Slow Internet using Cisco 881W with Comcast Broadband

[quansjunk]

Hi,

I'm having problems with Internet pages loading very slow, 4-5 times longer than usual with my Cisco 881 W series router.

I've tried setting my MTU lower and it doesnt seem to help.  Can someone assist?

Version 12.4(20)T1

Building configuration...

Current configuration : 6045 bytes
!
! Last configuration change at 22:35:22 PCTime Thu Aug 25 2011 by qnguyen
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname cisco881
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
logging buffered 51200 warnings
!
no aaa new-model
clock timezone PCTime -5
clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00
!
crypto pki trustpoint TP-self-signed-24416783
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-24416783
revocation-check none
rsakeypair TP-self-signed-24416783
!
!
crypto pki certificate chain TP-self-signed-24416783
certificate self-signed 01
  30820241 308201AA A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  2F312D30 2B060355 04031324 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32343431 36373833 301E170D 31313037 32383031 34313533
  5A170D32 30303130 31303030 3030305A 302F312D 302B0603 55040313 24494F53
  2D53656C 662D5369 676E6564 2D436572 74696669 63617465 2D323434 31363738
  3330819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 81008E47
  166AED5E 1A0B1931 9EC71F31 A880BB94 C301AC20 41FF26F8 2BBD27C4 C78F3931
  B9B3A658 72048695 6283B8C2 57ADCBEE 685DF665 ED6E9CB5 ECF43980 BF9E7DDC
  9A9B158F 8CE592A0 730C8F98 57D1FCC0 55EAA5AB 8C436D5E 062D2E8E 9C9F5CC4
  01231FD3 4B587F86 7D5FD6CE B444B809 53E816B4 05CDC6A8 6CF3A195 D2CB0203
  010001A3 6D306B30 0F060355 1D130101 FF040530 030101FF 30180603 551D1104
  11300F82 0D636973 636F3838 312E484F 4D45301F 0603551D 23041830 16801416
  8E34442B 5C44DEBC 71A7AA1A EB933AE3 03726330 1D060355 1D0E0416 0414168E
  34442B5C 44DEBC71 A7AA1AEB 933AE303 7263300D 06092A86 4886F70D 01010405
  00038181 0033CBB1 449B2BEA BE515987 B2565150 08B243ED E09BD71A 0058F284
  8594C2D9 178C7449 800C9AA0 8CC8EE94 7545B4CF 8F3EED60 462F2E9D 68683D9D
  FD52D0B1 E1A4C3F1 0B2206F7 BC155D35 B42BFB99 8D20EAEE 5ABFBB2D ECA453FE
  B6198303 F4DC4C55 91FCD875 792C13C2 A2CF4766 F88DDF74 C9EBBCB3 59741E7F
  A2797144 5B
        quit
no ip source-route
ip dhcp excluded-address 192.168.1.1 192.168.1.30
!
ip dhcp pool vlan1pool
   import all
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   lease infinite
!
!
ip cef
no ip bootp server
ip domain name HOME
!
!
!
!
username <Omitted>
!
!
!
archive
log config
  hidekeys
!
!
!
class-map type inspect match-any ccp-cls-insp-traffic
match protocol cuseeme
match protocol dns
match protocol ftp
match protocol h323
match protocol https
match protocol icmp
match protocol imap
match protocol pop3
match protocol netshow
match protocol shell
match protocol realmedia
match protocol rtsp
match protocol smtp extended
match protocol sql-net
match protocol streamworks
match protocol tftp
match protocol vdolive
match protocol tcp
match protocol udp
class-map type inspect match-all ccp-insp-traffic
match class-map ccp-cls-insp-traffic
class-map type inspect match-any ccp-cls-icmp-access
match protocol icmp
match protocol tcp
match protocol udp
class-map type inspect match-all ccp-invalid-src
match access-group 100
class-map type inspect match-all ccp-icmp-access
match class-map ccp-cls-icmp-access
class-map type inspect match-all ccp-protocol-http
match protocol http
!
!
policy-map type inspect ccp-permit-icmpreply
class type inspect ccp-icmp-access
  inspect
class class-default
  pass
policy-map type inspect ccp-inspect
class type inspect ccp-invalid-src
  drop log
class type inspect ccp-protocol-http
  inspect
class type inspect ccp-insp-traffic
  inspect
class class-default
  drop
policy-map type inspect ccp-permit
class class-default
  drop
!
zone security out-zone
zone security in-zone
zone-pair security ccp-zp-self-out source self destination out-zone
service-policy type inspect ccp-permit-icmpreply
zone-pair security ccp-zp-in-out source in-zone destination out-zone
service-policy type inspect ccp-inspect
zone-pair security ccp-zp-out-self source out-zone destination self
service-policy type inspect ccp-permit
!
!
!
interface FastEthernet0
spanning-tree portfast
!
interface FastEthernet1
spanning-tree portfast
!
interface FastEthernet2
duplex full
speed 100
spanning-tree portfast
!
interface FastEthernet3
duplex full
speed 100
spanning-tree portfast
!
interface FastEthernet4
description $FW_OUTSIDE$$ES_WAN$
ip address dhcp
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
zone-member security out-zone
duplex auto
speed auto
!
interface wlan-ap0
description Service module interface to manage the embedded AP
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
arp timeout 0
!
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$FW_INSIDE$
ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
zone-member security in-zone
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet4
ip http server
ip http access-class 1
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat inside source list 1 interface FastEthernet4 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 100 remark CCP_ACL Category=128
access-list 100 permit ip host 255.255.255.255 any
access-list 100 permit ip 127.0.0.0 0.255.255.255 any
no cdp run

!
!
!
!
control-plane
!
banner motd ^CLOG OFF NOW^C
!
line con 0
exec-timeout 120 0
password 7 12171C46405D5C55
logging synchronous
login
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
line vty 0 4
access-class 1 in
privilege level 15
password 7 0701381D1C5F4954
logging synchronous
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end

[IAN WHITMORE]

Did you take a look in the logs for any errors?

What about the interface statistics? Do you have any collisions or late collisions? I'm just thinking it might be worth hard coding the speed and duplex to see if that makes a difference. Maybe it's not negotiating as it should with the comcast router.

HTH,

Ian

[Latchum Naidu]

Hi Quan,

I would like to check the interface statis for any input errors and also what about the utilization on the link. If you have high utilization on the link then it will cause to slowness.

Also check the interrface settings at both ends try to hard code duplex full and speed 100.

Please rate the helpful posts.
Regards,
Naidu.

[quansjunk]

I only have one user on the network and the logs arent useful. I already hardcoded the duplex to full and speed to 100Mb.  

cisco881#show log

Syslog logging: enabled (0 messages dropped, 0 messages rate-limited,

               0 flushes, 0 overruns, xml disabled, filtering disabled)

No Inactive Message Discriminator.

   Console logging: level debugging, 48 messages logged, xml disabled,

                     filtering disabled

   Monitor logging: level debugging, 0 messages logged, xml disabled,

                     filtering disabled

   Buffer logging: level warnings, 8 messages logged, xml disabled,

                     filtering disabled

   Logging Exception size (4096 bytes)

   Count and timestamp logging messages: disabled

   Persistent logging: disabled

No active filter modules.

ESM: 0 messages dropped

   Trap logging: level informational, 53 message lines logged

Log Buffer (51200 bytes):

*Aug 25 22:56:46.595: %LINK-3-UPDOWN: Interface FastEthernet4, changed state to up

*Aug 25 22:56:51.555: %LINK-3-UPDOWN: Interface FastEthernet3, changed state to up

*Aug 25 22:56:51.555: %LINK-3-UPDOWN: Interface FastEthernet2, changed state to up

*Aug 26 02:09:59.479: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to down

*Aug 26 02:10:01.287: %LINK-3-UPDOWN: Interface FastEthernet1, changed state to down

*Aug 26 02:10:13.231: %LINK-3-UPDOWN: Interface FastEthernet3, changed state to down

*Aug 26 02:14:55.279: %LINK-3-UPDOWN: Interface FastEthernet3, changed state to up

*Aug 26 02:14:59.707: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up

[quansjunk]

The site wouldnt let me copy the show interface into the post so i added it as a text.  I dont see anything unusual?

[Latchum Naidu]

Hi Hi Quan,

The interface is clear.
Have you checked the cpu utilization of the router whcih is facing the internet.
Do you have any proxy server in network?
Is the slow internet access issue for some users or all of the users in site?
Have you checked the switch to which the users connected?

And have you done the speed test on the internet link? Because you may not getting the original speed what provider said.

Please rate the helpful posts.
Regards,
Naidu.

[johnlloyd_13]

hi,

could you try to hardcode FE4 interface to 100/full and see if it helps?

also, try add public DNS servers on your DHCP pool.

Router(config-dhcp)# dns-server 8.8.8.8 8.8.4.4

[quansjunk]

I hardcoded the FE4 for 100/full and saw no difference.

I ran a ipconfig /all and already have 4.2.2.2 and 8.8.8.8 as my DNS servers.

I can ping them both with the same response in time.  Right now, im the only user on the network and there is no proxy.

This happens when im connected directly to the router and wireless.

I ran a speed test and im showing 17 MB down and 3.5 MB up.

How can i check my CPU, i did  a show processes cpu and dont see anything usual?  Am i looking for something in particular?

[Dan Frey · Accepted solution]

I would recommed removing:

ip route 0.0.0.0 0.0.0.0 FastEthernet4

This can cause performance issues.

Comcasts  DHCP server will provide you with a default route with a next-hop-ip.

Dan