Someone with PIX 515e and 4+ Meg Connection to Internet - Test something for me?

We have a PIX 515e and a 6 Meg Connection to the internet

I know the DSL Speed tests are not reliable forms to test Speed of your network Connection. Though I should get better then I'm getting. I'm using the Site:

formatting link

I can on the average get Speeds in the 4.5-5 meg range when I'm plugged into the Outside LAN Cable going to the PIX.

When I connect a Laptop Directly to the Inside Interface of the PIX I get on the Average 900K to 1.4 Megs.

I can see the Peak Port Speed of the local NIC get to 3-4 Megs, though the test will never get that sustained speed.

It just seems like the PIX is trying to be smart about Queuing Packets and making sure that everyone gets their fair share. I think this as I can run up to three Speed tests and they all come back at the same rate.

Can someone with a PIX 515e and a 4+ meg connection to the internet tell me what they get? I've been using

formatting link
since SBC is our Provider, though other sites show similar results.

Reply to
Scott Townsend
Loading thread data ...

Which PIX OS? PIX 7 has rate shaping capacities, but PIX 6 does not.

Reply to
Walter Roberson

I only ran the test a couple of times with results varying between 1Mb to 4Mb.

But the 4Mb was from the inside , and i tried downloading a 30Meg file from our privider and i got the same speed (1.35 MBytes/sec ) so i don't see the PIXe slowing down the traffic .

Reply to
mcaissie

Its 7.0(5)

Here is the Config

PIX Version 7.0(5) ! hostname char2-1 domain-name enable password encrypted no names name Z.Y.X.W char_o name 172.16.0.1 char_dmz name 10.1.0.1 char_i dns-guard ! interface Ethernet0 speed 100 duplex full nameif outside security-level 0 ip address Z.Y.X.W 255.255.255.0 ! interface Ethernet1 speed 100 duplex full nameif inside security-level 100 ip address 10.1.0.1 255.255.0.0 ! interface Ethernet2 duplex half shutdown nameif dmz security-level 10 ip address 172.16.0.1 255.255.255.0 ! passwd encrypted ftp mode passive clock timezone PST -8 clock summer-time PDT recurring same-security-traffic permit intra-interface pager lines 100 mtu outside 1500 mtu inside 1500 mtu dmz 1500 ip verify reverse-path interface outside no failover asdm image flash:/asdm-505.bin asdm history enable arp timeout 14400 nat-control global (outside) 1 Z.Y.X.A netmask 255.255.255.0 nat (inside) 1 10.1.0.0 255.255.0.0 route outside 0.0.0.0 0.0.0.0 Z.Y.X.B 1 timeout xlate 1:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute http server enable http 10.1.0.133 255.255.255.255 inside snmp-server location NetCenter snmp-server contact Scott snmp-server community public snmp-server enable traps snmp authentication linkup linkdown coldstart telnet 10.1.0.133 255.255.255.255 inside telnet timeout 15 ssh timeout 60 ssh version 1 console timeout 0 management-access inside ! class-map class_sqlnet match port tcp eq 1433 class-map inspection_default match default-inspection-traffic ! ! policy-map global_policy class inspection_default inspect dns maximum-length 512 inspect ftp inspect h323 h225 inspect h323 ras inspect http inspect ils inspect netbios inspect rsh inspect rtsp inspect skinny inspect sunrpc inspect tftp inspect sip inspect xdmcp class class_sqlnet inspect sqlnet ! service-policy global_policy global ntp server 10.1.0.8 source inside prefer ntp server 10.1.0.11 source inside ntp server 192.6.38.127 source outside prefer tftp-server inside 10.1.0.133 char2.1-7.05.cfg

Cryptochecksum:00000000000000000000000000000000 : end

"Walter Roberson" wrote in message news:6eQZg.158453$5R2.92710@pd7urf3no...

Reply to
Scott Townsend

Please don't top-post.

Which had to do with

Perhaps you could try adjusting tx-ring-limit or queue-limit ?

formatting link

Reply to
Walter Roberson

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.