Wireless Access

Airheads,

Howdy, long time reader, first time poster.

Equipment-

Aruba3400-US

6.3.0.1

RAP5

We have been using RAPs for several years now, pretty much just for people to take home and work from home.   We recently tried to run a remote site that consist of roughly 25 machines, usually only 15 or so used in its peak, through a RAP.  They have Charter business and have a 60D/7U internet package.  When I plug my laptop up to the charter modem I see 60/7 speeds at speedtest.net.

When I plug the RAP in and plug my laptop up to the RAP, the speeds drop from 60/7 to 2/1, 2mb down and 1mb up. (again wired) I realize that all traffic is getting passed back to the controller thanks to tunneled mode, but should the speed really be that different from the speed of the charter modem?  Is the RAP only using a % of the availible pipe by default?

What are some things I can check that could possibly be slowing down the pipe.

Thanks

Joe

Try putting a test port into bridge mode and check the speed. This will help to eliminate the RAP as the trouble spot.

I'll do that now and test it this evening, thanks for the reply.

Any update?  I'm seeing similar problems.

Hi Aruba, how do you explain this to the users? The WAN connection is 10 Mbps/10 Mbps ... but the througput for the users when behind the RAP is 1 Mbps download. Is this normal, to only utilize 10% of the WAN ?

Please response. Thanks

without the RAP 10 Mbps

Behind the RAP via wired 1 Mbps down

Behind the RAP via wireless 1 Mbps down

and there is no bandwidth contract configured

(FLRCA01-ArubaMrap1) #show rights Intranet

Derived Role = 'Intranet'
 Up BW:No Limit   Down BW:No Limit 
 L2TP Pool = default-l2tp-pool
 PPTP Pool = default-pptp-pool
 Periodic reauthentication: Disabled
 ACL Number = 132/0
 Max Sessions = 65535

 Check CP Profile for Accounting = TRUE

access-list List
----------------
Position  Name                    Type     Location
--------  ----                    ----     --------
1         control                 session 
2         Deny_Guest              session 
3         Internal Network        session 
4         allowall                session 
5         deny_LLMNR_acl          session 
6         deny_mDNS_acl           session 
7         deny_SSDP_and_UPnP_acl  session 
8         deny_netbios_acl        session 
9         Intranet-Control        session 

control
-------
Priority  Source  Destination  Service       Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
--------  ------  -----------  -------       ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
1         any     any          svc-papi      permit                           Low                                                           4
2         any     any          svc-sec-papi  permit                           Low                                                           4
3         user    any          udp 68        deny                             Low                                                           4
4         any     any          svc-icmp      permit                           Low                                                           4
5         any     any          svc-dns       permit                           Low                                                           4
6         any     any          svc-cfgm-tcp  permit                           Low                                                           4
7         any     any          svc-adp       permit                           Low                                                           4
8         any     any          svc-tftp      permit                           Low                                                           4
9         any     any          svc-dhcp      permit                           Low                                                           4
10        any     any          svc-natt      permit                           Low                                                           4
Deny_Guest
----------
Priority  Source  Destination                 Service  Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
--------  ------  -----------                 -------  ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
1         any     10.252.166.0 255.255.255.0  any      deny                             Low                                                           4
Internal Network
----------------
Priority  Source  Destination         Service  Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
--------  ------  -----------         -------  ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
1         any     10.0.0.0 255.0.0.0  any      permit                           High                                                          4
allowall
--------
Priority  Source  Destination  Service  Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
--------  ------  -----------  -------  ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
1         any     any          any      permit                           Low                                                           6
2         any     any          any      permit                           Low                                                           4
deny_LLMNR_acl
--------------
Priority  Source  Destination      Service  Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
--------  ------  -----------      -------  ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
1         any     239.255.255.252  any      deny                             Low                                                           4
deny_mDNS_acl
-------------
Priority  Source  Destination  Service   Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
--------  ------  -----------  -------   ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
1         any     any          udp 5353  deny                             Low                                                           4
deny_SSDP_and_UPnP_acl
----------------------
Priority  Source  Destination      Service  Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
--------  ------  -----------      -------  ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
1         any     239.255.255.250  any      deny                             Low                                                           4
2         any     239.255.255.253  any      deny                             Low                                                           4
deny_netbios_acl
----------------
Priority  Source  Destination  Service  Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
--------  ------  -----------  -------  ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
1         any     any          udp 137  deny                             Low                                                           4
2         any     any          udp 138  deny                             Low                                                           4
Intranet-Control
----------------
Priority  Source          Destination  Service       Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
--------  ------          -----------  -------       ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
1         user            any          udp 68        deny                             Low                                                           4
2         any             any          svc-icmp      permit                           Low                                                           4
3         any             any          svc-dns       permit                           Low                                                           4
4         any             any          svc-papi      permit                           Low                                                           4
5         any             any          svc-sec-papi  permit                           Low                                                           4
6         any             any          svc-cfgm-tcp  permit                           Low                                                           4
7         any             any          svc-adp       permit                           Low                                                           4
8         any             any          svc-tftp      permit                           Low                                                           4
9         any             any          svc-dhcp      permit                           Low                                                           4
10        any             any          svc-natt      permit                           Low                                                           4
11        guest-networks  any          any           deny                             Low                                                           4

Expired Policies (due to time constraints) = 0

Have you tried cappalli's suggestion from earlier in the post?

---

Try putting a test port into bridge mode and check the speed. This will help to eliminate the RAP as the trouble spot.

There's nothing sitting between the WAN Link and the RAP (firewall/ASA appliance) is there and this is truly a configured RAP and not a CAP correct? I just wanted to double-check because this issue sounded very similar to what we experienced last year.

We brought a remote site up with 4 Campus APs sitting behind a Cisco ASA, and the speed tests were horrendus (about 1 Mb/s) - on top of them taking forever to download their firmware updates during first boot up. After doing some research, discovered we were experiencing packet fragmentation. We changed our MTU down to 1200 (The default MTU size for RAPs) and that resolved the issue. That was in our case though - Campus APs sitting behind a Cisco ASA.

• https://networkcanuck.com/2013/06/10/troubleshooting-mtu-size-over-ipsec-vpn/
• http://revolutionwifi.blogspot.ca/2010/07/fragmentation-in-controller_02.html
• http://community.arubanetworks.com/t5/Controller-Based-WLANs/How-to-change-the-Maximum-Transfer-Unit-MTU-on-the-GRE-tunnel/ta-p/175990

802.1x and Captive portal authentication is not supported in wired Bridge mode

and  yes it is a RAP and not CAP.