topic Re: Cisco FPR-1010 on asa code Slow upload speeds in Network Security

Cisco FPR-1010 on asa code Slow upload speeds

jab7 — Sun, 01 Oct 2023 20:13:20 GMT

Hello,

When I perform a speed test I am only getting 9.46Mbps upload when plugged into the firewall. I have tried plugging my computer directly to the providers equipment and I get the expected 500+mbps upload. The ASA has been factory reset with complete default configuration and still has the same issue.

Before factory resetting the issue was also noticed between internal vlans.

ciscoasa(config)# show int ethernet 1/1
Interface Ethernet1/1 "outside", is up, line protocol is up
Hardware is EtherSVI, BW 1000 Mbps, DLY 10 usec
Full-Duplex(fullDuplex), 1000 Mbps(1gbps)
MAC address b08b.d032.6bc8, MTU 1500
IP address 47.150.207.246, subnet mask 255.255.255.0
3251671 packets input, 4539847756 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
1119062 packets output, 202655128 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 0 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
Traffic Statistics for "outside":
3251699 packets input, 4480935478 bytes
1119091 packets output, 178809691 bytes
3101 packets dropped
1 minute input rate 4 pkts/sec, 548 bytes/sec
1 minute output rate 3 pkts/sec, 776 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 2164 pkts/sec, 2999512 bytes/sec
5 minute output rate 763 pkts/sec, 115693 bytes/sec
5 minute drop rate, 1 pkts/sec
ciscoasa(config)# show run int ethernet 1/1
!
interface Ethernet1/1
no switchport
nameif outside
security-level 0
ip address dhcp setroute

Re: Cisco FPR-1010 on asa code Slow upload speeds

Marius Gunnerud — Mon, 02 Oct 2023 06:32:34 GMT

What ASA model is this? When you say you get 9.45Mbps when plugged into the firewall, do you mean you have directly connected the PC to the firewall or is this via a switch? What is the configuration of the interface connecting towards the PC? Issue a show interface command for the interface connected to the PC after you have performed a speed test and post the output here. Also, issue the command "show run all sysopt" (without the quotes) and post the results. What is the total speed of the internet line you have? Have you only checked the speed using speedtest or have you also tried a file-transfer?

Also, post a full output of "show run" (again without quotes) from the ASA as this might help in troubleshooting.

Other options would be to setup captures on the inside and outside interfaces and then run a test, and then analyze the captures in wireshark.

Re: Cisco FPR-1010 on asa code Slow upload speeds

jab7 — Tue, 03 Oct 2023 14:10:25 GMT

Sorry for the delay I have not been able to get the requested information yet. I am planning on getting this today. The internet connection speed is 500/500 which I can get those speeds when the laptop is plugged directly into the service provider ONT. When I say connected to the firewall the laptop is directly connected to the firewall on port e1/4.

The test has been a speed test using the speedtest.net

Re: Cisco FPR-1010 on asa code Slow upload speeds

jab7 — Wed, 04 Oct 2023 02:53:16 GMT

Hello I have added the requested info to the file

Re: Cisco FPR-1010 on asa code Slow upload speeds

Marius Gunnerud — Wed, 04 Oct 2023 08:22:49 GMT

Could you issue a show interface eth1/4 when the PC is connected to it.

Also, could you configure an IP on e1/4 either moving the IP from interface VLAN 1 or adding a new IP for testing purposes. I would like to identify if this is an issue with the switching interface or if it also affects the routed interfaces. Please issue the show interface 1/4 while the port is in switched mode and then again when in routed mode.