Slow Internet speeds in HQ

[sthames]

I have a weird issue that I have no clue whats wrong. We have 2 facilities (HQ, Remote Office) they are connected by a private T1. The HQ facility has our only internet connection. The strange thing is the internet speeds in our remote office which go down the T1 are faster than ours in our HQ.

HQ Config.

Building configuration...

Current configuration : 1948 bytes
!
! Last configuration change at 18:01:50 UTC Wed Jul 8 2009 by
! NVRAM config last updated at 15:34:32 UTC Mon Jul 6 2009 by
!
version 12.4
no service pad
service timestamps debug datetime msec show-timezone
service timestamps log datetime msec show-timezone
service password-encryption
!
hostname HQ
!
boot-start-marker
boot-end-marker
!
logging buffered 16000 notifications
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
no ip source-route
ip cef
!
!
no ip dhcp use vrf connected
!
!
no ip bootp server
!
username xxxx privilege 15 secret 5 xxxx
!
!
!
interface FastEthernet0/0
description Internet Connection
ip address 10.10.11.1 255.255.255.248
no ip proxy-arp
duplex auto
speed auto
no cdp enable
!
interface FastEthernet0/1
description HQ LAN
ip address 10.10.10.1 255.255.255.192
no ip proxy-arp
duplex auto
speed auto
no cdp enable
!
interface Serial0/0/0
description Remote Office
ip address 192.168.0.1 255.255.255.252
no ip proxy-arp
service-module t1 clock source internal
no cdp enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.11.2
ip route 10.10.10.64 255.255.255.192 Serial0/0/0
!
no ip http server
!
no cdp run
!
control-plane
!
!
line con 0
login local
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet
line vty 5 15
privilege level 15
login local
transport input telnet
!
ntp clock-period 17178387

end


Remote Office Config

Current configuration : 1596 bytes
!
! No configuration change since last restart
!
version 12.2
service tcp-keepalives-in
service timestamps debug datetime msec show-timezone
service timestamps log datetime msec show-timezone
service password-encryption
!
hostname Remote
!
logging buffered 16000 debugging
logging console critical
aaa new-model
enable secret 5 xxxx
!
username xxxx password 7 xxxx
memory-size iomem 25
clock timezone GMT 0
ip subnet-zero
no ip source-route
!
no ip bootp server
!
!
!
interface Loopback0
ip address 10.10.9.2 255.255.255.255
!
interface FastEthernet0
ip address 10.10.10.65 255.255.255.192
no ip proxy-arp
speed auto
no cdp enable
!
interface Serial0
ip address 192.168.0.2 255.255.255.252
no ip proxy-arp
no cdp enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0
no ip http server
!
logging 10.10.10.73
no cdp run
banner login ^C

!
line con 0
exec-timeout 5 0
password 7 xxxx
line aux 0
password 7 xxxx
no exec
line vty 0 4
exec-timeout 5 0
password 7 xxxx
transport input telnet
!

end

I have managed switches at both facilities and they don't show anything unusual. Everything appears to work its just we get probably 3 to 4 times better times in our remote facility.

Any ideas?

 

[North323]

are you syslogging anything? you may have a server or user eating up the bandwidth
post a show interface (of affected interface)

 

[sthames]

No I am not really Syslogging anything. There are just a handfull of people at these facilities. The speed in that HQ facility is so slow that I don't think they do much on the internet.

FastEthernet0/0 is up, line protocol is up
Hardware is Gt96k FE, address is 0018.19f4.126e (bia 0018.19f4.126e)
Description: Internet Connection
Internet address is 10.10.11.1/29
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:08:08, output 00:00:00, output hang never
Last clearing of "show interface" counters 1w3d
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 100000 bits/sec, 15 packets/sec
5 minute output rate 18000 bits/sec, 16 packets/sec
10386172 packets input, 2414526283 bytes
Received 328 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
9979944 packets output, 1596143879 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
FastEthernet0/1 is up, line protocol is up
Hardware is Gt96k FE, address is 0018.19f4.126f (bia 0018.19f4.126f)
Description: HQ LAN
Internet address is 10.10.10.1/26
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:23, output 00:00:00, output hang never
Last clearing of "show interface" counters 1w3d
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 154000 bits/sec, 59 packets/sec
5 minute output rate 136000 bits/sec, 58 packets/sec
21808115 packets input, 1065820577 bytes
Received 45495 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
21684553 packets output, 880245030 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Serial0/0/0 is up, line protocol is up
Hardware is GT96K with integrated T1 CSU/DSU
Internet address is 192.168.0.1/30
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
reliability 255/255, txload 37/255, rxload 16/255
Encapsulation HDLC, loopback not set
Keepalive set (10 sec)
Last input 00:00:00, output 00:00:02, output hang never
Last clearing of "show interface" counters 1w3d
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 3196
Queueing strategy: weighted fair
Output queue: 0/1000/64/3193 (size/max total/threshold/drops)
Conversations 0/68/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 1158 kilobits/sec
5 minute input rate 99000 bits/sec, 64 packets/sec
5 minute output rate 228000 bits/sec, 66 packets/sec
24566936 packets input, 335897991 bytes, 0 no buffer

 

[VinceWhirlwind]

That would most likely be a mis-configured interface at HQ - check stats on the interfaces that HQ <--> Internet traffic doesn't have in common with Remote <--> Internet.

 

[burtsbees]

What happens when you down HQ altogether? Do your speeds go up at that point?

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[burtsbees]

I mean remote...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[North323]

what routing protocal are you using? i would change the cost of these routes:

ip route 0.0.0.0 0.0.0.0 10.10.11.2
ip route 10.10.10.64 255.255.255.192 Serial0/0/0

like:
ip route 0.0.0.0 0.0.0.0 10.10.11.2 20
ip route 10.10.10.64 255.255.255.192 Serial0/0/0 1

or whatever

 

[VinceWhirlwind]

North - the more specific route already has priority.

See this:

http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080094823.shtml

"Making Forwarding Decisions

Let's look at the three routes we just installed in the routing table, and see how they look on the router.

router# show ip route
....
D 192.168.32.0/26 [90/25789217] via 10.1.1.1
R 192.168.32.0/24 [120/4] via 10.1.1.2
O 192.168.32.0/19 [110/229840] via 10.1.1.3
....

If a packet arrives on a router interface destined for 192.168.32.1, which route would the router choose? It depends on the prefix length, or the number of bits set in the subnet mask. Longer prefixes are always preferred over shorter ones when forwarding a packet.

In this case, a packet destined to 192.168.32.1 is directed toward 10.1.1.1, because 192.168.32.1 falls within the 192.168.32.0/26 network (192.168.32.0 to 192.168.32.63). It also falls within the other two routes available, but the 192.168.32.0/26 has the longest prefix within the routing table (26 bits verses 24 or 19 bits).

Likewise, if a packet destined for 192.168.32.100 arrives on one of the router's interfaces, it's forwarded to 10.1.1.2, because 192.168.32.100 doesn't fall within 192.168.32.0/26 (192.168.32.0 through 192.168.32.63), but it does fall within the 192.168.32.0/24 destination (192.168.32.0 through 192.168.32.255). Again, it also falls into the range covered by 192.168.32.0/19, but 192.168.32.0/24 has a longer prefix length.

 

[sthames]

Its just using static routes. Yeah I was thinking of shutting down the T1 and see if it has any impact. I would have to do it off hours though. The only interface that HQ goes through that we don't is FastEthernet0/1. And if we do a ftp transfer from the remote site to the HQ which goes through that interface the speed seems fine. Seems like its just when they go through that interface onto the internet when it becomes slow.

Vincewhirlwind - Is there something more than "show int" I can do to see these stats? "Show Int" Seems normal to me and is posted above.

 

[burtsbees]

Yes! fa0/0 received 3xx broadcasts---fa0/1---Received 45495 broadcasts...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[sthames]

Is that bad?

Today the numbers are

330
49470

That facility has around 7 PC's, 2 Printers, and 10 VOIP phones.

 

[burtsbees]

You should control the broadcasts---they are eating your bandwidth. How bad, well,I have nothing to compare...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[VinceWhirlwind]

If you know what interface you are looking at, then "show int" gives you stats including errors.
The question is - are you looking at the right interfaces?
Use the physical layout to make a diagram, and then make sure you've checked each relevant interface on each device you can see.

Use ping and tracert from the HQ LAN to check your connectivity to your default GW, and then beyond that to the internet - at some point you'll be seeing packet loss or high latency, or some sport of routing dodginess.