If you've got a decent enough IOS (12.0.7 or higher), you might try turning on CEF. Fast switching was kinda buggy on early 12.0 IOS on 2600's. I'd upgrade to something like 12.0.14 (whatever the latest GD is) and turn on CEF (global command is ip cef, on your interface put on ip route-cache cef) I've had good luck with it. Craig -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bilge Karabacak Sent: Wednesday, December 20, 2000 6:36 AM To: [EMAIL PROTECTED] Subject: What is the problem with my 2621? continues Hello group, Several days ago, I had stated my problem with Cisco 2621 router. Its throughput was very low. Some comments had come to me, like "most of your packets are process switched, you should use fast swiching". I performed some performance test on this router, here is the result, Cisco 2621: Throughput (No NAT, No ACLs, in fast switching): 54.6 Mbps Throughput (No NAT, No ACLs, in process switching): 9.9 Mbps Throughput (with NAT, No ACLs, in fast switching):15 Mbps Throughput (with NAT, No ACLs, in process switching): 8.6 Mbps Throughput (with NAT, with ACLs, in fast switching): 13.9 Mbps Throughput (with NAT, with ACLs, in process switching): 7.8 Mbps I am not satisfied with these result, because, an OpenBSD machine, with ipnat and ipfilter software (working as a gateway) has this result: (exactly same experimental setup) OpenBSD: Throughput (No NAT, No ACLs): 120 Mbps Throughput (with NAT, No ACLs):115 Mbps Throughput (with NAT, with ACLs): 98 Mbps I have some questions at this point: is the result normal? I think, cisco 2621 router is not for enterprise. what do you think about this? If the security is concern, which switching type must be used ? fast or process switching ? Thanks in advance ... On 06 Dec 2000, I had wrote this: > I configured a Cisco 2621 router. The problem with this router is its > throughput. It is ten times slower than a linux machine acting as a > gateway with two ethernet interfaces. The properties of linux machine is > Intel celeron 400, 64 MByte RAM. The second important point is that, > the router gave this result with no access-lists. The last one to say is > that,, NAT operation at this cisco 2621 degrades performance by 60% > percent. This is ridicilous, if all cisco routers are like this one. > May you please comment on this, after examining the configuration of the > router? Is it normal? What should I do to increase performance? > Below, you will find > > -----------------SHOW STARTUP-CONFIG------------------------ > ! > ! Last configuration change at 12:20:40 UTC Thu Nov 30 2000 > ! NVRAM config last updated at 13:01:17 UTC Thu Nov 30 2000 > ! > version 12.0 > service tcp-keepalives-in > service timestamps debug datetime msec > service timestamps log datetime msec > service password-encryption > ! > hostname router2 > ! > no logging buffered > no logging console > no logging monitor > enable secret 5 *********** > ! > ! > ! > ! > ! > memory-size iomem 15 > ip subnet-zero > no ip source-route > no ip finger > ip tcp selective-ack > ip tcp path-mtu-discovery > ip telnet quiet > ! > no ip bootp server > ip audit notify log > ip audit po max-events 100 > ! > ! > ! > ! > ! > ! > ! > ! > interface FastEthernet0/0 > ip address 192.168.1.89 255.255.255.0 > no ip unreachables > no ip directed-broadcast > ip nat inside > no ip mroute-cache > duplex auto > speed auto > no cdp enable > ! > interface Serial0/0 > no ip address > no ip directed-broadcast > no ip mroute-cache > shutdown > no cdp enable > ! > interface FastEthernet0/1 > ip address 193.177.77.77 255.255.255.0 > no ip unreachables > no ip directed-broadcast > ip nat outside > no ip mroute-cache > duplex auto > speed auto > no cdp enable > ! > interface Serial0/1 > no ip address > no ip directed-broadcast > no ip mroute-cache > shutdown > no cdp enable > ! > ip nat inside source list 2 interface FastEthernet0/1 overload > ip classless > ip route 0.0.0.0 0.0.0.0 FastEthernet0/1 > no ip http server > ! > logging trap debugging > logging facility local6 > logging source-interface FastEthernet0/0 > access-list 2 permit 192.168.1.0 0.0.0.255 > dialer-list 1 protocol ip permit > dialer-list 1 protocol ipx permit > no cdp run > ! > line con 0 > password 7 *************** > login > transport input none > line aux 0 > password 7 **************** > login > line vty 0 4 > password 7 ********************** > login > transport input none > ! > scheduler interval 500 > no scheduler allocate > end > > --------------------SHOW VERSION------------------- > > Cisco Internetwork Operating System Software > IOS (tm) C2600 Software (C2600-IO3S56I-M), Version 12.0(7)XK1, EARLY > DEPLOYMENT > RELEASE SOFTWARE (fc1) > TAC:Home:SW:IOS:Specials for info > Copyright (c) 1986-2000 by cisco Systems, Inc. > Compiled Wed 15-Mar-00 08:53 by phanguye > Image text-base: 0x80008088, data-base: 0x80EB7238 > > ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1) > ROM: C2600 Software (C2600-IO3S56I-M), Version 12.0(7)XK1, EARLY > DEPLOYMENT RELE > ASE SOFTWARE (fc1) > > router2 uptime is 4 days, 18 hours, 16 minutes > System returned to ROM by reload at 15:57:01 UTC Fri Dec 1 2000 > System restarted at 15:58:42 UTC Fri Dec 1 2000 > System image file is "flash:aaa1321.bin" > Host configuration file is "tftp://192.168.5.78/router2_acl" > > cisco 2621 (MPC860) processor (revision 0x102) with 41984K/7168K bytes > of memory > . > Processor board ID JAB040906MD (3523830294) > M860 processor: part number 0, mask 49 > Bridging software. > X.25 software, Version 3.0.0. > 2 FastEthernet/IEEE 802.3 interface(s) > 2 Low-speed serial(sync/async) network interface(s) > 32K bytes of non-volatile configuration memory. > 16384K bytes of processor board System flash (Read/Write) > > Configuration register is 0x2102 > > _________________________________ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _________________________________ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _________________________________ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
