Showing results for 
Search instead for 
Did you mean: 

AP1231G-A-K9 access points - very slow throughput - Is TKIP the issue?

I recently setup our small office network using the following setup:

Cablemodem <--> router <--> 1231AP(role root bridge with wireless clients) <-> 1231AP(role non-root bridge with wireless clients)

Code on both APs: 12.3(8)JEE

Office network generally has less than 3 wireless clients connected at any one time to either AP.

AP's are a mere 50' apart; clients are all less than 30' from either AP; they all show excellent signal and connected at 54mbps signaling rates.

All is/has been working very well & very stable with the exception of speed. We have business class service from RR, approx 25mbps dl, 2mbps ul. Any hardwired client to the router switch ports are able to download at speeds averaging 23mbps. Any wireless client connected to either AP is never able to exceed download speeds of 5mbps. With no other wireless clients connected except my one test client, I was not able to exceed 5mbps throughput from either AP that I connected to.

I can confirm that the ethernet connection between the router and root bridge is up at 100mbps-FD and not showing any errors:

ap#sh interfaces FastEthernet0

FastEthernet0 is up, line protocol is up

  Hardware is PowerPC405GP Ethernet, address is 0013.60cf.bb29 (bia 0013.60cf.bb29)

  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  Full-duplex, 100Mb/s, MII

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 00:00:00, output 00:00:00, output hang never

  Last clearing of "show interface" counters never

  Input queue: 0/160/0/0 (size/max/drops/flushes); Total output drops: 0

  Queueing strategy: fifo

  Output queue: 0/40 (size/max)

  5 minute input rate 5000 bits/sec, 0 packets/sec

  5 minute output rate 1000 bits/sec, 1 packets/sec

     8054605 packets input, 3141009145 bytes

     Received 46005 broadcasts, 0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

     0 watchdog

     0 input packets with dribble condition detected

     4076106 packets output, 411952731 bytes, 0 underruns

     0 output errors, 0 collisions, 4 interface resets

     0 babbles, 0 late collision, 0 deferred

     0 lost carrier, 0 no carrier

     0 output buffer failures, 0 output buffers swapped out


Wandering thru the cli on either AP shows that all wireless clients are indeed connected at 54mbps to their respective AP and the two AP's are connected happily at 54mbps signaling:

Address           : 0013.1a37.b3e0     Name             : ap

IP Address        :      Interface        : Dot11Radio 0

Device            : 11g-bridge         Software Version : 12.3

CCX Version       : NONE

State             : Assoc              Parent           : Our Parent        

SSID              : Tsunami

VLAN              : 0

Hops to Infra     : 0                  Association Id   : 44

Tunnel Address    :

Key Mgmt type     : WPA PSK            Encryption       : TKIP

Current Rate      : 54.0               Capability       : WMM ShortHdr ShortSlot

Supported Rates   : 1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0

Voice Rates       : disabled

Signal Strength   : -51  dBm           Connected for    : 75169 seconds

Signal to Noise   : 26  dB            Activity Timeout : 14 seconds

Power-save        : Off                Last Activity    : 1 seconds ago

Apsd DE AC(s)     : NONE

Packets Input     : 1050695            Packets Output   : 296536   

Bytes Input       : 474651248          Bytes Output     : 96734573 

Duplicates Rcvd   : 0                  Data Retries     : 63646    

Decrypt Failed    : 0                  RTS Retries      : 0        

MIC Failed        : 0                  MIC Missing      : 0        

Packets Redirected: 0                  Redirect Filtered: 0

Here is a config snippet from the AP non-root bridge with wireless clients:

dot11 ssid Tsunami

   authentication open

   authentication key-management wpa


   infrastructure-ssid optional

   wpa-psk ascii 7 (snipped)


bridge irb


interface Dot11Radio0

no ip address

no ip route-cache


encryption mode ciphers tkip


ssid Tsunami


speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0

station-role non-root bridge wireless-clients

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 spanning-disabled


interface FastEthernet0

no ip address

no ip route-cache

duplex auto

speed auto

bridge-group 1

bridge-group 1 spanning-disabled


interface BVI1

ip address dhcp client-id FastEthernet0

no ip route-cache


bridge 1 route ip

(The AP root-bridge with wireless clients config is identical to this config with the exception of the station-role and a static IP on the BVI1 interface.)

Are these very slow thoughput speeds normal of this hardware combination?

I did much searching/googling and found claims that by eliminating TKIP it almost doubles the actual wireless speeds our clients can obtain. Is there any truth to this?

Any suggestions or recommendations without changing hardware would be very welcome.

Thanks in Advance!



Hall of Fame Community Legend

AP1231G-A-K9 access points - very slow throughput - Is TKIP the

Can you describe the PHYSICAL location of this office you've set up?

1230 is an 802.11b/g WAP.  If you have neighbors using 802.11b/g WAPs, there's a sure chance you're experiencing channel interferrence.

Download free proggies like netstumbler or inSSIDer and check to see if this is so. 


Re: AP1231G-A-K9 access points - very slow throughput - Is TKIP

Thanks for the reply.

The physical location is in the middle of nowhere, literally. Farm/Ranch branch office on 100+ acres. There isnt a house or major area within a few miles of this setup. The AP root is on the main floor of the office, the AP bridge is on the 2nd floor, wooden floors/walls. As mentioned in my original post, verified excellent connectivity amongst any clients and their respective AP and AP to AP.

I've used similar programs to Netstumbler - I see no other signals anywhere.

I am considering trying disabling all encryption, but from my understanding, the two AP's will not communicate unless there is some sort of encryption. Any thoughts?

Hall of Fame Community Legend

Re: AP1231G-A-K9 access points - very slow throughput - Is TKIP

How about DECT cordless phones, BT device(s)?

Is the FastEthernet interface of the WAP and the switch have any line errors?  Is it running on FULL duplex?  100 Mbps?


Re: AP1231G-A-K9 access points - very slow throughput - Is TKIP

Hi Dayne,

assuming that you dont have any 802.11b clients and all your clients and the brdiges connect with 802.11g speeds (12.0 Mbit/s ++), i would recommend that you disable all speeds below 12.0 Mbit/s. This should improve your speed a little bit, because all broadcast frames send at the lowest basic data rate, in your case 1.0 Mbit/s.

Keep in mind, that two bridges and all your clients share the 54Mbit/s (brutto!), real throughput in 802.11g is around ~22Mbit/s and this data rate is shared by all your clients and bridges.

You can try to measure your downloadspeed, with an single client connected to your rootbridge. I think you loose alot throughput with your non-root-bridge.

additionally you need to look for interferers and neighboring RF-networks.


||| Please rate helpful posts. Thanks! |||

Re: AP1231G-A-K9 access points - very slow throughput - Is TKIP

Ok, thanks for the explanation - I understand. But even at a 22mbps signaling rate shouldn't I be seeing throughputs greater than 5-5.5mbps especially since this location is literally 100% free of any outside interference and the interfaces definitely show the clients and non-root bridge (when connected) all being at the highest rate of 54mbps? I tried even in the same room, approximately 40' away, total line of sight, no obstructions, between my laptop and the root AP.

I disconnected the non-root bridge and connected directly to the root bridge during my testing. I was still only able to achieve approx 5.5mbps download. Adding back in the non-root bridge and re-connecting to it I notice slightly lower throughput, approx 5mbps. During testing, my laptop was the only device connected to the network, all other clients were shut off.

Here are the int stats (I've never reset the counters):

Root Bridge:

RATE 1.0 Mbps

Rx Packets:           2178725 /  49    Tx Packets:                   39 /   0

Rx Bytes:            335124036 /7595    Tx Bytes:                   4965 /   0

RTS Retries:               61 /   0    Data Retries:                  5 /   0


RATE 1.0 Mbps

Rx Packets:           2323120 /  50    Tx Packets:                  141 /   0

Rx Bytes:            336455923 /7595    Tx Bytes:                  17869 /   0

RTS Retries:                2 /   0    Data Retries:                 56 /   0

All the other rates, 2-12mbps show single or double digit packet/byte counts until I get to the 36mbps section of each interface:

ap#sh int Dot11Radio0 stati

        DOT11 Statistics        (Cumulative Total/Last 5 Seconds):

(snipped for brevity)

Root Bridge:

RATE 36.0 Mbps

Rx Packets:            915395 /   1    Tx Packets:              2345589 /   9

Rx Bytes:            93420936 /  70    Tx Bytes:             3370791285 / 874

RTS Retries:                0 /   0    Data Retries:             573981 /   4

RATE 48.0 Mbps

Rx Packets:           2163192 /   2    Tx Packets:               216861 /   0

Rx Bytes:            222455730 / 404    Tx Bytes:              182817967 /   0

RTS Retries:                0 /   0    Data Retries:             106808 /   0

RATE 54.0 Mbps

Rx Packets:            987986 /   0    Tx Packets:               168923 /   0

Rx Bytes:            190467269 /   0    Tx Bytes:               61665042 /   0

RTS Retries:                0 /   0    Data Retries:              34424 /   0

Non-Root Bridge:

RATE 36.0 Mbps

Rx Packets:           2368679 /   0    Tx Packets:               965419 /   0

Rx Bytes:            3396819830 /   0    Tx Bytes:               90880825 /   0

RTS Retries:                0 /   0    Data Retries:             242686 /   0

RATE 48.0 Mbps

Rx Packets:            341870 /   0    Tx Packets:              2156282 /   1

Rx Bytes:            216497093 /   0    Tx Bytes:              215775536 / 210

RTS Retries:                0 /   0    Data Retries:             478619 /   0

RATE 54.0 Mbps

Rx Packets:           1469926 /  15    Tx Packets:              2529678 /  15

Rx Bytes:            411722698 /1122    Tx Bytes:             1366306113 /5159

RTS Retries:                0 /   0    Data Retries:             198532 /   0

I will try disabling the rates below 12mbps and re-test.

I would like to try disabling all encryption and try as well.

Do you know if the AP's will associate if there is zero encryption?


Re: AP1231G-A-K9 access points - very slow throughput - Is TKIP

More testing....

  • Disabled rates below 12mbps - made no difference
  • Disconnected both APs, obtained a pair of Dell TrueMobile 2300's. Initially setup only 1, connecting to it with no security, 22mpbs. Standard WEP, 20mbps, WPA-PSK, 18mbps. Setup the other, associated them, connected client to the far end. No security 20mbps, WEP, 19mbps, WPA-PSK 17mbps.
  • Completely reset 1 1231AP. Setup with no security. 10mbps, WEP, 9mbps, WPA-PSK, 6-7mbps. Cannot get the AP's to associate with no encryption at all. Evidently they must have some sort of encryption to associate, although I cannot find it documented anywhere. No need to bother, I'll just stick with the 10yr old TrueMobile's.

Unbelievable. I really thought the Cisco 1200 hardware would perform at least as good as a $20.00 router.

CreatePlease to create content
Content for Community-Ad