05-17-2022 10:32 AM - edited 05-17-2022 10:50 AM
I am currently working on a site that has two ISR2911 Routers. ROUTER A is connected to our MPLS provider via eBGP on a 10Meg Circuit and ROUTER B is connected to our MPLS provider via eBGP on a 50Meg Circuit. Both of these routers are connected to switches that allow for HSRP for the 3 VLANs at this site. A few days ago I noticed that this site was configured with ROUTER A as the "active router" in the pair and ROUTER B as the "standby router", so I went in and reversed this as ROUTER B has the bigger MPLS Circuit (50Meg). I also added an as-path prepend to ROUTER A to make the routes going out to the MPLS provider less preferred than what was being advertised by ROUTER B, which is now active. For the most part, everything is working just fine, however, I noticed that we were getting low UPLOAD Speeds out to the INTERNET. At the moment our DOWNLOAD speeds are 40ishMeg and our UPLOAD speeds are 3-4Meg. This is not normal as our other remote sites that have 50Meg circuits are able to achieve speeds much greater also before I made the HSRP changes to make ROUTER B primary, the upload speeds were around 7-8Meg on the 10Meg Circuit. The MPLS provider told me that their PE device is configured for SPEED 100 and FULL-DUPLEX which has been configured on my device as well. I do not see any fragments our CRC/Input errors on ROUTER B and traces TO and FROM the internet take the same path with low latency so it feels like the issue is local to the site, however I am not sure what the issue is.....
(SEE BRIEF DIAGRAM ATTACHED)
ROUTER B CONFIGURATION:
interface Loopback0
ip address 10.154.125.4 255.255.255.255
h323-gateway voip interface
h323-gateway voip bind srcaddr 10.154.125.4
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
ip flow ingress
ip flow egress
duplex full
speed 100
!
interface GigabitEthernet0/0.6
description vlan 6
encapsulation dot1Q 6
ip address 10.154.6.2 255.255.255.0
standby 2 ip 10.154.6.3
standby 2 priority 110
standby 2 preempt
standby 2 track 1 decrement 30
!
interface GigabitEthernet0/0.7
description vlan 7
encapsulation dot1Q 7
ip address 10.154.7.2 255.255.255.0
standby 3 ip 10.154.7.3
standby 3 priority 110
standby 3 preempt
standby 3 track 1 decrement 30
!
interface GigabitEthernet0/0.31
description vlan 31
encapsulation dot1Q 31
ip address 10.154.31.2 255.255.255.0
standby 4 ip 10.154.31.3
standby 4 priority 110
standby 4 preempt
standby 4 track 1 decrement 30
!
interface GigabitEthernet0/1
ip address 192.168.110.149 255.255.255.252
load-interval 30
duplex full
speed 100
!
interface GigabitEthernet0/2
ip address 10.251.131.1 255.255.255.252
duplex auto
speed auto
!
router bgp XXXX
bgp router-id 10.154.125.4
bgp log-neighbor-changes
neighbor 192.168.110.150 remote-as 1803
neighbor 192.168.110.150 version 4
!
address-family ipv4
network 10.154.6.0 mask 255.255.255.0
network 10.154.7.0 mask 255.255.255.0
network 10.154.31.0 mask 255.255.255.0
network 10.154.125.4 mask 255.255.255.255
network 10.251.131.0 mask 255.255.255.252
neighbor 192.168.110.150 activate
neighbor 192.168.110.150 send-community both
neighbor 192.168.110.150 soft-reconfiguration inbound
exit-address-family
!
MPLS Facing Interface
#show int gig 0/1
GigabitEthernet0/1 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is f8c2.889e.2961 (bia f8c2.889e.2961)
Internet address is 192.168.110.149/30
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 2/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 100Mbps, media type is RJ45
output flow-control is unsupported, input flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 19:22:32
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 912
Queueing strategy: fifo
Output queue: 0/40 (size/max)
30 second input rate 1031000 bits/sec, 510 packets/sec
30 second output rate 285000 bits/sec, 147 packets/sec
25983019 packets input, 3167548059 bytes, 0 no buffer
Received 57 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
9237950 packets output, 3212143399 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
2 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
05-17-2022 12:00 PM
Hello,
are the configurations identical for the remote site with good speeds ?
Since your upload is going through HQ, it might be worth seeing that config as well...
05-17-2022 12:40 PM
Yes MTU -1500 /Speed -100 /Duplex - FULL /Bandwidth 50000kbps/BGP Routing is the same for the site that is working just fine. However, this site is using an ISR4451 not ISR2911, so it's two different platforms. I had a user test directly behind the router, and we are still noticing slow speeds....so I would assume that the issue exists between the CE router and the provider.
05-17-2022 12:13 PM
friend
reduce the MTU at least 80 bytes
then check again.
your site send 1500 SP do the fragment and this reduce the Speed
but reduce your side below 1500 then the SP router not do any fragment
05-17-2022 12:31 PM - edited 05-17-2022 12:58 PM
Are you saying to reduce only the WAN facing interface MTU to 1420 and keep the MTU at 1500 on the LAN facing interface? I am a bit confused on how this would fix the issue as MTU is set for 1500 on the provider router interface and none of our remote sites needs MTU reduced.
Thanks.
05-17-2022 01:04 PM - edited 05-17-2022 01:11 PM
MPLS face interface must be reduce at least 80 bytes
this prevent SP router to fragment the packet.
different SP router make different speed
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide