Solved

Juniper SSG-140 Slow Traffic

Posted on 2011-02-16
11
6,585 Views
Last Modified: 2012-05-11
I have narrowed it down on our Juniper SSG-140  we have 3 Zones

DMZ-0/9  10/100/1000
Trusted -0/8  10/100/1000
Untrusted-0/2  10/100

Any time I copy a fle FROM the DMZ (DMZ->Trusted)  its very slow like 150-250 KB
Any time I copy a file FROM the Trusted (Trusted->DMZ) is fine and fast like 30 - 50MB

I have look through all my polices and find no traffic shaping policies to hender this, and have not engres and egress set at all on the DMZ or the Trusted interface

the only thing that looks out of shorts is  the Interfaces Page Reads out the Ethernet0/9 - DMZ as 100mb and it should be 1000mb  and the Ethernet0/8 - Trusted is reading out as 1000mb like it should

FYI those too ports are suppose to be 10/100/1000 ports and all the rest are 10/100
0
Comment
Question by:Mirrorinc
11 Comments
 
LVL 2

Expert Comment

by:treetop3
Comment Utility
Hi,

There seems to be a switch or a hub in between DMZ to Trust that is dropping it down to 100

Regards,
TT
0
 
LVL 18

Expert Comment

by:Sanga Collins
Comment Utility
You may need to manually set the interface bandwidth and duplex from the command line. That should sort out the issues with transfer speed
0
 

Author Comment

by:Mirrorinc
Comment Utility
I know we have the 100mb 1000mb issue a while ago on both those ports, and I we had to change duplex setting on the ports, all the switch connected up to these 2 ports are Cisco 2960 Gigbit switches..

I 'm not to versed in the commands on this FW so I don't know what the syntex is for manaully setting the bandwidth?
0
 
LVL 68

Expert Comment

by:Qlemo
Comment Utility
For 1GB full duplex (which doesn't make much sense, since GB runs best with auto-negotiation):
    set interface eth0/9 phy full 1000mb
0
 

Author Comment

by:Mirrorinc
Comment Utility
how would you set it to auto then?
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 
LVL 18

Accepted Solution

by:
Sanga Collins earned 500 total points
Comment Utility
set interface eth0/9 phy auto

this should do it. when you are using the command line. If you partially type a command, you can use the 'tab' key to fill in the rest of the command or the '?' key to show the available options.

eg
set interface eth0/9 phy ?

will display:
device-> set interface trust phy
<return>
auto                 auto negotiation
full                 force full duplex
half                 force half duplex
holddown             holddown time

device-> set interface trust phy

0
 

Author Comment

by:Mirrorinc
Comment Utility
if I remember right this doesn't affect any live traffic correct?
0
 

Author Comment

by:Mirrorinc
Comment Utility
how to you display with the interface is currently set at?
0
 
LVL 18

Expert Comment

by:Sanga Collins
Comment Utility
get interface <interface name>
0
 

Author Closing Comment

by:Mirrorinc
Comment Utility
Thanks everything started to work much faster after setting it to auto.
0
 
LVL 18

Expert Comment

by:Sanga Collins
Comment Utility
Qlemo should get credit too. he was the first post with the actual command :)
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Suggested Solutions

This article is in response to a question (http://www.experts-exchange.com/Networking/Network_Management/Network_Analysis/Q_28230497.html) here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
Transparency shows that a company is the kind of business that it wants people to think it is.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now