ISR 4321 Upload speed issue on 100Mbps symmetrical ISP link

[masvorinich]

Hello, 

I am having a problem with one of my ISR4321 routers. We recently got a faster connection to our facility and had to RMA this router after the backplane went out. I loaded the configuration onto the replacement router and just noticed that the upload speed is only 10% of the download speeds. We pay for 100/100 speeds but only get 100/8 to the end user.

Someone else set up this router before me and i'm trying to troubleshoot.

Something in this router is either dropping data or limiting data on the upload side.

Can someone help look at this running config and let me know what they see is wrong?

!
! Last configuration change at 14:29:54 EST Wed Jan 18 2023 by omitted
!
version 16.9
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
platform qfp utilization monitor load 80
no platform punt-keepalive disable-kernel-core
platform hardware throughput level 100000
!
hostname Chiefland-4321-ISR-01
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
card type t1 0 1
no logging console
no logging monitor
enable secret 5 omitted
!
aaa new-model
!
!
aaa authentication login default local
!
!
!
!
!
!
aaa session-id common
clock timezone EST -5 0
clock summer-time EDT recurring
!
!
!
!
!
!
!
ip name-server 10.4.16.3 10.1.16.5
no ip domain lookup
ip domain name hospicencf.com
ip dhcp excluded-address 10.10.64.1 10.10.64.34
ip dhcp excluded-address 10.10.64.250 10.10.79.255
!
ip dhcp pool VOICE
network 10.10.64.0 255.255.240.0
default-router 10.10.64.250
option 176 ascii MCIPADD=10.10.16.4,10.10.16.5,10.10.64.1,MCPORT=1719,TFTPSRVR=10.1.64.3,L2QAUD=5,L2QSIG=5,VLANTEST=0
lease 90
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
isdn switch-type primary-ni
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0/1
no watchdog
!
voice-card 0/2
no watchdog
!
license udi pid ISR4321/K9 sn FDO20220ESQ
license accept end user agreement
license boot suite FoundationSuiteK9
license boot suite AdvUCSuiteK9
no license smart enable
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
username omitted privilege 15 secret 5 omitted
!
redundancy
mode none
!
!
!
!
controller T1 0/1/0
framing esf
linecode b8zs
cablelength long 0db
!
controller T1 0/1/1
framing esf
clock source line primary
linecode b8zs
cablelength long 0db
pri-group timeslots 1-24
!
!
!
!
!
class-map match-all BROADCAST-VIDEO
match dscp cs5
class-map match-any BULK-DATA
match dscp af11
match dscp af12
match dscp af13
class-map match-all NETWORK-CONTROL
match dscp cs6
class-map match-any MULTIMEDIA-CONFERENCING
match dscp af41
match dscp af42
match dscp af43
class-map match-all VOICE
match dscp ef
class-map match-all SCAVENGER
match dscp cs1
class-map match-all SIGNALING
match dscp cs3
class-map match-all NETWORK-MANAGEMENT
match dscp cs2
class-map match-all REALTIME-INTERACTIVE
match dscp cs4
class-map match-any TRANSACTIONAL-DATA
match dscp af21
match dscp af22
match dscp af23
class-map match-any MULTIMEDIA-STREAMING
match dscp af31
match dscp af32
match dscp af33
!
policy-map WAN-EDGE
class VOICE
priority percent 33
queue-limit 2048 packets
class BROADCAST-VIDEO
bandwidth percent 10
class REALTIME-INTERACTIVE
set dscp cs5
bandwidth percent 10
class NETWORK-CONTROL
bandwidth percent 2
class SIGNALING
bandwidth percent 2
class NETWORK-MANAGEMENT
bandwidth percent 3
class MULTIMEDIA-CONFERENCING
bandwidth percent 5
fair-queue
random-detect dscp-based
random-detect dscp 34 50 64
random-detect dscp 36 45 64
random-detect dscp 38 40 64
class MULTIMEDIA-STREAMING
bandwidth percent 3
fair-queue
random-detect dscp-based
random-detect dscp 26 50 64
random-detect dscp 28 45 64
random-detect dscp 30 40 64
class TRANSACTIONAL-DATA
bandwidth percent 3
fair-queue
random-detect dscp-based
random-detect dscp 18 50 64
random-detect dscp 20 45 64
random-detect dscp 22 40 64
class BULK-DATA
bandwidth percent 3
fair-queue
random-detect dscp-based
random-detect dscp 10 50 64
random-detect dscp 12 45 64
random-detect dscp 14 40 64
class SCAVENGER
bandwidth percent 1
class class-default
bandwidth percent 25
fair-queue
queue-limit 128 packets
random-detect dscp-based
random-detect dscp 0 100 128
policy-map Shape20M
class class-default
shape average 20000000
service-policy WAN-EDGE
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description *** Voice ***
ip address 10.130.16.1 255.255.255.255
!
interface GigabitEthernet0/0/0
description *** Trunk To LAN ***
no ip address
negotiation auto
!
interface GigabitEthernet0/0/0.10
description *** Data ***
encapsulation dot1Q 10
ip address 10.1.64.250 255.255.240.0
ip helper-address 10.1.64.3
no ip redirects
no ip proxy-arp
!
interface GigabitEthernet0/0/0.20
description *** Voice ***
encapsulation dot1Q 20
ip address 10.10.64.250 255.255.240.0
ip helper-address 10.1.64.3
no ip redirects
no ip proxy-arp
!
interface GigabitEthernet0/0/0.140
description *** Management ***
encapsulation dot1Q 140
ip address 10.140.16.1 255.255.255.0
no ip redirects
no ip proxy-arp
!
interface GigabitEthernet0/0/0.200
description *** Data ***
encapsulation dot1Q 200
ip address 10.120.24.1 255.255.255.0
ip helper-address 10.1.64.3
no ip redirects
no ip proxy-arp
!
interface GigabitEthernet0/0/0.201
description *** Voice ***
encapsulation dot1Q 201
ip address 10.120.16.1 255.255.255.0
ip helper-address 10.1.64.3
no ip redirects
no ip proxy-arp
!
interface GigabitEthernet0/0/0.202
description *** Data ***
encapsulation dot1Q 202
ip address 10.120.25.1 255.255.255.0
ip helper-address 10.1.64.3
no ip redirects
no ip proxy-arp
!
interface GigabitEthernet0/0/0.203
description *** Voice ***
encapsulation dot1Q 203
ip address 10.120.17.1 255.255.255.0
ip helper-address 10.1.64.3
no ip redirects
no ip proxy-arp
!
interface GigabitEthernet0/0/0.204
description *** Data ***
encapsulation dot1Q 204
ip address 10.120.26.1 255.255.255.0
ip helper-address 10.1.64.3
no ip redirects
no ip proxy-arp
!
interface GigabitEthernet0/0/0.205
description *** Voice ***
encapsulation dot1Q 205
ip address 10.120.18.1 255.255.255.0
ip helper-address 10.1.64.3
no ip redirects
no ip proxy-arp
!
interface GigabitEthernet0/0/0.999
description *** Native ***
encapsulation dot1Q 999 native
!
interface GigabitEthernet0/0/1
description *** Metro-Ethernet-WAN ***
no ip address
negotiation auto
!
interface GigabitEthernet0/0/1.240
encapsulation dot1Q 240
ip address 10.240.0.3 255.255.255.0
no ip redirects
no ip proxy-arp
!
interface GigabitEthernet0/0/1.999
description *** Native ***
encapsulation dot1Q 999 native
!
interface Service-Engine0/1/0
!
interface Serial0/1/1:23
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn incoming-voice voice
isdn bchan-number-order ascending
!
interface Service-Engine0/2/0
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
ip address 10.1.1.55 255.255.255.0
negotiation auto
!
router ospf 10
router-id 10.130.16.1
passive-interface default
no passive-interface GigabitEthernet0/0/1.240
network 10.1.64.250 0.0.0.0 area 3
network 10.10.64.250 0.0.0.0 area 3
network 10.120.16.1 0.0.0.0 area 3
network 10.120.17.1 0.0.0.0 area 3
network 10.120.18.1 0.0.0.0 area 3
network 10.120.24.1 0.0.0.0 area 3
network 10.120.25.1 0.0.0.0 area 3
network 10.120.26.1 0.0.0.0 area 3
network 10.130.16.1 0.0.0.0 area 3
network 10.140.16.1 0.0.0.0 area 3
network 10.240.0.3 0.0.0.0 area 0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
ip tftp source-interface GigabitEthernet0/0/1
!
!
!
!
snmp-server community hospicencf RO
snmp-server enable traps snmp authentication coldstart
snmp-server enable traps config
snmp-server enable traps entity
!
!
!
!
control-plane
!
!
voice-port 0/1/1:23
!
voice-port 0/2/0
!
voice-port 0/2/1
!
voice-port 0/2/2
!
voice-port 0/2/3
!
voice-port 0/2/4
!
voice-port 0/2/5
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
banner motd 

You are connected to: $(hostname)

WARNING: This is a private network.
Unauthorized access is prohibited.
Use of this system constitutes your
consent to interception, monitoring,
and recording for official purposes
of information related to such use,
including criminal investigations.


alias exec ib sh ip int brief
alias exec osn sh ip ospf nei
alias exec ir sh ip route
!
line con 0
exec-timeout 30 0
password 7 omitted
logging synchronous
transport input none
stopbits 1
line aux 0
stopbits 1
line vty 0 4
exec-timeout 30 0
password 7 omitted
logging synchronous
transport input ssh
line vty 5 15
exec-timeout 30 0
password 7 omitted
logging synchronous
transport input ssh
!
network-clock synchronization automatic
ntp server 10.4.16.3
!
!
!
!
!
end

[Georg Pauwen]

Hello,

which interface is the traffic flowing through ? Post the output of:

show interfaces x

where 'x' is the interface that has the slow upload speed...

[masvorinich]

Interface Gi 0/0/1 is the port for the uplink traffic to the ISP.

Chiefland-4321-ISR-01#show interfaces gigabitEthernet 0/0/1
GigabitEthernet0/0/1 is up, line protocol is up
Hardware is ISR4321-2x1GE, address is 00f6.6364.2141 (bia 00f6.6364.2141)
Description: *** Metro-Ethernet-WAN ***
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set
Keepalive not supported
Full Duplex, 1000Mbps, link type is auto, media type is RJ45
output flow-control is off, input flow-control is off
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/375/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 2358000 bits/sec, 292 packets/sec
5 minute output rate 337000 bits/sec, 162 packets/sec
97326091 packets input, 93591206222 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 696921 multicast, 0 pause input
60645806 packets output, 16654476541 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
Chiefland-4321-ISR-01#

Chiefland-4321-ISR-01#sho interfaces gigabitEthernet 0/0/1.240
GigabitEthernet0/0/1.240 is up, line protocol is up
Hardware is ISR4321-2x1GE, address is 00f6.6364.2141 (bia 00f6.6364.2141)
Internet address is 10.240.0.3/24
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 240.
ARP type: ARPA, ARP Timeout 04:00:00
Keepalive not supported
Last clearing of "show interface" counters never
Chiefland-4321-ISR-01#sho interfaces gigabitEthernet 0/0/1.999
GigabitEthernet0/0/1.999 is up, line protocol is up
Hardware is ISR4321-2x1GE, address is 00f6.6364.2141 (bia 00f6.6364.2141)
Description: *** Native ***
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 999.
ARP type: ARPA, ARP Timeout 04:00:00
Keepalive not supported
Last clearing of "show interface" counters never
Chiefland-4321-ISR-01#