This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM9 - AG120 - Slow Speed Time Warner Business Class

I'm at my wits end. My problem:- I have 2 customer - both with High Speed business class cable. One is Comcast Business Class with 100mb dn/ 10mb up, and one it Time Warner Business Class with 35mb dn/ 5mb up. Both have ASG120 installed running UTM9 and both have the exact same problem - bandwidth averages 5mb dn/ 3mb up.

Here is my setup. No IPS, No Web filtering - Straight no fuss internet. If you plug a machine directly into the modem, you get the prescribed speeds. I plugged in a Cisco SA520 - correct speeds. Plugged in a cheap Cradlepoint router - correct speeds. I even messed with the hardware to see if there was an issue with port speeds and duplexing.

I called sophos support - all the guy could say is "looks like their modem does not like our firewall" - Seriously?

Any suggestions on how to fix this will be greatly appreciated.

This thread was automatically locked due to age.

0 trollvottel over 12 years ago

Hi. Can you please tell us how you are measuring this (which tool etc.)? Please check the MTU setting for the interface connected to the modem. Please check if QoS somehow limits bandwidth (make sure it's disabled for the interfaces used during your test). Please check if 'TCP window scaling' is enabled at 'Network Protection >> Firewall >> Advanced'.

Please also tell us your exact revision of the hardware. According to our plain UDP firewall throughput performance tests, ASG120 rev.4 almost reaches line speed (~930 MBit/s).
Cancel
Vote Up 0 Vote Down

Cancel
0 cfrtech1 over 12 years ago in reply to trollvottel

I am using Speedtest.net and speakeasy.net/speedtest. The MTU is @ 1500. On QOS I had the upload @ 5120 and the download @ 35840. I put those numbers in after the poor tests to see if it would help which it did not. I have now disabled that with no change in results. TCP Window Scaling is enabled - this the tech I called @ Sophos was able to verify with me and was all he was able to offer.

I will add this - in my frustration, i used the smart installer to take it back to 8.305. The performance was much better, but varied greatly. I would get ~28mb dn and 4mb up. Some times the dn would get down to about 7mb, but the up never went much below 4. I took it back up to V9 and had the same lousy performance.

ASG120 rev.4 9.002-12
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 12 years ago

Hi cfrtech1, and welcome to the User BB!

Try changing the Ethernet cable.  Try an MTU of 1350 to see if that makes a difference.  If not, set it back and try various fixed speeds with half- and full-duplex.

You're new to this device, so I wonder if you don't have a DNS configuration issue.  Check out DNS Best Practice.

Those online speed tests have limited validity in that they are single-threaded.  The overhead added by IPS, URL Filtering and Anti-Virus scanning is measured sequentially and in small chunks - this misrepresents the actual throughput experienced by the users.  It's possible that you have a real problem and that one of the above ideas will help, but it's also possible that there is no problem.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 cfrtech1 over 12 years ago in reply to BAlfson

Hi - thanks for Jumping in.

I have changed the ethernet cable - no change. I did try an MTU of 1400 which made it worse, but not 1350 - happy to try that. I have messed with the duplexing and speeds. Definitely is a no go with half duplex at any setting - otherwise the speeds don't affect anything. I even went as far as placing a 10/100 switch in-between the modem and the ASG.

I am not that new to the ASG line - certified (although that may mean nothing). I have a 220 in my Datacenter with a 100mb unmetered link which I have not been able to get more than 35MB through. I have an ASG 120 with one client connected to a 10mb fiber link which is functioning within spec with everything turned on - 8mb dn/ 9mb up. I have an ASG120 connected to an AirBand 9mb link which is giving me 8mb/8mb. I have an ASG110 at home with basic broadband cable which gets 15mb/ 2mb.
Cancel
Vote Up 0 Vote Down

Cancel
0 ChristopherRuh over 12 years ago in reply to cfrtech1

Enable Shell Access.  SSH into the ASG.  Run ifconfig -a.

eth0      Link encap:Ethernet  HWaddr
          inet addr:  Bcast:   Mask:255.255.240.0
          UP BROADCAST RUNNING MULTICAST  MTU:1492  Metric:1
          RX packets:46727814 errors:0 dropped:0 overruns:0 frame:0
          TX packets:28035637 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:57153352395 (54505.6 Mb)  TX bytes:17835344925 (17009.1 Mb)
          Interrupt:16 Memory:feae0000-feb00000

Above is a healthy output for my external 40Mbps down cable connection.  I run a dual-core Atom (D510) powered Mini-ITX Supermicro board with 4gb of RAM and 6 x Gigabit Intel NICs.  IPS and Web Filtering enabled.  Still get 40mbps down.  I can also saturate my 4G LTE backup bandwidth at the same time (Usually 12-15mbps down on a clear day). Bolded text is error count.  Need you to check both your external and internal NICs for any errors.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 12 years ago

Definitely time to get Support involved!

Did you check the DNS?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 cfrtech1 over 12 years ago

Ruhllatio - thanks. Running an actual ASG appliance.

Here is mine:

eth1      Link encap:Ethernet  HWaddr xx:xx:xx:xx:xx:xx
          inet addr:***.***.***.***  Bcast:***.***.***.***  Mask:255.255.255.248
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1221929 errors:0 dropped:0 overruns:0 frame:0
          TX packets:106815 errors:159 dropped:0 overruns:0 carrier:159
          collisions:17020 txqueuelen:1000
          RX bytes:217775545 (207.6 Mb)  TX bytes:21455957 (20.4 Mb)
          Interrupt:18 Memory:feae0000-feb00000
Cancel
Vote Up 0 Vote Down

Cancel
0 cfrtech1 over 12 years ago

BAfson - DNS is correct.

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 ChristopherRuh over 12 years ago in reply to cfrtech1

Ruhllatio - thanks. Running an actual ASG appliance.

Here is mine:

eth1      Link encap:Ethernet  HWaddr xx:xx:xx:xx:xx:xx
          inet addr:***.***.***.***  Bcast:***.***.***.***  Mask:255.255.255.248
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1221929 errors:0 dropped:0 overruns:0 frame:0
          TX packets:106815 errors:159 dropped:0 overruns:0 carrier:159
          collisions:17020 txqueuelen:1000
          RX bytes:217775545 (207.6 Mb)  TX bytes:21455957 (20.4 Mb)
          Interrupt:18 Memory:feae0000-feb00000

cfrtech1,

collisions:17020 is bad.  Is this number incrementing?  Also, please run the output on the Internal interface as well.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 12 years ago in reply to ChristopherRuh

cfrtech1,

collisions:17020 is bad. Is this number incrementing? Also, please run the output on the Internal interface as well.

This... when I see speed problems like this, it's due to speed and duplex mismatch. Try having the Modem set to a particular speed and duplex, and set the ASG to match. If you can't have them set the modem, try 100 Full and 100 Half duplex and see which one runs without interface errors.
Cancel
Vote Up 0 Vote Down

Cancel