Cisco 887 Running slow on download but fine on upload

[casperionx]

Ok, so I picked up a used Cisoc 887 to use as my home modem as the local ISP's provided modem doesnt allow for nat hairpinning.

(Im with Optus in australia fwiw).

My connection type is VDSL. 

For the first week or so everything seemed good, then it started getting a bit slower. Now when ever I perform a speed test (speedtest.net or fast.com) Im getting almost synchronous speeds. I dont have a synchronous service, its 100/20 so im not sure whats going on. I also am seeing a lot of errors in the inbound and outbound on the vdsl wan interface...

corehpg#show int eth0 summ

*: interface is up
IHQ: pkts in input hold queue IQD: pkts dropped from input queue
OHQ: pkts in output hold queue OQD: pkts dropped from output queue
RXBS: rx rate (bits/sec) RXPS: rx rate (pkts/sec)
TXBS: tx rate (bits/sec) TXPS: tx rate (pkts/sec)
TRTL: throttle count

Interface IHQ IQD OHQ OQD RXBS RXPS TXBS TXPS TRTL
-----------------------------------------------------------------------------------------------------------------
* Ethernet0 0 400 0 47 1331000 134 266000 68 220

 Ethernet0 is up, line protocol is up 
Hardware is PQII_VDSL_ETHERNET, address is 6c20.56f5.b8d6 (bia 6c20.56f5.b8d6)
Description: WAN interface
Internet address is 49.176.132.154/20
MTU 1500 bytes, BW 22600 Kbit/sec, DLY 400 usec, 
reliability 255/255, txload 2/255, rxload 13/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/400/0 (size/max/drops/flushes); Total output drops: 47
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 1203000 bits/sec, 120 packets/sec
5 minute output rate 240000 bits/sec, 61 packets/sec
239113 packets input, 267903557 bytes, 0 no buffer
Received 4 broadcasts (0 IP multicasts)
61 runts, 0 giants, 220 throttles 
252 input errors, 0 CRC, 0 frame, 252 overrun, 0 ignored
0 input packets with dribble condition detected
165903 packets output, 85176992 bytes, 0 underruns
0 output errors, 0 collisions, 3 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out

 And heres the speed test data:

casperionx@gns3vm:~$ speedtest

Speedtest by Ookla

Server: GSL Networks - Sydney (id: 44735)
ISP: Optus
Idle Latency: 10.50 ms (jitter: 0.28ms, low: 10.10ms, high: 10.61ms)
Download: 17.84 Mbps (data used: 19.7 MB) 
85.94 ms (jitter: 41.55ms, low: 21.75ms, high: 448.11ms)
Upload: 18.66 Mbps (data used: 10.3 MB) 
84.48 ms (jitter: 50.71ms, low: 11.22ms, high: 469.74ms)
Packet Loss: 0.0%
Result URL: https://www.speedtest.net/result/c/f47fd03c-91a5-412e-abb4-7d5a63f740e3

Show controllers vdsl...

corehpg#show controllers vdsL 0
Controller VDSL 0 is UP

Daemon Status: Up

XTU-R (DS) XTU-C (US)
Chip Vendor ID: 'BDCM' 'BDCM'
Chip Vendor Specific: 0x0000 0xB1C5
Chip Vendor Country: 0xB500 0xB500
Modem Vendor ID: 'CSCO' ' '
Modem Vendor Specific: 0x4602 0x0000
Modem Vendor Country: 0xB500 0x0000
Serial Number Near: FGL164521JZ 887VA-SE 15.3(3)M 
Serial Number Far: AA1609FS5AC-15
Modem Version Near: 15.3(3)M
Modem Version Far: 0xb1c5

Modem Status: TC Sync (Showtime!) 
DSL Config Mode: VDSL2 
Trained Mode: G.993.2 (VDSL2) Profile 17a
TC Mode: PTM 
Selftest Result: 0x00 
DELT configuration: disabled 
DELT state: not running 
Trellis: ON ON
SRA: enabled enabled
SRA count: 0 0
Bit swap: enabled enabled
Bit swap count: 8 0
Line Attenuation: 0.0 dB 0.0 dB
Signal Attenuation: 0.0 dB 0.0 dB
Noise Margin: 11.5 dB 25.0 dB
Attainable Rate: 137716 kbits/s 50503 kbits/s
Actual Power: 14.4 dBm - 3.2 dBm
Per Band Status: D1 D2 D3 U0 U1 U2 U3
Line Attenuation(dB): 6.6 13.9 20.5 2.5 10.6 16.0 N/A
Signal Attenuation(dB): 6.5 13.7 20.5 2.5 10.0 15.0 N/A
Noise Margin(dB): 11.8 11.8 11.1 25.3 24.0 25.3 N/A
Total FECC: 800467 0
Total ES: 22 0
Total SES: 18 0
Total LOSS: 1 0
Total UAS: 488 488
Total LPRS: 0 0
Total LOFS: 0 0
Total LOLS: 0 0

Full inits: 2
Failed full inits: 1
Short inits: 0
Failed short inits: 0

Firmware Source File Name (version)
-------- ------ -------------------
VDSL user config flash:VA_A_39m_B_38h3_24h.bin (10)

Modem FW Version: 140729_1209-4.02L.03.A2pv6C039m.d24h
Modem PHY Version: A2pv6C039m.d24h
Vendor Version: Ap6v39m.24h 68


DS Channel1 DS Channel0 US Channel1 US Channel0
Speed (kbps): 0 119904 0 22600
SRA Previous Speed: 0 119904 0 22600
Previous Speed: 0 119904 0 22600
Reed-Solomon EC: 209 193451 0 0
CRC Errors: 1033 1033 0 0
Header Errors: 0 0 0 0
Interleave (ms): 2.00 0.00 0.00 0.00
Actual INP: 3.00 41.00 4.00 45.00

Training Log : Stopped
Training Log Filename : flash:vdsllog.bin

And show run and show ver...

corehpg#show run
Building configuration...

Current configuration : 2831 bytes
!
! Last configuration change at 15:56:42 AEST Wed Nov 16 2022 by casperionx
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname corehpg
!
boot-start-marker
boot-end-marker
!
!
logging buffered 1000000
!
no aaa new-model
memory-size iomem 10
clock timezone AEST 10 0
!
!
!
!
!
!


!
ip dhcp excluded-address 10.0.0.1
ip dhcp excluded-address 10.0.0.217
!
ip dhcp pool dpool1
network 10.0.0.0 255.255.255.0
dns-server 10.0.0.1 198.142.152.164 198.142.152.165 
default-router 10.0.0.1 
!
!
!
ip domain name corehpg.local
ip name-server 198.142.152.164
ip name-server 198.142.152.165
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
license udi pid CISCO887VA-SEC-K9 sn ****
!
!
username **** privilege 15 password 0 *******
!
!
!
!
!
controller VDSL 0
operating mode vdsl2
firmware filename flash:VA_A_39m_B_38h3_24h.bin
sra
!
ip ssh version 2
! 
!
!
!
!
!
!
!
!
interface Ethernet0
description WAN interface
ip address dhcp
no ip redirects
no ip proxy-arp
ip nat outside
ip nat enable
ip virtual-reassembly in
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
description Router Interface
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
description Ultra Lappy
no ip address
!
interface Vlan1
ip address 10.0.0.1 255.255.255.0
no ip redirects
ip mtu 1492
ip nat inside
ip nat enable
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
!
ip dns server
ip nat source list outbound_nat interface Ethernet0 overload
ip nat source static tcp 10.0.0.217 2347 interface Ethernet0 2347
ip nat source static tcp 10.0.0.217 4867 interface Ethernet0 4867
ip nat source static tcp 10.0.0.217 2350 interface Ethernet0 2350
ip nat source static tcp 10.0.0.217 2351 interface Ethernet0 2351
ip nat source static tcp 10.0.0.217 2360 interface Ethernet0 2360
ip nat source static tcp 10.0.0.217 22 interface Ethernet0 63111
ip route 0.0.0.0 0.0.0.0 49.176.128.1
!
ip access-list extended BlockSSHSTD
permit tcp any any eq 31212
ip access-list extended outbound_nat
permit ip 10.0.0.0 0.0.0.255 any
!
logging trap debugging
logging host 10.0.0.217 transport udp port 20514 sequence-num-session
!
snmp-server community ****** RW
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps syslog
snmp-server host 10.0.0.217 version 2c ***** syslog snmp
!
control-plane
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
no modem enable
line aux 0
line vty 0 4
exec-timeout 0 0
login local
transport input all
!
ntp server au.pool.ntp.org
!
end

corehpg# show ver
Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 15.3(3)M2, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Thu 30-Jan-14 02:35 by prod_rel_team

ROM: System Bootstrap, Version 12.4(22r)YB5, RELEASE SOFTWARE (fc1)

corehpg uptime is 43 minutes
System returned to ROM by reload at 06:02:25 AEST Sat Jan 27 1900
System restarted at 15:18:45 AEST Wed Nov 16 2022
System image file is "flash:c880data-universalk9-mz.153-3.M2.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command




This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 887VA (MPC8300) processor (revision 1.0) with 236544K/25600K bytes of memory.
Processor board ID FGL164521JZ

1 DSL controller
1 Ethernet interface
4 FastEthernet interfaces
1 ATM interface
1 Virtual Private Network (VPN) Module
256K bytes of non-volatile configuration memory.
125440K bytes of ATA CompactFlash (Read/Write)

License Info:

License UDI:

-------------------------------------------------
Device# PID SN
-------------------------------------------------
*0 CISCO887VA-SEC-K9 FGL164521JZ




License Information for 'c880-data'
License Level: advipservices Type: Permanent
Next reboot license Level: advipservices


Configuration register is 0x2102

Now I also have a later version of the firmware but when I went to use it performance went off of a cliff, it wouldnt even complete the speedtest.

1 -rw- 40304088 Apr 28 2015 14:32:56 +10:00 c880data-universalk9-mz.153-3.M2.bin
2 -rw- 44550836 Oct 22 2018 15:15:02 +10:00 c880data-universalk9-mz.154-3.M4.bin
3 -rw- 2823256 Oct 22 2018 15:16:16 +10:00 VA_A_39m_B_38h3_24h.bin
4 -rw- 2761506 Nov 16 2022 11:12:46 +10:00 VA_A_39t_B_35j_24m.bin

 I was wondering if anyone has any suggestions? To me it seems like its treating the link as a synchronous one, even though as can be seen it is getting an actual line rate of 119904 down and 22600 up.

I retested the ISPs modem again and things went to normal speed wise.but interestingly it actually synced at a very slightly lower speed (113mbps approx)

Cheers!

[paul driver]

Hello
You are using NVI nat, which can be resource intensive on the rtr, Also i see errors on the ethernet 10mb wan interface although the counters have never been cleared, I assume the speed /duplex setting correct?

Also check the cpu/memory processes history/statistics

sh process cpu sorted | history
sh processes memory sorted

Try the following configuration.

no ip name-server 198.142.152.164
no ip name-server 198.142.152.165

ip dhcp pool dpool1
no dns-server 10.0.0.1 198.142.152.164 198.142.152.165
dns-server 10.0.0.1
exit

no ip route 0.0.0.0 0.0.0.0 49.176.128.1
ip route 0.0.0.0 0.0.0.0 eth0 dhcp

[Georg Pauwen]

Hello,

I agree with @paul driver that the NAT configuration does not look right. Use the simplified config below:

corehpg#show run
Building configuration...

Current configuration : 2831 bytes
!
! Last configuration change at 15:56:42 AEST Wed Nov 16 2022 by casperionx
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname corehpg
!
boot-start-marker
boot-end-marker
!
!
logging buffered 1000000
!
no aaa new-model
memory-size iomem 10
clock timezone AEST 10 0
!
ip dhcp excluded-address 10.0.0.1
ip dhcp excluded-address 10.0.0.217
!
ip dhcp pool dpool1
network 10.0.0.0 255.255.255.0
dns-server 10.0.0.1 198.142.152.164 198.142.152.165
default-router 10.0.0.1
!
ip domain name corehpg.local
ip name-server 198.142.152.164
ip name-server 198.142.152.165
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
license udi pid CISCO887VA-SEC-K9 sn ****
!
username **** privilege 15 password 0 *******
!
controller VDSL 0
operating mode vdsl2
firmware filename flash:VA_A_39m_B_38h3_24h.bin
sra
!
ip ssh version 2
!
interface Ethernet0
description WAN interface
ip address dhcp
no ip redirects
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
description Router Interface
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
description Ultra Lappy
no ip address
!
interface Vlan1
ip address 10.0.0.1 255.255.255.0
no ip redirects
ip mtu 1492
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
ip dns server
ip nat inside source list outbound_nat interface Ethernet0 overload
ip nat inside source static tcp 10.0.0.217 2347 interface Ethernet0 2347
ip nat inside source static tcp 10.0.0.217 4867 interface Ethernet0 4867
ip nat inside source static tcp 10.0.0.217 2350 interface Ethernet0 2350
ip nat inside source static tcp 10.0.0.217 2351 interface Ethernet0 2351
ip nat inside source static tcp 10.0.0.217 2360 interface Ethernet0 2360
ip nat inside source static tcp 10.0.0.217 22 interface Ethernet0 63111
ip route 0.0.0.0 0.0.0.0 49.176.128.1
!
ip access-list extended BlockSSHSTD
permit tcp any any eq 31212
ip access-list extended outbound_nat
permit ip 10.0.0.0 0.0.0.255 any
!
logging trap debugging
logging host 10.0.0.217 transport udp port 20514 sequence-num-session
!
snmp-server community ****** RW
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps syslog
snmp-server host 10.0.0.217 version 2c ***** syslog snmp
!
control-plane
!
line con 0
exec-timeout 0 0
privilege level 15
no modem enable
line aux 0
line vty 0 4
exec-timeout 0 0
login local
transport input all
!
ntp server au.pool.ntp.org
!
end

[casperionx]

Ok so memory usage:

corehpg#show processes memory sorted
Processor Pool Total: 134499428 Used: 78849956 Free: 55649472
I/O Pool Total: 26214400 Used: 9838640 Free: 16375760

PID TTY Allocated Freed Holding Getbufs Retbufs Process
0 0 147566884 92127376 51510028 0 0 *Init*
0 0 151182948 113485180 22554136 6653227 0 *Dead*
1 0 2855268 471192 2391372 0 0 Chunk Manager
355 0 2064208 0 2071536 0 0 l4f mgt task
0 0 0 0 1969080 0 0 *MallocLite*
316 0 1385040 20652 1371620 0 0 EEM Server
301 0 286004 4988 291312 100548 0 EEM ED Syslog
302 0 211196 4988 216544 67468 0 EEM ED Generic
245 0 218600 556 216044 0 0 Crypto HW Proc

 And CPU:

corehpg#show processes cpu sorted
CPU utilization for five seconds: 17%/5%; one minute: 18%; five minutes: 17%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
138 1623536 706399 2298 5.83% 6.74% 6.47% 0 IP Input
99 429276 64703 6634 3.91% 3.88% 3.91% 0 COLLECT STAT COU
5 23884 2429 9832 0.87% 0.26% 0.18% 0 Check heaps
77 1288 1581 814 0.39% 0.29% 0.16% 8 SSH Process
107 4276 1574600 2 0.31% 0.31% 0.31% 0 Ethernet Msec Ti
68 896 204048 4 0.07% 0.04% 0.05% 0 LED Timers
270 880 406538 2 0.07% 0.03% 0.02% 0 MMON MENG
209 32 6567 4 0.07% 0.00% 0.00% 0 CEF: IPv4 proces
63 60 3373 17 0.07% 0.00% 0.00% 0 HC Counter Timer
176 288 6333 45 0.07% 0.00% 0.00% 0 TCP Timer
152 1552 35771 43 0.07% 0.02% 0.01% 0 Spanning Tree
258 1404 204146 6 0.07% 0.06% 0.07% 0 MMA DB TIMER
210 152 13111 11 0.07% 0.01% 0.00% 0 ADJ background

[paul driver]

Hello
Can you append the changes i suggested and test please..