SRX Services Gateway
Highlighted
SRX Services Gateway

SRX Dropping Connections/Poor internet bandwith

‎12-12-2015 08:28 AM

Hi Guys,

 

I have a problem with my SRX - I'm not sure why but it's dropping connection and the connection bandwith is very poor - We have dedicaded Fibre line runned to our office (200/200Mbit/s). On my old CISCO router I'm getting 200/200 without any problem after SWAP to SRX I'm getting 30Mbit/s down and 0Mbit/s up - I think that maybe it's a routing issue. When I'm testing the network on speedtest.net - the download is working and I'm getting 30Mbit/s down, but the upload is not working - after speedtest finished downloadnig test the internet connections dropping on upload.

 

My config:

interfaces {
    ge-0/0/0 {
        description untrust;
        unit 0 {
            family inet {
                address 123.123.123.29/31;
            }
        }
    }
    ge-0/0/1 {
        description dmz;
        unit 0 {
            family inet {
                address 192.168.50.1/24;
            }
        }
    }
    ge-0/0/2 {
        description ip-block;
        unit 0 {
            family inet {
                address 123.123.125.1/24;
            }
        }
    }
}
routing-options {
    static {
        route 0.0.0.0/0 next-hop 123.123.123.28;
    }
}

rule-set dmz-to-untrust {
                from zone dmz;
                to zone untrust;
                rule dmz-to-untrust-r1 {
                    match {
                        source-address 0.0.0.0/0;
                    }
                    then {
                        source-nat {
                            interface;
                        }
                    }
                }
            }

zones {
        security-zone untrust {
            interfaces {
                ge-0/0/0.0;
            }
        }
        security-zone dmz {
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                ge-0/0/1.0;
            }
        }
        security-zone ip-block {
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                ge-0/0/2.0;
            }
        }

ge-0/0/0 - connected to the fibre switch (WAN connection)

ge-0/0/1 - DMZ switch

ge-0/0/2 - public switch

 

Anyone knows how I can fix this issue?

5 REPLIES 5
Highlighted
SRX Services Gateway

Re: SRX Dropping Connections/Poor internet bandwith

[ Edited ]
‎12-12-2015 09:35 AM

Without any security policies I'm not sure how outbound would even work.

 

security {
    policies {
        from-zone ip-block to-zone untrust {
            policy permit-all {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                }
            }
        }
        from-zone dmz to-zone untrust {
            policy permit-all {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                }
            }
        }
    }
}
Highlighted
SRX Services Gateway

Re: SRX Dropping Connections/Poor internet bandwith

‎12-13-2015 04:36 AM

I've added outbound and I'm getting the same issue - internet connection drops, and the bandwidth is terrible.

 

Any ideas what I've done wrong?

 

Thanks.

Highlighted
SRX Services Gateway

Re: SRX Dropping Connections/Poor internet bandwith

‎12-13-2015 05:35 AM

Actually sometimes I'm able to get something in upload:

 

Retrieving speedtest.net configuration...
Retrieving speedtest.net server list...
Testing from (1.1.1.1)...
Selecting best server based on latency...
Hosted by London [2 km]: 10.705 ms
Testing download speed........................................
Download: 31.63 Mbit/s
Testing upload speed..................................................
Upload: 0.59 Mbit/s

But that's not enough - I'm on the line 200/200Mbit/s

Highlighted
SRX Services Gateway

Re: SRX Dropping Connections/Poor internet bandwith

[ Edited ]
‎12-13-2015 07:43 AM

Hi,

Please share the full configuration of the SRX ?

Please share the follwing output (LAN interface and WAN interface) :

> show interfaces extensive

And while downloading large file , share the output of :

>monitor interface (WAN)

Regards,
A'bed AL-R.
[JNCSP-SEC JNCDA JNCIS-ENT Ingenious Champion|Sec]
https://srxtech.wordpress.com
Highlighted
SRX Services Gateway

Re: SRX Dropping Connections/Poor internet bandwith

‎12-13-2015 10:09 AM

i see this a lot with speedtest.net i have norrowed it down to poor host in speedtest side as if a manually pck my host to test i get very different results.  and i  use my isp test age i get erfect results.  it maybe a issue somewhere inbetween as well.