cisco 1921 transfer data between two networks very slow

[goran ljubic]

i have cisco router 1921 that connects two networks 192.168.0.0/24 wher're domain workstations and network wher're domain controller, dns server, sql servers... i configured access-rules for those networks but when i try that copying data from workstations on server and vice versa speed never go over 500kb/s. how that i speed up transfer data through cisco router 1921. configuration of router is in config.txt

[johnd2310]

Hi,

Do you have a benchmark of the speed before you configured the 1921 router? Do you have any switches in the path and at what speed  are the workstations and servers connecting at? What is the speed when you copy a file between workstations or between servers?

Thanks

John

[goran ljubic]

workstations and wan side of cisco router 1921 are connected on switch cisco catalyst 2900 that works in ungovernable mode. speed copying of files between workstations is 10MB/s. lan side of cisco router and servers are connected also on switch cisco catalyst 2900 in ungovernable mode.speed copying of files between servers is 600-900KB/s.

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

In your OP, you have 500 kb/s, and your next post, 10MB/s and 600-900KB/s.  Are these bytes or bits per second?  (Often network bandwidths are in bits per second, usually shown as a lowercase "b", but file transfers often are reported in bytes per second, often shown as an uppercase "B", so just wanted to insure which was being used as you've used both upper and lower case.)

What's your CPU stats look like when you seem to max out transfer rate?

BTW, that's quite some ACLs you have (and with logging).  Those, along with features like NBAR protocol discovery, Netflow, unicast reverse path check, are all going to consume additional CPU.

Cisco recommends a 1921 for up to 15 Mbps of WAN bandwidth, but your config looks rather demanding.  You might try disabling all these special features and see if your transfer perforamance improves.  If it does, you'll then know what's the issue.  If these features are the issue, then you can reactivate them, determine their incremental load and analyze whether such load is worth their value to you.

[Richard Burts]

It is interesting to see the config. Would the original poster show us the output of show interface for both interfaces on the router? I am wondering about the possibility of a duplex mismatch. I see the router interfaces are set to auto negotiate. But if a connected device was not negotiating it is possible that a duplex mismatch might be created.

HTH

Rick

[goran ljubic]

output for gigabit 0/0

servers-r#sh interface gigabit 0/0
GigabitEthernet0/0 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is 30f7.0d98.c4a0 (bia 30f7.0d98.c4a0
)
Description: $ETH-WAN$$FW_OUTSIDE$
Internet address is 192.168.0.253/24
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 100Mbps, media type is RJ45
output flow-control is unsupported, input flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/71/167071 (size/max/drops/flushes); Total output drops: 19
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 147000 bits/sec, 75 packets/sec
5 minute output rate 123000 bits/sec, 64 packets/sec
280896702 packets input, 3123487205 bytes, 0 no buffer
Received 33016876 broadcasts (0 IP multicasts)
0 runts, 0 giants, 24 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 267892 multicast, 0 pause input
283280932 packets output, 885245701 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
18034313 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
1 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

output gigabit 0/1

servers-r#sh interface gigabit 0/1
GigabitEthernet0/1 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is 30f7.0d98.c4a1 (bia 30f7.0d98.c4a1
)
Description: $ETH-LAN$$FW_INSIDE$
Internet address is 192.168.200.254/24
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 100Mbps, media type is RJ45
output flow-control is unsupported, input flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/10 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 168000 bits/sec, 65 packets/sec
5 minute output rate 102000 bits/sec, 59 packets/sec
279272091 packets input, 3900111318 bytes, 0 no buffer
Received 2775144 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 267882 multicast, 0 pause input
240206657 packets output, 132634885 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
689043 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

output for gigabit 0/0

servers-r#sh interface gigabit 0/0
.

Description: $ETH-WAN$$FW_OUTSIDE$
.

Input queue: 0/75/71/167071 (size/max/drops/flushes); Total output drops: 19
.

18034313 unknown protocol drops

The above indicates your router is unable to process the input as fast as some of it arrives (might be mitigated, somewhat, by increasing input queue size) and the unknown protocol drops are packets/frames the interface needs to examine to discard.

[goran ljubic]

what is with slow copying files between servers from 600KB/s-900KB/s on lan side of router? maybe this make problem?

[goran ljubic]

my buffers are

servers-r#sh buffers
Buffer elements:
543 in free list
509383992 hits, 0 misses, 617 created

Public buffer pools:
Small buffers, 104 bytes (total 86, permanent 50, peak 149 @ 4w5d):
83 in free list (20 min, 150 max allowed)
142990878 hits, 7597 misses, 5142 trims, 5178 created
1591 failures (0 no memory)
Middle buffers, 600 bytes (total 35, permanent 25, peak 85 @ 5w1d):
31 in free list (10 min, 150 max allowed)
94945505 hits, 1684 misses, 1226 trims, 1236 created
639 failures (0 no memory)
Big buffers, 1536 bytes (total 50, permanent 50, peak 56 @ 7w0d):
49 in free list (5 min, 150 max allowed)
66180402 hits, 11 misses, 30 trims, 30 created
0 failures (0 no memory)
VeryBig buffers, 4520 bytes (total 10, permanent 10, peak 11 @ 7w0d):
10 in free list (0 min, 100 max allowed)
0 hits, 0 misses, 1 trims, 1 created
0 failures (0 no memory)
Large buffers, 5024 bytes (total 1, permanent 0, peak 1 @ 7w0d):
1 in free list (0 min, 10 max allowed)
0 hits, 0 misses, 559 trims, 560 created
0 failures (0 no memory)
Huge buffers, 18024 bytes (total 5, permanent 0, peak 5 @ 7w0d):
5 in free list (4 min, 10 max allowed)
0 hits, 0 misses, 1118 trims, 1123 created
0 failures (0 no memory)

[goran ljubic]

bytes per seconds KB/s. you think that i need disable nbar, netflow, unicast reverse path? maybe i need to change cisco catalyst 2900 switch on side where're servers(LAN side of router)

[Richard Burts]

Thanks for the output of show interface. There is no sign there of duplex mismatch. So we must look for some other explanation of the performance issue.

HTH

Rick