngfw?hsLang=en) [SD-WAN & WAN Path selection and QoS under emulated WAN conditions](https://test4net.com/solutions/sd-wan?hsLang=en) [Cloud & NFV Virtual appliances and cloud services under load](https://test4net.com/solutions/cloud-nfv?hsLang=en) [5G & Mobile Core Transport and core functions under subscriber traffic](https://test4net.com/solutions/5g-mobile-core?hsLang=en) [Wi-Fi Wi-Fi 6 clients and access points, Wi-Fi 7 in progress](https://test4net.com/solutions/wi-fi?hsLang=en) [Storage & Infrastructure Storage networks and servers under realistic I/O](https://test4net.com/solutions/storage?hsLang=en) [AI / Switching Fabric (RoCEv2) Lossless Ethernet for GPU clusters: PFC, ECN, fabric load](https://test4net.com/solutions/ai-fabric-rocev2?hsLang=en) [All technologies](https://test4net.com/services#coverage)

[Telecom Operators Pre-deployment acceptance and vendor comparison](https://test4net.com/solutions/industries#telecom) [Network & Security Vendors Independent validation of your product claims](https://test4net.com/solutions/industries#vendors) [System Integrators Proof for the customer before the rollout](https://test4net.com/solutions/industries#integrators) [Enterprise & Banks Upgrades and new platforms checked before production](https://test4net.com/solutions/industries#enterprise) [All industries](https://test4net.com/solutions/industries?hsLang=en)

Not sure where to start?

Test plan and quote in 1–3 business days

Tell us what you run and what worries you. We propose the tests, tools and timeline.

[Request a test plan](https://test4net.com/contacts?hsLang=en)

CloudLAB

[How It Works Pick a scenario, run it in the live lab, get the report](https://test4net.com/cloudlab#how) [Equipment & Capabilities L2-3 to 100G, L4-7 past 200G, Wi-Fi, WAN emulation](https://test4net.com/cloudlab#equipment) [Access Plans Hourly sessions, subscriptions, dedicated racks](https://test4net.com/cloudlab/plans?hsLang=en) [Hosted DUT Testing Ship the box or upload the VM, we run the tests](https://test4net.com/cloudlab/hosted-dut?hsLang=en) [Open the CloudLAB portal](https://lab.test4net.com)

Our tools

[Traffic Generator L4-7 and security traffic past 200 Gbit/s, app mix library](https://test4net.com/products/traffic-generator?hsLang=en) [WANemu Delay, jitter, loss and bandwidth shaping per link](https://test4net.com/products/wanemu?hsLang=en) [Book a demo](https://test4net.com/contacts?hsLang=en)

New: our own test tools

Our own tools, in beta this autumn

Built in our lab, priced per gigabit. Join the beta list and see them first.

[Join the beta list](https://test4net.com/products#lead-form)

Read

Technologies / Protocols

Methodologies

[Blog Case studies, test insights and lab notes](https://test4net.com/blog?hsLang=en) [Industry News What is changing in network testing and infrastructure](https://test4net.com/news?hsLang=en) [FAQ How the lab, sessions and reports work](https://test4net.com/faq?hsLang=en) [All resources](https://test4net.com/resources?hsLang=en)

[BGP Route exchange, policy and convergence](https://test4net.com/blog/how-we-test-bgp?hsLang=en) [OSPF & IS-IS IGP adjacency, flooding and SPF timing](https://test4net.com/blog/how-we-test-ospf-is-is?hsLang=en) [MPLS & SR LDP, RSVP‑TE and SR‑MPLS label paths](https://test4net.com/blog/how-we-test-mpls-and-segment-routing?hsLang=en) [EVPN / VXLAN Overlay fabrics, MAC/IP routes, multi-homing](https://test4net.com/blog/how-we-test-evpn-vxlan?hsLang=en) [IPsec & IKEv2 Tunnel setup, rekeying and throughput](https://test4net.com/blog/how-we-test-ipsec-and-ikev2?hsLang=en) [TLS / HTTPS Handshakes, cipher suites and inspection](https://test4net.com/blog/how-we-test-tls-and-https?hsLang=en) [RoCEv2 Lossless Ethernet, PFC and ECN for AI fabrics](https://test4net.com/blog/how-we-test-rocev2?hsLang=en) [Wi-Fi 6 / 6E / 7 802.11ax/be, OFDMA, MLO and roaming](https://test4net.com/blog/how-we-test-wi-fi-6-6e-7?hsLang=en) [All protocols](https://test4net.com/blog/tag/protocols?hsLang=en)

[RFC 2544 Throughput, latency, frame loss and back-to-back](https://test4net.com/methodologies/rfc-2544?hsLang=en) [RFC 2889 LAN switch benchmarking: forwarding, MAC learning, congestion](https://test4net.com/methodologies/rfc-2889?hsLang=en) [RFC 9411 / RFC 3511 Firewall and NGFW performance benchmarking](https://test4net.com/methodologies/rfc-9411-rfc-3511?hsLang=en) [RFC 6349 TCP throughput and buffer delay testing](https://test4net.com/methodologies/rfc-6349?hsLang=en) [RFC 5180 IPv6 benchmarking methodology](https://test4net.com/methodologies/rfc-5180?hsLang=en) [ITU-T Y.1564 Ethernet service activation: CIR, EIR, KPIs per service](https://test4net.com/methodologies/y-1564?hsLang=en) [ITU-T Y.1731 Ethernet OAM: delay, jitter, loss and SLA monitoring](https://test4net.com/methodologies/y-1731?hsLang=en) [TR-398 Wi-Fi in-premises performance test plan](https://test4net.com/methodologies/tr-398?hsLang=en) [All methodologies](https://test4net.com/methodologies?hsLang=en)

Read

[Case studies, test insights and lab notes Blog](https://test4net.com/blog?hsLang=en) [What is changing in network testing and infrastructure Industry News](https://test4net.com/news?hsLang=en) [How the lab, sessions and reports work FAQ](https://test4net.com/faq?hsLang=en)

[About Us Independent lab in Armenia, team and history](https://test4net.com/about?hsLang=en) [Why TEST4NET What you get that vendor slides never show](https://test4net.com/why-test4net?hsLang=en) [Lab & Certifications Bench capacity, methods and the standards we test against](https://test4net.com/lab?hsLang=en) [Partners Test tool vendors and IT partners we work with](https://test4net.com/partners?hsLang=en) [Contacts Talk to an engineer, not a sales bot](https://test4net.com/contacts?hsLang=en)

[Support portal](https://test4net.com/support?hsLang=en)

- Services
  
  What we test
  
  [Load & Performance Testing](https://test4net.com/services/load-performance-testing?hsLang=en) [Functional & Conformance Testing](https://test4net.com/services/functional-conformance-testing?hsLang=en) [Interoperability Testing](https://test4net.com/services/interoperability-testing?hsLang=en) [Security & Resilience Testing](https://test4net.com/services/security-resilience-testing?hsLang=en) [Test Plan & Methodology Design](https://test4net.com/services/test-plan-design?hsLang=en) [Test Automation & CI/CD](https://test4net.com/services/test-automation?hsLang=en) [Training Programs](https://test4net.com/services#training) [Equipment Repair](https://test4net.com/services#repair) [All services](https://test4net.com/services?hsLang=en)
  
  By technology
  
  [Routing & Switching](https://test4net.com/solutions/routing-switching?hsLang=en) [Firewalls & NGFW](https://test4net.com/solutions/firewalls-ngfw?hsLang=en) [SD-WAN & WAN](https://test4net.com/solutions/sd-wan?hsLang=en) [Cloud & NFV](https://test4net.com/solutions/cloud-nfv?hsLang=en) [5G & Mobile Core](https://test4net.com/solutions/5g-mobile-core?hsLang=en) [Wi-Fi](https://test4net.com/solutions/wi-fi?hsLang=en) [Storage & Infrastructure](https://test4net.com/solutions/storage?hsLang=en) [AI / Switching Fabric (RoCEv2)](https://test4net.com/solutions/ai-fabric-rocev2?hsLang=en) [All technologies](https://test4net.com/services#coverage)
  
  Industries
  
  [Telecom Operators](https://test4net.com/solutions/industries#telecom) [Network & Security Vendors](https://test4net.com/solutions/industries#vendors) [System Integrators](https://test4net.com/solutions/industries#integrators) [Enterprise & Banks](https://test4net.com/solutions/industries#enterprise) [All industries](https://test4net.com/solutions/industries?hsLang=en)
  
  [Not sure where to start? Test plan and quote in 1–3 business days](https://test4net.com/contacts?hsLang=en)
- Products
  
  CloudLAB
  
  [How It Works](https://test4net.com/cloudlab#how) [Equipment & Capabilities](https://test4net.com/cloudlab#equipment) [Access Plans](https://test4net.com/cloudlab/plans?hsLang=en) [Hosted DUT Testing](https://test4net.com/cloudlab/hosted-dut?hsLang=en) [Open the CloudLAB portal](https://lab.test4net.com)
  
  Our tools
  
  [Traffic Generator](https://test4net.com/products/traffic-generator?hsLang=en) [WANemu](https://test4net.com/products/wanemu?hsLang=en) [Book a demo](https://test4net.com/contacts?hsLang=en)
  
  [New: our own test tools Our own tools, in beta this autumn](https://test4net.com/products#lead-form)
- Resources
  
  Read
  
  [Blog](https://test4net.com/blog?hsLang=en) [Industry News](https://test4net.com/news?hsLang=en) [FAQ](https://test4net.com/faq?hsLang=en) [All resources](https://test4net.com/resources?hsLang=en)
  
  Technologies / Protocols
  
  [BGP](https://test4net.com/blog/how-we-test-bgp?hsLang=en) [OSPF & IS-IS](https://test4net.com/blog/how-we-test-ospf-is-is?hsLang=en) [MPLS & SR](https://test4net.com/blog/how-we-test-mpls-and-segment-routing?hsLang=en) [EVPN / VXLAN](https://test4net.com/blog/how-we-test-evpn-vxlan?hsLang=en) [IPsec & IKEv2](https://test4net.com/blog/how-we-test-ipsec-and-ikev2?hsLang=en) [TLS / HTTPS](https://test4net.com/blog/how-we-test-tls-and-https?hsLang=en) [RoCEv2](https://test4net.com/blog/how-we-test-rocev2?hsLang=en) [Wi-Fi 6 / 6E / 7](https://test4net.com/blog/how-we-test-wi-fi-6-6e-7?hsLang=en) [All protocols](https://test4net.com/blog/tag/protocols?hsLang=en)
  
  Methodologies
  
  [RFC 2544](https://test4net.com/methodologies/rfc-2544?hsLang=en) [RFC 2889](https://test4net.com/methodologies/rfc-2889?hsLang=en) [RFC 9411 / RFC 3511](https://test4net.com/methodologies/rfc-9411-rfc-3511?hsLang=en) [RFC 6349](https://test4net.com/methodologies/rfc-6349?hsLang=en) [RFC 5180](https://test4net.com/methodologies/rfc-5180?hsLang=en) [ITU-T Y.1564](https://test4net.com/methodologies/y-1564?hsLang=en) [ITU-T Y.1731](https://test4net.com/methodologies/y-1731?hsLang=en) [TR-398](https://test4net.com/methodologies/tr-398?hsLang=en) [All methodologies](https://test4net.com/methodologies?hsLang=en)
  
  Read
  
  [Blog Case studies, test insights and lab notes](https://test4net.com/blog?hsLang=en) [Industry News What is changing in network testing and infrastructure](https://test4net.com/news?hsLang=en) [FAQ How the lab, sessions and reports work](https://test4net.com/faq?hsLang=en)
- Company
  
  [About Us](https://test4net.com/about?hsLang=en) [Why TEST4NET](https://test4net.com/why-test4net?hsLang=en) [Lab & Certifications](https://test4net.com/lab?hsLang=en) [Partners](https://test4net.com/partners?hsLang=en) [Contacts](https://test4net.com/contacts?hsLang=en)

[News](https://test4net.com/news?hsLang=en) [Login](https://lab.test4net.com) [Support](https://test4net.com/support?hsLang=en)

[All articles](https://test4net.com/blog)

[Standards and methodology](https://test4net.com/blog/tag/standards-and-methodology) [Protocols](https://test4net.com/blog/tag/protocols)

# How we test IPsec and IKEv2: 5,000 tunnels, rekeys and real traffic inside

![](https://test4net.com/hubfs/IMG_0070.jpg) [Alexander Zemskov](https://test4net.com/blog/author/az) October 28, 2026 4 min read

[English](https://test4net.com/blog/how-we-test-ipsec-and-ikev2) [Русский](https://test4net.com/ru/blog/how-we-test-ipsec-and-ikev2) [Հայերեն](https://test4net.com/hy/blog/how-we-test-ipsec-and-ikev2)

![How we test IPsec and IKEv2: 5,000 tunnels, rekeys and real traffic inside](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-test-ipsec-and-ikev2.png?width=1600&height=900&name=how-we-test-ipsec-and-ikev2.png)

In this article

The IPsec line on a firewall datasheet is measured with one tunnel, large packets and the fastest cipher the chip supports. Your site-to-site estate is 800 tunnels, a mix of AES-GCM and the legacy suite the partner insists on, small packets of voice and the rekey timer firing all day. We test the second thing.

## The bench

The device under test is a VPN gateway, a firewall or a router with IPsec, physical or a VM. The generator emulates both sides: thousands of remote gateways and road-warrior clients on one side, the servers they reach on the other, so that every tunnel carries application traffic and the generator sees what arrived. Ports from 1G to 100G, which covers a branch box and a data centre concentrator alike.

The suites, lifetimes, DPD timers and NAT setup come from your production configuration. If 30% of your tunnels sit behind NAT-T and use a particular PFS group, the bench has the same 30%.

## What we check

- Tunnel setup: 1, 100, 1,000 and 5,000 tunnels brought up at once, IKEv2 SA and child SA per second, time until the last one carries traffic
- Rekey: IKE and child SA rekey under load, with the per-tunnel gap in milliseconds; a rekey storm when all lifetimes expire together
- Cipher suites: throughput per suite, AES-GCM against AES-CBC with SHA-2, plus whatever legacy suite you still have to run, each with the real frame sizes of the traffic
- Throughput and latency: an application mix inside the tunnels, 64-byte to 1,500-byte packets and a mix, encrypted and plain direction, up to the port rate
- Fragmentation and MTU: packets that exceed the tunnel MTU, IKE fragmentation, PMTUD behaviour with and without NAT
- NAT traversal and DPD: tunnels behind NAT, keepalives, dead peer detection timers and what happens to the traffic in between
- Authentication: certificates with a chain, EAP for clients, revocation checks and their effect on setup time
- HA: failover of the gateway with 5,000 tunnels up, measured as the gap per tunnel, and whether the SAs survive the switch
- Soak: 24 hours at 80% of the measured capacity with rekeys running, then memory and SA counts compared with hour 1

## What usually breaks

Rekey. A gateway that holds 5,000 tunnels at the stated throughput loses 30% of it every time the rekey wave passes, because the crypto engine and the IKE daemon share a core. The datasheet throughput is measured between the waves.

Second: the small packets. 10 Gbit/s of IPsec at 1,400 bytes is 0.9 million packets per second; the same box at 128 bytes gives 2.5 Gbit/s, which is what a voice-heavy branch actually gets. The number worth having is packets per second per cipher.

The third is failover. The pair switches in 2 seconds, as promised, and 1,500 of the 5,000 tunnels renegotiate from scratch because their SAs were not synced in time. Each takes the DPD timer plus setup, a few minutes in total, with the branches offline. Found in an afternoon on the bench, not on a Monday morning.

## What is in the report

Setup and rekey rates, throughput per suite and per frame size, latency inside the tunnel, the failover table with per-tunnel gaps and the number of SAs that survived. Resources over the 24 hours. The gateway configuration, the emulated peer settings, firmware and port speeds, so the vendor can reproduce every item.

## Where to start

Send us the device model, the firmware you plan to run and the topology it will sit in. We answer with a test plan: the items, the bench layout and the dates. The plan is free, the report is yours to keep and to show to the vendor. [Write to us](https://test4net.com/contacts?hsLang=en) or look at [what else the bench does](https://test4net.com/services?hsLang=en).

Share

Pass it on to someone who runs a network

Independent lab data is most useful in the hands of the people who make the call. Send this piece to a colleague.

[LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-ipsec-and-ikev2) [X](https://twitter.com/intent/tweet?url=https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-ipsec-and-ikev2&text=How+we+test+IPsec+and+IKEv2%3A+5%2C000+tunnels%2C+rekeys+and+real+traffic+inside) [Telegram](https://t.me/share/url?url=https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-ipsec-and-ikev2&text=How+we+test+IPsec+and+IKEv2%3A+5%2C000+tunnels%2C+rekeys+and+real+traffic+inside) [WhatsApp](https://wa.me/?text=How+we+test+IPsec+and+IKEv2%3A+5%2C000+tunnels%2C+rekeys+and+real+traffic+inside%20https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-ipsec-and-ikev2)

Copy link

More apps

![](https://test4net.com/hubfs/IMG_0070.jpg)

Written by

### [Alexander Zemskov](https://test4net.com/blog/author/az)

Alexander Zemskov leads network and security testing at TEST4NET, an independent, vendor-neutral testing lab in Yerevan, Armenia. With 19+ years in performance and load testing on IXIA, Spirent, Keysight, Xena and Xinertel platforms, he runs NGFW, WAF, IPS, DLP and SASE evaluations for telecom operators, banks and system integrators.

[LinkedIn](https://www.linkedin.com/in/azemskov/) [Website](https://test4net.com/?hsLang=en)

[Previous article How we test MPLS and segment routing: label paths under a traffic load](https://test4net.com/blog/how-we-test-mpls-and-segment-routing?hsLang=en) [Next article How we test RoCEv2: PFC, ECN and the incast that stalls a GPU cluster](https://test4net.com/blog/how-we-test-rocev2?hsLang=en)

In this article

On the bench

### Have a device to put through this?

Send us the shortlist and the KPIs that decide it. We will come back with a scoped test plan, a timeline and a fixed price.

[Talk to a test engineer](https://test4net.com/contacts?hsLang=en)

Blog

## Keep reading

[![How we test Wi-Fi 6, 6E and 7: 200 clients, roaming and the TR-398 sheet](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-test-wi-fi-6-6e-7.png?width=880&height=550&name=how-we-test-wi-fi-6-6e-7.png)](https://test4net.com/blog/how-we-test-wi-fi-6-6e-7?hsLang=en)

[Standards and methodology](https://test4net.com/blog/tag/standards-and-methodology) [Protocols](https://test4net.com/blog/tag/protocols)

### [How we test Wi-Fi 6, 6E and 7: 200 clients, roaming and the TR-398 sheet](https://test4net.com/blog/how-we-test-wi-fi-6-6e-7?hsLang=en)

Every access point datasheet carries a PHY rate: 5.4 Gbit/s, 11 Gbit/s, 46 Gbit/s for Wi-Fi 7. The number is the modulation table. What a client gets in a meeting room wi…

![](https://test4net.com/hs-fs/hubfs/IMG_0070.jpg?width=22&height=22&name=IMG_0070.jpg) Alexander Zemskov Oct 28, 2026 · 4 min read

[![How we test TLS and HTTPS: handshakes per second with inspection switched on](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-test-tls-and-https.png?width=880&height=550&name=how-we-test-tls-and-https.png)](https://test4net.com/blog/how-we-test-tls-and-https?hsLang=en)

[Standards and methodology](https://test4net.com/blog/tag/standards-and-methodology) [Protocols](https://test4net.com/blog/tag/protocols)

### [How we test TLS and HTTPS: handshakes per second with inspection switched on](https://test4net.com/blog/how-we-test-tls-and-https?hsLang=en)

The datasheet of a firewall or a load balancer states "TLS throughput". The footnote, when there is one, says TLS 1.2, RSA 2048, one cipher, 64 KB objects, inspection off…

![](https://test4net.com/hs-fs/hubfs/IMG_0070.jpg?width=22&height=22&name=IMG_0070.jpg) Alexander Zemskov Oct 28, 2026 · 4 min read

[![How we test EVPN and VXLAN: a fabric leaf under thousands of hosts](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-test-evpn-vxlan.png?width=880&height=550&name=how-we-test-evpn-vxlan.png)](https://test4net.com/blog/how-we-test-evpn-vxlan?hsLang=en)

[Standards and methodology](https://test4net.com/blog/tag/standards-and-methodology) [Protocols](https://test4net.com/blog/tag/protocols)

### [How we test EVPN and VXLAN: a fabric leaf under thousands of hosts](https://test4net.com/blog/how-we-test-evpn-vxlan?hsLang=en)

A data centre fabric is accepted in 2 steps. Step 1: the integrator shows that two hosts on different leaves can ping. Step 2 happens 6 months later, when a hypervisor mi…

![](https://test4net.com/hs-fs/hubfs/IMG_0070.jpg?width=22&height=22&name=IMG_0070.jpg) Alexander Zemskov Oct 28, 2026 · 4 min read

[![TEST4NET LLC](https://test4net.com/hubfs/test4net-logo-fixed.svg)](https://test4net.com?hsLang=en)

Independent testing and validation for telecom, information security and cloud infrastructure – real insights, not assumptions

<https://www.linkedin.com/company/test4net> <https://wa.me/37491612709> <https://t.me/TEST4NET> [mailto:sales@test4net.com](mailto:sales@test4net.com) <https://www.facebook.com/people/Test4net-LLC/61591470856077/> <https://www.youtube.com/@TEST4NET>

#### Navigate

- [Home](https://test4net.com/?hsLang=en)
- [Why TEST4NET](https://test4net.com/why-test4net?hsLang=en)
- [About us](https://test4net.com/about?hsLang=en)
- [Contact](https://test4net.com/contacts?hsLang=en)
- [Blog](https://test4net.com/blog?hsLang=en)
- [Industry News](https://test4net.com/news?hsLang=en)

#### Get in touch

Sales

[sales@test4net.com](mailto:sales@test4net.com)

Support

[support.test4net.com](https://support.test4net.com)

© 2026 TEST4NET LLC. All rights reserved.

[Privacy Policy](https://test4net.com/privacy-policy?hsLang=en) [Legal](https://test4net.com/legal?hsLang=en)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Alexander Zemskov",
    "url" : "https://test4net.com/blog/author/az"
  },
  "dateModified" : "2026-10-28T12:44:50.728Z",
  "datePublished" : "2026-10-28T12:44:50.000Z",
  "headline" : "How we test IPsec and IKEv2: tunnels and rekeys | TEST4NET",
  "image" : [ "https://test4net.com/hubfs/blog-covers/how-we-test-ipsec-and-ikev2.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://test4net.com/blog/how-we-test-ipsec-and-ikev2",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://test4net.com/hubfs/test4net-logo-fixed.svg"
    },
    "name" : "TEST4NET LLC"
  }
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://test4net.com/#organization",
  "@type" : "Organization",
  "address" : {
    "@type" : "PostalAddress",
    "addressCountry" : "AM",
    "addressLocality" : "Yerevan",
    "postalCode" : "0033",
    "streetAddress" : "3 Hakob Hakobyan Street (Mergelyan Hub)"
  },
  "alternateName" : "TEST4NET",
  "contactPoint" : {
    "@type" : "ContactPoint",
    "availableLanguage" : [ "en", "ru", "hy" ],
    "contactType" : "sales",
    "email" : "sales@test4net.com",
    "telephone" : "+374-60-88-88-99"
  },
  "description" : "Independent, vendor-neutral lab for testing network and cybersecurity products — NGFW, WAF, IPS, DLP and SASE — and an authorized distributor of test, measurement and network infrastructure solutions.",
  "email" : "sales@test4net.com",
  "foundingDate" : "2024",
  "image" : "https://test4net.com/hubfs/og-t4n.png",
  "logo" : "https://test4net.com/hubfs/test4net-logo-fixed-2.svg",
  "name" : "TEST4NET LLC",
  "sameAs" : [ "https://www.linkedin.com/company/test4net/", "https://t.me/TEST4NET", "https://www.facebook.com/people/Test4net-LLC/61591470856077/" ],
  "telephone" : "+374-60-88-88-99",
  "url" : "https://test4net.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://test4net.com/#website",
  "@type" : "WebSite",
  "inLanguage" : "en",
  "name" : "TEST4NET",
  "potentialAction" : {
    "@type" : "SearchAction",
    "query-input" : "required name=search_term_string",
    "target" : {
      "@type" : "EntryPoint",
      "urlTemplate" : "https://test4net.com/hs-search-results?term={search_term_string}"
    }
  },
  "publisher" : {
    "@id" : "https://test4net.com/#organization"
  },
  "url" : "https://test4net.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "BreadcrumbList",
  "itemListElement" : [ {
    "@type" : "ListItem",
    "item" : "https://test4net.com/",
    "name" : "TEST4NET",
    "position" : 1
  }, {
    "@type" : "ListItem",
    "item" : "https://test4net.com/blog",
    "name" : "Blog",
    "position" : 2
  }, {
    "@type" : "ListItem",
    "item" : "https://test4net.com/blog/how-we-test-ipsec-and-ikev2",
    "name" : "How we test IPsec and IKEv2: 5,000 tunnels, rekeys and real traffic inside",
    "position" : 3
  } ]
}
```