Bandwidth problem

Hakim RS · ‎05-12-2017

Hi everyone,

I got an C891F router, attched to two ISPs (first ISP : Up to 180Mbps , second ISP : speed s up to 70Mbps)

I configured VRFs so each ISP serve different LAN (2LANs one for the employes and the second for students)

So the problem is that the internet speed in the first LAN ( employes which is served from the first ISP with 180Mbps) does not exceed the 18Mbps

While for the second LAN it s doing quite well, speed tests shows a bandwidth of 55 to 65 Mbps

I don t know why the First ISP interface or network is facing this issue

Well here s what sh run shows: and hope someone can help me with this :D

Building configuration...

Current configuration : 6123 bytes
!
! Last configuration change at 16:18:26 UTC Thu May 11 2017
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname RouterC891F
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!

!
ip vrf lan-employes
rd 65000:99
route-target export 65000:99
route-target import 65000:1
!
ip vrf lan-etudiants
rd 65000:98
route-target export 65000:98
route-target import 65000:2
!
ip vrf proximus
rd 65000:2
route-target export 65000:2
route-target import 65000:98
!
ip vrf voo
rd 65000:1
route-target export 65000:1
route-target import 65000:99
!
ip dhcp relay information option
ip dhcp excluded-address 192.168.8.1 192.168.8.29
ip dhcp excluded-address 192.168.8.201 192.168.8.254
ip dhcp excluded-address 192.168.20.1 192.168.20.9
ip dhcp excluded-address 192.168.20.251 192.168.20.254
ip dhcp excluded-address 192.168.1.10 192.168.1.254
ip dhcp excluded-address 192.168.8.1 192.168.8.10
ip dhcp excluded-address 192.168.20.1 192.168.20.10
ip dhcp excluded-address 192.168.20.250 192.168.20.254
ip dhcp excluded-address 192.168.8.250 192.168.8.254
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.10.1 192.168.10.10
ip dhcp excluded-address vrf lan-employes 192.168.8.1 192.168.8.10
ip dhcp excluded-address vrf lan-etudiants 192.168.20.1 192.168.20.10
!
ip dhcp pool vlan100
import all
vrf lan-employes
network 192.168.8.0 255.255.255.0
dns-server 62.197.111.140 109.88.203.3
default-router 192.168.8.1
!
ip dhcp pool vlan200
import all
vrf lan-etudiants
network 192.168.20.0 255.255.255.0
dns-server 195.238.2.21 195.238.2.22
default-router 192.168.20.1

!
!
ip dhcp pool vlan 100
dns-server 208.67.222.123 208.67.220.123
!
!
ip dhcp class Employes
option 60 hex 010203
!
ip dhcp class Etudiants
option 60 hex 010203
!
ip dhcp class proximus
option 60 hex 010203
!
!
ip name-server 195.238.2.21
ip name-server 195.238.2.22
ip name-server 8.8.8.8
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C891F-K9 sn FCZ205390HP
!
!
!
!
!
!
!
ip ssh version 1
ip ssh pubkey-chain

!

!
!
!
!
!
!
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
isdn point-to-point-setup
!
interface FastEthernet0
description **proximus**
ip vrf forwarding proximus
ip address 10.0.0.2 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex full
speed 100
!
interface GigabitEthernet0
no ip address
duplex full
speed 100
!
interface GigabitEthernet1
switchport access vlan 100
no ip address
!
interface GigabitEthernet2
switchport access vlan 100
ip dhcp relay information option-insert
ip dhcp relay information check-reply
ip dhcp relay information policy-action replace
no ip address
duplex full
speed 100
!
interface GigabitEthernet3
switchport access vlan 200
ip dhcp relay information option-insert
ip dhcp relay information check-reply
ip dhcp relay information policy-action replace
no ip address
duplex full
speed 100
!
interface GigabitEthernet4
no ip address
shutdown
!
interface GigabitEthernet5
no ip address
shutdown
!
interface GigabitEthernet6
no ip address
shutdown
!
interface GigabitEthernet7
no ip address
!
interface GigabitEthernet8
description **voo**
ip vrf forwarding voo
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex full
speed 1000
!
interface Vlan1
ip address 192.168.10.1 255.255.255.0
!
interface Vlan100
description **Employes**
ip vrf forwarding lan-employes
ip address 192.168.8.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan200
ip vrf forwarding lan-etudiants
ip address 192.168.20.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan2000
no ip address
!
interface Async3
no ip address
encapsulation slip
!
router bgp 65000
bgp log-neighbor-changes
!
address-family ipv4 vrf lan-employes
redistribute connected
exit-address-family
!
address-family ipv4 vrf lan-etudiants
redistribute connected
exit-address-family
!
address-family ipv4 vrf proximus
redistribute connected
redistribute static route-map STATIC2BGP
default-information originate
exit-address-family
!
address-family ipv4 vrf voo
redistribute connected
redistribute static route-map STATIC2BGP
default-information originate
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface GigabitEthernet8 overload
ip nat inside source list 2 interface FastEthernet0 overload
ip nat inside source route-map NAT-voo interface GigabitEthernet8 vrf lan-employes overload
ip nat inside source route-map NAT-proximus interface FastEthernet0 vrf lan-etudiants overload
ip route 10.0.0.0 255.255.255.0 10.0.0.1
ip route 10.0.0.0 255.255.255.0 FastEthernet0
ip route 192.168.0.0 255.255.255.0 GigabitEthernet8
ip route 192.168.0.0 255.255.255.0 192.168.0.1
ip route 192.168.8.0 255.255.255.0 192.168.8.1
ip route 192.168.20.0 255.255.255.0 192.168.20.1
ip route vrf proximus 0.0.0.0 0.0.0.0 10.0.0.1 tag 999 name proximus
ip route vrf voo 0.0.0.0 0.0.0.0 192.168.0.1 tag 999 name voo
!
dialer-list 1 protocol ip permit
!
route-map NAT-voo permit 10
match interface GigabitEthernet8
!
route-map NAT-proximus permit 10
match interface FastEthernet0
!
route-map STATIC2BGP permit 10
match tag 999
!
access-list 1 permit 192.168.8.0 0.0.0.255
access-list 2 permit 192.168.20.0 0.0.0.255
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
!
!
line con 0
no modem enable
line aux 0
line 3
modem InOut
speed 115200
flowcontrol hardware
line vty 0 4
password
login local
transport input ssh
!
scheduler allocate 20000 1000
!
!
end

Reza Sharifi · ‎05-12-2017

Hi,

What ISP is connected to fa0 and which one to gi8?

Can you verify what ISP connect to what interface?

If ISP1 is connected to fa0 and need to provide 180Mb, that is not going to work as the interface is only 100Mb.

HTH

Hakim RS · ‎05-12-2017

Thanks for answering, but no

the 180Mbps ISP is connected to the GI8 ( called voo ) and the 70Mbps one is on the Fa0 interface

Reza Sharifi · ‎05-12-2017

Can you try plugging voo to a gig interface and test again?

If this does not help, you can ask the provider to test the circuit and provide you the test results.

HTH

Richard Burts · ‎05-12-2017

Can you post the output of show interface gig8?

I believe that there are issues with your configuration of NAT. I am not sure whether it has any impact on performance but believe that you should address these.

First I would mention these lines

ip nat inside source list 1 interface GigabitEthernet8 overload
ip nat inside source list 2 interface FastEthernet0 overload
ip nat inside source route-map NAT-voo interface GigabitEthernet8 vrf lan-employes overload
ip nat inside source route-map NAT-proximus interface FastEthernet0 vrf lan-etudiants overload

The first two are a bit duplicative of the last two and I suggest that you remove the first two. In doing NAT where you have two outbound interfaces and different NAT for each interface the optimum solution is to use route maps where the route map matches the outbound interface (which you have in the last two).

Second I would mention that the route map for NAT has a single match for address. The route map should match on the outbound interface and should also match on an access list.

HTH

Rick

HTH

Rick