Internet speed limited to 10 Mbps

henriquejrjp · ‎09-11-2019

Hi,

I have a WS-C3850-24P wireless controller that manages three AIR-CAP1602I-T-K9 access points.

The software version of the controller is 03.06.08.E RELEASE SOFTWARE (fc1), IOS cat3k_caa-universalk9.SPA.03.06.08.E.152-2.E8.bin.

The APs are connected directly to the controller (which is also a switch).

We have a 100 Mbps Internet link. However, clients are only achieving 10 Mbps of Internet connection.

If I connect directly to the ISP modem (which is also an AP), I get the 100 Mbps range.

The problem occurs on both 2.4GHz and 5GHz networks.

Does anyone have any idea what might be going on, please?
WLC configuration is attached.

Thanks,

Carlos.

Flavio Miranda · ‎09-11-2019

Hi

The WLC is able to rate limit traffic. Are you sure you don't have it configured?

-If I helped you somehow, please, rate it as useful.-

henriquejrjp · ‎09-11-2019

Hi Flavio,

Thanks for your help.

I verified that there is a "port_child_policy" policy map:

Policy Map port_child_policy
 Class non-client-nrt-class
  bandwidth remaining ratio 10

I researched the "bandwidth remaining ratio" command but couldn't understand it very well.

Karsten Iwen · ‎09-11-2019

When you say the internet-speed is 10 MBit/s, are you also saying that this problem only occurs when communicating to the internet? Or is it the same when accessing internal resources. If the problem is only with internet, also look at your firewall if there are restrictions. If the problem is also internal, have you checked the ports where the APs are connected?

henriquejrjp · ‎09-11-2019

Hi @Karsten Iwen,

These APs are only used for Internet connections. They are used for guest access only. There is a corporate WLAN configured, but it's not used. I believe I will not be able to test some access to internal resources. However, the configuration of the ports where the APs are connected is as follows:

interface GigabitEthernet1/0/4
 description AP
 switchport access vlan 117
 switchport mode access
!

As for the firewall, it was our first suspicion, but we have already eliminated this possibility.

Thanks,

Carlos.

Rasika Nayanajith · ‎09-11-2019

We have a 100 Mbps Internet link. However, clients are only achieving 10 Mbps of Internet connection.

What type of clients you used for testing ? How many clients in wireless AP when you test it ?

I would do a iperf test with internal server first & then do it with outside that use your internet link

https://mrncciew.com/2014/08/08/how-fast-is-your-network-iperf/

HTH

Rasika

*** Pls rate all useful responses ***

henriquejrjp · ‎09-11-2019

Hi @Rasika Nayanajith,

We perform tests using notebooks and smartphones.

In some tests, we came to 20 connected users; in others less than 5. And in other tests, there was only the test device connected. In all cases, the problem was the same.

I will perform the iperf test that you recommend and publish the result here.

Thanks,

Carlos.

henriquejrjp · ‎09-13-2019

Hi @Rasika Nayanajith,

We performed the tests you recommended and the result was as follows:

In the wireless network, from an internal client to an internal server: peak around 10 Mbps.
In the wireless network, from an internal client to an external server (Internet): peak around 10 Mbps (100 Mbps Internet link).
In the wired network, from an internal client to an internal server: reaching the expected interface speed, around 700-800 Mbps (GigabitEthernet interface).

The result of the tests is attached.

Thanks,

Carlos.

Rasika Nayanajith · ‎09-13-2019

Hi Carlos,

Thanks for doing iperf & share your results.

I would like to check your client is connecting WPA2/AES. First check output of below command to see how client is connected on what data rates

show wireless client mac-address <mac_addr> detail

Then, I would configure WPA2/AES on your SSID

https://mrncciew.com/2013/12/04/wlan-config-in-3850-part-1/

3850-1(config-wlan)#security wpa
3850-1(config-wlan)#security wpa wpa2 ciphers aes
3850-1(config-wlan)#no security wpa akm dot1x
3850-1(config-wlan)#security wpa akm psk set-key ascii 0 <SSID_Password>

Once do that I would check it again "show wireless client" command

HTH

Rasika

*** Pls rate all useful responses ***

henriquejrjp · ‎09-20-2019

Hi @Rasika Nayanajith,

Thank you so much for your help!

We apply the changes you have recommended to WLAN "Group". Follows the output of the show wireless client command.

BTCOR01#show wireless client mac-address 0026.5a7e.3f4c detail 
Load for five secs: 8%/0%; one minute: 5%; five minutes: 5%
Time source is NTP, 09:13:29.654 BSA Fri Sep 20 2019


Client MAC Address : 0026.5a7e.3f4c
Client Username : NA
AP MAC Address : f07f.06c4.8610
AP Name: AP02
AP slot : 0
Client State : Associated
Wireless LAN Id : 2
Wireless LAN Name: Grupo
BSSID : f07f.06c4.8611
Connected For : 1583 secs 
Protocol : 802.11n - 2.4 GHz
Channel : 1
Client IIF-ID : 0xc00700000041be
ASIC : 0
IPv4 Address : 192.168.10.35
IPv6 Address : Unknown
Association Id : 2
Authentication Algorithm : Open System
Status Code : 0
Session Timeout : 0
Client CCX version : 5
Client E2E version : No E2E support
Diagnostics Capability : Supported
Diagnostics Join Reason : Unknown
S69 Capability : Not Supported
Input Policy Name  : unknown
Input Policy State : None
Input Policy Source : Default Policy
Output Policy Name  : unknown
Output Policy State : None
Output Policy Source : None
802.1P Priority Tag : Not supported
WMM Support : Enabled
U-APSD Support : Disabled
Device Type : Unknown
Power Save : OFF
Current Rate : m7
Supported Rates : 11.0,12.0,18.0,24.0,36.0,48.0,54.0
Mobility State : Local
Mobility Move Count : 0
Security Policy Completed : Yes
Policy Manager State : RUN
Policy Manager Rule Created : Yes
NPU Fast Fast Notified : Yes
Last Policy Manager State : DHCP_REQD
Client Entry Create Time : 15627833 seconds
Policy Type : WPA2
Authentication Key Management : PSK
Encryption Cipher : CCMP (AES)
Management Frame Protection : No
Protected Management Frame - 802.11w : No
EAP Type : Not Applicable
Interface : GUEST
VLAN : 13
Quarantine VLAN : 0
Access VLAN : 13
WFD capable : No
Manged WFD capable : No
Cross Connection capable : No
Support Concurrent Operation : No
Client Capabilities
  CF Pollable : Not implemented
  CF Poll Request : Not implemented
  Short Preamble : Implemented
  PBCC : Not implemented
  Channel Agility : Not implemented
  Listen Interval : 3
  Fast BSS Transition : Not implemented
Fast BSS Transition Details :
Client Statistics:
  Number of Bytes Received : 1262029
  Number of Bytes Sent : 10028179
  Number of Packets Received : 9392
  Number of Packets Sent : 11770
  Number of EAP Id Request Msg Timeouts : 0
  Number of EAP Request Msg Timeouts : 0
  Number of EAP Key Msg Timeouts : 0
  Number of Data Retries : 2529
  Number of RTS Retries : 0
  Number of Duplicate Received Packets : 0
  Number of Decrypt Failed Packets : 0
  Number of Mic Failured Packets : 0
  Number of Mic Missing Packets : 0
  Number of Policy Errors : 0
  Radio Signal Strength Indicator : -57 dBm
  Signal to Noise Ratio : 40 dB
Assisted-Roaming  Prediction List:
Nearby AP Statistics:
  AP02(slot0)
    antenna0: 25 seconds ago -61 dBm
    antenna1: 25 seconds ago -54 dBm
  AP01(slot0)
    antenna0: 24 seconds ago -71 dBm
    antenna1: 24 seconds ago -82 dBm
  AP03(slot0)
    antenna0: 24 seconds ago -96 dBm
    antenna1: 24 seconds ago -91 dBm

We performed some tests after the changes, and the problem remains.

Regards,

Carlos.