UFB slow on cisco router

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › UFB slow on cisco router

w1000n

6 posts

Wannabe Geek

#242298 20-Oct-2018 16:51

Hello everyone,

Today I've got fiber installed. It's a 1Gbps ufb from skinny.

With the router they provided, I do get the expected bandwidth values (around 900mbps down, 400mbps up).

I tried configuring my Cisco c867VAE router to work with the UFB connection. it does work, but is way slower. If I connect the WAN port to the ONT, I get about 160Mbps down/up. When I use the skinny router + put the cisco behind it, I achieve 200mbps down/up.

I suspect it could be something related to the MTU, but I am not sure. I may have another setting that make my router slow, but just can't figure out what.

I have a vlan1 I use myself on gigabitethernet0, when I route through gigabitethernet2 (WAN port), I can't get anything near the gigabit speed I can get with the supplied huawei router.

I really can't believe this router cannot be as fast as an ISP hardware.

My config looks like this: (Configuration removed)

I can see the interface are gigabit speed:

RT-c867VAE-K9#show interfaces gigabitEthernet 2
GigabitEthernet2 is up, line protocol is up
Hardware is Gigabit Ethernet, address is 28c7.ceae.eef5 (bia 28c7.ceae.eef5)
Internet address is 192.168.1.2/24
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 1Gbps, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/150/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 2644000 bits/sec, 246 packets/sec
5 minute output rate 498000 bits/sec, 127 packets/sec
9855393 packets input, 1759012491 bytes, 0 no buffer
Received 14139 broadcasts (91 IP multicasts)
0 runts, 221601 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
7433513 packets output, 1418095595 bytes, 0 underruns
0 output errors, 0 collisions, 4 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
3 lost carrier, 0 no carrier, 143532 pause output
0 output buffer failures, 0 output buffers swapped out
RT-c867VAE-K9#

gehenna

8510 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#2111469 20-Oct-2018 17:06

That's a heck of a wall of text, and you may have said this on there somewhere already, but have you got a rate limit setting in there somewhere like the Fritzbox! does? If so, change it to 999,999 down and 499,999 up.

gehenna

8510 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#2111470 20-Oct-2018 17:07

You've also posted your shared key. Maybe don't?

danfaulknor

939 posts

Ultimate Geek

Trusted

Prodigi

#2111471 20-Oct-2018 17:08

Sounds like you're getting about the right throughput for that router, especially with NAT. You're getting better performance when you run the Cisco behind the Huawei as you've taken PPPoE out of the equation.

The Huawei has been built to run gigabit speeds

You're also missing an inbound access list on your WAN interface

they/them

Prodigi - Optimised IT Solutions
WebOps/DevOps, Managed IT, Hosting and Internet/WAN.

gajan

287 posts

Ultimate Geek

Trusted

Spark NZ

Lifetime subscriber

#2111473 20-Oct-2018 17:20

Check your "show proc cpu" when you're doing your speed tests - you'll see it sitting at 100%. Suggest something like a edgerouter if your not satisfied with the ISP supplied device.

My comments and remarks are not necessarily of my employer.

michaelmurfy

meow
13256 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2111475 20-Oct-2018 17:20

I've removed the configuration from your post as it contains secret keys + passwords.

The Cisco can't route Gigabit (it is rated at around 190Mbit for throughput). Just honestly use the HG659.

Since you're also on Skinny they require use of the HG659 for any support anyway.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

w1000n

6 posts

Wannabe Geek

#2111537 20-Oct-2018 17:50

michaelmurfy:

I've removed the configuration from your post as it contains secret keys + passwords.

The Cisco can't route Gigabit (it is rated at around 190Mbit for throughput). Just honestly use the HG659.

Since you're also on Skinny they require use of the HG659 for any support anyway.

don't worry, I edited the key and password so it does not reflect the actual config. I wanted to paste everything in case something could be the problem in the config. It's a bit disapointing it is not possible to get better speed on this hardware..

w1000n

6 posts

Wannabe Geek

#2111538 20-Oct-2018 17:53

gajan:

Check your "show proc cpu" when you're doing your speed tests - you'll see it sitting at 100%. Suggest something like a edgerouter if your not satisfied with the ISP supplied device.

Looks like you're right about the cpu contention. I thought this router would have better hardware acceleration. I will keep my current setup, directly plugged into the ISP router for better download speed and the rest behind the cisco router to have a streamlined wifi.

RT-c867VAE-K9#show proc cpu
CPU utilization for five seconds: 96%/95%; one minute: 12%; five minutes: 4%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
1 72 94 765 0.00% 0.00% 0.00% 0 Chunk Manager
2 3680 5127 717 0.00% 0.02% 0.01% 0 Load Meter
3 276 141 1957 0.15% 0.04% 0.01% 0 Exec
4 0 1 0 0.00% 0.00% 0.00% 0 EDDRI_MAIN
5 0 1 0 0.00% 0.00% 0.00% 0 RO Notify Timers
6 100336 5381 18646 0.00% 0.24% 0.23% 0 Check heaps
7 3016 421833 7 0.00% 0.05% 0.05% 0 Pool Manager
8 0 1 0 0.00% 0.00% 0.00% 0 DiscardQ Backgro
9 0 2 0 0.00% 0.00% 0.00% 0 Timers
10 12 537 22 0.00% 0.00% 0.00% 0 WATCH_AFS
11 0 1 0 0.00% 0.00% 0.00% 0 Crash writer
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
12 0 1 0 0.00% 0.00% 0.00% 0 Exception contro

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

RunningMan

8956 posts

Uber Geek

#2111578 20-Oct-2018 19:43

That's been EOL since about 2011 - it's just too old and can't keep up

w1000n

6 posts

Wannabe Geek

#2111640 20-Oct-2018 21:04

No, the c867vae is the current product in this line. Anyway the 860 series is the entry level and made to route about 200mbps. I am better off getting an edgerouter 6p as it seems that one would route gigabit and have enought ports too.

On another note, I read on lots of post here that skinny was using gc-nat. I am glad it’s actually not gc nat, although it’s not possible to have a static ip.

michaelmurfy

meow
13256 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2111659 20-Oct-2018 22:19

Save your money and just go with the Edgerouter X for a start. It can route Gigabit with HW-NAT enabled.

Or if you've already got UniFi access points then consider a USG-3 along with an UniFi switch to complete your setup. If you need extra ports then Gigabit switches are incredibly cheap.

Just remember - whilst you can use a third party router with Skinny the reason costs are kept low is because they only provide support if you're using the HG659. Keep it around in-case you have any problems so you can switch back if required.

w1000n

6 posts

Wannabe Geek

#2112048 21-Oct-2018 20:16

I ended up getting the edgerouter 4 with an gs108pe. Everything works, although I had some trouble blocking traffic from guest network into the internal one, but all is good now.

Crowdie

228 posts

Master Geek

#2112196 22-Oct-2018 14:17

w1000n: No, the c867vae is the current product in this line.

The C867VAE series of of Integrated Sevice Routers (ISRs) are EOL. The last ordering day was the 26th of October 2017 with the last shipping day being the 24th of January 2018. The important date is the last day that Cisco Engineering will develop code for the C867VAE series and that is the 26th of October 2018.

w1000n

6 posts

Wannabe Geek

#2112199 22-Oct-2018 14:33

Crowdie:
w1000n: No, the c867vae is the current product in this line.

The C867VAE series of of Integrated Sevice Routers (ISRs) are EOL. The last ordering day was the 26th of October 2017 with the last shipping day being the 24th of January 2018. The important date is the last day that Cisco Engineering will develop code for the C867VAE series and that is the 26th of October 2018.

I think you are mixing up different model number.
This is the product the c867vae is replacing : https://www.cisco.com/c/en/us/products/collateral/routers/800-series-routers/eos-eol-notice-c51-738681.html

Unless there is an eol page for the c867vae, I really don’t think it is EOL.

noroad

951 posts

Ultimate Geek

Trusted

#2112299 22-Oct-2018 17:35

Its a simple rule, all the edge Cisco's are not able to sustain gig speeds, you need to spend $k's on a Cisco if you expect that performance. I know it sounds odd that the expensive business router sucks when it comes to the thing you would think you are spending your money on, but that's the way it is.

cyril7

9058 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2112330 22-Oct-2018 17:48

Hi I work for a "Cisco" shop, but honestly this lower end stuff is over hyped, get an edge router.

https://youtu.be/5aRDVVXMFzE

.

Cyril