internet speed

[Hakim RS]

Hi everyone, 

I configured a router C891F for a client, soo it can be connected to two ISP each serving a different LAN ( U can see the architecture in the file attached)

So i can make this work, i created 4 VRFs for the different networks, ( the WAN vrf connected to the LAN vrf thats it must serve)

My problem is that the WANs bandwidth can exceed the 120Mbps, but when i put it on the C891F and test the speed on the right LAN served by this ISP, the internet becames slow and can t even exceed the 18Mbps

Someone can help me with this ?

here s what show run shows:

RouterC891F#sh running-config
Building configuration...

Current configuration : 6161 bytes
!
! Last configuration change at 15:51:25 UTC Tue May 9 2017
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname RouterC891F
!
boot-start-marker
boot-end-marker
!
!
enable secret 
enable password 
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!

!
ip vrf lan-employes
rd 65000:99
route-target export 65000:99
route-target import 65000:1
!
ip vrf lan-etudiants
rd 65000:98
route-target export 65000:98
route-target import 65000:2
!
ip vrf proximus
rd 65000:2
route-target export 65000:2
route-target import 65000:98
!
ip vrf voo
rd 65000:1
route-target export 65000:1
route-target import 65000:99
!
ip dhcp relay information option
ip dhcp excluded-address 192.168.8.1 192.168.8.29
ip dhcp excluded-address 192.168.8.201 192.168.8.254
ip dhcp excluded-address 192.168.20.1 192.168.20.9
ip dhcp excluded-address 192.168.20.251 192.168.20.254
ip dhcp excluded-address 192.168.1.10 192.168.1.254
ip dhcp excluded-address 192.168.8.1 192.168.8.10
ip dhcp excluded-address 192.168.20.1 192.168.20.10
ip dhcp excluded-address 192.168.20.250 192.168.20.254
ip dhcp excluded-address 192.168.8.250 192.168.8.254
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.10.1 192.168.10.10
ip dhcp excluded-address vrf lan-employes 192.168.8.1 192.168.8.10
ip dhcp excluded-address vrf lan-etudiants 192.168.20.1 192.168.20.10
!
ip dhcp pool vlan100
import all
vrf lan-employes
network 192.168.8.0 255.255.255.0
dns-server
default-router 192.168.8.1
!
ip dhcp pool vlan200
import all
vrf lan-etudiants
network 192.168.20.0 255.255.255.0
dns-server 
default-router 192.168.20.1
!
ip dhcp pool proximus
network 192.168.1.0 255.255.255.0
dns-server 8.8.8.8
default-router 192.168.1.1
!
!
ip dhcp class Employes
option 60 hex 010203
!
ip dhcp class Etudiants
option 60 hex 010203
!
ip dhcp class proximus
option 60 hex 010203
!
!
ip name-server 
ip name-server 
ip name-server 8.8.8.8
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C891F-K9 sn FCZ205390HP
!
!
!
!
!
!
!
track 11 ip sla 1 reachability
!
track 12 ip sla 2 reachability
!
track 123 list boolean or
object 11
object 12
!
ip ssh version 1
ip ssh pubkey-chain
username admin
!
!
!
!
!
!
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
isdn point-to-point-setup
!
interface FastEthernet0
description **proximus**
ip vrf forwarding proximus
ip address 10.0.0.2 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex full
speed 100
!
interface GigabitEthernet0
no ip address
duplex full
speed 100
!
interface GigabitEthernet1
switchport access vlan 100
no ip address
!
interface GigabitEthernet2
switchport access vlan 100
ip dhcp relay information option-insert
ip dhcp relay information check-reply
ip dhcp relay information policy-action replace
no ip address
duplex full
speed 100
!
interface GigabitEthernet3
switchport access vlan 200
ip dhcp relay information option-insert
ip dhcp relay information check-reply
ip dhcp relay information policy-action replace
no ip address
duplex full
speed 100
!
interface GigabitEthernet4
no ip address
shutdown
!
interface GigabitEthernet5
no ip address
shutdown
!
interface GigabitEthernet6
no ip address
shutdown
!
interface GigabitEthernet7
no ip address
!
interface GigabitEthernet8
description **voo**
ip vrf forwarding voo
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
ip address 192.168.10.1 255.255.255.0
!
interface Vlan100
description **Employes**
ip vrf forwarding lan-employes
ip address 192.168.8.1 255.255.255.0
ip helper-address global 192.168.8.1
ip nat inside
ip virtual-reassembly in
!
interface Vlan200
ip vrf forwarding lan-etudiants
ip address 192.168.20.1 255.255.255.0
ip helper-address global 192.168.20.1
ip nat inside
ip virtual-reassembly in
!
interface Vlan2000
no ip address
!
interface Async3
no ip address
encapsulation slip
!
router bgp 65000
bgp log-neighbor-changes
!
address-family ipv4 vrf lan-employes
redistribute connected
exit-address-family
!
address-family ipv4 vrf lan-etudiants
redistribute connected
exit-address-family
!
address-family ipv4 vrf proximus
redistribute connected
redistribute static route-map STATIC2BGP
default-information originate
exit-address-family
!
address-family ipv4 vrf voo
redistribute connected
redistribute static route-map STATIC2BGP
default-information originate
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source route-map NAT-proximus interface FastEthernet0 vrf proximus overload
ip nat inside source route-map NAT-voo interface GigabitEthernet8 vrf voo overload
ip route vrf voo 0.0.0.0 0.0.0.0 192.168.0.1 tag 999 name voo track 123
ip route 10.0.0.0 255.255.255.0 10.0.0.1
ip route 192.168.8.0 255.255.255.0 192.168.8.1
ip route 192.168.20.0 255.255.255.0 192.168.20.1
ip route vrf proximus 0.0.0.0 0.0.0.0 10.0.0.1 tag 999 name proximus
ip route vrf voo 0.0.0.0 0.0.0.0 192.168.0.1 tag 999 name voo
!
dialer-list 1 protocol ip permit
!
route-map NAT-voo permit 10
match interface GigabitEthernet8
!
route-map NAT-proximus permit 10
match interface FastEthernet0
!
route-map STATIC2BGP permit 10
match tag 999
!
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
!
!
line con 0
no modem enable
line aux 0
line 3
modem InOut
speed 115200
flowcontrol hardware
line vty 0 4
password 
login
transport input ssh
!
scheduler allocate 20000 1000
!
!
end

[Mark Malone · Accepted solution]

doesn't look like that router can get near that, once cef is enabled it can only do 50mb and you have nat and vrfs in place too more features slower it gets  , your under specked id say looking at the performance sheets included in this link below

https://supportforums.cisco.com/discussion/11400426/technical-clarification-isr-891

[Hakim RS]

So what u saying ? i should disable the cef ?

[Mark Malone · Accepted solution]

no what I am saying is the router your using to try and get a 120mb circuit speed for the wan is probably not capable of it ,the more features enabled the slower it will be and some are on by default for a reason

a lot of features rely on cef so if you turn it off you may have issues getting other things to work , a 1900 series would have been better suited for such wan speed a step up from the 800 series

[Hakim RS]

but i m getting some absurd results, i putted a Pc on a LAN served by the second WAN, and i m getting 50Mbps on the speed test on that PC. How come is that possible, with what u told me before ?

[Joseph W. Doherty · Accepted solution]

Although Cisco documents the 890 series as being able to forward up to 1.4 Gbps, Cisco only recommends the 890 series for up to 15 Mbps (WAN i.e. duplex) bandwidth.  The fact that you've been unable to exceed 18 Mbps, perhaps demonstrates the "why" behind Cisco's recommendation.

I've attached a Cisco whitepaper that has the above information, and other performance information for other of their small routers, however, if you're looking to buy new you would probably want to select from ISR 4K series, and unlike the earlier ISRs, their worst performance is often the same as their best performance.  (This because these routers have logical performance limits which they can often always meet.)

[Hakim RS]

but i m getting some absurd results, i putted a Pc on a LAN served by the second WAN, and i m getting 50Mbps on the speed test on that PC. How come is that possible, with what u told me before ?

[Joseph W. Doherty]

This through the same 891F?  If so, again, understand the maximum performance of small routers before the ISR 4K series is highly variable.  Any change at all can impact performance.  For example, you mention a 2nd WAN, that could impact performance.  Accessing a different host, on the other side, and/or using different application traffic, can impact performance.

[Hakim RS]

Yes through the same routeur, i have two WANs configured with two ISPs as in the image attached. 

WAN1 the speedtest exceeds 120Mbps

WAN2 the speedtest exceeds 50Mbps

LAN1 (Served by WAN1) the internet speed is less than 18Mbps ( Alost of 100Mbps)

LAN2 (served by WAN2) the internet speed is satisfating up to 48Mbps ( a lost of few Mbps)

[Joseph W. Doherty]

With different ISP, what's the traffic subjected to on their side can be quite different between them.  That might account for a large part of the throughput difference too.

[Hakim RS]

Here what i ll try to do ,

I ll change the interfaces ( i ll put the first WAN on interface where was attached the second one and vis versa) 

i ll have to reconfigure the ip pools and then let u know if the intefaces config is the problem or not.

[Joseph W. Doherty]

Regardless of what you try, if your ISP connectivity is FE bandwidth, or better, especially if you have multiple ISP connections to the same device, an 890 is going to be under powered to take full advantage of your ISP bandwidths.  For the bandwidths you're working with, you would want something like a 4331 or 4351.

Also with the 800 series, I suspect the "LAN" facing switch ports often share bandwidth and often they are not as feature rich as the dedicated "WAN" port.  So, if the price of a 4K ISR is unacceptable, with two ISPs, you might consider obtaining a second 89x.