思科1721速度慢

我有几个Cisco 1721和一个WIC-4ESW。 我正在运行另一家公司的家庭路由器作为我的有线路由器,但决定把它变成一个无线网桥,并使用我的额外思科作为我的路由器。 我最近升级了我的服务计划与我的提供者从8M下降到18M下来。 在他们做了我所需要的电缆调制解调器之后,我没有注意到速度上的差异。 我的提供商在他们的networking上有一个速度testing服务器来进行testing,所以我开始testing我的速度,而在凌晨2点我仍然只能获得6-8M的速度。

  • 我把电脑直接连接到有线调制解调器上,再次运行testing,发现我几乎每次都能达到18M左右。 我把思科重新放回了6M。 试了3次。

  • 我检查了思科的所有接口,没有错误,或任何exception。 然后,我使用完全相同的电缆,使我的其他公司产品的路由器,而不是一座桥,再次运行testing… 18米,三次。

有人可以告诉我为什么我的思科正在放慢速度?

我甚至尝试从老式的NAT切换到NVI,但看起来更慢…

我也尝试改变外部接口的MAC地址,认为我的提供者可能在从DHCP获得的源地址上执行QOS。

谢谢,

肖恩

Cisco IOS Software, C1700 Software (C1700-ADVIPSERVICESK9-M), Version 12.4(25d)) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2010 by Cisco Systems, Inc. Compiled Wed 18-Aug-10 04:02 by prod_rel_team ROM: System Bootstrap, Version 12.2(7r)XM2, RELEASE SOFTWARE (fc1) router uptime is 30 minutes System returned to ROM by reload at 06:27:19 UTC Fri Aug 9 2013 System image file is "flash:c1700-advipservicesk9-mz.124-25d.bin" This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with US and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with US and local laws, return this product immediately. A summary of US laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to [email protected]. Cisco 1721 (MPC860P) processor (revision 0x500) with 118050K/13022K bytes of me. Processor board ID FOC09421G3V (436675680), with hardware revision 0000 MPC860P processor: part number 5, mask 2 1 Ethernet interface 5 FastEthernet interfaces 32K bytes of NVRAM. 32768K bytes of processor board System flash (Read/Write) Configuration register is 0x2102 ------------------------------------------------------------------------------- router#sho inventory NAME: "1721 chassis", DESCR: "1721 chassis, Hw Serial#: 436675680, Hw Revision:" PID: 1721 , VID: 0x500, SN: FOC09421G3V (436675680) NAME: "Chassis Slot", DESCR: "1700 Chassis Slot" PID: 1700 Chassis Slot , VID: , SN: NAME: "C1721 Mainboard", DESCR: "C1721 Mainboard" PID: C1721 Mainboard , VID: 0x500, SN: FOC09421G3V (436675680) NAME: "Daughter card slot:0", DESCR: "1700 DaughterCard Slot" PID: 1700 DaughterCard Slot, VID: , SN: NAME: "WAN Interface Card - 4 Port FE Switch", DESCR: "WAN Interface Card - 4 P" PID: WIC-4ESW= , VID: 1.0, SN: FOC09144DZ1 NAME: "Ethernet0", DESCR: "PQUICC Ethernet" PID: PQUICC Ethernet , VID: , SN: NAME: "FastEthernet1", DESCR: "Fast Ethernet" PID: Fast Ethernet , VID: , SN: NAME: "FastEthernet2", DESCR: "Fast Ethernet" PID: Fast Ethernet , VID: , SN: NAME: "FastEthernet3", DESCR: "Fast Ethernet" PID: Fast Ethernet , VID: , SN: NAME: "FastEthernet4", DESCR: "Fast Ethernet" PID: Fast Ethernet , VID: , SN: NAME: "Daughter card slot:1", DESCR: "1700 DaughterCard Slot" PID: 1700 DaughterCard Slot, VID: , SN: NAME: "FastEthernet0", DESCR: "PQUICC_FEC" PID: PQUICC_FEC , VID: , SN: -------------------------------------------------------------------------------- version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname router ! boot-start-marker boot-end-marker ! logging buffered 60000 debugging logging console critical enable secret 5 xxx ! aaa new-model ! aaa authentication login default local ! aaa session-id common ip cef ! ip domain name toad-host.com ip auth-proxy max-nodata-conns 3 ip admission max-nodata-conns 3 ! username xxx ! ip ssh version 2 ! interface FastEthernet0 mac-address 0004.4b16.8271 ip address dhcp ip nat outside ip virtual-reassembly speed 100 full-duplex ! interface FastEthernet1 description Inside switchport access vlan 100 ! interface FastEthernet2 shutdown ! interface FastEthernet3 shutdown ! interface FastEthernet4 shutdown ! interface Vlan1 no ip address shutdown ! interface Vlan100 ip address 192.168.1.1 255.255.255.0 ip nat inside ip virtual-reassembly ! ip forward-protocol nd ! ip dns server ! no ip http server no ip http secure-server ip nat inside source list 100 interface FastEthernet0 overload ip nat inside source static tcp 192.168.1.10 22 interface FastEthernet0 22 ! logging trap debugging logging 192.168.1.10 access-list 10 permit 192.168.1.0 0.0.0.255 log access-list 10 deny any log access-list 100 permit ip any any ! control-plane ! line con 0 logging synchronous line aux 0 line vty 0 4 access-class 10 in logging synchronous transport input ssh line vty 5 15 access-class 10 in logging synchronous transport input ssh ! ntp clock-period 17180034 ntp server 192.5.41.41 ntp server 192.5.41.40 end 

编辑:为了回应Paul Rudnitskiy

 router#sho ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route Gateway of last resort is 24.49.40.1 to network 0.0.0.0 172.16.0.0/32 is subnetted, 1 subnets S 172.16.100.4 [254/0] via 24.49.40.1, FastEthernet0 24.0.0.0/22 is subnetted, 1 subnets C 24.49.40.0 is directly connected, FastEthernet0 C 192.168.1.0/24 is directly connected, Vlan100 S* 0.0.0.0/0 [254/0] via 24.49.40.1 

在我的提供商的服务器速度testing期间

 CPU utilization for five seconds: 34%/32%; one minute: 7%; five minutes: 4% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 39 39132 700 55902 0.65% 0.10% 0.06% 0 Per-minute Jobs 163 1804 336 5369 0.40% 0.98% 0.40% 0 DNS Server Input 9 1512 4110 367 0.24% 0.58% 0.33% 0 ARP Input 162 1908 14331 133 0.16% 0.69% 0.37% 0 DNS Server 48 828 1873 442 0.16% 0.23% 0.14% 0 IP Input 151 60 53 1132 0.08% 0.01% 0.00% 0 Syslog 

速度testing结束后直接进行。

 CPU utilization for five seconds: 3%/3%; one minute: 8%; five minutes: 5% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 9 1580 4245 372 0.40% 0.51% 0.33% 0 ARP Input 48 840 1895 443 0.16% 0.19% 0.14% 0 IP Input 67 52 753 69 0.08% 0.00% 0.00% 0 IP Background 1 12 12 1000 0.00% 0.00% 0.00% 0 Chunk Manager 2 104 8376 12 0.00% 0.00% 0.00% 0 Load Meter 3 4 412 9 0.00% 0.00% 0.00% 0 Spanning Tree 4 4 1 4000 0.00% 0.00% 0.00% 0 EDDRI_MAIN 5 102004 6382 15983 0.00% 0.22% 0.23% 0 Check heaps 

根据http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf

1721的峰值吞吐能力是每秒12,000个数据包,数据包最多为1,500个字节。

这意味着在理想的完美条件下,1721最高可达17Mbps。 NAT和小包大约减半。 数据表说CEF性能是6.14Mbit / s。

1721的目的是处理T1速度的数据。

好的,我连接了两台机器:一台连接到板上的FE端口,另一台连接到WIC-4ESW上的一个端口。

  • 我禁用了主机上的所有防火墙。 两个接口之间没有NVI的NAT设置。
  • 我跑了3次iPerf,平均9.31 Mbps。
  • 我关掉了NAT,再次尝试,平均也差不多。

然后,我再次看了演出版,注意到了。

 1 Ethernet interface 5 FastEthernet interfaces 

由于FE上只有一个,而WIC-4ESW有四个,所以我想知道另一个以太网接口来自哪里。

经过一番研究,发现板载FE和WIC或者WIC之间的vlan间路由之间的路由限制为10Mbps,因为额外的以太网接口是连接到CPU的。 没有在路由器性能指南中提到,但是深入思科网站的configuration指南。

所以是的… 1721总是受限于(路由明智的)10Mbps(全双工)连接到CPU。