12-28-2012 09:24 AM - edited 03-07-2019 10:48 AM
I'm currently trying to get up to speed on a 1941W ISR. I belive i have most of the configuration correct based on reading the documents on this site. However, i'm noticing that my lan to lan network performance is very slow. Peaking out about 3mbs. I was reading some documentation that suggested MGF (MultiGigabit Fabric) might resolve this problem. Please advice.
I have a basic setup in my test environment trying to emulate a branch deployment. 1941W connected to a access switch (3400).
- I'm getting slow perfomance (thoughput) between the vlans 66,30,10.
Will MGF fix this problem? How do i configure it?
Thanks for your time in advance.
********
Building configuration...
Current configuration : 7474 bytes
!
! Last configuration change at 09:26:04 PCTime Fri Dec 28 2012 by xxx
! NVRAM config last updated at 09:26:05 PCTime Fri Dec 28 2012 by xxx
! NVRAM config last updated at 09:26:05 PCTime Fri Dec 28 2012 by xxx
version 15.1
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname mayan
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200
no logging console
enable secret 4 XXX
enable password 7 XXX
!
no aaa new-model
clock timezone PCTime -7 0
clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00
service-module wlan-ap 0 bootimage autonomous
!
ip source-route
ip cef
!
!
!
ip dhcp excluded-address 30.0.0.1
ip dhcp excluded-address 10.0.0.1
ip dhcp excluded-address 10.0.0.1 10.0.0.100
!
ip dhcp pool Spitzer
network 30.0.0.0 255.255.255.0
default-router 30.0.0.1
dns-server 8.8.8.8
lease 0 4
!
ip dhcp pool core
network 10.0.0.0 255.255.255.0
default-router 10.0.0.1
dns-server 8.8.8.8
lease 0 12
!
!
no ip domain lookup
multilink bundle-name authenticated
!
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-2692123043
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2692123043
revocation-check none
rsakeypair TP-self-signed-2692123043
!
!
crypto pki certificate chain TP-self-signed-2692123043
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32363932 31323330 3433301E 170D3132 30353132 30313232
33335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 36393231
32333034 3330819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C4F8 7FB5B9EE E5CB95A0 78C44148 625E48BB BED62F3C FB2582FA 8BC95C69
3B3E01FB 3CA69152 0330F42D A2B2BD5D AD2201E8 4AE0CE86 B663834A FBA50F8D
2DC0F541 5A64277F 11BEAEAC 92B9695A 4D3FBD27 81AAC2EC B3F26013 6D6AAA81
4E5D7337 07EBE0D7 104A4F58 4CF531D7 4126BB0F B204450D 69B8196E 75DEBF49
E0990203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 1406B89F 674C4473 161ECC38 AFF95EBD BADADE65 06301D06
03551D0E 04160414 06B89F67 4C447316 1ECC38AF F95EBDBA DADE6506 300D0609
2A864886 F70D0101 05050003 81810030 6E909C75 70CCEE36 C121EA65 4EDB1BE3
49F2DAB2 5F6F8D83 85DCA129 DB7175BE 0DDE8D4F 55751B0A 000F8E54 13F2ACFD
14FFA54C C63A0E47 AE972BBE 5E1ECE14 386C4EEC 510F3CBC 57A6A1A9 8944D493
17ACB6B0 A3B6799F DA722AF4 D1251FC3 3147B825 F4BD6F82 FB9558C3 56662BDA
9731FCFD 460639FF 4A6E476C 27FB44
quit
license boot module c1900 technology-package datak9
hw-module ism 0
!
!
!
username xxx password 7 xxx
!
redundancy
!
ip tcp synwait-time 10
bridge irb
!
!
interface Embedded-Service-Engine0/0
no ip address
ip flow ingress
shutdown
!
interface GigabitEthernet0/0
description "External Network"
ip address 192.168.1.1 255.255.255.0
ip flow ingress
ip nat outside
ip virtual-reassembly in
duplex full
speed 100
no cdp enable
!
interface wlan-ap0
description Service module interface to manage the embedded AP
ip unnumbered Vlan1
ip flow ingress
arp timeout 0
no mop enabled
no mop sysid
!
interface GigabitEthernet0/1
description trunk to Lan 3400 switch
no ip address
duplex full
speed 1000
!
interface GigabitEthernet0/1.10
description HubbleLan
encapsulation dot1Q 10
ip address 10.10.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/1.66
description LanCoreWIFI
encapsulation dot1Q 66
bridge-group 66
bridge-group 66 path-cost 2
!
interface Wlan-GigabitEthernet0/0
description Internal switch interface connecting to the embedded AP
switchport mode trunk
no ip address
!
interface Vlan1
description VLAN4MGT
ip address 1.0.0.1 255.255.255.248
ip flow ingress
!
interface Vlan30
description Vlan for Spitzer
ip address 30.0.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan66
no ip address
ip flow ingress
ip nat inside
ip virtual-reassembly in
bridge-group 66
bridge-group 66 path-cost 2
!
interface BVI66
description LanCoreWIFIBridgeGroup
ip address 10.0.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source list 100 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 192.168.1.254 permanent
!
no logging trap
access-list 100 permit ip 30.0.0.0 0.0.0.255 any
access-list 100 permit ip 10.0.0.0 0.0.0.255 any
access-list 100 permit ip 10.10.0.0 0.0.0.255 any
!
!
!
!
!
snmp-server community public RO
!
control-plane
!
bridge 66 priority 2
bridge 66 protocol ieee
bridge 66 route ip
!
alias exec wifi service-module wlan-ap 0 session
alias exec save copy run start
alias exec aztec ssh 10.0.0.2
!
line con 0
login local
line aux 0
line vty 0 4
login local
transport input ssh
!
scheduler allocate 20000 1000
end
12-28-2012 11:24 AM
I see 3 minor things and one thing to check.
Are you worried about fragments? If not get rid of virtual reassembly on all those interfaces.
The 3rd line in your acl 100 is superfluous given the second line.
I don't see any net flow statements so I'd get rid of ip flow ingress.
I see that you've hard coded the speed and duplex facing the switch. Have you also hard coded on the switch side? Have you looked at the switch interface where the router connects for errors or speed/duplex mismatch?
Sent from Cisco Technical Support iPad App
12-28-2012 11:32 AM
Also, what is peaking out at 3mbps? What test are you running?
And, just as a double check, are the Vlans defined properly on the 3400?
Sent from Cisco Technical Support iPad App
12-28-2012 12:07 PM
Thanks Jeff, I did remove the ip flow statements and virtual reassembly. Still get slow file transfer. I don't have any professional test tools to generate traffic, i been using SCP tranfers from a host on VLAN 10 to VLAN 66.
Attached is the configuration for my 3400. I think the VLANs are configured properly. I don't see any dropped packets or duplex mismatch i changed all the interfaces back to auto for duplex and speed.
Thanks for your help.
*******
Building configuration...
Current configuration : 4139 bytes
!
! Last configuration change at 13:01:13 MDT Fri Dec 28 2012 by rbi
! NVRAM config last updated at 12:44:37 MDT Fri Dec 28 2012 by rbi
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service unsupported-transceiver
!
hostname aztec
!
boot-start-marker
boot-end-marker
!
no logging console
enable secret 5 XXX
!
username xxx password 0 xxx
no aaa new-model
clock timezone MDT -7
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
ip routing
no ip domain-lookup
!
!
!
crypto pki trustpoint TP-self-signed-130654080
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-130654080
revocation-check none
rsakeypair TP-self-signed-130654080
!
!
crypto pki certificate chain TP-self-signed-130654080
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31333036 35343038 30301E17 0D393330 33303130 30303131
355A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3133 30363534
30383030 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
C0C0B9AF BB474408 947F763F B7E91CA6 4557E5B1 E0E78E22 736699C0 AA2DE708
5E187B68 460348DE 55A655C0 965CA045 84E3BDBA B5BCE8FA 38BB2A5C 245565C2
52734283 7686D001 251EDAFB 46C595A9 B08FCD1C 84FD82A4 FB9D697D 7C8C1655
A58BEEAC 6EAE7E88 9708A47D 8EA31FCE AD592BEE 5D552287 F67C20C8 47C173AF
02030100 01A36630 64300F06 03551D13 0101FF04 05300301 01FF3011 0603551D
11040A30 08820661 7A746563 2E301F06 03551D23 04183016 80148D94 8A0111D1
20DDC161 6AF8472B 9421CDC0 531D301D 0603551D 0E041604 148D948A 0111D120
DDC1616A F8472B94 21CDC053 1D300D06 092A8648 86F70D01 01040500 03818100
068DB6AD 9AAE8B61 82D14442 C9EE65E6 950B83B5 457B2BCB 8BF0FDB0 EB0DC45E
19A581AC 359BDF23 7C10C120 90F08B86 480096C4 3ADBF7D8 42DB3946 62DD67C4
AA532EEB 96EB8F85 DB36282A B59999FE 0100ABA1 C760B170 1CCA85CB D88EDAC7
6C6515F7 4F2DB109 3A9F88F9 45C47C74 29BE101F 15A7442B 0C321437 95E6F435
quit
!
!
!
!
spanning-tree mode rapid-pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
!
vlan internal allocation policy ascending
!
vlan 10
name HubbleIPv4
!
vlan 66
name LanCoreWIFI
!
!
!
interface FastEthernet0
no ip address
no ip route-cache cef
no ip route-cache
no ip mroute-cache
!
interface GigabitEthernet0/1
description Link to Mayan
port-type nni
switchport mode trunk
media-type rj45
!
interface GigabitEthernet0/2
description ConnectionToWorkDesk
port-type nni
switchport access vlan 66
no cdp enable
!
interface GigabitEthernet0/3
shutdown
!
interface GigabitEthernet0/4
shutdown
!
interface GigabitEthernet0/5
shutdown
!
interface GigabitEthernet0/6
shutdown
!
interface GigabitEthernet0/7
shutdown
!
interface GigabitEthernet0/8
shutdown
!
interface GigabitEthernet0/9
shutdown
!
interface GigabitEthernet0/10
description testport
port-type nni
switchport access vlan 66
media-type rj45
no cdp enable
!
interface GigabitEthernet0/11
shutdown
!
interface GigabitEthernet0/12
description HubbleIPv4Interface
port-type nni
switchport access vlan 10
media-type rj45
no cdp enable
!
interface GigabitEthernet0/13
port-type nni
shutdown
!
interface GigabitEthernet0/14
port-type nni
shutdown
!
interface GigabitEthernet0/15
port-type nni
shutdown
!
interface GigabitEthernet0/16
port-type nni
shutdown
!
interface Vlan1
no ip address
!
interface Vlan66
description LanCOREWIFI
ip address 10.0.0.2 255.255.255.0
!
no ip http server
ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 10.0.0.1
!
!
ip sla enable reaction-alerts
!
alias exec save copy run start
!
line con 0
login local
line vty 0 4
login local
transport input ssh
line vty 5 15
login local
transport input ssh
!
end
12-28-2012 01:33 PM
I'm not familiar with the 3400, but it says it has routing enabled. Have you tried disconnecting the router and putting the gateway addresses on the svi for vlan 66 and 10 to see if that helps?
Sent from Cisco Technical Support iPad App
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide