Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Westi on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

cisco 1841 poor internet on t1

Status
Not open for further replies.

jdfinch2

IS-IT--Management
Oct 14, 2009
5
US
i have a cisco 1841 with a t1 frame relay about 20 pcs and 4 servers on the lan, my clients sometimes have no problem loading web pages from the internet and sometimes i think dial up would be better i've been on the phone with cisco and they adjusted the mtu and the mss but still no change i'm beginning to think that the 1841 router just cant handle the load i've posted the show config, the show in, and the show buffer.

prior to contacting cisco i had turned off the url blocker that i had set up and turned off all logging. all have had not impact on increasing the router performance cpu and memory never get up past 25% and if i use the bandwidth monitor on the outside and i see it spiking to full bandwidthbut most of the time it's around 30%. does anyone have any ideas

below is the show statements

-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a privilege level of 15.

Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want to use.

For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to -----------------------------------------------------------------------


User Access Verification

Username:
Username: admin
Password:
Pro-Sat-1841#show config
Using 5775 out of 196600 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Pro-Sat-1841
!
boot-start-marker
boot-end-marker
!
no logging buffered
!
no aaa new-model
!
resource policy
!
clock timezone NewYork -5
clock summer-time NewYork date Apr 6 2003 2:00 Oct 26 2003 2:00
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
--More--  mmi snmp-timeout 180
ip subnet-zero
ip cef
!
!
ip inspect name SDM_LOW cuseeme
ip inspect name SDM_LOW dns
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW imap
ip inspect name SDM_LOW netshow
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW esmtp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW tcp
ip inspect name SDM_LOW udp
ip inspect name SDM_LOW vdolive
ip inspect name SDM_LOW pop3
--More--  ip inspect name SDM_LOW http
!
!
ip ips sdf location flash://128MB.sdf
ip ips notify SDEE
no ip ips notify log
no ip domain lookup
ip domain name yourdomain.com
ip urlfilter allow-mode on
!
!
!
crypto pki trustpoint TP-self-signed-3606283983
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3606283983
revocation-check none
rsakeypair TP-self-signed-3606283983
!
!
crypto pki certificate chain TP-self-signed-3606283983
certificate self-signed 01 nvram:IOS-Self-Sig#3301.cer
username admin privilege 15 secret 5 $1$xitX$r15R.Z8K1Ik8Y.KAymixE.
!
--More--  !
!
!
!
interface FastEthernet0/0
description $ETH-SW-LAUNCH$$INTF-INFO-FE 0$$ETH-LAN$$FW_INSIDE$$ES_LAN$
ip address 192.168.1.5 255.255.255.0
ip access-group 100 in
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1/0
no ip address
encapsulation frame-relay
frame-relay lmi-type ansi
--More--  !
interface Serial0/1/0.1 point-to-point
description $FW_OUTSIDE$
ip address 65.210.83.206 255.255.255.252
ip access-group 101 in
ip verify unicast reverse-path
ip inspect SDM_LOW out
ip nat outside
ip virtual-reassembly
frame-relay interface-dlci 500 IETF
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/1/0.1
ip route 192.168.2.0 255.255.255.0 192.168.1.47 permanent
ip route 192.168.3.0 255.255.255.0 192.168.1.45 permanent
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat pool out 63.118.10.216 63.118.10.222 netmask 255.255.255.0
ip nat inside source list 1 interface Serial0/1/0.1 overload
ip nat inside source static tcp 192.168.1.1 25 65.210.83.206 25 extendable
--More--  ip nat inside source static tcp 192.168.1.1 80 65.210.83.206 80 extendable
ip nat inside source static tcp 192.168.1.1 110 65.210.83.206 110 extendable
ip nat inside source static tcp 192.168.1.1 143 65.210.83.206 143 extendable
ip nat inside source static tcp 192.168.1.1 443 65.210.83.206 443 extendable
ip nat inside source static tcp 192.168.1.1 444 65.210.83.206 444 extendable
ip nat inside source static tcp 192.168.1.1 3389 65.210.83.206 3389 extendable
ip nat inside source static tcp 192.168.1.1 4125 65.210.83.206 4125 extendable
!
no logging trap
access-list 1 remark INSIDE_IF=FastEthernet0/0
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 100 remark auto generated by SDM firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 deny ip 65.210.83.204 0.0.0.3 any
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by SDM firewall configuration
access-list 101 remark SDM_ACL Category=1
access-list 101 permit tcp any host 65.210.83.206 eq 444
access-list 101 permit tcp any host 65.210.83.206 eq 4125
access-list 101 permit tcp any host 65.210.83.206 eq 3389
--More--  access-list 101 permit tcp any host 65.210.83.206 eq 443
access-list 101 permit tcp any host 65.210.83.206 eq www
access-list 101 permit tcp any host 65.210.83.206 eq smtp
access-list 101 deny ip 192.168.1.0 0.0.0.255 any
access-list 101 permit icmp any host 65.210.83.205 echo-reply
access-list 101 permit icmp any host 65.210.83.205 time-exceeded
access-list 101 permit icmp any host 65.210.83.205 unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip host 0.0.0.0 any
access-list 101 deny ip any any log
!
!
control-plane
!
banner login ^C
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a privilege level of 15.
--More--  
Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want to use.

For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to -----------------------------------------------------------------------
^C
!
line con 0
login local
line aux 0
line vty 0 4
privilege level 15
login local
--More--   transport input telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
!
end

Pro-Sat-1841#show int
FastEthernet0/0 is up, line protocol is up
Hardware is Gt96k FE, address is 0024.14b6.abde (bia 0024.14b6.abde)
Description: $ETH-SW-LAUNCH$$INTF-INFO-FE 0$$ETH-LAN$$FW_INSIDE$$ES_LAN$
Internet address is 192.168.1.5/24
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 7000 bits/sec, 8 packets/sec
5 minute output rate 6000 bits/sec, 7 packets/sec
3237708 packets input, 772324964 bytes
Received 207607 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
3648771 packets output, 3172176122 bytes, 0 underruns
--More--   0 output errors, 0 collisions, 4 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
FastEthernet0/1 is administratively down, line protocol is down
Hardware is Gt96k FE, address is 0024.14b6.abdf (bia 0024.14b6.abdf)
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Auto-duplex, Auto Speed, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
--More--   0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Serial0/1/0 is up, line protocol is up
Hardware is GT96K with integrated T1 CSU/DSU
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation FRAME-RELAY, loopback not set
Keepalive set (10 sec)
LMI enq sent 36551, LMI stat recvd 36550, LMI upd recvd 0, DTE LMI up
LMI enq recvd 0, LMI stat sent 0, LMI upd sent 0
LMI DLCI 0 LMI type is ANSI Annex D frame relay DTE
FR SVC disabled, LAPF state down
Broadcast queue 0/64, broadcasts sent/dropped 6095/0, interface broadcasts 0
Last input 00:00:05, output 00:00:05, output hang never
Last clearing of "show interface" counters 4d05h
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 55
Queueing strategy: weighted fair
Output queue: 0/1000/64/55 (size/max total/threshold/drops)
Conversations 0/23/256 (active/max active/max total)
--More--   Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 1158 kilobits/sec
5 minute input rate 3000 bits/sec, 6 packets/sec
5 minute output rate 6000 bits/sec, 5 packets/sec
3622947 packets input, 3445223771 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 1 giants, 0 throttles
1 input errors, 1 CRC, 0 frame, 0 overrun, 0 ignored, 1 abort
2542486 packets output, 640755424 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 output buffer failures, 0 output buffers swapped out
3 carrier transitions
DCD=up DSR=up DTR=up RTS=up CTS=up

Serial0/1/0.1 is up, line protocol is up
Hardware is GT96K with integrated T1 CSU/DSU
Description: $FW_OUTSIDE$
Internet address is 65.210.83.206/30
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation FRAME-RELAY
Last clearing of "show interface" counters never
NVI0 is up, line protocol is up
Hardware is NVI
--More--   MTU 1514 bytes, BW 10000000 Kbit, DLY 0 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation UNKNOWN, loopback not set
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
Pro-Sat-1841#show bug ffer
Buffer elements:
1117 in free list (500 max allowed)
3811486 hits, 0 misses, 1119 created

Public buffer pools:
Small buffers, 104 bytes (total 50, permanent 50, peak 584 @ 4d04h):
49 in free list (20 min, 150 max allowed)
1008523 hits, 221 misses, 534 trims, 534 created
0 failures (0 no memory)
Middle buffers, 600 bytes (total 51, permanent 25, peak 63 @ 1d01h):
17 in free list (10 min, 150 max allowed)
326415 hits, 237 misses, 574 trims, 600 created
0 failures (0 no memory)
Big buffers, 1536 bytes (total 50, permanent 50):
50 in free list (5 min, 150 max allowed)
808247 hits, 0 misses, 0 trims, 0 created
0 failures (0 no memory)
VeryBig buffers, 4520 bytes (total 10, permanent 10):
10 in free list (0 min, 100 max allowed)
0 hits, 0 misses, 0 trims, 0 created
0 failures (0 no memory)
Large buffers, 5024 bytes (total 0, permanent 0):
0 in free list (0 min, 10 max allowed)
--More--   0 hits, 0 misses, 0 trims, 0 created
0 failures (0 no memory)
Huge buffers, 18024 bytes (total 0, permanent 0):
0 in free list (0 min, 4 max allowed)
0 hits, 0 misses, 0 trims, 0 created
0 failures (0 no memory)

Header pools:
Header buffers, 0 bytes (total 768, permanent 768):
256 in free list (128 min, 1024 max allowed)
512 hits, 0 misses, 0 trims, 0 created
0 failures (0 no memory)
512 max cache size, 512 in cache
302770 hits in cache, 0 misses in cache

Particle Clones:
1024 clones, 0 hits, 0 misses

Public particle pools:
F/S buffers, 256 bytes (total 768, permanent 768):
256 in free list (128 min, 1024 max allowed)
512 hits, 0 misses, 0 trims, 0 created
0 failures (0 no memory)
--More--   512 max cache size, 512 in cache
0 hits in cache, 0 misses in cache
Normal buffers, 1548 bytes (total 768, permanent 768):
768 in free list (128 min, 1024 max allowed)
0 hits, 0 misses, 0 trims, 0 created
0 failures (0 no memory)

Private particle pools:
Serial0/1/0 buffers, 1536 bytes (total 64, permanent 64):
0 in free list (0 min, 64 max allowed)
64 hits, 0 fallbacks
64 max cache size, 32 in cache
3623056 hits in cache, 0 misses in cache
FastEthernet0/0 buffers, 1552 bytes (total 512, permanent 512):
0 in free list (0 min, 512 max allowed)
512 hits, 0 fallbacks
512 max cache size, 256 in cache
3238095 hits in cache, 0 misses in cache
FastEthernet0/1 buffers, 1552 bytes (total 512, permanent 512):
0 in free list (0 min, 512 max allowed)
512 hits, 0 fallbacks
512 max cache size, 256 in cache
256 hits in cache, 0 misses in cache
--More--  

Pro-Sat-1841#exit
 
have you solved this problem??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)
 
not totally sure as of yet i rebuild the router config with the inside and outside address, the perminant routs for the other subnets, DNS, PAT and NAT. as of yet i have not turned up the any of the other services such as firewall each machine has it own so i don't exsposed. we did turn off the ip virtual-reassembly, and everything is working alot better. not to just turn up the firewall and see the current stats i did try adjusting mss and mtu but neather of those helped.
 
does your ISP have a police policy or bandwidth management policy that may be hindering traffic? is the cpu of the router ok?
 
no plicy that i know of it's a full 1.5 mb t1 cpu has always been ok
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top