asa 5505, voip, and laggy ftp/web

Since I put it in, web browsing is very laggy. We have voip and a 10mbit fiber connection. Cpu is consistently at around 20%. Pps is usually between 1000-2000. kbps is 2000-3000. The voip is marked with dscp EF on the dmz voip server.

Yesterday I noticed that while using voip, if I try and try to upload files by FTP to a partner the transfers just freeze (about 30 .pdf files <1mb each). However, when people go on break and there is no usage of voip, the FTP transfers occur normally and the web speeds up.

Is the ASA doing some sort of traffic handling by default that i'm not aware of (my asa knowledge is very limited).

Does anyone have any ideas?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

Ahriakin

By default the ASA does no QOS (end even when configured only has one LLQ). Sounds like it's plain old saturation.

jrs91

Ahriakin wrote: »

By default the ASA does no QOS (end even when configured only has one LLQ). Sounds like it's plain old saturation.

I thought I blanked-out this post b/c shortly after posting I saw my mistake. I put full-duplex on the wrong interface and the ASA was auto-negotiating to half-duplex with the ISP's switch. I put full-duplex on the correct interface it and unsurprisingly all the problems went away.

Ahriakin

Ouch. You're lucky it wasn't a lot more problematic

Duplex will bite you in the ass when you least expect it.