Solved

Juniper SSG5 firewall traffic-shaping problem

Posted on 2014-11-10
3
342 Views
Last Modified: 2014-12-20
We just installed a new broadband 100Mb. But the speed test only have around 50Mb after connected to the Juniper SSG5 firewall. However, if i change traffic-shaping mode to OFF, the speed test could have around 100Mb. Because i need traffic-shaping for some policies, the traffic-shaping mode is set to auto mode now.

After checking the policy base traffic-shaping and ingress policy of the interface rth0/5, there is no traffic shaping enabled. The speed only have 50Mb even i change the ingress and egress bandwidth to 100Mb manually as the screenshots.
Is there any other places i need to check for the traffic-shaping? Or how can i do the troubleshooting?
Thank you.
get-int-e05.jpg
traffic-shaping-int-e05.jpg
0
Comment
Question by:dickchan
  • 2
3 Comments
 
LVL 69

Accepted Solution

by:
Qlemo earned 500 total points
ID: 40434653
Did you check all policies for traffic shaping settings too?
0
 

Author Comment

by:dickchan
ID: 40439321
I disabled all polices which had traffic shaping, but still had the slow 50Mb problem.
But The speed is 100Mb  after if i disable nsrp HA settings, we had two ssg5 to formed the active/active HA zone.

Where can i check the  traffic shaping or bandwidth control for this case?
Thank you.
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 40439423
Now that you mention HA, I recall having read about issues like this. Check for firmware updates.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question