WLC 2504 - Slow Internet download speed. Just Internet speed.

[Khoa Pham]

My network is a simple network: 1 Gateway, 1 switch, 1 WLC2504 and 1 AP-3602I

If I wired my laptop to the switch and do speedtest.net, I get 100Mbs down, 100Mbs Up, which is the speed provided by our ISP

If I connect the laptop wirelessly to the AP, and do a Speedtest.net, I get 30-40Mbs down, 100Mbs Up

If I use IPerf to test the connection from the Wireless laptop to a Wired Server, on the same local net, I get 140Mbs Up/Down

At all time, my laptop is connected at 450Mbs, A channel. Only 1 device on the AP, which is my laptop.

You might will ask, but I verified:

- No QoS setup anywhere in the network. WLAN QOS tab is clean.

- I even removed the switch and connected the WLC directly to the gateway. Same results.

Interesting right ? I know.

Please advise.

[Rasika Nayanajith]

If I connect the laptop wirelessly to the AP, and do a Speedtest.net, I get 30-40Mbs down, 100Mbs Up

What do you expect 100Mbps down & 100Mbps up ? 

Post "show client detail <mac_address>" output when you have 40Mbps download speed. Also pls attach "show wlan <wlan_ID>" output as well

by the way, If you are getting 100% throughput from your internet provider that is great.

HTH

Rasika

**** Pls rate all useful responses ****

[Khoa Pham]

Unfortunately I dont have access to the console at the moment. But this happens with every client. I have tried to create a brand new WLAN and still have the same issue.

Any idea or does anyone out there has the same issue ?

[Rasika Nayanajith]

If you could SSH onto WLC you can get the requested output.

Rasika

[Thaer.Badawi124]

hi

Did you find any solution i am facing  the same problem 

when i connect my computer throw LAN Cable directly to switch i get full speed up/down

but when i connect via AP so the speed drop down and the connection between computers and server became very very slow . 

??????????

1 WLC 2504 

4 AP 1700 series 

1 Cisco Switch 

1 ASA Firewall 

windows server 2008 

please help ____??????

[CSCo11235397]

show client detail F4:B7:E2:7F:47:71
Client MAC Address............................... f4:b7:e2:7f:47:71
Client Username ................................. host/L0000933
AP MAC Address................................... 88:75:56:ed:37:90
AP Name.......................................... AP6073.5c31.c504
Client State..................................... Associated
Client NAC OOB State............................. Access
Wireless LAN Id.................................. 3
Hotspot (802.11u)................................ Not Supported
BSSID............................................ 88:75:56:ed:37:92
Connected For ................................... 2746 secs
Channel.......................................... 11
IP Address....................................... 10.192.61.43
Gateway Address.................................. 10.192.61.1
Netmask.......................................... 255.255.255.128
IPv6 Address..................................... fe80::bd21:d88b:6643:69f4
IPv6 Address..................................... 2602:302:dc3:36e9:bd21:d88b:66 43:69f4
IPv6 Address..................................... 2602:302:dc3:36e9:8d5c:531d:8d 8:e2cf
Association Id................................... 96
Authentication Algorithm......................... Open System
Reason Code...................................... 1
Status Code...................................... 0
Client CCX version............................... No CCX support

--More-- or (q)uit
Re-Authentication Timeout........................ 854
QoS Level........................................ Silver
802.1P Priority Tag.............................. disabled
CTS Security Group Tag........................... Not Applicable
KTS CAC Capability............................... No
WMM Support...................................... Enabled
APSD ACs....................................... BK BE VI VO
Power Save....................................... OFF
Current Rate..................................... 11.0
Supported Rates.................................. 1.0,2.0,5.5,11.0,6.0,9.0,
............................................. 12.0,18.0,24.0,36.0,48.0,
............................................. 54.0
Mobility State................................... Local
Mobility Move Count.............................. 0
Security Policy Completed........................ Yes
Policy Manager State............................. RUN
Policy Manager Rule Created...................... Yes
Audit Session ID................................. 0ac03da500011e1556dda90b
IPv4 ACL Name.................................... none
IPv4 ACL Applied Status.......................... Unavailable
IPv6 ACL Name.................................... none
IPv6 ACL Applied Status.......................... Unavailable
Client Type...................................... SimpleIP

--More-- or (q)uit
PMIPv6 State..................................... Unavailable
Policy Type...................................... 802.1X
Encryption Cipher................................ WEP (104 bits)
Management Frame Protection...................... No
EAP Type......................................... EAP-TLS
Interface........................................ Mngd
VLAN............................................. 110
Quarantine VLAN.................................. 0
Access VLAN...................................... 110
Client Capabilities:
CF Pollable................................ Not implemented
CF Poll Request............................ Not implemented
Short Preamble............................. Implemented
PBCC....................................... Not implemented
Channel Agility............................ Not implemented
Listen Interval............................ 10
Fast BSS Transition........................ Not implemented
Client Wifi Direct Capabilities:
WFD capable................................ No
Manged WFD capable......................... No
Cross Connection Capable................... No
Support Concurrent Operation............... No
Fast BSS Transition Details:

--More-- or (q)uit
Client Statistics:
Number of Bytes Received................... 12848655
Number of Bytes Sent....................... 36468033
Number of Packets Received................. 37801
Number of Packets Sent..................... 50070
Number of Interim-Update Sent.............. 0
Number of EAP Id Request Msg Timeouts...... 0
Number of EAP Id Request Msg Failures...... 0
Number of EAP Request Msg Timeouts......... 0
Number of EAP Request Msg Failures......... 0
Number of EAP Key Msg Timeouts............. 0
Number of EAP Key Msg Failures............. 0
Number of Data Retries..................... 74289
Number of RTS Retries...................... 0
Number of Duplicate Received Packets....... 9164
Number of Decrypt Failed Packets........... 0
Number of Mic Failured Packets............. 0
Number of Mic Missing Packets.............. 0
Number of RA Packets Dropped............... 0
Number of Policy Errors.................... 0
Radio Signal Strength Indicator............ -74 dBm
Signal to Noise Ratio...................... 20 dB
Client Rate Limiting Statistics:

--More-- or (q)uit
Number of Data Packets Recieved............ 0
Number of Data Rx Packets Dropped.......... 0
Number of Data Bytes Recieved.............. 0
Number of Data Rx Bytes Dropped............ 0
Number of Realtime Packets Recieved........ 0
Number of Realtime Rx Packets Dropped...... 0
Number of Realtime Bytes Recieved.......... 0
Number of Realtime Rx Bytes Dropped........ 0
Number of Data Packets Sent................ 0
Number of Data Tx Packets Dropped.......... 0
Number of Data Bytes Sent.................. 0
Number of Data Tx Bytes Dropped............ 0
Number of Realtime Packets Sent............ 0
Number of Realtime Tx Packets Dropped...... 0
Number of Realtime Bytes Sent.............. 0
Number of Realtime Tx Bytes Dropped........ 0
Nearby AP Statistics:
AP6073.5ce9.457d-(slot 0)
antenna0: 2721 secs ago.................. -76 dBm
antenna1: 2721 secs ago.................. -75 dBm
APfc99.47d5.463f-(slot 0)
antenna0: 2721 secs ago.................. -88 dBm
antenna1: 2721 secs ago.................. -88 dBm

--More-- or (q)uit
AP6073.5c31.c504-(slot 0)
antenna0: 2721 secs ago.................. -73 dBm
antenna1: 2721 secs ago.................. -67 dBm
DNS Server details:
DNS server IP ............................. 10.192.61.134
DNS server IP ............................. 10.192.61.234
Client Dhcp Required: False

[johnkristian]

Any updates here?

I have the same issue:

3745 Router -> 3560G switch -> 2504 WLC -> 3702i AP's.

100/100 fiber internet connection. Maxing both ways (speedtests, ftp) with cable.
No problem getting 500Mbps transfer speed with a 802.11ac client (HP 840G3) on internal network from a file sever (smb transfer).
However, over internet (speedtest, ftp, vpn/smb) download speed tops at about 40Mbps. Upload is much higher, often close to 100Mbps.
Intel, Qualcomm Atheros nics or Phones doesn't matter.
Tried with several SW versions on WLC.

However, I think I might be on to something.

I took the 3745 router out of the equation (temproary replaced it with a pfsense vm) and the problem is gone! However, this makes little sense. So if anyone have any ideas, please shout.

I have a second 2504 WLC I'm going to set up on a secondary site (3845 router, 3750G switch, 3702 and 3502 ap's) within a few days to see if I get the same problem with the 3845 router. This site is running 4402 WLC and 3502 AP's right now without any issues, so that will be interesting.

[pchapman2]

I am having the same issue, I can get the full 100/100Mb up/down of my internet connection only when wired.  Testing wirelessly through the 2504 WLC using two versions of 8.x code I get about 40/100Mb.  I have tried two different versions of code on the WLC, have only one Cisco 2960G switch between my ASA-5505 and the WLC, and AP's are on the same switch.  Very small network setup with a gigabit switch in the middle.  My AP's are Aironet 2702i and 2602e which were maxing out my internet at 75/75 with a different Verizon ONT.  This problem started when their newer ONT showed up, which makes no sense as the wireless traffic is separated from the ONT by a layer 3 device, but this is my reality.  I have no idea what is going on, please help.

[johnkristian]

Still no clue what caused this. The only thing I know is when I threw the 3745 router out of the picture, it all worked fine.
I tried with many different ios versions. When I switched the 3745 to a 3845, with the same config, problem was gone. I also tried with two different 3745 and two different 3845 routers, just for the heck of it.

[pchapman2]

Wow, thanks for the response.  I am going down a similar path so hopefully I will have the similar success.  I have used two firewalls so far: PIX-515e and Cisco ASA-5505 with version 8.x code.  Yes I know both are a little older models but should be able to push and pull close to 100Mb in either direction.  I have a Cisco ASA-5506x firewall on order and will try with that before I panic.

[CSCo11235397]

show wlan 3

WLAN Identifier.................................. 3
Profile Name..................................... Systems
Network Name (SSID).............................. Systems i
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status ....................... Disabled
DHCP ......................................... Disabled
HTTP ......................................... Disabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Maximum number of Clients per AP Radio........... 200
Number of Active Clients......................... 69
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 1800 seconds
CHD per WLAN..................................... Enabled

--More-- or (q)uit
Webauth DHCP exclusion........................... Disabled
Interface........................................ Mangd
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
PMIPv6 Mobility Type............................. none
Quality of Service............................... Silver
Per-SSID Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed

--More-- or (q)uit
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ 10.192.61.199 1812
Accounting.................................... Disabled
Dynamic Interface............................. Disabled
Local EAP Authentication......................... Enabled (Profile 'Gauss')
Security

802.11 Authentication:........................ Open System
FT Support.................................... Disabled
Static WEP Keys............................... Disabled
802.1X........................................ Enabled

--More-- or (q)uit
Encryption:..................................... 104-bit WEP
802.1X on MAC Auth failure:..................... Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Disabled
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web-Passthrough............................... Disabled
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
FlexConnect Local Switching................... Disabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
FlexConnect Vlan based Central Switching ..... Disabled
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Client MFP.................................... Optional but inactive (WPA2 not configured)
Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled

--More-- or (q)uit
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Band Select...................................... Disabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled

Mobility Anchor List
WLAN ID IP Address Status
------- --------------- ------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

[Manish Mathur]

Hi Khoa,

In addition to what Rasika mentioned, there may be a few points which need to be checked:

>> What modulation are the clients connected with ? 802.11an/802.11a ?

>> What is the software version on the WLC. I am asking this because there is a bug that I remember on the older WLC versions related to the usage of A-MPDU/A-MSDU , which slowed down the speed.

>> Have u enabled TCP MSS on the WLC/AP ? If yes , what is the value ?

Cheers,

Manish

[abwahid]

Hi,

Once try to test the connection speed on completely.. noise free channel.

[Lars Erik Braatveit]

Hi, 

I am seeing this exact problem as well. Did you get any solution to this?

A Wireless client connecting to the Internet will see around 30Mbps download and 75Mbps upload. 

This is the same for "speedtests" and FTP transfers.

The same client is able to get around 150Mbps download from an FTP server residing on the same local LAN. 

A Wired client on the same LAN gets 75Mbps download and 75Mbps Upload. 

The Internet connection is a 75/75 line. 

I am stumped here. I've looked at MTU and MSS. There is an ASA in front of the ISP which by default sets the MSS to 1380, this applies to both wired and wireless clients. 

The WLC is running the latest 8.0.110.0 software. 

[George Stefanick]

So many of these types of issues are client related. Intel for example had a issue with uAPSD and their 7260 NICs. That impacts throughput ..

http://www.intel.com/support/wireless/wlan/sb/CS-034875.htm

Issue
Intel has identified IOT (interoperability) issues with certain access points that results in reduced Rx data throughput. When exercising uAPSD, the access point stops doing aggregations on the downlink, resulting in reduced Rx data throughput:

• 11n 20 MHz channel, about 30 Mbps instead of up to 100 Mbps.

• 11n 40 MHz channel, about 60 Mbps instead of up to 200 Mbps.

When the uAPSD feature is disabled, the power savings are not realized. There is no other impact. The power savings revert to the level of a non-uAPSD-capable access point.