Poor performance of 857w 2

[yellabelly]

I'm trying to move my home network from a Linksys WAG354g router to an 857w. I have a configuration that seems to be correct for wired/wireless except it suffers from extreme bad performance. Ftps and web images are very slow to download.
The Linksys was using PPPoE.
I can post back configuration and system info later but would anything obvious be wrong to cause this?

 

[burtsbees]

Post a config---I am thinking clock rate or MSS/MTU.

Likely MTU

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[unclerico]

i concur burt...

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[yellabelly]

Thanks for the quick replies. Here is the config and version information.

#sh run
Building configuration...

Current configuration : 6461 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname crouter
!
boot-start-marker
boot-end-marker
!
logging buffered 52000
!
no aaa new-model
clock timezone PCTime 0
clock summer-time PCTime date Mar 30 2003 1:00 Oct 26 2003 2:00
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.1.50
ip dhcp excluded-address 192.168.1.188
!
ip dhcp pool ripeDHCP
import all
network 192.168.1.0 255.255.255.0
dns-server 194.125.2.241 194.125.2.240
default-router 192.168.1.1
lease 128
!
!
ip cef
ip inspect name SDM_LOW cuseeme
ip inspect name SDM_LOW dns
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW https
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW imap
ip inspect name SDM_LOW pop3
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW esmtp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW tcp
ip inspect name SDM_LOW udp
ip inspect name SDM_LOW vdolive
ip ftp username ftp
ip ftp password password
no ip domain lookup
ip domain name yourdomain.com
!
!
crypto pki trustpoint TP-self-signed-1272708636
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1272708636
revocation-check none
rsakeypair TP-self-signed-1272708636
!
!
crypto pki certificate chain TP-self-signed-1272708636
certificate self-signed 01
3082024E 308201B7 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31323732 37303836 3336301E 170D3038 31323137 32323135
33375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 32373237
30383633 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100B05F 66F1FE8D BAACC72E 67C7FFB4 0C07B323 BB27B3D6 271392A8 26E9896F
9B573DC9 2DB48275 A144F21C C9A80E7B 0018F975 7359F976 5A5D66B2 C5F341DA
D1CB57F2 82198101 7C86399A 91905D2B 7C0393A7 5A9EEB64 8C56DB2A A9447142
A9DA408A 38BC1416 3DED33AC A1E0D786 82D218FD A0409DB5 1F39C0CC 8A4424F4
D24B0203 010001A3 76307430 0F060355 1D130101 FF040530 030101FF 30210603
551D1104 1A301882 1663726F 75746572 2E796F75 72646F6D 61696E2E 636F6D30
1F060355 1D230418 30168014 9FFAC6D4 9F71A04F 0CEEFAAF 25951F22 34BB5067
301D0603 551D0E04 1604149F FAC6D49F 71A04F0C EEFAAF25 951F2234 BB506730
0D06092A 864886F7 0D010104 05000381 8100612A 6328CA51 0F6FFF29 4EA041AD
47F70813 62A3EB69 F789BA36 6DE1C9BE BA6020A2 9DE4A0BF 16A5E2FE 24827C4D
8958D1A1 ACFAFD1B 3FA6B946 530F41BF D218E728 02A5B4C2 01AB9CAB 8EBF57C7
A65D0897 1C2BAF65 966BCB44 3EFE2E0A C65F2589 D89BD09D 2040A434 E769A1D6
33012E80 AF10600E 045A33AF 435C49AE 3D7A
quit
!
!
username admin privilege 15 secret 5 $1$Q.B7$nnBc04TzQ9E0iiMLLZdgX/
username mart privilege 15 password 0 xxxxxxxx
!
!
!
bridge irb
!
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
no snmp trap link-status
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
!
encryption vlan 1 key 1 size 128bit 0 xxxxxxxxxxxxxxxxxxxxxxxxxx transmit-key
encryption vlan 1 mode wep mandatory
!
ssid cisnet
vlan 1
authentication open
guest-mode
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
no ip address
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
bridge-group 1
bridge-group 1 spanning-disabled
!
interface Dialer0
description $FW_OUTSIDE$
ip address negotiated
ip access-group 103 in
ip inspect SDM_LOW out
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname userdsl@btbb
ppp chap password 0 mypassword
ppp pap sent-username userdsl@btbb password 0 mypassword
!
interface BVI1
description $FW_INSIDE$
ip address 192.168.1.1 255.255.255.0
ip access-group 102 in
ip nat inside
ip virtual-reassembly
!
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 3 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.5 3389 interface Dialer0 8000
!
access-list 2 remark Internal net
access-list 2 permit 192.168.1.0 0.0.0.127
access-list 3 remark SDM_ACL Category=2
access-list 3 permit 192.168.1.0 0.0.0.127
access-list 102 remark auto generated by SDM firewall configuration
access-list 102 remark SDM_ACL Category=1
access-list 102 deny ip host 255.255.255.255 any
access-list 102 deny ip 127.0.0.0 0.255.255.255 any
access-list 102 permit ip any any
access-list 103 remark inbound log
access-list 103 permit tcp 212.227.15.0 0.0.0.255 any eq pop3 log
access-list 103 permit udp 212.227.15.0 0.0.0.255 any eq 143 log
access-list 103 permit tcp 212.227.15.0 0.0.0.255 any eq 143 log
access-list 103 permit tcp host 212.140.254.88 host 84.12.11.86 eq 22 log
access-list 103 permit tcp host 212.140.254.88 host 84.12.11.86 eq 8000 log
access-list 103 permit icmp any any echo-reply
access-list 103 permit icmp any any time-exceeded
access-list 103 permit icmp any any unreachable
access-list 103 deny ip any any log
dialer-list 1 protocol ip permit
no cdp run
!
control-plane
!
bridge 1 route ip
banner login ^CC
-----------------------------------------------------------------------
If your here then your'e not supposed to be so fuck off
-----------------------------------------------------------------------
^C
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end


crouter#show version
Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(11)T2, RELEASE SOFTWARE (fc4)
Technical Support:

http://www.cisco.com/techsupport

Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Tue 01-May-07 08:56 by prod_rel_team

ROM: System Bootstrap, Version 12.3(8r)YI2, RELEASE SOFTWARE

crouter uptime is 43 minutes
System returned to ROM by power-on
System image file is "flash:c850-advsecurityk9-mz.124-11.T2.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 857W (MPC8272) processor (revision 0x200) with 59392K/6144K bytes of memory.
Processor board ID FCZ1005226C
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
4 FastEthernet interfaces
1 ATM interface
1 802.11 Radio
128K bytes of non-volatile configuration memory.
20480K bytes of processor board System flash (Intel Strataflash)

Configuration register is 0x2102

 

[unclerico]

Router(config)# int di0
Router(config-if)# ip mtu 1452

you may need to add this also:

tcp adjust-mss 1492

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[yellabelly]

I sent "ip tcp adjust-mss 1492" but the
highest adjust-mss seems to be 1460.

Couldn't get it working after a quick try late last night.Dns not working. Will have another go tonight and check error log.

Thanks for your help

 

[burtsbees]

Uncle---you're backwards...

ip tcp adjust-mss 1452

or

ip mtu 1492

for DSL, it is ip tcp adjust-mss 1452---try that and see what happens.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[unclerico]

ha!!!! i knew that, i just wanted to see if you were paying attention

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[burtsbees]

I'm too poor to pay attention. Yer slippin' in your old age there, grandpa. lol

You're still about 8-9 years younger than me...but I act like I'm 17...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[unclerico]

it's all good B. we need to find a way for you to earn some supplemental income!!!

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[yellabelly]

I ran up the new settings and it looks good so far. I just need to work out how to setup a few things like port routes and dyndns then I'll be ready to use the 857w full time.
Thanks for the help. I wish I had discovered this forum a long time ago - i acquired the router over a year ago.

 

[burtsbees]

At the lower left, there's a link---"Thank blablabla for this valuable post"...we need stars...will work for stars...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!