Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

bandwidth after setting pix is terrible

I'm getting terrible bandwidth results after setting up a pix 501. I'm using cable, and my bandwidth is more like dialup. I've tried downloading some files, and visited sites like bandwidthspeedtest.com

I've disassociated the interfaces with the ip audit rules that were applied, and have used the PDM to monitor it. It's memory and cpu resources are fine, and there is nothing unusual about the traffic status. Attached is my config, perhaps I missed something that you could point out to me?

thank you,

Bill

1 ACCEPTED SOLUTION

Accepted Solutions

Re: bandwidth after setting pix is terrible

Have you also verified that the outside router or cablemodem has the same linkspeed and duplex settings as the PIX ?

Most of the performance issues are caused by that.

A duplex mismatch is most frequently revealed by increasing error counters on the interfaces in question. The most common errors are Frame, CRC, and Runts. If these values are incrementing on your interface, you either have a duplex mismatch or a cabling issue. Resolve this issue before you do anything else.

You have set: 10MB Fullduplex

Take a look at your interface to see if you have errors.

show interface

Might be also a good test to see if it is better in 10MB Half Duplex even if that creates Collisions.

Note: Set both devices to a fixed speed and duplex, the same of course or use auto negotiation on both.

See also: Monitoring PIX Performance

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009491c.shtml

sincerely

Patrick

6 REPLIES
Cisco Employee

Re: bandwidth after setting pix is terrible

Only thing I can see is try turning off the HTTP fixup with:

no fixup protocol http 80

This fixup is useless unless your filtering java/activex or using a Websense filtering type of server, which you're not, so all it's currently doing is slowing HTTP packets down since the 501 will still try and inspect them.

New Member

Re: bandwidth after setting pix is terrible

no change after disabling http fixup. I swapped out switches and cables to rule out a hardware issue, still no change, and verified that my WAP/router didn't have a firewall configured on it.

New Member

Re: bandwidth after setting pix is terrible

I had the same problem. After visiting many bandwidth sites I determined that the pix does not work well with these tests. I found a wide range of test results from as low as 98k to as high as 1500k. I also removed my pix and tested dirrectly with my laptop connected to the cable modem and test results were much higher, 5mbs in some instances.

Keep in mind that I never experienced performance issues when connecting to the internet.

Re: bandwidth after setting pix is terrible

Have you also verified that the outside router or cablemodem has the same linkspeed and duplex settings as the PIX ?

Most of the performance issues are caused by that.

A duplex mismatch is most frequently revealed by increasing error counters on the interfaces in question. The most common errors are Frame, CRC, and Runts. If these values are incrementing on your interface, you either have a duplex mismatch or a cabling issue. Resolve this issue before you do anything else.

You have set: 10MB Fullduplex

Take a look at your interface to see if you have errors.

show interface

Might be also a good test to see if it is better in 10MB Half Duplex even if that creates Collisions.

Note: Set both devices to a fixed speed and duplex, the same of course or use auto negotiation on both.

See also: Monitoring PIX Performance

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009491c.shtml

sincerely

Patrick

New Member

Re: bandwidth after setting pix is terrible

That was it. There were hundreds of input erros on the outside interface. Changed the interface to auto, and am now getting great download speeds.

3347 Kbps, compared to 53 Kbps yesterday.

Thank you very much

Re: bandwidth after setting pix is terrible

I have seen this problem multiple times and it was always related to duplex problems.

sincerely

Patrick

151
Views
5
Helpful
6
Replies