cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2402
Views
0
Helpful
6
Replies
Highlighted
Participant

slow scp transfer - ASR router

Experiencing extremely slow transfer times using scp to transfer an IOS XE image to an ASR-1002(X).  Have attempted using three different routers and two separate servers.  In all cases scp is extremely slow.  A 380MB image is still transferring after three hours.

Transferring the same file using tftp takes just over 5 minutes. I have attempted the transfer using a Windows and a Linux scp server. In addition, I have scp'ed files to each of these servers to ensure they were operating properly - in both cases the servers can transfer the file in minutes.

-Do not believe it is an issue with the protocol itself or implementation on the servers: other scp transfers to the servers run quickly

-Research on this topic returned one response that the issue was due to writing the file to a flash filesystem. I have doubts about this since tftp transfers orders of magnitude more quickly, writing to the same filesystem.

I'm researching to see if there is a bug in these versions of code.

Next step is to run a packet capture during a transfer to look for clues.  Any experience/solutions to this issue appreciated!

-Ed

6 REPLIES 6
Highlighted
Hall of Fame Community Legend

Can't say I've seen this kind of behaviour, Edwin.  I always use TFTP and in some cases use USB to transfer IOS/Bootstrap to the appliance.

Highlighted
Hall of Fame Guru

I've always used ftp and have pushed the ~380 MB IOS-XE images to ASR routers across a VPN and WAN in just a few minutes.

Highlighted
Beginner

I noticed the same thing.  Noticed fluctuation in TCP WINDOW size. Couldn't find solution yet.

Highlighted

We have some similar issue.

1- SCP transfer from Server to the Router/switch is slow

2- SCP transfer on same network i-e using the same network devices from server to server is pretty good.

3- Same images of IOS working in other sites with no issue. all boxes have similar configuration.

 

verified  the WAN link directly connected a PC TO ISP and did a file transfer work extremely good.

 

The issue only observed while we copy to and from Networking device to the SCP server located on other site.

Highlighted
Beginner

Have you found any cause of this ?We have some similar issue.

 

1- SCP transfer from Server to the Router/switch is slow

2- SCP transfer on same network i-e using the same network devices from server to server is pretty good.

3- Same images of IOS working in other sites with no issue. all boxes have similar configuration.


verified the WAN link directly connected a PC TO ISP and did a file transfer work extremely good.


The issue only observed while we copy to and from Networking device to the SCP server located on other site.

Highlighted
Beginner

I’ve been fighting this for a while and finally found a solution. It is due to default ssh control place policing. After entering the following commands on IOS-XR, my scp time dropped from a few hours to a few minutes!

 

lpts pifib hardware police

flow ssh known rate 15000

flow ssh default rate 15000

 

These rates are much higher than the recommended best practices values. See this document for more info: https://tools.cisco.com/security/center/resources/increase_security_ios_xr_devices.html

 

Content for Community-Ad