877 ADSL Problem with IP Inspect & Access list

[peter.rowe]

HI There,

I have a serious problem with the new 877. When applying an access list and IP Inspect to the ADSL dialer interface, FTP download speed drops from over 200K/sec to around 2k/sec

Removing both statements cause 'normal' performance again. I have tried 3 IOS images and all have the same problem. This us UK ADSL, config attached:-

[Harold Ritter]

Can you try adding "permit tcp any any established" at the beginning of ACL inbound to see if it helps.

Hope this helps,

[peter.rowe]

Thanks, I will try that although I found a solution to the problem:-

Removing "ip inspect name firewall http" caused normal performace (a bit of google-ing revealed a bt of a problem with the http inspect command in general).

I still don't know why it affects the 877 and not the 1700's or 837's that I work on frequently, but I hope they fix it!

CHeers,

Peter.

[peter.rowe]

Actually just to be sure I tried your suggestion while re-adding the "http" however it did not help, so I have removed the http inspection again. Thanks for the suggestion though!

peter.