09-11-2019 11:57 AM - edited 07-05-2021 10:59 AM
Hi,
I have a WS-C3850-24P wireless controller that manages three AIR-CAP1602I-T-K9 access points.
The software version of the controller is 03.06.08.E RELEASE SOFTWARE (fc1), IOS cat3k_caa-universalk9.SPA.03.06.08.E.152-2.E8.bin.
The APs are connected directly to the controller (which is also a switch).
We have a 100 Mbps Internet link. However, clients are only achieving 10 Mbps of Internet connection.
If I connect directly to the ISP modem (which is also an AP), I get the 100 Mbps range.
The problem occurs on both 2.4GHz and 5GHz networks.
Does anyone have any idea what might be going on, please?
WLC configuration is attached.
Thanks,
Carlos.
09-11-2019 12:04 PM
Hi
The WLC is able to rate limit traffic. Are you sure you don't have it configured?
-If I helped you somehow, please, rate it as useful.-
09-11-2019 12:53 PM
Hi Flavio,
Thanks for your help.
I verified that there is a "port_child_policy" policy map:
Policy Map port_child_policy Class non-client-nrt-class bandwidth remaining ratio 10
I researched the "bandwidth remaining ratio" command but couldn't understand it very well.
09-11-2019 01:30 PM
When you say the internet-speed is 10 MBit/s, are you also saying that this problem only occurs when communicating to the internet? Or is it the same when accessing internal resources. If the problem is only with internet, also look at your firewall if there are restrictions. If the problem is also internal, have you checked the ports where the APs are connected?
09-11-2019 03:12 PM
Hi @Karsten Iwen,
These APs are only used for Internet connections. They are used for guest access only. There is a corporate WLAN configured, but it's not used. I believe I will not be able to test some access to internal resources. However, the configuration of the ports where the APs are connected is as follows:
interface GigabitEthernet1/0/4 description AP switchport access vlan 117 switchport mode access !
As for the firewall, it was our first suspicion, but we have already eliminated this possibility.
Thanks,
Carlos.
09-11-2019 01:52 PM
We have a 100 Mbps Internet link. However, clients are only achieving 10 Mbps of Internet connection.
What type of clients you used for testing ? How many clients in wireless AP when you test it ?
I would do a iperf test with internal server first & then do it with outside that use your internet link
https://mrncciew.com/2014/08/08/how-fast-is-your-network-iperf/
HTH
Rasika
*** Pls rate all useful responses ***
09-11-2019 03:28 PM
We perform tests using notebooks and smartphones.
In some tests, we came to 20 connected users; in others less than 5. And in other tests, there was only the test device connected. In all cases, the problem was the same.
I will perform the iperf test that you recommend and publish the result here.
Thanks,
Carlos.
09-13-2019 10:05 AM - edited 09-13-2019 10:05 AM
We performed the tests you recommended and the result was as follows:
The result of the tests is attached.
Thanks,
Carlos.
09-13-2019 03:12 PM
Hi Carlos,
Thanks for doing iperf & share your results.
I would like to check your client is connecting WPA2/AES. First check output of below command to see how client is connected on what data rates
show wireless client mac-address <mac_addr> detail
Then, I would configure WPA2/AES on your SSID
https://mrncciew.com/2013/12/04/wlan-config-in-3850-part-1/
3850-1(config-wlan)#security wpa
3850-1(config-wlan)#security wpa wpa2 ciphers aes
3850-1(config-wlan)#no security wpa akm dot1x
3850-1(config-wlan)#security wpa akm psk set-key ascii 0 <SSID_Password>
Once do that I would check it again "show wireless client" command
HTH
Rasika
*** Pls rate all useful responses ***
09-20-2019 05:20 AM
Thank you so much for your help!
We apply the changes you have recommended to WLAN "Group". Follows the output of the show wireless client command.
BTCOR01#show wireless client mac-address 0026.5a7e.3f4c detail Load for five secs: 8%/0%; one minute: 5%; five minutes: 5% Time source is NTP, 09:13:29.654 BSA Fri Sep 20 2019 Client MAC Address : 0026.5a7e.3f4c Client Username : NA AP MAC Address : f07f.06c4.8610 AP Name: AP02 AP slot : 0 Client State : Associated Wireless LAN Id : 2 Wireless LAN Name: Grupo BSSID : f07f.06c4.8611 Connected For : 1583 secs Protocol : 802.11n - 2.4 GHz Channel : 1 Client IIF-ID : 0xc00700000041be ASIC : 0 IPv4 Address : 192.168.10.35 IPv6 Address : Unknown Association Id : 2 Authentication Algorithm : Open System Status Code : 0 Session Timeout : 0 Client CCX version : 5 Client E2E version : No E2E support Diagnostics Capability : Supported Diagnostics Join Reason : Unknown S69 Capability : Not Supported Input Policy Name : unknown Input Policy State : None Input Policy Source : Default Policy Output Policy Name : unknown Output Policy State : None Output Policy Source : None 802.1P Priority Tag : Not supported WMM Support : Enabled U-APSD Support : Disabled Device Type : Unknown Power Save : OFF Current Rate : m7 Supported Rates : 11.0,12.0,18.0,24.0,36.0,48.0,54.0 Mobility State : Local Mobility Move Count : 0 Security Policy Completed : Yes Policy Manager State : RUN Policy Manager Rule Created : Yes NPU Fast Fast Notified : Yes Last Policy Manager State : DHCP_REQD Client Entry Create Time : 15627833 seconds Policy Type : WPA2 Authentication Key Management : PSK Encryption Cipher : CCMP (AES) Management Frame Protection : No Protected Management Frame - 802.11w : No EAP Type : Not Applicable Interface : GUEST VLAN : 13 Quarantine VLAN : 0 Access VLAN : 13 WFD capable : No Manged WFD capable : No Cross Connection capable : No Support Concurrent Operation : No Client Capabilities CF Pollable : Not implemented CF Poll Request : Not implemented Short Preamble : Implemented PBCC : Not implemented Channel Agility : Not implemented Listen Interval : 3 Fast BSS Transition : Not implemented Fast BSS Transition Details : Client Statistics: Number of Bytes Received : 1262029 Number of Bytes Sent : 10028179 Number of Packets Received : 9392 Number of Packets Sent : 11770 Number of EAP Id Request Msg Timeouts : 0 Number of EAP Request Msg Timeouts : 0 Number of EAP Key Msg Timeouts : 0 Number of Data Retries : 2529 Number of RTS Retries : 0 Number of Duplicate Received Packets : 0 Number of Decrypt Failed Packets : 0 Number of Mic Failured Packets : 0 Number of Mic Missing Packets : 0 Number of Policy Errors : 0 Radio Signal Strength Indicator : -57 dBm Signal to Noise Ratio : 40 dB Assisted-Roaming Prediction List: Nearby AP Statistics: AP02(slot0) antenna0: 25 seconds ago -61 dBm antenna1: 25 seconds ago -54 dBm AP01(slot0) antenna0: 24 seconds ago -71 dBm antenna1: 24 seconds ago -82 dBm AP03(slot0) antenna0: 24 seconds ago -96 dBm antenna1: 24 seconds ago -91 dBm
We performed some tests after the changes, and the problem remains.
Regards,
Carlos.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide