Slow perfomance on uploads to DMZ

[Dominique Demore]

Hi everyone,

We've notice that upload performance is brutal when sending files to servers on our DMZ. Downloading doesn't seem to be an issue since I am still receiving at 4-6Megs/second. However when I try to upload, my speed is reduced to 20-25k/sec

Attached you will find an output of an ftp session from inside-dmz and one from dmz-dmz.

There is no rate-shaping on any device.

Any thoughts or suggestions.

Thanks.

-- Dominique

[Patrick Iseli]

Monitoring PIX Performance

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009491c.shtml

Have you tryed with:

no fixup protocol ftp 21

# This inspects the behavior of ftp, but I don't think thats the problem. Might be good to sniff on

the inside and dmz interface with the PIX "capture" command.

Other hint: Do you have a have NONAT statement between the inside and the DMZ interface?

If no that might be the problem. Usually to communicate from the inside to the dmz interface you do not use NAT, you use the private addresses.

If I understand it right you doing ftp from the internal to the DMZ interface, is that right?

sincerely

Patrick

[Dominique Demore]

Thanks for you help. I should pay more attention when looking at the interface statistics. There was a duplex mismatch on my switch interface.

hard-coding it to 100-full resolved the issue.

Thanks.

-- Dominique

[Patrick Iseli]

I think you solved the problem. Might be good to take a look at this:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094459.shtml

sincerely

Patrick