Internet slow on SSID passing through anchor

[sreelalggbm]

Hai,

I have a wireless network with following structure.

2 WLCs for corporate

2 WLCs for Guest which is on DMZ zone.

EOIP is configured between CORP WLC to guest WLC and everything is working fine.

We have 1  corporate SSID for Inside users and trusted users.

1 for  Guest users, customers  and untrusted users which is passing through EOIP tunnel.

Now we ave noticed that internet speed is very slow for guest users. But from corporate its very fast and both of them are using the same internet connection.

I have done the following test.

Connected my PC to DMZ switch and tested the internet speed from guest vlan .It was very fast .But when it is on wireless, speeds is very slow.

Do we need to do something on the WLC config for solve this issue?

Thanks

Sreelal

[Stephen Rodriguez · Accepted solution]

On the guest WLC how many ports do you have connected. Is it possible that here is a half duplex link between the anchor and the Internet pipe?

Steve

Sent from Cisco Technical Support iPhone App

[sreelalggbm]

Hai,

Currently is configured as 1000MB full duplex.

Do I need to  try halfduplex

[Stephen Rodriguez]

No the WLC should be 1000/full. You may want to add another port and configure an etherchannel/LAG.

The half duplex question was more for a device upstream from the WLC.

Steve

Sent from Cisco Technical Support iPhone App

[George Stefanick]

Can you share:

What code are your controllers on

Have you checked the ports the controllers are connected to for errors

Are you using lag or ports

Are you seeing alerts on the WLCs that the tunnels are breaking

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin

[sreelalggbm]

Hai,

WLCs are running the code 7.0.235

WLC is connected to the switch ports with etherchannel

LAG is already enabled on WLC.Tunnels are stable.

[Yahya Jaber]

on what basis did you determine that the internet connection is slow?

have you took in consideration number of connected clients at the AP at the same time? what applications are the guests using?

have you tried the iperf test? have you noticed that on off-shift hours?

one intresting solution i found, that would help in the guest environment is http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080baf502.shtml

[sreelalggbm]

Hai,

Thanks for your reply.

We have 1  corporate SSID for Inside users and trusted users.

1 SSID for  Guest users, customers  and untrusted users which is passing through EOIP tunnel.

  Internet speed is very slow for guest users.  But from corporate its very fast and both of them are using the same  internet connection.

I tested with speedtest.net on my after office hours.

Corporate SSID gave more than 50 MB download speed.

Guest SSID is giving less than 7 MB

Also I have done the following test.

Connected  my PC to DMZ switch and tested the internet speed from guest vlan .It  was giving me 50 MB speed .But when it is on wireless, speeds is very slow.

I didnot configure any rate  limit features.SSID qos setting is configured as  SILVER

Do you have any clue on this issue?

Thanks in advance

Sreelal

[Yahya Jaber]

Hi Sreelal,

Does it happen on all AP's? if not,can you try and upload the show tech from the AP

try the iperf test, it is better for connection speed.

[sreelalggbm]

Dear Yahya,

We have more than 30 accesspoints and this issue is happening for all AP

EOIP tunnel is passing through like this

From corp WLC-->Coreswitch--->Packetshaper--> Checkpoint firewall-->ASA Firewall for guest wifi --> DMZ SWITCH -->Guest WLC

We removed the packet shaper and there wasnt any improvement on the speed.Checkpoint is our perimetre firewall

I couldnt download the iperf software Do you have any link

Do we need to make any change on the WLC.

Thanks a lot for your time

Regards

Sreelal

[Yahya Jaber]

removing the packetshaper wont do any good, because you already tested with other wired client on the same topology.

the iperf http://www.noc.ucf.edu/Tools/Iperf/iperf.exe

http://www.debianhelp.co.uk/manpages/iperfmanpage.txt

and check the client driver you are tesing with.

[sreelalggbm]

I am doubtfull that how this will help us..

Also I think we can only test the speed between inside to dmz (pc to pc)

[Yahya Jaber]

this will show what is the speed that the wireless clients are having other than speedtest.net, if you made sure that the wireless speed is ok, you will have to check other checkpoints between the two WLC's

it is just to make sure that the wireless guest WLC is ok

[George Stefanick]

You mentioned you are getting 50 meg download speed and only 7 on guest.

What aps are you using to get 50 meg down ?

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin

[sreelalggbm]

I tested with speedtest.net on my after office hours