SRX

Hi,

We have SRX210HE with Junos 11.4R10 version.
We have connected 50 Mbps WAN Link on fe-0/0/6 interface but total interface bandwidth
max 10 Mbps. Their is no limitation configuraed on interface.

Please suggest how to fix it. Is their any WAN interface bandwidth limitation matrix for branch SRX.

Regards,

Target..

Hello,

There is no chassis-wide nor port-based BW limitation in existence for Juniper SRX products.

Things to check:

1/ speed/duplex mismatch on fe-0/0/6

2/ whether fragmentation happens for the traffic going out of/coming into fe-0/0/6

3/ whether packet loss happens for the traffic going out of/coming into fe-0/0/6

4/ TCP MSS for the traffic going out of/coming into fe-0/0/6, reduce if necessary

HTH

Thx

Alex

Hi Alex,

Their is no error on interface, speed and duplex is correct, TCP-MSS is also correct.

Do i need to upgrade the Junos on SRX, will that help?

Regards,

Target

Hi,

As aarseniev suggested, I once have a problem with TCP-MSS in srx devices, If it is connected to the internet lease line. I have changed the TCP-MSS and everything was fine, I started at  1350 going up until I get good speed.

Hi,

Shaping was configured at remote SRX. That need to increase.

Hi,

Is thier any default bandwidth limitation for IPsec tunnel interface in SRX.

Thank you..

Hello there,

---

@Target wrote:

Hi,

 

Is thier any default bandwidth limitation for IPsec tunnel interface in SRX.

 

---

No limitation of any sort, hardcoded or licensed. Your IPSEC t'put depends on SRX model (basically, Octeon chip model), ciphers chosen and whether IPSEC is post-fragmented. The latter is usually the biggest factor.

HTH

Thx

Alex