1. Home
  2. Cisco Systems
  3. 2610 Nat or problem with browsing web

2610 Nat or problem with browsing web

I've had a 2610 sitting my closet for some time. I added a NM1E (I think that's the model number) for an additional ethernet port.

I'm setting this up at home for the practice, but have hit what looks like to be a NAT issue. Let me start by saying I'm online and NAT is working, sometimes. I'm connecting this to my Cable Modem.

I setup an external ping from my pc, so I can monitor dropped packets or lack of internet access. ping 205.152.144.23 -t. Internet browsing is slow and sparatic. Sometimes it loads quickly, other times it kinda loads and then after a minute or two, it finishes loading. While these pauses happen in the web browsing, my pings start timing out and the first packet to reply has a ping of like 3000+ms.

The funny thing, EVERYTHING else works. Niece is playing World of Warcraft while I'm on Teamspeak, xfire, both on msn messenger. Browsing the web continues to be sluggish.

Putting in this command helped a ton for browsing the internet. Prior to decreasing it, it was almost impossible to browse the web. ip tcp adjust-mss 1200

Reply from 205.152.144.23: bytes=32 time=98ms TTL=46 Reply from 205.152.144.23: bytes=32 time=91ms TTL=46 Reply from 205.152.144.23: bytes=32 time=97ms TTL=46 Request timed out. Request timed out. Request timed out. Reply from 205.152.144.23: bytes=32 time=3041ms TTL=46 Reply from 205.152.144.23: bytes=32 time=95ms TTL=46 Reply from 205.152.144.23: bytes=32 time=92ms TTL=46

Also, during the time outs and pauses, when I do a sh ip nat stat, the MISSES and EXPIRED TRANSLATIONS increase.

Here's more info, all help is apprecaited, thanks!

MrChen#sh ip nat stat Total active translations: 73 (0 static, 73 dynamic; 73 extended) Outside interfaces: Ethernet0/0 Inside interfaces: Ethernet1/0 Hits: 279932 Misses: 6328 Expired translations: 6257 Dynamic mappings:

-- Inside Source [Id: 2] access-list 7 interface Ethernet0/0 refcount 73

-------------------------

MrChen#sh run Building configuration...

Current configuration : 959 bytes ! version 12.3 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname MrChen ! boot-start-marker boot-end-marker ! no logging console ! no aaa new-model ip subnet-zero ip cef ! interface Ethernet0/0 description Adelphia Wan bandwidth 6000 ip address dhcp ip nat outside ip tcp adjust-mss 1200 full-duplex ! interface Serial0/0 no ip address encapsulation x25 no ip mroute-cache shutdown ! interface Ethernet1/0 ip address 192.168.1.254 255.255.255.0 ip nat inside full-duplex fair-queue hold-queue 32 in ! ip nat inside source list 7 interface Ethernet0/0 overload ip http server ip classless ip route 0.0.0.0 255.255.255.0 Ethernet0/0 dhcp ! !access-list 7 permit 192.168.1.0 0.0.0.255 ! line con 0 line aux 0 line vty 0 4 ! end

------------------------

MrChen#sh ver Cisco Internetwork Operating System Software IOS (tm) C2600 Software (C2600-I-M), Version 12.3(17b), RELEASE SOFTWARE (fc2) Technical Support:

formatting link
(c) 1986-2006 by cisco Systems, Inc. Compiled Mon 06-Mar-06 22:02 by dchih Image text-base: 0x80008098, data-base: 0x80CE0844

ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1) ROM: C2600 Software (C2600-I-M), Version 12.3(17b), RELEASE SOFTWARE (fc2)

MrChen uptime is 21 hours, 43 minutes System returned to ROM by power-on System image file is "flash:c2600-i-mz.123-17b.bin"

cisco 2610 (MPC860) processor (revision 0x203) with 28672K/4096K bytes of memory . Processor board ID JAD05020U2K (3489501272) M860 processor: part number 0, mask 49 Bridging software. X.25 software, Version 3.0.0.

2 Ethernet/IEEE 802.3 interface(s) 1 Serial network interface(s) 32K bytes of non-volatile configuration memory. 8192K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

---------------------------------

MrChen#sh ip nat tran Pro Inside global Inside local Outside local Outside global tcp 69.171.168.82:1068 192.168.1.100:1984 24.76.180.209:6346

24.76.180.209:6346 tcp 69.171.168.82:2408 192.168.1.100:2408 195.205.60.25:6348 195.205.60.25:6348 tcp 69.171.168.82:2233 192.168.1.100:2233 155.68.106.87:3031 155.68.106.87:3031 tcp 69.171.168.82:1709 192.168.1.100:1709 213.100.236.132:49580 213.100.236.132:49580 tcp 69.171.168.82:2642 192.168.1.100:2642 206.16.235.93:3724 206.16.235.93:3724 tcp 69.171.168.82:1548 192.168.1.100:1548 69.169.141.207:6346 69.169.141.207:6346 tcp 69.171.168.82:1864 192.168.1.100:1864 65.54.153.251:80 65.54.153.251:80 tcp 69.171.168.82:1731 192.168.1.100:1731 213.192.95.187:16036 213.192.95.187:16036 tcp 69.171.168.82:2018 192.168.1.100:2018 62.56.63.46:28099 62.56.63.46:28099 tcp 69.171.168.82:1466 192.168.1.100:1466 84.64.251.84:30157 84.64.251.84:30157 tcp 69.171.168.82:1434 192.168.1.100:1434 84.64.181.4:17478 84.64.181.4:17478 tcp 69.171.168.82:1329 192.168.1.100:1329 24.226.41.21:31741 24.226.41.21:31741 tcp 69.171.168.82:1601 192.168.1.100:1601 201.32.19.26:6346 201.32.19.26:6346 tcp 69.171.168.82:1226 192.168.1.55:1226 207.210.70.115:80 207.210.70.115:80 tcp 69.171.168.82:1868 192.168.1.100:1868 204.70.151.125:80 204.70.151.125:80 tcp 69.171.168.82:1869 192.168.1.100:1869 204.70.151.125:80 204.70.151.125:80 tcp 69.171.168.82:1751 192.168.1.100:1751 209.85.35.7:80 209.85.35.7:80 tcp 69.171.168.82:1309 192.168.1.100:1309 195.95.170.67:6348 195.95.170.67:6348 tcp 69.171.168.82:1931 192.168.1.100:1931 213.192.95.187:16036 213.192.95.187:16036 tcp 69.171.168.82:1626 192.168.1.100:1626 201.67.95.173:21666 201.67.95.173:21666 tcp 69.171.168.82:2007 192.168.1.100:2007 213.192.95.187:16036 213.192.95.187:16036 tcp 69.171.168.82:1240 192.168.1.100:1240 210.24.208.235:64540 210.24.208.235:64540 tcp 69.171.168.82:1970 192.168.1.100:1970 82.247.152.172:6346 82.247.152.172:6346 tcp 69.171.168.82:1812 192.168.1.100:1812 80.56.67.205:30999 80.56.67.205:30999 tcp 69.171.168.82:1106 192.168.1.55:1106 204.71.190.24:25999 204.71.190.24:25999 tcp 69.171.168.82:1780 192.168.1.100:1780 66.233.157.171:52456 66.233.157.171:52456 tcp 69.171.168.82:1500 192.168.1.100:1500 88.112.211.138:64218 88.112.211.138:64218 tcp 69.171.168.82:1231 192.168.1.100:1231 205.251.145.127:57475 205.251.145.127:57475 tcp 69.171.168.82:1892 192.168.1.100:1892 24.25.54.175:40685 24.25.54.175:40685 tcp 69.171.168.82:1905 192.168.1.100:1905 65.5.99.34:37275 65.5.99.34:37275 tcp 69.171.168.82:2458 192.168.1.100:2458 72.58.175.105:35880 72.58.175.105:35880 tcp 69.171.168.82:1455 192.168.1.100:1455 210.58.64.77:3376 210.58.64.77:3376 tcp 69.171.168.82:1213 192.168.1.100:1213 24.21.67.22:23960 24.21.67.22:23960 tcp 69.171.168.82:1541 192.168.1.100:1541 144.133.110.46:6348 144.133.110.46:6348 tcp 69.171.168.82:1572 192.168.1.100:1572 12.171.23.157:2923 12.171.23.157:2923 tcp 69.171.168.82:2621 192.168.1.100:2621 208.67.67.11:80 208.67.67.11:80 tcp 69.171.168.82:2500 192.168.1.100:2500 213.192.95.187:16036 213.192.95.187:16036 tcp 69.171.168.82:2710 192.168.1.100:2710 62.193.236.96:80 62.193.236.96:80 tcp 69.171.168.82:1948 192.168.1.100:1948 12.129.217.200:80 12.129.217.200:80 tcp 69.171.168.82:3181 192.168.1.11:3181 207.68.178.61:80 207.68.178.61:80 tcp 69.171.168.82:2281 192.168.1.100:2281 84.64.251.84:30157 84.64.251.84:30157
Reply to
cj0n3s
Loading thread data ...

I ran a few speed tests on dslreports.com as well. My results:

dslreports.com speed test result on 2006-10-08 11:26:16 EST:

218 / 424 Your download speed : 218 kbps or 27.3 KB/sec. That is 94% worse than an average user on adelphia.net Your upload speed is much faster than down.. have you tweaked?

Your upload speed : 424 kbps or 53.1 KB/sec. That is 24% worse than an average user on adelphia.net

So upload speed looks great, but download should be 5000+ kbps.

Reply to
cj0n3s

MISSES mean a new nat translation was created, essentially a new connection for one of your inside hosts. EXPIRED TRANSLATIONS mean a translation was removed because it was no longer being used. Taken together, and if the size of the increase is large, for some suitable definition, it implies that there is enough extra traffic from one of your hosts at those times to make the web browsing 'sluggish' as you say.

If you make these changes to your config:

! Get millisecond timestamps on log messages service timestamps debug datetime msec service timestamps log datetime msec ! ! Logging to the console can be a big performance hit no logging console ! ! Create a ~256KB in memory logging buffer logging buffered 256000 ! ! Log NAT translations as they come and go ip nat log translations syslog !

You can then telnet to your router and do a "show log" and you might see some/many messages like the ones below. Using the timestamps you can figure out if there is a correlation with your browser slowdowns.

Oct 9 04:13:17.311 AEST: %IPNAT-6-NAT_CREATED: Created tcp 192.168.88.44:23 192.168.1.102:8844 192.168.1.100:35672 192.168.1.100:35672

Oct 9 04:19:02.519 AEST: %IPNAT-6-NAT_DELETED: Deleted tcp 192.168.88.44:23 192.168.1.102:8844 192.168.1.100:35672 192.168.1.100:35672

Reply to
Martin Gallagher

I'm really not sure what you want me to find in those logs. It's full of created and deleted.

Oct 9 03:54:47.804: %SYS-5-CONFIG_I: Configured from console by vty0 (192.168.1 .11) Oct 9 03:55:04.904: %IPNAT-6-NAT_CREATED: Created tcp

192.168.1.11:3434 69.171. 168.82:3434 67.15.140.200:80 67.15.140.200:80 Oct 9 03:55:07.488: %IPNAT-6-NAT_CREATED: Created tcp 192.168.1.11:3435 69.171. 168.82:3435 67.15.140.200:80 67.15.140.200:80 Oct 9 03:55:08.069: %IPNAT-6-NAT_CREATED: Created tcp 192.168.1.11:3436 69.171. 168.82:3436 72.36.156.157:80 72.36.156.157:80 Oct 9 03:55:12.588: %IPNAT-6-NAT_CREATED: Created tcp 192.168.1.11:3437 69.171. 168.82:3437 207.68.179.219:80 207.68.179.219:80 Oct 9 03:55:46.671: %IPNAT-6-NAT_CREATED: Created tcp 192.168.1.11:3438 69.171. 168.82:3438 70.86.33.18:80 70.86.33.18:80 Oct 9 03:55:47.195: %IPNAT-6-NAT_CREATED: Created tcp 192.168.1.11:3439 69.171. 168.82:3439 70.86.33.18:80 70.86.33.18:80 Oct 9 03:55:49.824: %IPNAT-6-NAT_DELETED: Deleted icmp 192.168.1.11:512 69.171. 168.82:512 207.46.130.100:512 207.46.130.100:512 Oct 9 03:55:56.559: %IPNAT-6-NAT_CREATED: Created udp 192.168.1.11:1032 69.171. 168.82:1032 216.239.36.10:53 216.239.36.10:53 Oct 9 03:55:56.611: %IPNAT-6-NAT_CREATED: Created udp 192.168.1.11:1032 69.171. 168.82:1032 64.233.179.9:53 64.233.179.9:53 Oct 9 03:55:56.659: %IPNAT-6-NAT_CREATED: Created tcp 192.168.1.11:3440 69.171. 168.82:3440 64.233.167.147:80 64.233.167.147:80 Oct 9 03:55:57.180: %IPNAT-6-NAT_CREATED: Created tcp 192.168.1.11:3441 69.171. 168.82:3441 65.55.251.105:443 65.55.251.105:443 Oct 9 03:55:58.245: %IPNAT-6-NAT_CREATED: Created tcp 192.168.1.11:3442 69.171. 168.82:3442 65.55.251.105:443 65.55.251.105:443 Oct 9 03:56:04.620: %IPNAT-6-NAT_CREATED: Created tcp 192.168.1.11:3443 69.171. 168.82:3443 65.55.251.105:443 65.55.251.105:443 Oct 9 03:56:05.733: %IPNAT-6-NAT_DELETED: Deleted tcp 192.168.1.11:3434 69.171. 168.82:3434 67.15.140.200:80 67.15.140.200:80 Oct 9 03:56:08.582: %IPNAT-6-NAT_DELETED: Deleted tcp 192.168.1.11:3435 69.171. 168.82:3435 67.15.140.200:80 67.15.140.200:80 Oct 9 03:56:09.952: %IPNAT-6-NAT_CREATED: Created tcp 192.168.1.11:3444 69.171. 168.82:3444 65.55.251.105:443 65.55.251.105:443 Oct 9 03:56:11.130: %IPNAT-6-NAT_DELETED: Deleted tcp 192.168.1.11:3436 69.171. 168.82:3436 72.36.156.157:80 72.36.156.157:80 Oct 9 03:56:12.585: %IPNAT-6-NAT_DELETED: Deleted udp 192.168.1.11:1032 69.171. 168.82:1032 65.55.238.126:53 65.55.238.126:53
Reply to
cj0n3s

Also, what about the bandwidth issue? I have 6mb cable, yet I'm getting under 300k. Any other ideas?

Reply to
cj0n3s

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.