Slow bandwidth file transfer Vlan to Vlan

Hi Viken,

Welcome to the Sophos Community.

Can you please show me the interface configurations for the associated VLANs and meanwhile, check #4 in my troubleshooting guide.

Cheers-

Hi Sachin,

Thank you for your answer.

Here is a screenshot from the network interfaces tab : 

 

I'm reading the #4 from your troubleshooting guide but i don't understand 100% of it, i will analyze it.

Hello,

 

I can't find where i can see the speed negotiation for the VLAN10 and VLAN30. Can you help me please ?

 

And i don't think that IPS is defined, i can't find it. here is a screenshot of my firewall rule 

 

thank you for your help.

Hi Viken,

The speed negotiation on the interface is 1000 Mbps Full duplex, I simply forgot to check the previous screenshot you posted. Edit Port1 | Advance | Speed. 

When you start a transfer between two VLANS, what do you see in the system graphs? Show us a picture from Diagnostics | System Graphs | Port1.

 Hi Sachin,

 

Here is the screenshot you asked, im transfering a file from VLAN 10 to VLAN 20:

 

Thank you.

Viken

Hello,

 

No more ideas ? Perhaps it's a hardware limitation? Am i alone to have this issue ?

 

Viken.

Hi Viken,

I was investigating internally if there is any hardware limitation with VLANs in the XG but, I am yet discover anything alike. According to the investigation, we did through the forums we do not capture any relative logs that can cause the slow throughput with inter-VLAN transfers. I would suggest you one last step before suspecting it to be associated with anything local. Take SSH to the XG and go to option 4. Device console and execute the following command: 

system firewall-acceleration show

If this module is enabled, then try to disable it and check the throughput. 

Any help?

Hi Sachin,

 

I disabled system firewall-acceleration, and i tested a file transfer between VLAN 20 and VLAN 1, the transfer is a bit better (~560Mbps instead of 480 with firewall-acceleration enabled) but still too slow compared to the 1Gbps transfer speed from Vlan 1 to Vlan 1.

 

Thank you,

 

Viken

Hi Viken,

Is VLAN 1 the native VLAN? The routing within VLAN1 will take place through the switch which reduces two hops and an inter-VLAN routing will require packet to traverse from the XG increasing two next hops; please correct me if I am mistaken. So I suspect that the speed variation is a technical bottleneck.

Thank you,

Hi Sachin, Yes the VLAN 1 is the native LAN configured physically on the port 1 of the xg105w. So, if i understand what you are saying, there will be no solution for this issue ? Because in reality it doesn't seem to be an issue but a normal thing, right ? Thank you. Viken

I suspect it. Can you arrange a router to replace XG and check the throughput between VLAN 1 and VLAN 10 for a file transfer? 

Cheers

Try this: Log in to console and choose 4.

Enter command:

console> set advanced-firewall bypass-stateful-firewall-config add source_network X.X.X.X source_netmask 255.X.X.X dest_network Y.Y.Y.Y dest_netmask 255.X.X.X

 and vice versa

console> set advanced-firewall bypass-stateful-firewall-config add source_network Y.Y.Y.Y source_netmask 255.X.X.X dest_network X.X.X.X dest_netmask 255.X.X.X

Or refer to https://kb.cyberoam.com/print.asp?id=2017 this was the case for me. E.g. by-pass the statefull packet inspection SPI in the firewall for your interconnected LAN(s).

Cheers.

Try this: Log in to console and choose 4.

Enter command:

console> set advanced-firewall bypass-stateful-firewall-config add source_network X.X.X.X source_netmask 255.X.X.X dest_network Y.Y.Y.Y dest_netmask 255.X.X.X

 and vice versa

console> set advanced-firewall bypass-stateful-firewall-config add source_network Y.Y.Y.Y source_netmask 255.X.X.X dest_network X.X.X.X dest_netmask 255.X.X.X

Or refer to https://kb.cyberoam.com/print.asp?id=2017 this was the case for me. E.g. by-pass the statefull packet inspection SPI in the firewall for your interconnected LAN(s).

Cheers.

Hello,

 

I tried the commands you said and the issue is still occurring for me.

 

Cheers,

Hi Viken,

I can't think of any other troubleshooting steps that we can suggest you further. The only suggestion is to start a case with support and provide me the case# to monitor it.

Thanks