Strange problem with slow download speed on WAN
-
Hmm. What did you replace the PSU with? Was it of sufficient amperage?
Hard to say what else could be causing the negotiation problems, or even if that is a symptom rather than a cause.
You could try putting a switch/hub in between the modem and pfSense box if you have one to hand.Steve
-
What did you replace the PSU with? Was it of sufficient amperage?
…
You could try putting a switch/hub in between the modem and pfSense box if you have one to hand.My first and my second PSU were the recommended parts by Soekris for this board (12V, 3A).
I will use a hub between pfSense and the modem and will update this post within half an hour.-
UPDATE1:
I used a hub between :
>pfSense WAN iface and the modem…same problem.
[PC–(1000baseT<full-duplex>)--pfSenseLAN--pfSenseWAN--(100baseTX<full-duplex>)--Modem], 0 errors, 0 collisions
>pfSense LAN iface and the PC…same problem. -
UPDATE2:
Downloading (Copy-Paste large file) from the LAN PC to a WLAN PC over RDP through pfsense box gives me around 15+ Mbps...not bad and with low CPU/Memory usage.</full-duplex></full-duplex>
-
-
Huh. I figured a new psu would fix you up. You might want to try running iperf from one wired pc on one interface to another wired pc on another interface and see what results you get. Jperf provides a nice little gui for running under Windows, it can be a little finicky to get working, but I've used it many times with good results.
I wonder if your pcb got zapped somehow, affecting all your onboard nics, the controller or something else.
-
It may also be worthwhile to reinstall pfsense to ensure it's a definitely hardware issue and not bad behavior from an add-on package.
-
If I finally reinstall pfSense nanobsd version in a new HDD which one would you recommend for Soekris board net6501-50?
mSATA SSD maybe? Any recommended vendor/product?I'm not yet convinced to reinstall the system from scratch but I'm asking in case I will do so.
-
I would think any of the Transcend mSATA SSDs that are listed on the product page of your 6501 would be great choices. I've even bought ones off eBay like the one below. I think any of these are reliable enough that you could run the full version of pfSense instead of the nanobsd image if you wished.
http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=221163403530
Can your Soekris board boot off usb? That would be a non-destructive way to temporarily run another image to see if that improves your situation.
-
Can your Soekris board boot off usb? That would be a non-destructive way to temporarily run another image to see if that improves your situation.
Yes it can, so I will try to boot from USB and test before any hardware replacement or complete reinstallation.
-
I'd be interested to see if that changes things. Definitely don't want to put you through a spending spree and not have it fix anything, though I don't mind spending other people's $$ :D
When you accomplished the large file transfer from your the LAN PC to your WLAN PC over RDP were both machines wired directly to the GE interfaces?
-
I'd be interested to see if that changes things. Definitely don't want to put you through a spending spree and not have it fix anything, though I don't mind spending other people's $$ :D
Lol, don't worry trunix, if I would think your recommendation doesn't make sense I wouldn't follow it. ;)
The whole troubleshooting didn't cost me anything till now.When you accomplished the large file transfer from your the LAN PC to your WLAN PC over RDP were both machines wired directly to the GE interfaces?
The LAN PC was on GE interface and the WLAN PC on wireless 11g. Both connected to pfSense box.
-
Is your wireless connection a separate access point, or is it integrated in either the modem or the 6501? What was different from this PC transfer test that netted 15+ Mbps than the earlier one you conducted that only resulted in 7-10 Mbps?
-
Is your wireless connection a separate access point, or is it integrated in either the modem or the 6501? What was different from this PC transfer test that netted 15+ Mbps than the earlier one you conducted that only resulted in 7-10 Mbps?
Wireless integrated on 6501 board.
The difference is that before there were problems with the interfaces causing errors and collisions. These problems were resolved by themselves by rebooting the board and setting the interfaces to specific speed and then back to auto. Right now they are all to "auto" without errors. -
Got it. Previously you had a PC connected to the LAN port of your DSL modem, so I guess that was a small config difference as well. Hmmm, having to fiddle with the interface settings to get things stabilized isn't good. Hardware checksum offload is back to enabled (checkbox cleared), correct? Technically your nics are capable of hardware TCP segmentation offload, but I'd leave that off for now and it may be something to optimize later when everything is back to working okay.
Hardware large receive offload and device polling are disabled are well, correct? Disabled for LRO means the checkbox is marked and disabled for device polling means the checkbox is cleared. I mention that only because I get turned around and flip-flop the setting from time to time when I'm making adjustments.
Any improvement running booting off usb?
-
Unfortunately I didn't succeed to boot it from USB. I tried several supported distributions and USB sticks without success. Do you recommend any distro which I may haven't tried yet?
My BIOS version supports booting from USB: "comBIOS ver. 1.41a 20111203"
I got the same error for all my attempts:comBIOS Monitor. Press ? for help.
boot 80
No Boot device available, enter monitor.comBIOS Monitor. Press ? for help.
For the settings you mentioned above I will check even I think these are correct.
Just for information, Soekris suggested to send them the board for inspection. -
I'm sure you've already tried the i386 memstick distro, and that's always worked for me. More often than not, I just keep the latest LiveCD handy and use a usb cd/dvd drive.
Sorry, I'm not gonna be any help with the Soekris error messages, perhaps Steve or someone else familiar with the hardware can chime in? If I were you, I'd want to try this last bit of troubleshooting before mailing the firewall back to Soekris, but be mindful your warranty doesn't expire in the meantime.
-
After several unsuccessful tests, I upgraded my comBIOS to the latest version:
comBIOS ver. 1.41c 20121115
Then I tried with FreeBSD (FreeBSD-9.0-RELEASE) following these two guides without success:
http://www.macfreek.nl/memory/FreeBSD_9_on_Soekris_net6501
http://wiki.soekris.info/Net6501_freebsdActually for these tests with USB sticks I have unplugged the SATA disk and each time the command "boot 80" takes some seconds and then always gives the "No boot device available" error.
I think I may try to reinstall pfsense on the same SATA disk.
The board has 3 years warranty and it's 10 months old, so the expiration is not a problem. I want to try everything before sending it back. -
Happy New Year guys!
It's time for an update on this topic.
So…I finally found a USB stick that was recognized by the comBios so I installed the full version of the latest pfSense version (2.0.2) on a different HDD, Transcend mSATA SSD. Actually I used the "pfSense-memstick-serial-2.0.2-RELEASE-i386-20121207-1630.img" image and the "Win32DiskImager" software to write it to the USB stick.After the installation I assigned only the WAN and LAN interfaces and did my speed tests using two specific cables and reassigning the LAN/WAN interfaces.
To keep it short I get slow speeds ONLY when a specific interface (em3) is assigned to WAN/LAN. This iface was always assigned to WAN or LAN when I was doing my tests in the past and it was the reason I was getting the slow speeds. So it seems to be a hardware related issue.I had a closer look to this interface and I cannot see any difference comparing with the other. I mean all 8 pins are clean and without any signs of strain.
What do you recommend? Should I send it to Soekris service? Is there anything else I could do?
The board is quite new and considering its price I am not willing to use only 3 of the interfaces… -
Hmm, seems odd.
Before any of your trouble started were your using em3 and getting full speed?
If so then it pretty much can only be a hardware problem of some kind.
The only other thing to consider is how the NICs are connected internally. For instance my home box has 3 Intel Gigabit NICs but they are actually provided by one Gigabit chip and one Dual Gigabit chip. These are connected on separate PCI bus connections. I can achieve a greater throughput by arranging the highest traffic to use both chips. It's pretty marginal though! ;)Steve
-
FINALLY SOLVED!!! :o
Hi guys,
let me explain the root cause and how I found it out.I noticed that the speed is slow only when that interface is assigned to WAN and NOT to LAN. It means when em3 was LAN the speed was high and when WAN, slow! That pointed me to the right direction. I remembered that in the past I also had slow speeds with other interfaces as WAN…
So the same interface is slow as WAN and fast as LAN...but what's the difference?
WAN had always a specific IP (DHCP reservation on the DSL router). So, I logged in to the router and changed the reservation to a different IP and suddenly I got high speed again for WAN! The only setting on the router which is related to the specific IP is the DMZ, since I had it enabled for this specific IP to be able to use pfSense for VPN etc. That was necessary since the DSL modem was not on bridge mode.So finally when I disable the DMZ setting for the WAN IP then the speed is high and when enable again is slow!!! It's clear that it's a malfunction of the DSL-Easybox!
Actually, it explains why I had this problem even if I was reassigning the WAN in the past. Back then I was updating that DHCP reservation to point to the same IP (to be able to use my VPN) and I always had the same problem. Yesterday I built the system from scratch again (new HDD) and I did my tests without caring to get this specific IP (without updating the reservation) and that's why I got the different results for one of the interfaces…
Thank you all guys for the feedback and the ideas you provided. I enjoyed the troubleshooting and for me it was indeed an interesting case! ;D
***UPDATE: Using port forward (NAT settings) instead of the DMZ setting works fine for VPN without affecting the speed! :)
-
Ah! Well deduced. :)
There is no QoS / traffic shaping on the Easybox?Steve
-
There is no QoS / traffic shaping on the Easybox?
The QoS menu is locked/disabled by default and sooner or later I need to reset and rebuild it from scratch too.
I'm afraid there are some default settings which are currently not visible to the user.