[c-nsp] Cisco 2811 performance issue - dual(new) isp
Vinny Abello
vinny at abellohome.net
Thu Dec 22 12:50:52 EST 2011
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
What kind of performance do you see if you temporarily remove the ip access-group and ip inspect commands from the interface? (Sorry if you already did this. I might have missed some posts). What's configured on the interface connected to the internal network for reference?
What are you inspecting with ISP2-cbac? I've found http inspection has a huge performance impact on IOS platforms, limiting speed tests, sites like Youtube and anything else over port 80. Turning that off fixes a large amount of performance problems for me on the 1841 platform. I'm not sure if you're inspecting http. I usually just do tcp inspection instead. You won't even see it evident in the CPU load. The bottleneck is somewhere else but I've never been able to identify it specifically.
- -Vinny
On 12/22/2011 12:08 PM, Jmail Clist wrote:
> The fa0/1 interface literally plugs into the cable modem for the ISP. Do
> you think I should increase the buffer size a bit for that interface? I'm
> sure there is a command for that. I added another "sh int" and the full
> "sh buffer" output near the bottom of this message.
>
> #sh ver
> Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version
> 12.4(24)T
>
> FastEthernet0/1 buffers, 1536 bytes (total 384, permanent 384):
> 0 in free list (0 min, 384 max allowed)
> 384 hits, 0 fallbacks
> 384 max cache size, 256 in cache
> 29489950 hits in cache, 0 misses in cache
> interface FastEthernet0/1
> ip address x.x.x.x 255.255.255.0
> ip access-group BLOCK in
> no ip redirects
> ip nat outside
> ip inspect ISP2-cbac out
> ip virtual-reassembly
> duplex auto
> speed auto
>
> sh int fa0/1
> FastEthernet0/1 is up, line protocol is up
> Hardware is MV96340 Ethernet, address is 0015.f956.d549 (bia
> 0015.f956.d549)
> Internet address is x.x.x.x/24
> MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
> reliability 255/255, txload 1/255, rxload 1/255
> Encapsulation ARPA, loopback not set
> Keepalive set (10 sec)
> Full-duplex, 100Mb/s, 100BaseTX/FX
> ARP type: ARPA, ARP Timeout 04:00:00
> Last input 00:00:00, output 00:00:00, output hang never
> Last clearing of "show interface" counters 1d12h
> Input queue: 0/75/167/0 (size/max/drops/flushes); Total output drops: 0
> Queueing strategy: fifo
> Output queue: 0/40 (size/max)
> 5 minute input rate 267000 bits/sec, 84 packets/sec
> 5 minute output rate 49000 bits/sec, 24 packets/sec
> 9017021 packets input, 2522442236 bytes
> Received 7072336 broadcasts, 0 runts, 0 giants, 18 throttles
> 1934 input errors, 0 CRC, 0 frame, 0 overrun, 1934 ignored
> 0 watchdog
> 0 input packets with dribble condition detected
> 1425142 packets output, 377562825 bytes, 0 underruns
> 0 output errors, 0 collisions, 0 interface resets
> 0 unknown protocol drops
> 0 babbles, 0 late collision, 0 deferred
> 0 lost carrier, 0 no carrier
> 0 output buffer failures, 0 output buffers swapped out
>
> rtr2811#sh buffer
> Buffer elements:
> 687 in free list (1119 max allowed)
> 80677703 hits, 0 misses, 619 created
> Public buffer pools:
> Small buffers, 104 bytes (total 106, permanent 50, peak 248 @ 1d02h):
> 86 in free list (20 min, 150 max allowed)
> 670704026 hits, 5941 misses, 4870 trims, 4926 created
> 1577 failures (0 no memory)
> Middle buffers, 600 bytes (total 41, permanent 25, peak 262 @ 7w0d):
> 39 in free list (10 min, 150 max allowed)
> 547716007 hits, 1867 misses, 3051 trims, 3067 created
> 421 failures (0 no memory)
> Big buffers, 1536 bytes (total 52, permanent 50, peak 122 @ 2d01h):
> 35 in free list (5 min, 150 max allowed)
> 6473777 hits, 98 misses, 133 trims, 135 created
> 36 failures (0 no memory)
> VeryBig buffers, 4520 bytes (total 10, permanent 10, peak 12 @ 19:59:39):
> 10 in free list (0 min, 100 max allowed)
> 26150 hits, 7 misses, 2 trims, 2 created
> 6 failures (0 no memory)
> Large buffers, 5024 bytes (total 1, permanent 0, peak 1 @ 1d00h):
> 1 in free list (0 min, 10 max allowed)
> 0 hits, 6 misses, 9 trims, 10 created
> 6 failures (0 no memory)
> Huge buffers, 18024 bytes (total 1, permanent 0, peak 1 @ 1d00h):
> 1 in free list (0 min, 4 max allowed)
> 0 hits, 6 misses, 9 trims, 10 created
> 6 failures (0 no memory)
> Interface buffer pools:
> Onboard DSPRM Pool buffers, 264 bytes (total 300, permanent 300):
> 0 in free list (0 min, 300 max allowed)
> 300 hits, 0 fallbacks
> 300 max cache size, 300 in cache
> 991346 hits in cache, 0 misses in cache
> Syslog ED Pool buffers, 600 bytes (total 132, permanent 132):
> 100 in free list (132 min, 132 max allowed)
> 532 hits, 0 misses
> CD2430 I/O buffers, 1536 bytes (total 0, permanent 0):
> 0 in free list (0 min, 0 max allowed)
> 0 hits, 0 fallbacks
> IPC buffers, 4096 bytes (total 140, permanent 140):
> 140 in free list (70 min, 280 max allowed)
> 0 hits, 0 fallbacks, 0 trims, 0 created
> 0 failures (0 no memory)
> Header pools:
> Header buffers, 0 bytes (total 768, permanent 768):
> 256 in free list (128 min, 1024 max allowed)
> 512 hits, 0 misses, 0 trims, 0 created
> 0 failures (0 no memory)
> 512 max cache size, 512 in cache
> 103 hits in cache, 0 misses in cache
> C5510 Header Pool buffers, 0 bytes (total 768, permanent 768):
> 256 in free list (128 min, 1024 max allowed)
> 512 hits, 0 misses, 0 trims, 0 created
> 0 failures (0 no memory)
> 512 max cache size, 512 in cache
> 986899 hits in cache, 0 misses in cache
> Particle Clones:
> 1024 clones, 101871 hits, 0 misses
> Public particle pools:
> F/S buffers, 256 bytes (total 768, permanent 768):
> 256 in free list (128 min, 1024 max allowed)
> 512 hits, 0 misses, 0 trims, 0 created
> 0 failures (0 no memory)
> 512 max cache size, 512 in cache
> 0 hits in cache, 0 misses in cache
> Normal buffers, 1548 bytes (total 768, permanent 768):
> 768 in free list (128 min, 1024 max allowed)
> 0 hits, 0 misses, 0 trims, 0 created
> 0 failures (0 no memory)
>
>
>
>
> On Wed, Dec 21, 2011 at 3:04 PM, Chuck Church <chuckchurch at gmail.com> wrote:
>
>> Hmmm. Well, there are a few variables. If one site does give you good
>> results, then the router might not be totally at fault. You are getting
>> ‘ignore’ errors on the interface with CBAC enabled, that’s definitely
>> slowing things down, as you’re getting re-transmits and TCP window starting
>> small again. Just curious, what does ‘sh buffer’ output look like?****
>>
>> ** **
>>
>> ** **
>>
>> Thanks,****
>>
>> ** **
>>
>> Chuck****
>>
>> ** **
>>
>> *From:* Jmail Clist [mailto:jmlist80 at gmail.com]
>> *Sent:* Tuesday, December 20, 2011 11:43 PM
>> *To:* Chuck Church
>>
>> *Cc:* cisco-nsp at puck.nether.net
>> *Subject:* Re: [c-nsp] Cisco 2811 performance issue - dual(new) isp****
>>
>> ** **
>>
>> Chuck,****
>>
>> ****
>>
>> Interesting. Not sure why it was so low. I switched back to this new ISP
>> conn on fa0/1 tonight and ran some more tests. Below is various output
>> immediately after testing. The second set of show outputs is after I
>> applied CBAC inbound and a generic deny extended access list outbound on
>> fa0/1. The CBAC is definitely raising my cpu, as expected.****
>>
>> Performance is still low in my opinion, at least with testing on most
>> "test" sites. The only site that gave me great results was speakeasy.net.*
>> ***
>>
>> ****
>>
>> rtr2811#sh int switching | begin FastEthernet0/1
>> FastEthernet0/1
>> Throttle count 11
>> Drops RP 11 SP 0
>> SPD Flushes Fast 0 SSE 0
>> SPD Aggress Fast 0
>> SPD Priority Inputs 20030942 Drops 0****
>>
>> Protocol IP
>> Switching path Pkts In Chars In Pkts Out Chars Out
>> Process 66120 22268396 37079 4417563
>> Cache misses 0 - - -
>> Fast 410053 477119555 351638 183218275
>> Auton/SSE 0 0 0 0****
>>
>> Protocol DEC MOP
>> Switching path Pkts In Chars In Pkts Out Chars Out
>> Process 0 0 8697 669669
>> Cache misses 0 - - -
>> Fast 0 0 0 0
>> Auton/SSE 0 0 0 0****
>>
>> Protocol ARP
>> Switching path Pkts In Chars In Pkts Out Chars Out****
>>
>> ****
>>
>> rtr2811#sh int fa0/1
>> FastEthernet0/1 is up, line protocol is up
>> Hardware is MV96340 Ethernet, address is 0015.f956.d549 (bia
>> 0015.f956.d549)
>> Internet address is 200.200.200.200/24
>> MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
>> reliability 255/255, txload 1/255, rxload 1/255
>> Encapsulation ARPA, loopback not set
>> Keepalive set (10 sec)
>> Full-duplex, 100Mb/s, 100BaseTX/FX
>> ARP type: ARPA, ARP Timeout 04:00:00
>> Last input 00:00:00, output 00:00:02, output hang never
>> Last clearing of "show interface" counters 00:01:49
>> Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
>> Queueing strategy: fifo
>> Output queue: 0/40 (size/max)
>> 5 minute input rate 731000 bits/sec, 108 packets/sec
>> 5 minute output rate 357000 bits/sec, 45 packets/sec
>> 17949 packets input, 14940931 bytes
>> Received 5515 broadcasts, 0 runts, 0 giants, 0 throttles
>> 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
>> 0 watchdog
>> 0 input packets with dribble condition detected
>> 11012 packets output, 9300361 bytes, 0 underruns
>> 0 output errors, 0 collisions, 0 interface resets****
>>
>> ****
>>
>> rtr2811#sh proc cpu sorted 1min
>> CPU utilization for five seconds: 9%/1%; one minute: 14%; five minutes: 13%
>> PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
>> 80 97347040 262361459 371 1.75% 1.77% 1.76% 0 IGMP
>> Snooping Re
>> 118 84936308 283025140 300 1.67% 1.54% 1.52% 0 IP
>> Input
>> 19 9391432 30838598 304 0.31% 1.20% 1.28% 0 ARP
>> Input
>> 182 392060 1300284614 0 1.03% 1.12% 1.12% 0 HQF
>> Shaper Backg
>> 92 19052984 60835327 313 0.39% 0.49% 0.50% 0
>> ILPM
>> 3 2197644 20210291 108 0.23% 0.31% 0.31% 0 Skinny
>> Msg Serve
>> 314 169248 163513044 1 0.31% 0.30% 0.31% 0 PPP
>> manager
>> 125 1464 1486 985 0.47% 0.16% 0.12% 514 SSH
>> Process
>> 5 11185972 797585 14024 0.00% 0.15% 0.17% 0 Check
>> heaps
>> 315 88332 163513044 0 0.15% 0.14% 0.15% 0 PPP
>> Events
>> 91 6798308 5230434 1299 0.07% 0.12% 0.13% 0
>> tCOUNTER
>> --More--****
>>
>>
>> ///////////////////////////////////////////////////////
>> After CBAC applied outbound/extended deny all access-list inbound****
>>
>> ****
>>
>> FastEthernet0/1 is up, line protocol is up
>> Hardware is MV96340 Ethernet, address is 0015.f956.d549 (bia
>> 0015.f956.d549)
>> Internet address is 200.200.200.200/24
>> MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
>> reliability 255/255, txload 1/255, rxload 3/255
>> Encapsulation ARPA, loopback not set
>> Keepalive set (10 sec)
>> Full-duplex, 100Mb/s, 100BaseTX/FX
>> ARP type: ARPA, ARP Timeout 04:00:00
>> Last input 00:00:00, output 00:00:00, output hang never
>> Last clearing of "show interface" counters 00:16:44
>> Input queue: 1/75/75/0 (size/max/drops/flushes); Total output drops: 0
>> Queueing strategy: fifo
>> Output queue: 0/40 (size/max)
>> 5 minute input rate 1445000 bits/sec, 183 packets/sec
>> 5 minute output rate 527000 bits/sec, 94 packets/sec
>> 162975 packets input, 141570515 bytes
>> Received 51776 broadcasts, 0 runts, 0 giants, 6 throttles
>> 379 input errors, 0 CRC, 0 frame, 0 overrun, 379 ignored
>> 0 watchdog
>> 0 input packets with dribble condition detected
>> 80662 packets output, 52976137 bytes, 0 underruns
>> 0 output errors, 0 collisions, 0 interface resets****
>>
>> ------
>> sh proc cpu sorted 1min
>> CPU utilization for five seconds: 11%/2%; one minute: 20%; five minutes:
>> 19%
>> PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
>> 118 84950740 283074993 300 1.75% 1.81% 1.78% 0 IP
>> Input
>> 80 97371132 262405939 371 1.83% 1.79% 1.77% 0 IGMP
>> Snooping Re
>> 19 9408864 30883468 304 1.35% 1.29% 1.46% 0 ARP
>> Input
>> 182 392968 1300500059 0 1.11% 1.12% 1.12% 0 HQF
>> Shaper Backg
>> 321 3856440 2264838 1702 0.00% 0.86% 0.78% 0 SNMP
>> ENGINE
>> 92 19056692 60845592 313 0.39% 0.48% 0.50% 0
>> ILPM
>> 3 2198364 20213772 108 0.31% 0.32% 0.31% 0 Skinny
>> Msg Serve
>> 314 169656 163540744 1 0.31% 0.30% 0.31% 0 PPP
>> manager
>> 319 2108780 4252988 495 0.07% 0.24% 0.16% 0 IP
>> SNMP
>> 5 11188032 797728 14024 0.00% 0.22% 0.19% 0 Check
>> heaps ****
>>
>> ****
>>
>> sh ip traffic
>> FastEthernet0/1
>> Throttle count 17
>> Drops RP 86 SP 0
>> SPD Flushes Fast 0 SSE 0
>> SPD Aggress Fast 0
>> SPD Priority Inputs 20080830 Drops 0****
>>
>> Protocol IP
>> Switching path Pkts In Chars In Pkts Out Chars Out
>> Process 66747 22533286 37856 4562880
>> Cache misses 0 - - -
>> Fast 509124 600798823 421307 227932429
>> Auton/SSE 0 0 0 0****
>>
>> Protocol DEC MOP
>> Switching path Pkts In Chars In Pkts Out Chars Out
>> Process 0 0 8698 669746
>> Cache misses 0 - - -
>> Fast 0 0 0 0
>> Auton/SSE 0 0 0 0****
>>
>> Protocol ARP
>> Switching path Pkts In Chars In Pkts Out Chars Out
>>
>> ****
>>
>> On Tue, Dec 20, 2011 at 12:51 PM, Chuck Church <chuckchurch at gmail.com>
>> wrote:****
>>
>> Are you sure your NAT/PAT statements are right? I think you said in an
>> earlier email this output below was done right after the speedtest.
>> However, the 5 minute load interval for fa0/1 shows only 1 pps output on
>> this interface. The input packets look like all ARP, based on the int
>> switching info. Is your traffic really going out the original circuit?
>>
>> Chuck****
>>
>>
>> -----Original Message-----
>> From: cisco-nsp-bounces at puck.nether.net
>> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Jmail Clist****
>>
>> Sent: Tuesday, December 20, 2011 9:58 AM
>> To: Daniel Hooper****
>>
>> Cc: cisco-nsp at puck.nether.net
>> Subject: Re: [c-nsp] Cisco 2811 performance issue - dual(new) isp
>>
>> Here is a show proc, show ip traffic and show int switching. Any feedback
>> is very much appreciated.
>>
>> rtr2811#show proc cpu sorted 1min
>> CPU utilization for five seconds: 26%/17%; one minute: 13%; five minutes:
>> 13%
>> PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
>> 80 95570780 <80%20%20%20%2095570780> 257773304 370 1.83%
>> 1.75% 1.76% 0 IGMP
>> Snooping Re
>> 118 83345888 278039819 299 1.51% 1.59% 1.67% 0 IP
>> Input
>> 19 8380332 26051685 321 2.31% 1.33% 1.34% 0 ARP
>> Input
>> 182 382324 1277585313 0 1.35% 1.14% 1.12% 0 HQF Shaper
>> Backg
>> 92 18735164 59773255 313 0.63% 0.51% 0.50% 0
>> ILPM
>> 125 10440 8415 1240 0.00% 0.45% 0.73% 514 SSH
>> Process
>> 3 2156048 19855473 108 0.31% 0.31% 0.31% 0 Skinny Msg
>> Serve
>> 314 166160 160658064 1 0.31% 0.31% 0.31% 0 PPP
>> manager
>> 5 10986872 783696 14019 0.00% 0.21% 0.18% 0 Check
>> heaps
>> 315 86412 160658064 0 0.15% 0.14% 0.15% 0 PPP
>> Events
>> 91 6677076 5139100 1299 0.15% 0.12% 0.13% 0
>> tCOUNTER
>> --------------------
>> rtr2811#sh ip traffic
>> IP statistics:
>> Rcvd: 5677 total, 231 local destination
>> 0 format errors, 0 checksum errors, 7 bad hop count
>> 0 unknown protocol, 5358 not a gateway
>> 0 security failures, 0 bad options, 0 with options
>> Opts: 0 end, 0 nop, 0 basic security, 0 loose source route
>> 0 timestamp, 0 extended security, 0 record route
>> 0 stream ID, 0 strict source route, 0 alert, 0 cipso, 0 ump
>> 0 other
>> Frags: 0 reassembled, 0 timeouts, 0 couldn't reassemble
>> 0 fragmented, 0 fragments, 0 couldn't fragment
>> Bcast: 33 received, 0 sent
>> Mcast: 0 received, 21 sent
>> Sent: 225 generated, 11351 forwarded
>> Drop: 3 encapsulation failed, 0 unresolved, 0 no adjacency
>> 0 no route, 0 unicast RPF, 0 forced drop
>> 0 options denied
>> Drop: 0 packets with source IP address zero
>> Drop: 0 packets with internal loop back IP address
>> 0 physical broadcast
>> ICMP statistics:
>> Rcvd: 0 format errors, 0 checksum errors, 0 redirects, 0 unreachable
>> 60 echo, 0 echo reply, 0 mask requests, 0 mask replies, 0 quench
>> 0 parameter, 0 timestamp, 0 timestamp replies, 0 info request, 0
>> other
>> 0 irdp solicitations, 0 irdp advertisements
>> 0 time exceeded, 0 info replies
>> Sent: 32 redirects, 0 unreachable, 0 echo, 61 echo reply
>> 0 mask requests, 0 mask replies, 0 quench, 0 timestamp, 0 timestamp
>> replies
>> 0 info reply, 0 time exceeded, 0 parameter problem
>> 0 irdp solicitations, 0 irdp advertisements
>> UDP statistics:
>> Rcvd: 40 total, 0 checksum errors, 34 no port
>> Sent: 23 total, 0 forwarded broadcasts
>> TCP statistics:
>> Rcvd: 135 total, 0 checksum errors, 0 no port
>> Sent: 116 total
>> BGP statistics:
>> Rcvd: 0 total, 0 opens, 0 notifications, 0 updates
>> 0 keepalives, 0 route-refresh, 0 unrecognized
>> Sent: 0 total, 0 opens, 0 notifications, 0 updates
>> 0 keepalives, 0 route-refresh
>> IP-EIGRP statistics:
>> Rcvd: 0 total
>> Sent: 0 total
>> PIMv2 statistics: Sent/Received
>> Total: 0/0, 0 checksum errors, 0 format errors
>> Registers: 0/0 (0 non-rp, 0 non-sm-group), Register Stops: 0/0, Hellos:
>> 0/0
>> Join/Prunes: 0/0, Asserts: 0/0, grafts: 0/0
>> Bootstraps: 0/0, Candidate_RP_Advertisements: 0/0
>> Queue drops: 0
>> State-Refresh: 0/0
>> IGMP statistics: Sent/Received
>> Total: 0/0, Format errors: 0/0, Checksum errors: 0/0
>> Host Queries: 0/0, Host Reports: 0/0, Host Leaves: 0/0
>> DVMRP: 0/0, PIM: 0/0
>> Queue drops: 0
>> OSPF statistics:
>> Rcvd: 0 total, 0 checksum errors
>> 0 hello, 0 database desc, 0 link state req
>> 0 link state updates, 0 link state acks
>> Sent: 0 total
>> 0 hello, 0 database desc, 0 link state req
>> 0 link state updates, 0 link state acks
>> ARP statistics:
>> Rcvd: 2916 requests, 0 replies, 0 reverse, 0 other
>> Sent: 2 requests, 5 replies (0 proxy), 0 reverse
>> Drop due to input queue full: 0
>> rtr2811#
>> ------------------
>> FastEthernet0/1 is up, line protocol is up
>> Hardware is MV96340 Ethernet, address is 0015.f956.d549 (bia
>> 0015.f956.d549)
>> Internet address is 200.200.200.200/24
>> MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
>> reliability 255/255, txload 1/255, rxload 1/255
>> Encapsulation ARPA, loopback not set
>> Keepalive set (10 sec)
>> Full-duplex, 100Mb/s, 100BaseTX/FX
>> ARP type: ARPA, ARP Timeout 04:00:00
>> Last input 00:00:00, output 00:00:02, output hang never
>> Last clearing of "show interface" counters 00:04:13
>> Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
>> Queueing strategy: fifo
>> Output queue: 0/40 (size/max)
>> 5 minute input rate 115000 bits/sec, 64 packets/sec
>> 5 minute output rate 18000 bits/sec, 1 packets/sec
>> 24064 packets input, 9171019 bytes
>> Received 17645 broadcasts, 0 runts, 0 giants, 0 throttles
>> 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
>> 0 watchdog
>> 0 input packets with dribble condition detected
>> 4516 packets output, 2399483 bytes, 0 underruns
>> 0 output errors, 0 collisions, 0 interface resets
>> ------------------------
>> sh int switching
>> FastEthernet0/1
>> Throttle count 10
>> Drops RP 10 SP 0
>> SPD Flushes Fast 0 SSE 0
>> SPD Aggress Fast 0
>> SPD Priority Inputs 15397736 Drops 0
>> Protocol IP
>> Switching path Pkts In Chars In Pkts Out Chars Out
>> Process 49490 16769897 30321 3863531
>> Cache misses 0 - - -
>> Fast 249838 281487351 229388 101233546
>> Auton/SSE 0 0 0 0
>> Protocol DEC MOP
>> Switching path Pkts In Chars In Pkts Out Chars Out
>> Process 0 0 8548 658196
>> Cache misses 0 - - -
>> Fast 0 0 0 0
>> Auton/SSE 0 0 0 0
>> Protocol ARP
>> Switching path Pkts In Chars In Pkts Out Chars Out
>> Process 15397767 923866020 919 55140
>> Cache misses 0 - - -
>> Fast 0 0 0 0
>> Auton/SSE 0 0 0 0
>> Protocol CDP
>> Switching path Pkts In Chars In Pkts Out Chars Out
>> Process 0 0 4675 1907390
>> Cache misses 0 - - -
>> Fast 0 0 0 0
>> Auton/SSE 0 0 0 0
>> Protocol Other
>> Switching path Pkts In Chars In Pkts Out Chars Out
>> Process 0 0 514555 30873300
>> Cache misses 0 - - -
>> Fast 0 0 0 0
>> Auton/SSE 0 0 0 0
>> NOTE: all counts are cumulative and reset only after a reload.
>>
>>
>> On Tue, Dec 20, 2011 at 2:03 AM, Daniel Hooper <dhooper at gold.net.au>
>> wrote:
>>
>>> I have no faith in sites like speedtest.net actually reporting the true
>>> speed of your link.
>>>
>>> Use your ISP's local FTP site & mirror sites or find one close to them
>>> upstream and perform testing.
>>>
>>> -Dan
>>>
>>> -----Original Message-----
>>> From: cisco-nsp-bounces at puck.nether.net [mailto:
>>> cisco-nsp-bounces at puck.nether.net] On Behalf Of Jmail Clist
>>> Sent: Tuesday, 20 December 2011 11:42 AM
>>> To: cisco-nsp at puck.nether.net
>>> Subject: Re: [c-nsp] Cisco 2811 performance issue - dual(new) isp
>>>
>>> I have attached another log called "latest_2811_logs". it contains the
>> "sh
>>> ip traffic, sh int switching and a "show proc cpu sorted 1min" output
>>> immediately after doing a test on speedguide.net through the new isp2
>>> connection. I see some throttle drops but not much more. I'm still
>> puzzled
>>> at the poor performance. I put the interface back to auto as well and teh
>>> results are the same. Any ideas?
>>>
>>> On Mon, Dec 19, 2011 at 9:03 PM, Christopher J. Wargaski
>>> <wargo1 at gmail.com>wrote:
>>>
>>>> According to
>>>> http://www.cisco.com/web/partners/downloads/765/tools/quickreference/r
>>>> outerperformance.pdf, the router can handle up to 16.44 Mbps of fast /
>>>> CEF switching. I was not able to see your attachments in the digest
>>>> nor in the archive. Do you have CEF enabled?
>>>>
>>>> cjw
>>>>
>>>>
>>>> Date: Mon, 19 Dec 2011 10:57:11 -0600
>>>>> From: Jmail Clist <jmlist80 at gmail.com>
>>>>>
>>>>> To: cisco-nsp at puck.nether.net
>>>>> Subject: [c-nsp] Cisco 2811 performance issue - dual(new) isp
>>>>> Message-ID:
>>>>> <CAO8NJwLyKmQj8jUJTYg2_82fyxyyQLRuCOraaeH3BG9ONPr8=
>>>>> Q at mail.gmail.com>
>>>>> Content-Type: text/plain; charset="iso-8859-1"
>>>>>
>>>>>
>>>>> Hello,
>>>>>
>>>>> I have an issue that is really causing me grief. I recentely
>>>>> inherited a small network. There is an existing 1.5mbps Internet
>>>>> connection (fa0/0) (includes MPLS as well/same provider). We added a
>>>>> new ISP that allows for 50mb down/5mb up. I added the new ISP to
>>>>> fa0/1 and modified the NAT overload statements accordingly. I alo
>>>>> changed the default route to ONLY use the new, faster ISP connection.
>>>>> Using speedguide.net, I am only able to get 6 to 10mb down, most of
>>>>> the time. if I plug a laptop into the cable modem then I get 37 to
>>>>> 50mb down. Any idea why the 2811 is so slow? How much download speed
>>>>> can I expect to get? Any assisstance would be very much appreciated.
>>>>>
>>>>> I have attached the config and various show outputs (nat, sh ver,
>>>>> memory, etc.).
>>>>>
>>>>> Thank you,
>>>>>
>>>>
>>> ****
>>
>> _______________________________________________
>> cisco-nsp mailing list cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/****
>>
>> ** **
>>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
iEYEARECAAYFAk7zbfsACgkQUyX7ywEAl3qt2QCguT0c5v4sjrYUVO0AdW0yCp03
M4cAoObem9lXvba8Kmmtq82y8kIVu0Cv
=sO8K
-----END PGP SIGNATURE-----
More information about the cisco-nsp
mailing list