topic Re: Enabling IPv6 inspect rule results in very slow downloads in Network Security https://community.cisco.com/t5/network-security/enabling-ipv6-inspect-rule-results-in-very-slow-downloads/m-p/1578389#M610015 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>It looks like you were hitting the bug CSCtb10776 <A href="http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&amp;bugId=CSCtb10776">http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&amp;bugId=CSCtb10776</A>. Yes the version you upgraded should have the fix for this issue, as confirmed. </P><P></P><P>Regards,</P><P></P><P>Namit </P></BODY></HTML> Sun, 03 Oct 2010 18:23:06 GMT Namit Agarwal 2010-10-03T18:23:06Z Enabling IPv6 inspect rule results in very slow downloads https://community.cisco.com/t5/network-security/enabling-ipv6-inspect-rule-results-in-very-slow-downloads/m-p/1578387#M610009 <P>Hi,</P><P></P><P>I'm experimenting with IPv6 using a cisco 1711 running "c1700-bk9no3r2sy7-mz.124-15.T14.bin". The 1711 builds up an ipv6 over ipv4 tunnel to a tunnelbroker (Hurricane Electric) using a tunnel interface. Everything is working as it should and I'm getting 8 mbps up and down (hardware limitation on the 1711).</P><P></P><P>Until... I enable the ipv6 inspect rule. Then new downloads only reach to 1.000 - 10.000 bytes (!) per second. This is what the config looks like:</P><P></P><P><SPAN style="font-family: courier new, courier;">ipv6 unicast-routing<BR />ipv6 cef<BR />ipv6 inspect udp idle-time 15<BR />ipv6 inspect tcp idle-time 1800<BR />ipv6 inspect tcp finwait-time 1<BR />ipv6 inspect tcp synwait-time 15<BR />ipv6 inspect name TUNNEL0_OUT_CBAC icmp<BR />ipv6 inspect name TUNNEL0_OUT_CBAC tcp<BR />ipv6 inspect name TUNNEL0_OUT_CBAC udp<BR />ipv6 inspect name TUNNEL0_OUT_CBAC ftp</SPAN></P><P></P><P><SPAN style="font-family: courier new, courier;">interface Tunnel0<BR />description Hurricane Electric IPv6 Tunnel Broker<BR />no ip address<BR />ipv6 address 2001:X:X:X::2/64<BR />ipv6 enable<BR /><STRONG>ipv6 traffic-filter TUNNEL0_IN_ACL in<BR />ipv6 inspect TUNNEL0_OUT_CBAC out<BR /></STRONG>tunnel source FastEthernet0<BR />tunnel destination 216.66.84.46<BR />tunnel mode ipv6ip</SPAN></P><P></P><P><SPAN style="font-family: courier new, courier;">ipv6 route ::/0 2001:X:X:X::1</SPAN></P><P></P><P><SPAN style="font-family: courier new, courier;">ipv6 access-list TUNNEL0_IN_ACL<BR />deny ipv6 any any</SPAN></P><P></P><P>CPU usage is near nothing... So I'm not overloading the router.</P><P></P><P>Anyone any idea's on why this might happen?</P><P></P><P>Thanks!</P> Mon, 11 Mar 2019 18:49:02 GMT https://community.cisco.com/t5/network-security/enabling-ipv6-inspect-rule-results-in-very-slow-downloads/m-p/1578387#M610009 2044418Puts 2019-03-11T18:49:02Z Re: Enabling IPv6 inspect rule results in very slow downloads https://community.cisco.com/t5/network-security/enabling-ipv6-inspect-rule-results-in-very-slow-downloads/m-p/1578388#M610011 <HTML><HEAD></HEAD><BODY><P>After changing from 12.4T to 12.4 mainline the problem disappeared. (124-25d). So probably a bug or something.</P></BODY></HTML> Sat, 02 Oct 2010 18:50:09 GMT https://community.cisco.com/t5/network-security/enabling-ipv6-inspect-rule-results-in-very-slow-downloads/m-p/1578388#M610011 2044418Puts 2010-10-02T18:50:09Z Re: Enabling IPv6 inspect rule results in very slow downloads https://community.cisco.com/t5/network-security/enabling-ipv6-inspect-rule-results-in-very-slow-downloads/m-p/1578389#M610015 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>It looks like you were hitting the bug CSCtb10776 <A href="http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&amp;bugId=CSCtb10776">http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&amp;bugId=CSCtb10776</A>. Yes the version you upgraded should have the fix for this issue, as confirmed. </P><P></P><P>Regards,</P><P></P><P>Namit </P></BODY></HTML> Sun, 03 Oct 2010 18:23:06 GMT https://community.cisco.com/t5/network-security/enabling-ipv6-inspect-rule-results-in-very-slow-downloads/m-p/1578389#M610015 Namit Agarwal 2010-10-03T18:23:06Z