Solved: 50 Mbps Internet behind Pix 515E wont get more than 1.5 Mbps

richstraub · ‎10-02-2012

Hi all-

We just switched over from a T1 line to 50/4 Mbps cable Internet. The speed was fine with the T1, but when we switched over to cable, the download speeds didn't increase. I'm getting 2-3 Mbps up and still only 1.5 Mbps down. I inherited this network a few years ago, so I didn't configure the Pix initially but I have been managing it and can't find a setting limiting the bandwidth for the liffe of me. I know it's not the Internet because when I connect a computer straight to the modem, the speed is great. As soon as I put it through the Pix though, it slows way down. Any ideas? Sound familiar to anyone? Any help would be greatly appreciated. Thanks!

Patrick Moubarak · ‎10-03-2012

Hi,

I think you have set your interface to 100-Full and your provider is configured for auto-negotiation of speed/duplex.

We see in your show interface

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

That explains the CRC errors although your transfer rate is not even 1mbps over the last 5 minutes.

Try to put auto/auto on your end and check if the interface comes up as 100Full then clear the counters again.

Otherwise keep it forced to 100Full on ur end and ask your provider to force his end too.

Hope this helps.

Patrick

View solution in original post

Harish Balakrishnan · ‎10-02-2012

Hello Rich,

As per Cisco Doc, the firewall throughput is 188 mbps, hence I dont believe its a capacity issue. We need to see the duplex and speed on PIX when connecting the cable modem and make sure that there is no errors/collissions on the port. is it possible for you to give the show tech for the PIX after connecting the link ?

regards

Harish.

richstraub · ‎10-03-2012

I did see the throuhput number. Here's the sh int if that's what you're asking for. I've also got the complete running config if that will help. Thanks so much for taking a look! I appreciate any help from anyone. I don't want to have to give up the Pix. Thanks again!

Interface Ethernet0 "outside", is up, line protocol is up

Hardware is i82559, BW 100 Mbps

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

MAC address 000c.3077.cf0e, MTU 1500

IP address xxx.xxx.xxx.114, subnet mask 255.255.255.240

69793743 packets input, 26013353234 bytes, 0 no buffer

Received 87807 broadcasts, 3613 runts, 0 giants

24809 input errors, 24809 CRC, 0 frame, 0 overrun, 24809 ignored, 0 abort

1 L2 decode drops

76177015 packets output, 32777419073 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (128/128) software (0/10)

output queue (curr/max blocks): hardware (0/37) software (0/1)

Traffic Statistics for "outside":

69778190 packets input, 24942828765 bytes

76197769 packets output, 31544753842 bytes

1491955 packets dropped

1 minute input rate 12 pkts/sec, 1269 bytes/sec

1 minute output rate 16 pkts/sec, 1792 bytes/sec

1 minute drop rate, 1 pkts/sec

5 minute input rate 49 pkts/sec, 21392 bytes/sec

5 minute output rate 52 pkts/sec, 21013 bytes/sec

5 minute drop rate, 1 pkts/sec

Interface Ethernet1 "inside", is up, line protocol is up

Hardware is i82559, BW 100 Mbps

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

MAC address 000c.3077.cf0f, MTU 1500

IP address 192.168.3.1, subnet mask 255.255.255.0

76553004 packets input, 32808322843 bytes, 0 no buffer

Received 1014604 broadcasts, 4559 runts, 0 giants

12503 input errors, 12503 CRC, 0 frame, 0 overrun, 12503 ignored, 0 abort

0 L2 decode drops

68664864 packets output, 25295776363 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (128/128) software (0/37)

output queue (curr/max blocks): hardware (0/10) software (0/1)

Traffic Statistics for "inside":

76558290 packets input, 31643488113 bytes

68664864 packets output, 24189829926 bytes

227693 packets dropped

1 minute input rate 19 pkts/sec, 1924 bytes/sec

1 minute output rate 14 pkts/sec, 2796 bytes/sec

1 minute drop rate, 0 pkts/sec

5 minute input rate 56 pkts/sec, 21226 bytes/sec

5 minute output rate 53 pkts/sec, 23381 bytes/sec

5 minute drop rate, 0 pkts/sec

Interface Ethernet2 "dmz", is down, line protocol is down

Hardware is i82559, BW 100 Mbps

Full-Duplex, 100 Mbps

MAC address 0002.b3b9.8729, MTU 1500

IP address 192.168.4.1, subnet mask 255.255.255.0

0 packets input, 0 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

0 L2 decode drops

0 packets output, 0 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

Harish Balakrishnan · ‎10-03-2012

Hello Rich,

There are many crc and input error on the interface but dont know whether this for period of time..

Can you give a 'clear counters' exec command

and try to download a large file from internet then paste me the output again

regards

Harish

richstraub · ‎10-03-2012

Hi again Harish-

I sent the clear counters command and it went through, but the info in the sh int doesn't look like it was reset. I could be wrong though, so Here it is afterwards:

Interface Ethernet0 "outside", is up, line protocol is up

Hardware is i82559, BW 100 Mbps

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

MAC address 000c.3077.cf0e, MTU 1500

IP address 69.92.98.114, subnet mask 255.255.255.240

71587944 packets input, 26599231272 bytes, 0 no buffer

Received 87811 broadcasts, 4741 runts, 0 giants

34427 input errors, 34427 CRC, 0 frame, 0 overrun, 34427 ignored, 0 abort

1 L2 decode drops

78170437 packets output, 33579808176 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (128/128) software (0/10)

output queue (curr/max blocks): hardware (0/37) software (0/1)

Traffic Statistics for "outside":

71561784 packets input, 25501519227 bytes

78191558 packets output, 32315357134 bytes

1516265 packets dropped

1 minute input rate 177 pkts/sec, 46209 bytes/sec

1 minute output rate 181 pkts/sec, 32521 bytes/sec

1 minute drop rate, 0 pkts/sec

5 minute input rate 152 pkts/sec, 43386 bytes/sec

5 minute output rate 149 pkts/sec, 25664 bytes/sec

5 minute drop rate, 0 pkts/sec

Interface Ethernet1 "inside", is up, line protocol is up

Hardware is i82559, BW 100 Mbps

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

MAC address 000c.3077.cf0f, MTU 1500

IP address 192.168.3.1, subnet mask 255.255.255.0

78611431 packets input, 33613299226 bytes, 0 no buffer

Received 1047510 broadcasts, 6572 runts, 0 giants

17905 input errors, 17905 CRC, 0 frame, 0 overrun, 17905 ignored, 0 abort

0 L2 decode drops

70477857 packets output, 25898441967 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (128/128) software (0/37)

output queue (curr/max blocks): hardware (0/10) software (0/1)

Traffic Statistics for "inside":

78609701 packets input, 32417335276 bytes

70478167 packets output, 24763593988 bytes

233786 packets dropped

1 minute input rate 183 pkts/sec, 32606 bytes/sec

1 minute output rate 179 pkts/sec, 47116 bytes/sec

1 minute drop rate, 0 pkts/sec

5 minute input rate 150 pkts/sec, 25728 bytes/sec

5 minute output rate 153 pkts/sec, 44029 bytes/sec

5 minute drop rate, 0 pkts/sec

Interface Ethernet2 "dmz", is down, line protocol is down

Hardware is i82559, BW 100 Mbps

Full-Duplex, 100 Mbps

MAC address 0002.b3b9.8729, MTU 1500

IP address 192.168.4.1, subnet mask 255.255.255.0

0 packets input, 0 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

0 L2 decode drops

0 packets output, 0 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (128/128) software (0/0)

output queue (curr/max blocks): hardware (0/0) software (0/0)

Traffic Statistics for "dmz":

0 packets input, 0 bytes

0 packets output, 0 bytes

0 packets dropped

1 minute input rate 0 pkts/sec, 0 bytes/sec

1 minute output rate 0 pkts/sec, 0 bytes/sec

1 minute drop rate, 0 pkts/sec

5 minute input rate 0 pkts/sec, 0 bytes/sec

5 minute output rate 0 pkts/sec, 0 bytes/sec

5 minute drop rate, 0 pkts/sec

rizwanr74 · ‎10-03-2012

Hello mr. Rich.

You must be really rich.

Please check with your ISP, whether mask you are using on your outside interface is correct.

69.92.98.114, subnet mask 255.255.255.240

thanks

richstraub · ‎10-03-2012

Hi!

I verified that the netmask is correct. The setting work great when I bypass the Pix. As soon as I put it back through the Pix, it slows way back down.

Patrick Moubarak · ‎10-03-2012

Hi,

I think you have set your interface to 100-Full and your provider is configured for auto-negotiation of speed/duplex.

We see in your show interface

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

That explains the CRC errors although your transfer rate is not even 1mbps over the last 5 minutes.

Try to put auto/auto on your end and check if the interface comes up as 100Full then clear the counters again.

Otherwise keep it forced to 100Full on ur end and ask your provider to force his end too.

Hope this helps.

Patrick

richstraub · ‎10-03-2012

Patrick-

That was it! Changing it to auto/auto did the trick. Did another speed test and I'm getting 42-43 Mbps download. Thank you so much for the help. Hopefully this will help someone else who has the same problem and comes across this thread.

gazbevan1978 · ‎07-27-2013

Old post but thanks it was very helpful.