DMZ FTP server slow since Pix 7 upgrade (64mb only)

[ViacomOutdoor]

We have a Pix 515 and the DMZ is very slow since upgrading the firmwaire from 6.3 to 7. The Pix only has 64mb, but we are having a 128mb sick delivered this week. Will this improve the upload speed to the FTP server? It was so much faster before the upgrade.

[mpalardy]

Could be du to many factors:

Check if ftp-server is able to do dns resolving:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094459.shtml

Also check if interfaces are set correctly. Personally I do not leave interfaces to auto-negociate.

[Patrick Iseli]

Have you verified if this is not a duplex or speed issue with your DMZ interface. This is was usually slow down the interface.

Use: Duplex auto on PIX and auto on Switch

or: 100 Full on PIX and 100 Full on Switch

To verify do a < show interface > and check if you have a lot of errors as CRC, Short Frames ...

sincerely

Patrick

[ROBERTO TACCON]

Have you try the version 7.1

Regards.

[ViacomOutdoor]

Hi all, I forgot to mention it was fine before the upgrade, the average memory usage before the upgrade was 26% now it is 65%. Sorry it is 7.1 just checked.

[aashish.c]

Hi

as suggested, you should cehck the port statistics like speed and duplex. are there any CRCs or input errorsand drops ?

cisco suggestes that if it is restircted model then 64 is OK for OS 7.0. but incase it is UR or FO model then it needs 128 MB.

thanks and regards

aashish C

[ViacomOutdoor]

This is what it says:

vogate# show interface

Interface Ethernet0 "outside", is up, line protocol is up

Hardware is i82559, BW 100 Mbps

Half-Duplex(Half-duplex), 10 Mbps(10 Mbps)

MAC address 0005.8ac0.d520, MTU 1500

IP address *.*.*.*, subnet mask 255.255.255.224

40761430 packets input, 35005950535 bytes, 0 no buffer

Received 46942 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

0 L2 decode drops

37047470 packets output, 17859390161 bytes, 0 underruns

0 output errors, 1236661 collisions, 0 interface resets

0 babbles, 662864 late collisions, 1728267 deferred

0 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (128/128) software (0/38)

output queue (curr/max blocks): hardware (0/14) software (0/1)

Traffic Statistics for "outside":

40773226 packets input, 34385730923 bytes

37710336 packets output, 17179504869 bytes

2160135 packets dropped

Interface Ethernet1 "inside", is up, line protocol is up

Hardware is i82559, BW 100 Mbps

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

MAC address 0005.8ac0.d520, MTU 1500

IP address *.*.*.*, subnet mask 255.255.0.0

157624596 packets input, 82944422558 bytes, 0 no buffer

[mpalardy]

Counters indicates collisions on the outside intf. This is du the half-duplex configuration. Check to configure this interface to 10Mbps full-duplex or 100Mbps full-duplex.

You can also initiate a clear interface to reset the counters.