cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
659
Views
0
Helpful
4
Replies

MGF configuration 1941W

WillD2013
Level 1
Level 1

I'm currently trying to get up to speed on a 1941W ISR. I belive i have most of the configuration correct based on reading the documents on this site. However, i'm noticing that my lan to lan network performance is very slow. Peaking out about 3mbs. I was reading some documentation that suggested MGF (MultiGigabit Fabric) might resolve this problem. Please advice.

I have a basic setup in my test environment trying to emulate a branch deployment. 1941W connected to a access switch (3400).

- I'm getting slow perfomance (thoughput) between the vlans 66,30,10.

Will MGF fix this problem? How do i configure it?

Thanks for your time in advance.

********

Building configuration...

Current configuration : 7474 bytes

!

! Last configuration change at 09:26:04 PCTime Fri Dec 28 2012 by xxx

! NVRAM config last updated at 09:26:05 PCTime Fri Dec 28 2012 by xxx

! NVRAM config last updated at 09:26:05 PCTime Fri Dec 28 2012 by xxx

version 15.1

service tcp-keepalives-in

service tcp-keepalives-out

service timestamps debug datetime msec localtime show-timezone

service timestamps log datetime msec localtime show-timezone

service password-encryption

service sequence-numbers

!

hostname mayan

!

boot-start-marker

boot-end-marker

!

!

logging buffered 51200

no logging console

enable secret 4 XXX

enable password 7 XXX

!

no aaa new-model

clock timezone PCTime -7 0

clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00

service-module wlan-ap 0 bootimage autonomous

!

ip source-route

ip cef

!

!

!

ip dhcp excluded-address 30.0.0.1

ip dhcp excluded-address 10.0.0.1

ip dhcp excluded-address 10.0.0.1 10.0.0.100

!

ip dhcp pool Spitzer

network 30.0.0.0 255.255.255.0

default-router 30.0.0.1

dns-server 8.8.8.8

lease 0 4

!

ip dhcp pool core

network 10.0.0.0 255.255.255.0

default-router 10.0.0.1

dns-server 8.8.8.8

lease 0 12

!

!

no ip domain lookup

multilink bundle-name authenticated

!

crypto pki token default removal timeout 0

!

crypto pki trustpoint TP-self-signed-2692123043

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-2692123043

revocation-check none

rsakeypair TP-self-signed-2692123043

!

!

crypto pki certificate chain TP-self-signed-2692123043

certificate self-signed 01

  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030

  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

  69666963 6174652D 32363932 31323330 3433301E 170D3132 30353132 30313232

  33335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 36393231

  32333034 3330819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

  8100C4F8 7FB5B9EE E5CB95A0 78C44148 625E48BB BED62F3C FB2582FA 8BC95C69

  3B3E01FB 3CA69152 0330F42D A2B2BD5D AD2201E8 4AE0CE86 B663834A FBA50F8D

  2DC0F541 5A64277F 11BEAEAC 92B9695A 4D3FBD27 81AAC2EC B3F26013 6D6AAA81

  4E5D7337 07EBE0D7 104A4F58 4CF531D7 4126BB0F B204450D 69B8196E 75DEBF49

  E0990203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603

  551D2304 18301680 1406B89F 674C4473 161ECC38 AFF95EBD BADADE65 06301D06

  03551D0E 04160414 06B89F67 4C447316 1ECC38AF F95EBDBA DADE6506 300D0609

  2A864886 F70D0101 05050003 81810030 6E909C75 70CCEE36 C121EA65 4EDB1BE3

  49F2DAB2 5F6F8D83 85DCA129 DB7175BE 0DDE8D4F 55751B0A 000F8E54 13F2ACFD

  14FFA54C C63A0E47 AE972BBE 5E1ECE14 386C4EEC 510F3CBC 57A6A1A9 8944D493

  17ACB6B0 A3B6799F DA722AF4 D1251FC3 3147B825 F4BD6F82 FB9558C3 56662BDA

  9731FCFD 460639FF 4A6E476C 27FB44

            quit

license boot module c1900 technology-package datak9

hw-module ism 0

!

!

!

username xxx password 7 xxx

!

redundancy

!

ip tcp synwait-time 10

bridge irb

!

!

interface Embedded-Service-Engine0/0

no ip address

ip flow ingress

shutdown

!

interface GigabitEthernet0/0

description "External Network"

ip address 192.168.1.1 255.255.255.0

ip flow ingress

ip nat outside

ip virtual-reassembly in

duplex full

speed 100

no cdp enable

!

interface wlan-ap0

description Service module interface to manage the embedded AP

ip unnumbered Vlan1

ip flow ingress

arp timeout 0

no mop enabled

no mop sysid

!

interface GigabitEthernet0/1

description trunk to Lan 3400 switch

no ip address

duplex full

speed 1000

!

interface GigabitEthernet0/1.10

description HubbleLan

encapsulation dot1Q 10

ip address 10.10.0.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

interface GigabitEthernet0/1.66

description LanCoreWIFI

encapsulation dot1Q 66

bridge-group 66

bridge-group 66 path-cost 2

!

interface Wlan-GigabitEthernet0/0

description Internal switch interface connecting to the embedded AP

switchport mode trunk

no ip address

!

interface Vlan1

description VLAN4MGT

ip address 1.0.0.1 255.255.255.248

ip flow ingress

!

interface Vlan30

description Vlan for Spitzer

ip address 30.0.0.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

interface Vlan66

no ip address

ip flow ingress

ip nat inside

ip virtual-reassembly in

bridge-group 66

bridge-group 66 path-cost 2

!

interface BVI66

description LanCoreWIFIBridgeGroup

ip address 10.0.0.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

ip forward-protocol nd

!

no ip http server

no ip http secure-server

!

ip nat inside source list 100 interface GigabitEthernet0/0 overload

ip route 0.0.0.0 0.0.0.0 192.168.1.254 permanent

!        

no logging trap

access-list 100 permit ip 30.0.0.0 0.0.0.255 any

access-list 100 permit ip 10.0.0.0 0.0.0.255 any

access-list 100 permit ip 10.10.0.0 0.0.0.255 any

!

!

!

!

!

snmp-server community public RO

!

control-plane

!

bridge 66 priority 2

bridge 66 protocol ieee

bridge 66 route ip

!

alias exec wifi service-module wlan-ap 0 session

alias exec save copy run start

alias exec aztec ssh 10.0.0.2

!

line con 0

login local

line aux 0

line vty 0 4

login local

transport input ssh

!

scheduler allocate 20000 1000

end

4 Replies 4

Jeff Van Houten
Level 5
Level 5

I see 3 minor things and one thing to check.

Are you worried about fragments? If not get rid of virtual reassembly on all those interfaces.

The 3rd line in your acl 100 is superfluous given the second line.

I don't see any net flow statements so I'd get rid of ip flow ingress.

I see that you've hard coded the speed and duplex facing the switch. Have you also hard coded on the switch side? Have you looked at the switch interface where the router connects for errors or speed/duplex mismatch?

Sent from Cisco Technical Support iPad App

Jeff Van Houten
Level 5
Level 5

Also, what is peaking out at 3mbps? What test are you running?

And, just as a double check, are the Vlans defined properly on the 3400?

Sent from Cisco Technical Support iPad App

Thanks Jeff, I did remove the ip flow statements and virtual reassembly. Still get slow file transfer. I don't have any professional test tools to generate traffic, i been using SCP tranfers from a host on VLAN 10 to VLAN 66.

Attached is the configuration for my 3400. I think the VLANs are configured properly. I don't see any dropped packets or duplex mismatch i changed all the interfaces back to auto for duplex and speed.

Thanks for your help.

*******

Building configuration...

Current configuration : 4139 bytes

!

! Last configuration change at 13:01:13 MDT Fri Dec 28 2012 by rbi

! NVRAM config last updated at 12:44:37 MDT Fri Dec 28 2012 by rbi

!

version 12.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

service unsupported-transceiver

!

hostname aztec

!

boot-start-marker

boot-end-marker

!

no logging console

enable secret 5 XXX

!

username xxx password 0 xxx

no aaa new-model

clock timezone MDT -7

system mtu routing 1500

authentication mac-move permit

ip subnet-zero

ip routing

no ip domain-lookup

!

!

!

crypto pki trustpoint TP-self-signed-130654080

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-130654080

revocation-check none

rsakeypair TP-self-signed-130654080

!

!

crypto pki certificate chain TP-self-signed-130654080

certificate self-signed 01

  3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030

  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274

  69666963 6174652D 31333036 35343038 30301E17 0D393330 33303130 30303131

  355A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F

  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3133 30363534

  30383030 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100

  C0C0B9AF BB474408 947F763F B7E91CA6 4557E5B1 E0E78E22 736699C0 AA2DE708

  5E187B68 460348DE 55A655C0 965CA045 84E3BDBA B5BCE8FA 38BB2A5C 245565C2

  52734283 7686D001 251EDAFB 46C595A9 B08FCD1C 84FD82A4 FB9D697D 7C8C1655

  A58BEEAC 6EAE7E88 9708A47D 8EA31FCE AD592BEE 5D552287 F67C20C8 47C173AF

  02030100 01A36630 64300F06 03551D13 0101FF04 05300301 01FF3011 0603551D

  11040A30 08820661 7A746563 2E301F06 03551D23 04183016 80148D94 8A0111D1

  20DDC161 6AF8472B 9421CDC0 531D301D 0603551D 0E041604 148D948A 0111D120

  DDC1616A F8472B94 21CDC053 1D300D06 092A8648 86F70D01 01040500 03818100

  068DB6AD 9AAE8B61 82D14442 C9EE65E6 950B83B5 457B2BCB 8BF0FDB0 EB0DC45E

  19A581AC 359BDF23 7C10C120 90F08B86 480096C4 3ADBF7D8 42DB3946 62DD67C4

  AA532EEB 96EB8F85 DB36282A B59999FE 0100ABA1 C760B170 1CCA85CB D88EDAC7

  6C6515F7 4F2DB109 3A9F88F9 45C47C74 29BE101F 15A7442B 0C321437 95E6F435

  quit

!

!

!

!

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

!

!

vlan internal allocation policy ascending

!

vlan 10

name HubbleIPv4

!

vlan 66

name LanCoreWIFI

!

!

!

interface FastEthernet0

no ip address

no ip route-cache cef

no ip route-cache

no ip mroute-cache

!

interface GigabitEthernet0/1

description Link to Mayan

port-type nni

switchport mode trunk

media-type rj45

!

interface GigabitEthernet0/2

description ConnectionToWorkDesk

port-type nni

switchport access vlan 66

no cdp enable

!

interface GigabitEthernet0/3

shutdown

!

interface GigabitEthernet0/4

shutdown

!

interface GigabitEthernet0/5

shutdown

!

interface GigabitEthernet0/6

shutdown

!

interface GigabitEthernet0/7

shutdown

!

interface GigabitEthernet0/8

shutdown

!

interface GigabitEthernet0/9

shutdown

!

interface GigabitEthernet0/10

description testport

port-type nni

switchport access vlan 66

media-type rj45

no cdp enable

!

interface GigabitEthernet0/11

shutdown

!

interface GigabitEthernet0/12

description HubbleIPv4Interface

port-type nni

switchport access vlan 10

media-type rj45

no cdp enable

!

interface GigabitEthernet0/13

port-type nni

shutdown

!

interface GigabitEthernet0/14

port-type nni

shutdown

!        

interface GigabitEthernet0/15

port-type nni

shutdown

!

interface GigabitEthernet0/16

port-type nni

shutdown

!

interface Vlan1

no ip address

!

interface Vlan66

description LanCOREWIFI

ip address 10.0.0.2 255.255.255.0

!

no ip http server

ip http secure-server

ip classless

ip route 0.0.0.0 0.0.0.0 10.0.0.1

!

!

ip sla enable reaction-alerts

!

alias exec save copy run start

!

line con 0

login local

line vty 0 4

login local

transport input ssh

line vty 5 15

login local

transport input ssh

!

end

I'm not familiar with the 3400, but it says it has routing enabled. Have you tried disconnecting the router and putting the gateway addresses on the svi for vlan 66 and 10 to see if that helps?

Sent from Cisco Technical Support iPad App

Review Cisco Networking for a $25 gift card