SRX

Hi guys,

 

I have configured a SRX 100 for PPPOE however, it is dead slow on opening some pages and very fast on opening other pages.

I noticed that it is fast for Facebook, google, gmail however it is very very slow (most of times does not even open) on other pages like yahoo, cnn and etc.

 

Can someone please have a look at the config and let em know if you see any problem?

 

 

Hi Etoghi,

In most of these pppoe cases , it is usually seen that the large mss size advertised between the client and server causes the fragmentation and hence the web pages are slow to open.
Please check the negotiated MTU size on the PPPOE and set the MSS size accordingly.

MSS in PPPOE = MTU - 40 ( without vlan tag)

MSS in PPPOE = MTU - 44 ( with vlan tag)

Calculate the MSS using above method and set the MSS on the SRX using the command

set security flow tcp-mss all-tcp mss <MSS value="">

Let me know if you still observe the slowness. Please take a pcap on the next-hop interface or on the SRX egress interface to identify the problem.

Regards
Hemant</MSS>

Problem gone. Thanks

 

I put the mss = 1448

Sorry for bugging again. But I don't understand last part of your message:

 

"Please take a pcap on the next-hop interface or on the SRX egress interface to identify the problem."

 

Thank you.

There is a KB article in relation to creating a PCAP packet capture on branch SRX.

 

http://kb.juniper.net/InfoCenter/index?page=content&id=KB11709&actp=search

 

or on high-end SRX.

http://kb.juniper.net/KB21563

 

Regards,

Andy

Thank you.