Cisco Gigabit 3504 Performance

I have a Cisco Gigabit 3504 to which all the uplinks of my switches are connected.The bandwidth utilization when monitored is 0.7% and the users report slow performance despite connected directly to the switches.CDP,SNMP etc are disabled and the switch is running on minimal configuration.What are the steps to follow and how can i increase the performance so that the bandwidth of the gigabit is utilized and the increase Network Performance.

You should implement etherchanneling (bundling multiple links for bandwidth aggregation).
Disabling CDP and SNMP won't augment your performance.
Can we see the switch configs ?

Similar Messages

Cisco nam 2204 performance evaluation

Hi,
We are planning export 500 Netflow of ISR G2 to a NAM2204-RJ45 appliance.
But I Cannot find information about NAM2204-RJ45 Netflow Data Export performance.
Can someone share user experience?

The 2204 is an appliance with 4 gigabit ports where the ISR is a module with two ports.
2204 data sheet:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps5740/ps5688/ps10113/data_sheet_c78-655535.html
ISR data sheet:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps5740/ps11658/data_sheet_c78-655516.html

Cisco ASA 5505 performance issues on downloads - data into the ASA from the Internet

I have having serious issues with performance on my ASA 5505s that I am testing with 9.2.3 code.
I stripped the config and removed as much stuff as I could - no VPN etc. and I am ONLY getting about 30-40Mbps downloads from sites but 95Mbps uploads???? Anyone else seeing these problems? If I remove the firewall my PC can hit 300/300Mbps to the same sites using the same switch and cable.
I installed 1Gb of mem on the ASA 5505 but it made no difference. The ASA has a UL IP Security license but I am only using and inside and outside address for these tests, no other ports configured.
Is anyone else seeing this performance problem with the 9.2.3 code? I went to this from 8.2.5 to try to resolve QOS failure bugs that I found in the 8.2.5 code. I did not expect to have a performance hit though and it is only on downloads TO the ASA from the Internet from all speed test sites that I try. Uploading speeds seem fine. No access-lists on my interfaces either...barebones config.
My FIOS and switch interfaces are fine...no errors on any interfaces and the same switch interface hits 300/300Mbps when my laptop is directly attached.
Anyone have a barebones config on their ASA 5505 that flies...I will try it on mine and see if some command somewhere (hidden) is causing the issue. I even cleared the config and started with a clean slate just in case I was missing some command from the older configs that may have impacted performance.

After changing the switch with a high end switch my performance increased but I am still not happy with the throughput out of my ASA. I have about 50+ ASAs 5505s and a dozen 5510s. Most remote sites have 5505s. All my sites right now have 8.2.5-51 and I wanted to put 9.2.3 out there to solve issues I have uncovered on the 8.2.5 code with regards to QOS issues.
I get much better results using the Cisco 3750X attached to the FIOS (right around 300/300 with my laptop directly attached to the 3750x bypassing the ASA - my FIOS circuit rating is also 300/300). Going through the ASA to the same test site I get download speeds of 35 to 75. Changes randomly which really bothers me. My uploads speeds are ALWAYS faster then my download speeds. Example - best download I would ever get is 75Mb and my upload would usually hit 95Mb during the same test period.
I may have to live with it but the inconsistency is what really bothers me.
Here is the config I am currently using. Nothing going on during testing since only a single PC is attached. VPN tunnel to the main site can be up or down...doesn't seem to make any difference. PC does to site directly from outside interface of ASA...split tunneling. Even when I removed tunnels and tested with just the ASA as a firewall to the Internet I was still seeing the same inconsistencies.
Anything obviously missing - new command or anything? Xlates causing issues?

Cisco 888 VPN performance

Hi all,
Cisco 888 have 4-port 10/100-Mbps managed switch and supports many types of VPN.
But I cann't find VPN performance in Mbps in Cisco documentation.
How much is that for AES256+SHA-1 ?
Thanks

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
See my attachment in my response to your other posting.

Cisco ASR 1002- performance issue due to access list

Hi,
We are planning to implement inbound access-list to block subnets from particular country. Since the subnets are not contiguous, we have about 16000 lines of acl entries.
I want to know, would there be any performance or latency issues after applying 16k lines of acl?
Is there a good document where I can read more about ACL limitations and performance issues on ASR.
This is for ASR1002, running IOS-XE 15.3(1)S1.
Thanks

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Sorry, I don't know the answer to your questions, but I'm writing to mention a 7200 feature, that if supported on the ASR, might help in your situation. See http://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html#turbo

Cisco 2900 WAN performance

We want to buy a new router and I'm searching for the best option.
For Cisco routers I have found the 2900s series interesting but I was astounished to see that the WAN performance is only up to 75 Mbps
"They deliver virtualized applications and highly secure collaboration through the widest array of WAN connectivity at high performance that offers concurrent services at up to 75 Mbp"
http://www.cisco.com/en/US/products/ps10537/index.html
Does that mean that if we are connected to a symmetrical 100 Mbit Internet connection the router would only support up to 75 Mbit? Is it for every seperate connection or all connections. How is the (theoretical) performance if you have only one connection (e.g. an FTP upload)?
If I need more would I have to upgrade to the 3900s series?
Greetings and thanks
nc

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
The reason for ISR "low" performance, they (and their predecessors) were really designed for being feature rich while working with "low speed" serial WAN links. Traditionally, 75 Mbps would be a rather fast WAN link.
Today WANs, running at LAN like speeds, often are LAN like media hand-offs, i.e. Ethernet. Cisco does have a line of MetroEthernet L3 switches, feature poor compared to ISRs, but they offer LAN forwarding performance.
In any case, the "fastest" 2900, the 2951, is Cisco recommended for up to 75 Mbps WAN bandwidth. As you note, this allows for "concurrent services". ISR performance depends very much on average packet sizes and how the router has been configured. At the other extreme, the 2951 is documented as being able to push 5 Gbps, with no services and with maximum size packets. Cisco recommendations are conservative, which means a 2900 series might be perfectly fine on your 100 Mbps link, or might not too. Much would depend on you configuration and what your traffic is like.
Cisco recommends the 3925 for up to 100 Mbps of WAN bandwidth.
I've attached a Cisco whitepaper, which provides much more information about ISR performance.

Cisco 871W Wireless Performance

I have a newly configured 871W router that is giving me terrible performance via wifi. Via ethernet I am getting normal 100Mbit speeds. The router is configured for 54Mbit/sec, my computer thinks it is connected at 54Mbit/sec (see attached photo).
iperf client & server output:
client:~ jsimon$ iperf -c 10.0.20.100
Client connecting to 10.0.20.100, TCP port 5001
TCP window size: 129 KByte (default)
[ 4] local 10.0.30.207 port 55307 connected with 10.0.20.100 port 5001
[ ID] Interval       Transfer     Bandwidth
[ 4] 0.0-10.0 sec 20.5 MBytes 17.2 Mbits/sec
jsimon@server:~$ iperf --server
Server listening on TCP port 5001
TCP window size: 85.3 KByte (default)
[ 4] local 10.0.20.100 port 5001 connected with 10.0.30.207 port 55307
[ ID] Interval       Transfer     Bandwidth
[ 4] 0.0-10.3 sec 20.5 MBytes 16.8 Mbits/sec
See my running config:
wifi871a#show run
Building configuration...
Current configuration : 5145 bytes
version 12.4
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
hostname wifi871a
boot-start-marker
boot-end-marker
logging message-counter syslog
logging buffered 51200 warnings
enable secret 5 $1$NJNA$p4/81Kkji2yMuC8UE21td1
no aaa new-model
crypto pki trustpoint TP-self-signed-2242084313
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2242084313
revocation-check none
rsakeypair TP-self-signed-2242084313
crypto pki trustpoint TP-self-signed-2631278149
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2631278149
revocation-check none
rsakeypair TP-self-signed-2631278149
crypto pki certificate chain TP-self-signed-2631278149
dot11 syslog
dot11 ssid 10fir
vlan 30
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 xxxxxxxxxxxxxx
ip source-route
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 10.0.30.1 10.0.30.199
ip dhcp pool sdm-pool
   import all
   network 10.10.10.0 255.255.255.248
   default-router 10.10.10.1
   lease 0 2
ip dhcp pool Users
   import all
   network 10.0.30.0 255.255.255.0
   default-router 10.0.30.1
   domain-name 10fir.com
   dns-server 4.2.2.2
   lease 0 3
ip cef
ip domain name 10fir.com
ip name-server 8.8.8.8
ip name-server 4.2.2.2
no ipv6 cef
multilink bundle-name authenticated
archive
log config
hidekeys
bridge irb
interface FastEthernet0
switchport access vlan 30
spanning-tree portfast
interface FastEthernet1
switchport access vlan 30
interface FastEthernet2
switchport access vlan 30
spanning-tree portfast
Interface FastEthernet3
switchport access vlan 30
spanning-tree portfast
interface FastEthernet4
ip address 10.0.20.20 255.255.255.0
duplex auto
speed auto
interface Dot11Radio0
no ip address
no dot11 extension aironet
encryption mode ciphers aes-ccm
encryption vlan 30 mode ciphers aes-ccm
broadcast-key change 3600
ssid SSID
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root access-point
no cdp enable
interface Dot11Radio0.30
encapsulation dot1Q 30
no cdp enable
bridge-group 30
bridge-group 30 subscriber-loop-control
bridge-group 30 spanning-disabled
bridge-group 30 block-unknown-source
no bridge-group 30 source-learning
no bridge-group 30 unicast-flooding
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
no ip address
ip tcp adjust-mss 1452
shutdown
interface Vlan30
description Users Network
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
bridge-group 30
bridge-group 30 spanning-disabled
interface BVI30
description Wifi Bridge
ip address 10.0.30.1 255.255.255.0
ip virtual-reassembly
router eigrp 10
network 10.0.0.0
no auto-summary
ip default-gateway 10.0.20.1
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 10.0.20.1
no ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
ip dns server
control-plane
bridge 30 route ip
line con 0
privilege level 15
login local
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
scheduler max-task-time 5000
end

Also if I setup another router on the same frequencies I get perfect performance.
Another 871W or something else.
If it's another router model, I think you need to look at this. I have a strange feeling you're hitting the limit of the hardware. Not the wireless capabilities, but the router itself.

Cisco WAE boxes performance

Is there any difference in the performance optimization done by WAE512 and WAE612 devices or is that 612 does the same factor of WAN optimization for various protocols with more connections

The differences is basically processing power, disks and memory. However, the actual optimization would be roughly the same for similar traffic. The 612 uses the same software and compression technology as the 512.
So in WAAS 4.1.x, with all the AO enabled: the 512 (depending on memory options) can handle maximum optimized tcp connections from 600 - 1200. The 612 (again, depending on memory) supports 1600-4800 connections.
Obviously the 612 has more horsepower and can be used in larger offices and for larger WAN links.
Hope that helps,
Dan

Cisco Gigabit Ethernet SX Mini-GBIC SFP transceiver

This Cisco Reference : Cisco MGBSX1
Any type connector can Support ???
And how can i change the connector type from LC to SC ???

Ho Yousovich, all the SB GBIC is LC.
http://www.cisco.com/c/en/us/support/docs/interfaces-modules/cwdm-gbic-sfp/109766-minigbic-module.html

CISCO Gigabit switch / Java UDP datagram

Hi,
1. I experience flooding of UDP packets and machine freeze when put rate is high. Using java MulticastSocket and Datagrams.
2. Tested with 2 machines to be in same multicast group, observerd that packets go to all other machines also which are not in multicast group.
Enabled IGMP snooping on CISCO switch but same problem. Looks like IGMP forwarding table is not correct.
Any help?
Thanks

1. I experience flooding of UDP packets and machine freeze when put rate is high. Using java MulticastSocket and Datagrams. Freeze at the sender or the receiver?
2. Tested with 2 machines to be in same multicast group, observerd that packets go to all other machines also which are not in multicast group.That's correct. Multicasts will go to all hosts behind a given router. What they won't do is go through the router, unless the router thinks there's a member on the other side.

Gigabit ethernet performance

I am connecting my 2013 MBA to a 27in Thunderbolt monitor. From the monitor the I connect to a gigabit ethernet network.
I am transferrring large files to a NAS. The maximum GE network throughput I can archieve is about 52MB/sec.
I disconnect the network cable from the monitor and connect the same cable to a Dell laptop runnning WIndows 8.
I transfer the the same huge file. Windows monitor show network throughput of 106MB/sec
How can I tune the MBA network setting to archive similar throughout as a Windows Laptop?

journaling is not an issue on these throughput numbers, since there is no disk involved in these tests. I am dumping /dev/zero into netcat to send and sending the traffic to /dev/null on the receiving end, so this is truly a measure of raw network throughput....

Cisco ASA System performance log messages

Hi!!
What are the log messages for CPU usage, memory usage, free memory and what basis we are getting the system resources graphs
Please help me out.
Regards,
Shalendra

Hi,
I think these would help you:-
%ASA-2-321005: System CPU utilization reached utilization %
%ASA-2-321006: System memory usage reached utilization %
Make sure you check the description as there is a threshold only above which it sends this syslog.
http://www.cisco.com/c/en/us/td/docs/security/asa/syslog-guide/syslogs/logmsgs1.html#pgfId-4771499
Thanks and Regards,
Vibhor Amrodia

Cisco Network registrar performance test.

We are trying to install CNR Tools and got the following error, is there any installation guide to troubleshooting the issue :
Initializing suite.... ok
Checking build number... Sandbox
Checking Java version... 1.6.0_21 ok
Checking for license... ok
Not licensed, for evaluation only
Loading programs.Tool [Central Server] missing from ToolsRegistry, skipping
Tool [MAC Address Generator] missing from ToolsRegistry, skipping
error
No licensed tools were found, can not proceed.
Press any key to continue . . .
y este es el output para cnrtools-cli
Initializing suite.... ok
Checking build number... Sandbox
Checking Java version... 1.6.0_21 ok
Checking for license... ok
Not licensed, for evaluation only
Loading programs.Tool [Central Server] missing from ToolsRegistry, skipping
Tool [MAC Address Generator] missing from ToolsRegistry, skipping
error
No licensed tools were found, can not proceed.
Press any key to continue . . .

Not a CNR expert, but was just checking and it seems the Optin 43 is the id (option number).
You can try to configure it via nrcmd (CLI).
nrcmd> scope-policy Wireless_AP_1 setvendoroption 43 apc1550 "(241 10.14.1.1,10.14.1.12)"
Which matches the nrcmd command:
scope-policy setVendorOption
So, 43 is the id (option number), apc1550 is the opt-set-name and is the string. It accepts it with or without the parentheses.
In the Web UI you select the vendor option set (in above nrcmd this is apc1550) from the pull-down list under “DHCPv4 Vendor Options”, click on Select, the select the option name/number (43), and then you must enter the remainder:
In the “Value” field which in this case uses the following syntax:
apc1550 241 10.14.1.1,10.14.1.12
or
(apc1550 241 10.14.1.1,10.14.1.12)
So the syntax depends on where it is entered (nrcmd vs web ui).
There may also be subtle differences in some CNR versions.
-Thanks
Vinod
**Encourage Contributors. RATE them.**

How do I maximize LAN speeds using Gigabit Ethernet, jumbo frames?

I move a lot of large files (RAW photos, music and video) around my internal network, and I'm trying to squeeze out the fastest transfer speeds possible. My question has to do both with decisions about hardware and what settings to use once it's all hooked up.
This is what I have so far:
-- imac 3.06GHz, macbook pro 2.53GHz
-- Cisco gigabit smart switch capable of jumbo frames
-- Buffalo Terastation Duo NAS (network attached storage), also capable of Gbit and jumbo frames
-- All wired up with either cat6 or cat53e.
-- The sizes of the files I'm moving would include large #s of files at either 15MB (photos), 7MB (music), 1-2GB (video) and 650MB (also video).
-- jumbo frames have been enabled in the settings of the macs, the switch and the buffalo HD.
-- I've played with various settings of simultaneous connections (more of a help with smaller files), no real difference
-- Network utility shows the ethernet set to Gbit, with no errors or collisions.
-- have tried both ftp and the finder's drap and drop
-- also, whenever I'm doing a major move of data, I kick my family off the network, so there is no other traffic that should be interfering.
Even with all that, I'm still lucky to get transfer speeds at 15-20mbps, but more commonly at around 10. The other odd thing I've encountered while trying to up my speeds, is that I might start out a transfer at maybe 60mbps, it will maintain that for about 30-60sec and then it appears to ramp itself down, sometimes to as low as 1-5mbps. I'm starting to think my network is mocking me
I also have a dual band (2.4/5) wireless n router (not jumbo frame capable), but I'm assuming wired is going to trump wireless? (NOTE: in my tests, I have disabled wireless to force the connection through the ethernet).
Can anyone help with suggestions, and/or suggest a strong networking reference book with emphasis on mac? I'm willing to invest in additional equipment within reason.
Thanks in advance!
juliana

I'm going to pick and choose to answer just a few of the items you have listed. Hopefully others will address other items.
• This setup was getting me speeds as high as 10-15MB/sec, and as low as 5-6MB/sec when I was transferring video files around 1-2 GB in size
I would think a single large file would get the best sustained transfer rates, as you have less create new file overhead on the destination device. It is disturbing that the large files transfer at a slower rate.
• Would a RAID0 config get me faster write speeds than RAID1? I have another NAS that can do other RAID configs, which is fastest as far as write times?
RAID0 (Striped) is generally faster, as the I/O is spread across 2 disks.
RAID1 is mirrored, so you can not free the buffer until the same data is on BOTH disks. The disks are NOT going to be in rotational sync, so at least one of the disks will have to wait longer for the write sectors to move under the write heads.
But RAID1 gives you redundency. RAID0 has not redundency. And you can NOT switch back and forth between the 2 without reformatting your disks, so if you choose RAID0, you do not get redundency unless you provide your own via a backup device for your NAS.
• what is the most efficient transfer protocol? ftp? smb? something else? And am I better off invoking the protocol from the terminal, or is the overhead of an app-based client negligible?
Test the different transfers using a large file (100's of MB or a GB sized file would be good as a test file).
I've had good file transfers with AFP file sharing, but not knowing anything about your NAS, I do not know if it supports AFP, and if it does, whether it is a good implementation.
If your NAS supports ssh, then I would try scp instead of ftp. scp is like using cp only it works over the network.
If your NAS support rsync, that would be even better, as it has the ability to just copy files that are either NOT on the destination or update files which have changed, but leave the matching files alone.
This would help in situations where you cannot copy everything all at once.
But no matter what you choose, you should measure your performance so you choose something that is good enough.
• If a client is fine, does anyone have a suggestion as to best one for speed? Doesn't have to be free -- I don't mind supporting good software.
Again just test what you have.
• Whats a good number to allow for simultaneous connections, given the number of files and their size?
If the bottleneck is the NAS, then adding more I/O that will force the disk heads to move away from the current file being written will just slow things down.
But try 2 connections and measure your performance. If it gets better, then maybe the NAS is not the bottleneck.
• What question am I not asking?
You should try using another system as a test destination device in the network setup to see if it gets better, worse, or the same throughput as the NAS. You need to see about changing things in your setup to isolate where the problem might be.
Also do not rule out bad ethernet cables, so switch them out as well. For example, there was a time I tried to use Gigabit ethernet, but could only get 100BaseT. I even purchased a new gigabit switch, thinking the 1st was just not up to the task. It turned out I had a cheap ethernet cable that only had 4 wires instead of 8 and was not capable of gigabit speeds. An ethernet cable that has a broken wire or connector could exhibit similar performance issues.
So change anything and everything in your setup, one item at a time and use the same test so you have a pear to pear comparision.

Stacking with Cisco Blade Switches

Hi,
We have a HP p-class Blade System with two Cisco Gigabit Ethernet Switch Modules (Cisco IOS Release 12.2(25)SE) for every enclosure. My question is how I can stack the two blade switches (in the same enclosure) so that every HP blade server to be connected with the two switches in the active/standby state? In other words, can and how I make a port-channel which includes ports from the two switches?
Unfortunately I couldn't found any documentation for the purpose.

Hi,
With the CGESM switches you have you cannot use 802.3ad teaming against the two blade switches. This is possible with the Cisco 3120 blade switches for HP c-class.
Now, in your case, you can use standard Active/Standby NIC teaming, where the active NIC of each server connects to one switch and the standby NIC connects to the other switch. Should a blade switch completely fail, all of the servers with their active NIC connected to the failed switch should see the link go down and switch over to the standby NIC on the second switch. This should work very well.
One problem that can happen however is that the blade switch itself does not completely fail. Instead maybe the blade switch uplink fails, or the upstream switch it is connected to fails. In this situation the server NIC does not experience a failure and continues to send traffic to the blade switch that does not have anywhere to send the traffic, a black hole. This is perhaps the problem you are seeing?
The fortunate thing is that Cisco has a solution to this problem called Trunk Failover with Link State Tracking. What this allows you to do is to tell the blade switch that if it experiences a failure on its uplinks that it should also bring down the links to the servers as well. This will cause the servers to see a failure on their active NIC and perform a switchover to the second blade switch.
I looked up your switch and found that your 12.2(25)SE1 code does not support this feature. You will need to upgrade to 12.2(25)SEE4 and you will be able to configure this on your switches.
Here is a link to see how this configuration works:
http://www.cisco.com/en/US/docs/switches/blades/3020/software/release/12.2_25_sef1/configuration/guide/swethchl.html#wp1346176
Hope this helps.
If so please rate my posts.
Thanks,
Brad

Cisco Gigabit 3504 Performance

Similar Messages

Maybe you are looking for