The problem I had was that

jeffhouston · ‎01-10-2015

I have a Cisco 2811 router functioning as LAN router for an Ethernet handoff from my ISP. The connection is supposed to be 25MB yet all I can get is 8 at best and the speed varies from .18 to 7.9 up and down. Neither interface shows any errors but I have tried port negotiation settings but nothing seems to work. I installed a different 2811 router with the same but stripped down config so completely different hardware.

When I plug a PC into the ISP port the connection speed is fast like it should be but when I go through the routers LAN ports the speed is variable and problematic but no interface errors. I have tested the router with nothing on the "inside" interface but the same PC that works fine directly connected. The problem gets worse the more data goes through it. Light ping tests respond quickly and well but increaser the ping size and the issue shows but still no errors!

The ISP switch is a Telco-Systems T-Marc 280, and they have no information or help other than to say this is my issue and because I can get full connection speed without using either router I tend to agree.

Does anyone have any ideas what could be going on? Is there any known issues between certain switch ports that have compatibility issues? Issues that would not show up as errors on interface? I have an open ticket with TAC and they cannot find any problems with the router and resorted to send me another one but since I have a completely different hardware 2811 I doubt it will make a difference.

Any advice, suggestions, or information that would help resolve this would be greatly appreciated.

Thanks! connection

devils_advocate · ‎01-12-2015

Hi Jeff

You say you have installed a different 2811 router you didn't say (as far as I can make out) whether the speed improved?

Could you post the Router configuration?

Thanks

jeffhouston · ‎01-12-2015

Hi,

What I wanted to say was that the 2nd router had the same issue as the 1st or completely different hardware's behavior was identical to the original router and no speed improvement.

The connection I am trying to use is a new a Fiber hand off that is delivered to me from my ISP as Ethernet from their MPLS. I currently have a 3 T1's I multilink together to get 4.5MB (from the same ISP) and both connections go to my main office in another city.

So I will post two router configs: 1st is from the second router I used to test hardware being the issue of the 1st: ( it is currently up on another port my ISP enabled for me to test)

Building configuration...

Current configuration : 1453 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Cedar-Router
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
no logging console
!
no aaa new-model
clock timezone MDT -7
!
dot11 syslog
ip source-route
!!
ip cef
!!
no ipv6 cef
multilink bundle-name authenticated
!
!voicce-card 0
!
!username **** privilege 15 secret 5 $1$IPwk$QuNOxuNP/cfokd2ty5IGY/
archive
log config
hidekeys
!
!!
interface FastEthernet0/0
description Cedar Main LAN
ip address 192.168.121.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
description Cedar Fiber to MPLS to STG
ip address 192.168.250.34 255.255.255.252
duplex auto
speed auto
!
interface Serial0/0/0
description Horizon House West T1
ip address 192.168.149.45 255.255.255.252
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.250.33
ip route 192.168.250.20 255.255.255.252 192.168.250.33
!
ip http server
no ip http secure-server
!
!snmp-server community public RO
snmp-server enable traps tty
snmp-server enable traps envmon
snmp-server enable traps syslog
!
control-plane
!
!mgcp fax t38 ecm
mgcp behavior g729-variants static-pt
!
line con 0
login local
line aux 0
line vty 0 4
privilege level 15
login local
line vty 5 15
privilege level 15
login local
!
scheduler allocate 20000 1000
end

This is the router I am currently using but keep kin mind I have reverted the configuration IP routing back to work with the T1's since the MPLS is not stable enough to run with confidence.

Current configuration : 5240 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service sequence-numbers
!
hostname Cedar-Main
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
logging buffered 51200
no logging console
enable secret 5 $1$b1Df$mwQDQFburoSyg1K7v8vha.
!
no aaa new-model
clock timezone MDT -7
clock summer-time MDT date Apr 6 2003 2:00 Oct 26 2003 2:00
no network-clock-participate wic 0
no network-clock-participate wic 1
no network-clock-participate wic 2
no network-clock-participate wic 3
!
dot11 syslog
ip source-route
!
!
ip cef
ip dhcp smart-relay
ip dhcp relay information trust-all
!
!
ip domain name SBHC.local
no ipv6 cef
multilink bundle-name authenticated
!
!voice-card 0
!
crypto pki trustpoint TP-self-signed-196736342
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-196736342
revocation-check none
rsakeypair TP-self-signed-196736342
!
!
crypto pki certificate chain TP-self-signed-196736342
certificate self-signed 01
3082024B 308201B4 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31393637 33363334 32301E17 0D313530 31303732 32323731
365A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3139 36373336
33343230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
E8946088 70C1C76D F14EABE8 2AA12082 FA7F9C11 DC87827A DA8A2E25 BDDF86A2
6D831630 5EF94A7A 402A41E6 78753015 42305944 D9EBEBC6 E498FD04 BD3AFD62
8D1B787D 55D91542 35FA08A4 DAE2AEBE 099128AF 794FAEFB 144C97C6 0A81FAEF
0190B085 AC608E95 16705948 BC4D7465 BBA9D064 C95B1564 A770A71C E9E3FD3F
02030100 01A37530 73300F06 03551D13 0101FF04 05300301 01FF3020 0603551D
11041930 17821543 65646172 2D4D6169 6E2E5342 48432E6C 6F63616C 301F0603
551D2304 18301680 14941548 A39D83D1 46A69E2D 57374488 05DB67CE 91301D06
03551D0E 04160414 941548A3 9D83D146 A69E2D57 37448805 DB67CE91 300D0609
2A864886 F70D0101 04050003 81810016 B41168A0 8DC0095E C01CE90B 3A9511F3
E406481C 8747E142 DE611CA7 ED9088E1 9C6EAF1C 57B5D50D D39A54E7 C264D866
713F1468 D92CFB21 4EF8FE16 368899D4 F6C24BC5 A4B25E36 4BA0DF7F 48A52826
E0F01DBA 9DDBFC24 34DF2A18 2C9B01B9 2EAD66D6 51701546 1A74038E E524F655
CA0CAFC8 C7F6373B 7C2F1E72 55F7A5
quit
!
!
username **** privilege 15 secret 5 $1$CGqb$jXHCTwWa6P74L8TwwhF2r/
archive
log config
hidekeys
!
!
controller T1 0/0/0
channel-group 0 timeslots 1-24
description Frame-Relay to HDS & STG
!
controller T1 0/0/1
fdl ansi
channel-group 1 timeslots 1-24
description Multilink T1 to SG
!
controller T1 0/1/0
channel-group 0 timeslots 1-24
description T1 to Milford
!
controller T1 0/1/1
channel-group 0 timeslots 1-24
description T1 to Horizon House
!
controller T1 0/2/0
fdl ansi
channel-group 1 timeslots 1-24
description T1 Multilink
!
controller T1 0/2/1
fdl ansi
channel-group 1 timeslots 1-24
description T1 Multilink
!
controller T1 0/3/0
!
controller T1 0/3/1
!
!interface Multilink1
description TRi T1 Group Mutilink
ip address 192.168.149.42 255.255.255.252
ppp multilink
ppp multilink group 1
!
interface FastEthernet0/0
description Cedar Main LAN$ETH-LAN$
ip address 192.168.132.1 255.255.255.0
ip helper-address 192.168.130.10
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
duplex auto
speed auto
no cdp enable
no mop enabled
!
interface FastEthernet0/1
description Cedar Fiber to STG Gateway
ip address 192.168.250.17 255.255.255.252
duplex auto
speed auto
!
interface Serial0/0/0:0
description NOT USED
ip address 192.168.149.13 255.255.255.252
shutdown
!
interface Serial0/0/1:1
description T1 #1 to Tri-T1 Multilink
no ip address
ip directed-broadcast
encapsulation ppp
ppp multilink
ppp multilink group 1
!
interface Serial0/1/0:0
description Horizon House West T1
ip address 192.168.149.45 255.255.255.252
!
interface Serial0/1/1:0
description Horizon T1
ip address 192.168.149.13 255.255.255.252
shutdown
!
interface Serial0/2/0:1
description T1 #2 to Tri-T1 Multilink
no ip address
ip directed-broadcast
encapsulation ppp
ppp multilink
ppp multilink group 1
!
interface Serial0/2/1:1
description T1 #3 to Tri-T1 Multilink
no ip address
ip directed-broadcast
encapsulation ppp
ppp multilink
ppp multilink group 1
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.149.41
ip route 192.168.135.0 255.255.255.0 192.168.132.226
ip route 192.168.137.0 255.255.255.0 192.168.149.46
ip route 192.168.139.0 255.255.255.0 192.168.132.226
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!snmp-server community public RO
snmp-server enable traps tty
snmp-server enable traps syslog
!
control-plane
!
!banner motd ^CAUTHORIZED ACCESS ONLY!^C
!
line con 0
login local
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
end

The best I can come up with to this point is install the router Cisco TAC sent me to replace the original or insist my ISP install a different switch other than the T-Marc. I have 3 other Fiber connections with the same ISP at different locations but only to 10MB with the same type of 2811 or 2801 router with no issues. The difference is my ISP uses a Alcatel switch not a T-marc.

Any ideas or information to help me solve this would be greatly appreciated!

Thanks,

Jeff

Reza Sharifi · ‎01-12-2015

Jeff,

2811 is not very fast router but it should not be that slow (8Mb). See link below and look at the 2811 section.

http://www.cisco.com/web/strategy/docs/gov/IPv6perf_wp1f.pdf

Instead of replacing your existing router with another router, for test purpose can you use a switch (2960, 3560, etc..) instead and perform the same test?

HTH

jeffhouston · ‎01-12-2015

Hi Reza,

Unfortunately I don't have a functioning switch of that caliber available to me but I think I see where you're going with that; to see if how a different piece of equipment handles the connection?

All I have on the shelf is a Small Business class SF300. Do you know if that would route? Or work? Or I could try a router designed for home use at least to test with.

Reza Sharifi · ‎01-12-2015

Jeff,

I have never used the SF300 series before but looking at the data sheet it appears that it can do static routing. I have a feeling the issue is not T-Marc equipment but rather the 2911 and if you connect a switch to the T-marc you will see improvement.

One other thing, most providers want the customers to hard set the speed on their ports. Have you done it and test it?

data sheet:

Static routing/Layer 3 switching between VLANs: This capability allows you to segment your network into separate workgroups and communicate across VLANs without degrading application performance. As a result, you can manage internal routing with your switches and dedicate your router to external traffic and security, helping your network run more efficiently.

http://www.cisco.com/c/en/us/products/collateral/switches/small-business-smart-switches/data_sheet_c78-610061.html

HTH

jeffhouston · ‎01-13-2015

Hi Reza,

Thanks for your post.

I have tried changing the Speed and Duplex on the interface to static settings but it didn't make a difference.

I could use my switch instead of the router but as I mentioned in my original post; I have 3 other similar connections with the same ISP into the MPLS at different locations in my area, each using the same or similar 2811 router and I don't have any of these issues at all. The ONLY difference is the T-marc switch. Each of the other 3 location have an Alcatel-Lucent 12 port switch.

If in fact the switch was the difference how could I get or program my 2811 to be compatible and communicate better with the T-Marc?

I will travel back on site in a day or two and try the new router TAC sent me and then if the problem persists then I'll install a switch and see what happens.

Thanks,

Jeff

jeffhouston · ‎01-16-2015

The problem I had was that any Cisco or possibly any other device when plugged into the Telco Systems T-Marc switch had incredible latency. There was something about the way a PC's Ethernet port saw the connection vs. a router or switch port that they just didn't get along but the PC would.

I suspect there was a fault in the T-marc which caused this but after installing a different switch sent by my ISP the connection lit up and worked as it should.

My last attempt was Reza's suggestion of using my Catalyst switch rather than the router. when I had the same result with the switch I was convinced something had to be wrong with my SIP's T-Marc switch which ended up being the problem.
Thanks for the input, in the end, like most things in life I learned a lot by struggling through this problem, my hair is a little grayer, and blood pressure up slightly but I'm a slight fraction of a degree smarter :)

Thanks!

Reza Sharifi · ‎01-16-2015

Jeff,

Thanks a lot for the detail feedback.

I am glad you figured it out. Very interesting issue.

Question:

What is the 2811 speed now after the ISP switch replacement?

Reza

2811 connection problem with T-marc switch