Solved

Juniper SSG5 firewall traffic-shaping problem

Posted on 2014-11-10
3
345 Views
Last Modified: 2014-12-20
We just installed a new broadband 100Mb. But the speed test only have around 50Mb after connected to the Juniper SSG5 firewall. However, if i change traffic-shaping mode to OFF, the speed test could have around 100Mb. Because i need traffic-shaping for some policies, the traffic-shaping mode is set to auto mode now.

After checking the policy base traffic-shaping and ingress policy of the interface rth0/5, there is no traffic shaping enabled. The speed only have 50Mb even i change the ingress and egress bandwidth to 100Mb manually as the screenshots.
Is there any other places i need to check for the traffic-shaping? Or how can i do the troubleshooting?
Thank you.
get-int-e05.jpg
traffic-shaping-int-e05.jpg
0
Comment
Question by:dickchan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 69

Accepted Solution

by:
Qlemo earned 500 total points
ID: 40434653
Did you check all policies for traffic shaping settings too?
0
 

Author Comment

by:dickchan
ID: 40439321
I disabled all polices which had traffic shaping, but still had the slow 50Mb problem.
But The speed is 100Mb  after if i disable nsrp HA settings, we had two ssg5 to formed the active/active HA zone.

Where can i check the  traffic shaping or bandwidth control for this case?
Thank you.
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 40439423
Now that you mention HA, I recall having read about issues like this. Check for firmware updates.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Calyptix AE1200 VLAN Question 3 69
SonicWall Max Connection Setting 7 39
port redirection on cisco asa 5520 5 29
Blocking outside IP Addresses 16 47
Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question