-- asa 5510 - act as a potential bottleneck ?

scalacisco · ‎10-20-2008

Hi all,

Regarding to our ISP, our connection is OK (means 10Mb 1:1, burst 100).

So upload and download should reach up to 10Mb.

But, in fact, download is close to 10 000 kbps, which is perfect.

On the other side, upload only reach 2 800 kbps, in real good days !

ISP made some test from their equipment to our equipement (Cisco ASA 5510).

BEGIN [ISP COnfig] ---------------

xxxxxxxxx#sh int Fa0/21

FastEthernet0/21 is up, line protocol is up (connected)

Hardware is Fast Ethernet, address is 000d.28cf.xxxx (bia 000d.28cf.xxxx)

Description: xxxxxxxxxxxxxxxxx

MTU 1546 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 19/255, rxload 19/255

Encapsulation ARPA, loopback not set

Keepalive set (10 sec)

Full-duplex, 100Mb/s, media type is 10/100BaseTX

input flow-control is off, output flow-control is unsupported

ARP type: ARPA, ARP Timeout 04:00:00

Last input 21w2d, output 00:00:01, output hang never

Last clearing of "show interface" counters 00:11:10

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

30 second input rate 7631000 bits/sec, 631 packets/sec

30 second output rate 7625000 bits/sec, 631 packets/sec

END [ISP COnfig] ---------------

The result says that upload and download are both fine - 7.6 Mb.

I am trying to identify any bottleneck between our servers and the outside. Everything is 100FD.

A. How can i be sure that the ASA 5510 is not that bottleneck ?

B. How to make a similar test from the ASA 5510 to the ISP IP/Equipment (to get the input-output rate) ?

Thank you in advance for sharing your knowledge,

Regards,

m.sir · ‎10-20-2008

A. Its difficult to prove it with information you provided (what is uploaded where (could be also server problem etc..), I would try to place test PC with public IP directly to ISP device (without ASA) a try to upload speed

B. ASA support show interface command as well , you should get similar output . just try show interface command

edunn · ‎10-20-2008

Also take a look if you are taking errors on either the ASA interfaces or the router interfaces.....

scalacisco · ‎10-20-2008

I have a lot of collisions. Below a sh int of the outside interface.

How to identify where does it come from ?

Thank you,

------------

Interface Ethernet0/1 "outside", is up, line protocol is up

Hardware is i82546GB rev03, BW 100 Mbps, DLY 100 usec

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

MAC address 001f.9e50.xxxx, MTU 1500

IP address xxx.xxx.xxx.xxx, subnet mask 255.255.255.0

45959157 packets input, 10879563009 bytes, 0 no buffer

Received 4 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

0 L2 decode drops

61189149 packets output, 71964788705 bytes, 0 underruns

1 output errors, 128171 collisions, 7 interface resets

0 babbles, 594467 late collisions, 516758 deferred

0 lost carrier, 0 no carrier

input queue (curr/max packets): hardware (0/33) software (0/0)

output queue (curr/max packets): hardware (0/17) software (0/0)

Traffic Statistics for "outside":

45959132 packets input, 9865487682 bytes

61783623 packets output, 71645992067 bytes

1099702 packets dropped

1 minute input rate 344 pkts/sec, 430956 bytes/sec

1 minute output rate 211 pkts/sec, 85296 bytes/sec

1 minute drop rate, 0 pkts/sec

5 minute input rate 340 pkts/sec, 417182 bytes/sec

5 minute output rate 216 pkts/sec, 97846 bytes/sec

5 minute drop rate, 1 pkts/sec