Cisco Firewall :: Significant Upload Bandwidth Decrease With ASA5510
Feb 25, 2013
They have an ASA-5510 with version 8.2(5). They just upgraded their Internet bandwidth to 30 Mb both ways.If we do a speed test in front of the ASA, we get 28 Mb/s upload and download, with a ping of about 5 to 10 ms.If we go behind the ASA, the download is about the same, the upload is decreased to about 12 Mb/s and the ping goes to 260 ms The license is base, there are no additionnal function added to the firewall (no IPS). I've check the speed and duplex and everything is fine.There are no drops on the interfaces or rules of the firewall, no drops on the Interface of the ISP router either. All interfaces are configured at 100Mb full duplex.I saw a couple of discussions on this in the forums, but they don't seem to come up with anything and they look like they end in the middle of the whole story, like once the problem is solved, they don't update their discussion.
View 6 Replies
ADVERTISEMENT
Mar 3, 2013
I would like to know if it is possible in dir655 ver 1.30 to limit bandwith in QoS using mac address?because in QoS Engine Name i can only see this opt. no opt for MAC, what if the user use DHCP?
View 1 Replies
View Related
Aug 1, 2011
tell me the reasons that could cause the decreasing of the bandwidth in the TP cables? just 3 or 4 (main) reasons.
View 4 Replies
View Related
Oct 18, 2011
As of right now, I don't have access to the PIX itself but can get access to it later today. In the meantime, I wanted to get everyone's opinions on a very peculiar issue I'm seeing with Internet download speeds.
Prior to last week, my company was utilizing a Sprint T1 connection for all visitor traffic. Attached to the Sprint T1 was a Cisco router -> C3524 Switch -> PIX-506E device.
Last week, a decision was made to upgrade our bandwidth for our visitor traffic and we replaced the T1 with a Comcast Business Class cable solution. The bandwidth we ordered was 22Mbit down/5Mbit up. From the cable modem that was provided, we connected it in the same manner -> C3524 Switch -> PIX-506E device.
Since the change, I noticed that our visitor V LAN hasn't really had much of a change in Internet speeds. Doing some quick speed tests, it shows that our download caps at around 5Mbit but our uploads are in the 22Mbit range.Thinking Comcast messed up and accidentally flipped our download/upload speeds, I was on the phone with them for almost an hour as we investigated the issue. They finally had me connect directly to the Comcast cable modem to test on my laptop. The results are that from the cable modem, the speeds are correct (I get 22Mbit down, 5Mbit up).
I'm not really sure how to troubleshoot this or where to even begin. At first I thought maybe our PIX couldn't handle the speeds, but it's handling the upload rate just fine. All I know this has to be equipment on our side since Comcast had me test directly from the cable modem.
View 2 Replies
View Related
Mar 14, 2012
Were running an ASA5510 with multiple IPSEC VPN clients over a 100Mb leased line. At the moment we have about 10 active clients however we are looking at gearing up to about 100 clients.Question is, is there a known method for calculating the required bandwidth for this number of clients or indeed obtaining metrics from already connected clients with this calculation. We have tried a few monitoring products, most notably Solar winds, however none of the products we have tried seems to be able to give us the throughput of the individual VPN connections to assist with our calcs....
View 1 Replies
View Related
Nov 3, 2012
How to allocate bandwidth for a certain host or service in Cisco ASA 5510 Firewall using ASDM? For instance, I would like to dedicate 2MB for H323 service (Video Conference Call).
View 1 Replies
View Related
Nov 17, 2011
Is there any significance to the parameter "firewall-group" in the command
firewall vlan-group <firewall-group> <vlan-id>…<vlan-id>?
In other words is the series of commands
firewall switch 1 module 3 vlan-group 1,2
firewall vlan-group 1 100,101,102
firewall vlan-group 2 200,201,202
exactly equivalent to
firewall switch 1 module 3 vlan-group 3
firewall vlan-group 3 100,101,102,200,201,202
or
firewall switch 1 module 3 vlan-group 1,2,3
firewall vlan-group 1 100,200
firewall vlan-group 2 101,201
firewall vlan-group 3 102,202
All three of these options associate the same set of vlans to the FWSM but using different groupings. As far as I can tell, these groupings have no functional significance either on the switch side or the FWSM side. These are simply three different ways of specifying exactly the same thing? Am I correct?
View 2 Replies
View Related
Mar 20, 2013
I have been assigned to find out the nature of the network's bandwidth utilazation. Is there a way to analyze traffic and breakdown the traffic on the ASA5510?
View 9 Replies
View Related
Mar 18, 2011
since the AT&T is doing the cap I want to figure how much I use a month and see how much my online games use online.
View 1 Replies
View Related
Feb 6, 2012
I have a Cisco ASA5510 with two Cisco Catalyst 3560G switches plugged into it. Then I have 2 Cisco1400 Aironet WAPs plugged into the switches.
My goal is to limit incoming bandwith for two specific vlans. So users who are plugged into the switch or connected to the wifi can't go bandwidth crazy.
The rule I currently have setup on the ASA5510 is limiting internal bandwidth, I know shame on me.
So how do I setup a rule on the ASA5510 that will limit users external traffic on vlans without limit internal lan traffic?
View 5 Replies
View Related
Jun 6, 2012
ASA 5510 have two model Bun-K9 and Sec-Bun-K9 from the datasheet find out difference Port related and Redundancy. My questions is : Have any major difference for Security service between two model ?
View 3 Replies
View Related
Feb 21, 2012
I have lately been having trouble with the speed of my wireless connection. usually downloads can run at approx max 1.2MB/S i have noticed significant speed drops in my downloads - when i connect to the network it starts off at 130mpbs, but then quicky drops to 12mbps - no settings have been changed recently.
Windows XP
LinkSYS Wireless N Router E1000
Netgear Wireless Repeater
Signal Strength on Repeater is indicated as strong
Signal Strength on Laptop is indicated as Excellent
View 1 Replies
View Related
Mar 17, 2013
I currently have Nexus 5596 pair with VPC peer link Po1 between them. My goal is to connect our new Nexus 7Ks to the 5K's using Fabric Path. My question is during this inital setup with the 7K's. Can I use the same port channel number on the 7K's as I did the 5K's? Is the port channel locally significat?
View 2 Replies
View Related
Aug 4, 2012
how to decrease high ping
View 1 Replies
View Related
Nov 30, 2011
I have a pair of asa5520's in active/standby configuration. I plan on ugrading the asa/asdm images to 8.4 shortly (currently on 8.0) and would like to do this with zero downtime. Specifically, I would like to upload the new software to the standby unit, upgrade it, swap standby/active units and then upgrade what will become the standby after the swap.The problem I'm having is getting the new images uploaded onto the standby unit. I've read that the routing table is not shared from the primary and the USB ports are "for future use". I have no problem uploading the new images to the active unit via tftp...but can't do the same to the standby.
View 5 Replies
View Related
Jan 25, 2012
About a week ago i started experiencing very slow download speeds... things like streaming online videos and having to wait which i have not had to do for the last 4 years. I did a speed test on multiple sites and my download speed comes out at about .2mbps and my upload is still where it should be at .6-.8mbps. I have a 12mbps connection so this does not make sense at all. Originally thinking it was malware, I formatted both my hard drives and did a clean install of windows 7 and it did nothing to resolve the issue. Could it be that my wireless card's radio is failing?
View 8 Replies
View Related
Jul 18, 2011
Question on two ethernet cables
But I am wondering will my overall connection speed decrease if I have multiple devices on? I am just curious as to if I have both say an xbox 360 and my computer on.
View 2 Replies
View Related
Aug 23, 2012
Our internet connection is connected to an ASA. The download speed is ok but the upload is very slow. we have been running some speed test from our LAN, and have been also trying to upload/download file.
Our ASA also have the IPS module. I turned this off but we've got the same result.
I send here attach the configuration file of the ASA.
View 9 Replies
View Related
Mar 27, 2011
I'm running a couple of 5520 (with failover configuration) and fw 8.3.1. Everything worked fine until I try to upgrade firewall to new fw version: 8.4.1. [code]
When I try to upload new firrmware or asdm image, ASA, the appliance reboots during tftp session. I've already tried to upload new images on both appliance, or use CLI either ASDM, but the result is always the same: ASA reboots.
From my point of view, the problem isn't the image but could be the firmware I'm running, becouse using fw. 8.0.1 I was able to upalod asdm 8.3.1, but using fw 8.3.1 I can't upload the same image.
View 2 Replies
View Related
May 29, 2012
I am triing to migrate my old ACS to the new one. I am using ACS 5.3 on appliance CSACS-1121. Sometime, i loose the connection to the appliance and i could not connect to the appliance with SSH, i could not start the GUI and the authentication is switched to the secondary instance. As soon as I have traffic, the connection is restored.
View 3 Replies
View Related
Jan 13, 2012
Since upgrading some of computers in my LAN to Windows 7 they all experience upload issues. I have narrowed it down to CBAC inspection on my Cisco 1711 router, I am running IOS 12.3 I have a simple CBAC inspection set for TCP/UDP only without any application-specific inspects. Download works fine however upload does not seem to work atl all- unless I disable the ip inspection. It is all working fine for any Windows XP but not for Windows 7 machines. Is this a known issue, I am not sure how I can go about this - I don't want to build ACLs now for outside interface and disable stateful inspection mechanisms because CBAC has been working fine for me until recently.
View 7 Replies
View Related
Jun 11, 2012
I am able to ping from Switch to firewall inside ip and user desktop ip but unable to ping from user desktop to FW Inside ip.. config is below for both switch and FW Cisco ASA5510....
TechCore-SW#ping 172.22.15.10
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.22.15.10, timeout is 2 seconds:
[Code].....
View 7 Replies
View Related
Aug 31, 2012
I have a such setup:Code:
View 3 Replies
View Related
Apr 5, 2010
We have a WDS connection between two AP541 access points, where one AP is connected to a SA540 with cable. The AP in the other end of the WDS does just act as a repeater, broadcasting using the same SSID and channel with WPA-PSK, as the cabled AP. For the WDS channel, we have tried WPA/WEP/none encryption without any difference. Spanning tree is enabled. 802.11 mode is 'bgn'.
Sitting physically beside the remote AP (the "other" and uncabled end of WDS) with a laptop using Intel 802.11bg adapter, we get a speed in the range 5-7Mbit/sec connecting to the cabled AP (3 of 5 bars signal strength in the traybar icon on Win7). But switching to the remote AP, which is beeing feed by the WDS from the same cabled AP previously being connected to, we do just get a measured bandwidth of 1-2Mbit/sec. I understand that some throughput is lost using WDS, but this does still look like a big decrease?Any experience using WDS with AP541, who can comment on if this is expected or not, and eventually any thing we can do to increase the speed?
View 5 Replies
View Related
Jun 29, 2011
I have two ASA5510's set up in failover, and the secondary keeps crashing after doing the interface checks when bringing failover up. This only happens if I try to upgrade the image on the secondary to anything newer than 8.4.1 (I've tried with 8.4.1-11 and 8.4.2). The primary one run just fine with new images.
I don't have the exact error right now, as I need to do a screen capture from console. It's just a huge crash dump.Are there anything I might have missed during the upgrade? Should I cold-boot both the firewalls in the correct order?
View 7 Replies
View Related
Sep 10, 2012
i have a ASA5510 in the office, that already configured 3 context, namely, admin, user, server.in the server context, the last running config was not saved, and there was a power trip last friday night. 1 of the sub interface was affected, and i need to recreate that interface.I am getting the below error, it only allow me to do changes those pre-defined interface.how to I create extra sub interface?
View 3 Replies
View Related
Jul 21, 2011
I have a ASA5510 and I have a question about the speed the ports can handle, here is one port:
-interface Ethernet0/2
- speed 100
-shutdown
- no nameif
-no security-level
-no ip address
it's ethernet and not fastethernet so I figure it will only go to 10Mbps, but at the same time I can hard code the speed to 100.
View 2 Replies
View Related
Feb 22, 2012
i have cisco ASA 5510 Firewall using in my network, i have planning to upgrade the Flash memory from 256 mb to 512 mb and the RAM from 256 mb to 1GB.
View 1 Replies
View Related
Feb 11, 2013
I've had the E3000 installed for several years and a few days ago saw my download speed drop by 80%. Trouble shooting with the Cable provider ended up with connecting directly from the PC to the modem and the speed issue was corrected. I don't see any recent changes in firmware, no new programs.
View 2 Replies
View Related
Jun 30, 2011
I just upgraded my cable modem from the Motorola Sufboard 5120 to the DOCSIS 3.0 capable 6120. Provisioned it with Comcast and their "Blast" service (supposedly it caps at 16 down, 2 up).
I had, in the past, used my desktop via N-format wireless (DWA-525 N-format PCI adapter and DIR-655 N-format router) to do a speedtest.net test. I was getting 16 down and 2 up (as advertised). When I switched to the 6120, I did a speedtest.net test again to see what kind of gains, if any, I was getting. Turns out, I was getting 20+ down (nice improvement) and 1/2 Mbps up (a fourth of what I used to be getting?). Called Comcast. They "sent signals" (don't they always?) and claimed that it fixed it. My download speeds increased a smidge (about 22), but my upload speeds were still .5. Called Motorola, they had me do a few things and now I get 1 Mbps up and 27 - 30 down via wireless.
My download speeds are great. I'm content with that. If I hardwire from the cable modem directly to a ****py old laptop, a speedtest.net shows 4 Mbps up. So why do I get such a high upload speed when hardwired (4 Mbps), but a fraction of it (1/4th) when wireless? I'm not using any other devices to sap bandwidth (some are connected -- i.e. another desktop, my Droid phone, etc., but aren't actively pulling packets). And why would it go from 2 up (on my desktop via wireless in the past) to only 1 up (via wireless now) when the setup is the same across the board (as best I recall) other than upgrading my cable modem.
Since I get 4 up when hardwired straight off the cable modem, I assume my DIR-655 is slowing me down somehow. How to pick up the pace a bit? I've already tried the standard "power cycling", etc.
Oh, and the reason I go wireless -- my cable modem and wireless router are in my game room in the basement for my PS3. My desktop computer (and the wife's desktop computer) are two floors directly above it in our "office". Signal strength is "excellent" ... always has been. And again, pretty much everything is the same.
[URL]
View 12 Replies
View Related
Sep 18, 2012
I've been having this problem for quite some time, mostly since my mother bought her first Asus Laptop that came with an Asus WL-530g V2 wireless router.Problem is sometimes I get a random disconnect where Local Area Connection is identifying. On some occasions it reconnects on it's own after a few seconds, other times I have to diagnose the problem and I get a "Windows doesn't have a valid IP config" problem but it fixes that.The other problem, and I don't know if the two are related is that very often, for short/long periods of time I get a drastic reduction of internet speed. From what I can tell, it's got to be something to do with the network configuration or the actual router itself, it's very old and Asus stopped making firmware for it in '09. Useful data Basically I have a wired connection from my desktop to the wireless router.
>>>Asus WL-530g V2 Wireless router
>>>Atheros ar8151 pci-e gigabit ethernet controller (driver up to date)
>>>ISP RCS RDS
>>>DSL connection
>>>ESET nod32 Antivirus
[code]....
View 2 Replies
View Related
May 4, 2012
I have a cisco asa 5510 with security plus license in Live enviroment . I need to add a secondary firewall . I was planning to do in active /standby mode for failover .But i have a doubt , when i do "show version " on live asa output says Active /active failover , does this means that i can only configure failover in active/active mode not in active/standby (which i want to do )?
Maximum Physical Interfaces : 8
VLANs : 20, DMZ Unrestricted
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Enabled
VPN-3DES-AES : Enabled
VPN Peers : 25
WebVPN Peers : 2
Dual ISPs : Enabled
VLAN Trunk Ports : 8
AnyConnect for Mobile : Disabled
AnyConnect for Linksys phone : Disabled
Advanced Endpoint Assessment : Disabled
UC Proxy Sessions : 2
This platform has an ASA 5505 Security Plus license...
View 4 Replies
View Related
Feb 12, 2012
i am using Cisco ASA5510 Firewall in my Network in the distrubition Layer .Private Range of Network Address use in the Network and PAT at the FW for address translation.presently encountering an issue the users behind the FW in my network unable to RDP at port 2000 presented at the Client Network.Able to Telnet on port2000 but not RDP . any changes needed at the FW end to get the RDP Access.
View 12 Replies
View Related
