09-29-2004 12:11 PM - edited 03-09-2019 08:56 AM
Hi everyone,
We've notice that upload performance is brutal when sending files to servers on our DMZ. Downloading doesn't seem to be an issue since I am still receiving at 4-6Megs/second. However when I try to upload, my speed is reduced to 20-25k/sec
Attached you will find an output of an ftp session from inside-dmz and one from dmz-dmz.
There is no rate-shaping on any device.
Any thoughts or suggestions.
Thanks.
-- Dominique
09-29-2004 12:36 PM
Monitoring PIX Performance
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009491c.shtml
Have you tryed with:
no fixup protocol ftp 21
# This inspects the behavior of ftp, but I don't think thats the problem. Might be good to sniff on
the inside and dmz interface with the PIX "capture" command.
Other hint: Do you have a have NONAT statement between the inside and the DMZ interface?
If no that might be the problem. Usually to communicate from the inside to the dmz interface you do not use NAT, you use the private addresses.
If I understand it right you doing ftp from the internal to the DMZ interface, is that right?
sincerely
Patrick
09-30-2004 05:32 AM
Thanks for you help. I should pay more attention when looking at the interface statistics. There was a duplex mismatch on my switch interface.
hard-coding it to 100-full resolved the issue.
Thanks.
-- Dominique
09-30-2004 05:03 PM
I think you solved the problem. Might be good to take a look at this:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094459.shtml
sincerely
Patrick
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide