XG reduced bandwith after time

Hi Mathias,

Sorry to hear about these issues you have been experiencing.

For background information, how is your XG home firewall deployed? What does the resource usage of the XG look like when these strange issues occur?

Okay so I get now 150 Mbit instead of 250 Mbit down - upload is still 25 Mbit.

The resource usage is very low: 2 % CPU, 19 % RAM, 22 sessions

Hi Mathias,

check the modem network setting and see if it will run auto or at least 1000mb/s full duplex, sounds like the modem is the weak point.

Then check you IPS settings, disable the one with lots of hits, you can fine tune the IPS and build your own rule when you have identified the issue.

Ian

Hello,

You may run the command on console to check if there is any error on the interface that may have caused duu to negotiation issue.

console > sh net interfaces

Also for live error check you may go to 

console > system diagnostics utilities bandwidth-monitor

and enter 'u' twice

You should get this table and ideally should be 0

Bandwidth Monitor, (Sampling at every 0.500s), press 'h' for help

  -         iface                   Rx                   Tx                Total
  ==============================================================================
            Port4:            0.00 E/s             0.00 E/s             0.00 E/s
        Port3.502:            0.00 E/s             0.00 E/s             0.00 E/s
            Port1:            0.00 E/s             0.00 E/s             0.00 E/s
        Port2.503:            0.00 E/s             0.00 E/s             0.00 E/s
          GuestAP:            0.00 E/s             0.00 E/s             0.00 E/s
            Port3:            0.00 E/s             0.00 E/s             0.00 E/s
           vxlan2:            0.00 E/s             0.00 E/s             0.00 E/s
            reds1:            0.00 E/s             0.00 E/s             0.00 E/s
           wlnet1:            0.00 E/s             0.00 E/s             0.00 E/s
       vxlan2.101:            0.00 E/s             0.00 E/s             0.00 E/s
               lo:            0.00 E/s             0.00 E/s             0.00 E/s
           ipsec0:            0.00 E/s             0.00 E/s             0.00 E/s
             tun0:            0.00 E/s             0.00 E/s             0.00 E/s
            Port2:            0.00 E/s             0.00 E/s             0.00 E/s
             imq0:            0.00 E/s             0.00 E/s             0.00 E/s
  ------------------------------------------------------------------------------
            total:            0.00 E/s             0.00 E/s             0.00 E/s

Hello,

You may run the command on console to check if there is any error on the interface that may have caused duu to negotiation issue.

console > sh net interfaces

Also for live error check you may go to 

console > system diagnostics utilities bandwidth-monitor

and enter 'u' twice

You should get this table and ideally should be 0

Bandwidth Monitor, (Sampling at every 0.500s), press 'h' for help

  -         iface                   Rx                   Tx                Total
  ==============================================================================
            Port4:            0.00 E/s             0.00 E/s             0.00 E/s
        Port3.502:            0.00 E/s             0.00 E/s             0.00 E/s
            Port1:            0.00 E/s             0.00 E/s             0.00 E/s
        Port2.503:            0.00 E/s             0.00 E/s             0.00 E/s
          GuestAP:            0.00 E/s             0.00 E/s             0.00 E/s
            Port3:            0.00 E/s             0.00 E/s             0.00 E/s
           vxlan2:            0.00 E/s             0.00 E/s             0.00 E/s
            reds1:            0.00 E/s             0.00 E/s             0.00 E/s
           wlnet1:            0.00 E/s             0.00 E/s             0.00 E/s
       vxlan2.101:            0.00 E/s             0.00 E/s             0.00 E/s
               lo:            0.00 E/s             0.00 E/s             0.00 E/s
           ipsec0:            0.00 E/s             0.00 E/s             0.00 E/s
             tun0:            0.00 E/s             0.00 E/s             0.00 E/s
            Port2:            0.00 E/s             0.00 E/s             0.00 E/s
             imq0:            0.00 E/s             0.00 E/s             0.00 E/s
  ------------------------------------------------------------------------------
            total:            0.00 E/s             0.00 E/s             0.00 E/s

Hello everyone,

thanks for your suggestions!

I have done the above mentioned steps to see if there are any errors - no there aren't any errors. Either via "sh net interfaces" nor via "system diagnostics utilities bandwidth-monitor" commands.

Regarding point of failure = modem: I don't think that it is the modem. Beside that I am not able to check any settings as it is property of the ISP.

Another reason why (from my perspective) the modem is not guilty is that my VLAN routing is not working from time to time as well.

Devices are up and running properly (all VMs).

Mathias

Hi Mathias,

You may try to run this command and check if this would improve the performance.

Console  >system firewall-acceleration disable

Is there any impact after disabling it? What exactly firewall acceleration do?