Slow bandwidth file transfer Vlan to Vlan

Hi Viken,

Welcome to the Sophos Community.

Can you please show me the interface configurations for the associated VLANs and meanwhile, check #4 in my troubleshooting guide.

Cheers-

Hi Sachin,

Thank you for your answer.

Here is a screenshot from the network interfaces tab : 

I'm reading the #4 from your troubleshooting guide but i don't understand 100% of it, i will analyze it.

Let me know where you can't understand a step and I will guide you. 

I will analyze it later.

I just tested a new thing right now:

I configured the port 4 of the xg105, and created a new Vlan on it (Vlan 800). Then i plugged a PC and configured it to be in the new Vlan on the port 4 and tested a file transfer between the Vlan 1 and the Vlan 800. The speed was OK ~990Mbps. But when i tested a file transfer between Vlan 800 and Vlan 10, the speed was as bad as the transfer speed between my other vlans (~480Mbps)

To understand:

Physical Port 1 hosts Vlan 1 (which is in reality LAN, not Vlan, because this is the network configured physically on the port 1) , Vlan10, Vlan20, Vlan30 and Vlan40. Physical Port 4 hosts Vlan 800.

Here are the file transfers tested:

• Vlan 1 to Vlan 1 ~990Mbps
• Vlan 1 to Vlan 10 ~480Mbps
• Vlan 10 to Vlan 20 ~480Mbps
• Vlan 30 to Vlan 1 ~480Mbps
• Vlan 800 to Vlan 1 ~990Mbps
• Vlan 10 to Vlan 800 ~480Mbps

Any suggestions?

Hello, i read your troubleshooting guide. The #4 is ok for me, i dont have any droped paquets and error. The #4.1 says that it may be a DNS error, but even if i try the transfer file by IP Address the issue is the same.

Thank you.

What is speed negotiation configured for the interface where the VLAN10 and VLAN30 are defined? Set it to Auto Negotiate and test the speed. 

Is IPS defined in the firewall rule for the VLAN?

Cheers-

Hello,

I can't find where i can see the speed negotiation for the VLAN10 and VLAN30. Can you help me please ?

And i don't think that IPS is defined, i can't find it. here is a screenshot of my firewall rule 

thank you for your help.

Hi Viken,

The speed negotiation on the interface is 1000 Mbps Full duplex, I simply forgot to check the previous screenshot you posted. Edit Port1 | Advance | Speed. 

When you start a transfer between two VLANS, what do you see in the system graphs? Show us a picture from Diagnostics | System Graphs | Port1.

Hi Viken,

The speed negotiation on the interface is 1000 Mbps Full duplex, I simply forgot to check the previous screenshot you posted. Edit Port1 | Advance | Speed. 

When you start a transfer between two VLANS, what do you see in the system graphs? Show us a picture from Diagnostics | System Graphs | Port1.

 Hi Sachin,

Here is the screenshot you asked, im transfering a file from VLAN 10 to VLAN 20:

Thank you.

Viken

Hello,

No more ideas ? Perhaps it's a hardware limitation? Am i alone to have this issue ?

Viken.

Hi Viken,

I was investigating internally if there is any hardware limitation with VLANs in the XG but, I am yet discover anything alike. According to the investigation, we did through the forums we do not capture any relative logs that can cause the slow throughput with inter-VLAN transfers. I would suggest you one last step before suspecting it to be associated with anything local. Take SSH to the XG and go to option 4. Device console and execute the following command: 

system firewall-acceleration show

If this module is enabled, then try to disable it and check the throughput. 

Any help?

Hi Sachin,

I disabled system firewall-acceleration, and i tested a file transfer between VLAN 20 and VLAN 1, the transfer is a bit better (~560Mbps instead of 480 with firewall-acceleration enabled) but still too slow compared to the 1Gbps transfer speed from Vlan 1 to Vlan 1.

Thank you,

Viken

Hi Viken,

Is VLAN 1 the native VLAN? The routing within VLAN1 will take place through the switch which reduces two hops and an inter-VLAN routing will require packet to traverse from the XG increasing two next hops; please correct me if I am mistaken. So I suspect that the speed variation is a technical bottleneck.

Thank you,

I suspect it. Can you arrange a router to replace XG and check the throughput between VLAN 1 and VLAN 10 for a file transfer? 

Cheers

Try this: Log in to console and choose 4.

Enter command:

console> set advanced-firewall bypass-stateful-firewall-config add source_network X.X.X.X source_netmask 255.X.X.X dest_network Y.Y.Y.Y dest_netmask 255.X.X.X

 and vice versa

console> set advanced-firewall bypass-stateful-firewall-config add source_network Y.Y.Y.Y source_netmask 255.X.X.X dest_network X.X.X.X dest_netmask 255.X.X.X

Or refer to https://kb.cyberoam.com/print.asp?id=2017 this was the case for me. E.g. by-pass the statefull packet inspection SPI in the firewall for your interconnected LAN(s).

Cheers.

Hello,

I tried the commands you said and the issue is still occurring for me.

Cheers,

Hi Viken,

I can't think of any other troubleshooting steps that we can suggest you further. The only suggestion is to start a case with support and provide me the case# to monitor it.

Thanks