From: Joshua (joshualixin@gmail.com)
Date: Tue Apr 08 2008 - 02:20:14 ART
Hi Group,
I am testing Cisco 871W in a lab environment. The WAN ckt is ADSL. The
router will talk to an internal RADIUS server via IPSec VPN for
authentication. I observered the local latency is very hign and not stable.
The wireless client (Windows XP SP2 with default wireless utility) is in the
same room of the router. I expected 3ms lateney, but it gave average latency
about 120ms. This Cisco 871W is running
"ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE
MRM_871-Eng uptime is 4 days, 7 hours, 16 minutes
System returned to ROM by power-on
System image file is "flash:c870-advsecurityk9-mz.124-4.T8.bin"
Can anybody give me some thought what could be wrong?
============Cisco 871W Configuraiton as Below=============
Wireless_871#sh run
Building configuration...
Current configuration : 5082 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Wireless_871
!
boot-start-marker
boot-end-marker
!
logging buffered 4096 debugging
!
aaa new-model
!
!
aaa group server radius server-group-1
server 10.10.7.4 auth-port 1645 acct-port 1646
!
aaa authentication login eap_methods group server-group-1
!
aaa session-id common
!
resource policy
!
ip subnet-zero
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.9.88.1 10.9.88.20
!
ip dhcp pool client
network 10.9.88.0 255.255.255.0
default-router 10.9.88.2
domain-name lab.net
dns-server 10.10.5.68
!
!
no ip domain lookup
ip domain name lab.net
ip name-server 10.10.5.68
!
!
username test passwork test
!
!
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
crypto isakmp key LetMeInP address 200.200.178.100
!
!
crypto ipsec transform-set myset esp-3des esp-md5-hmac
!
crypto map mymap 10 ipsec-isakmp
set peer 200.200.178.100
set transform-set myset
match address 150
!
bridge irb
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
crypto map mymap
!
interface Dot11Radio0
no ip address
no snmp trap link-status
!
broadcast-key change 900
!
!
!
encryption vlan 1 mode ciphers tkip
!
ssid LedcorWLAN
vlan 1
authentication open eap eap_methods
authentication key-management wpa
guest-mode
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0
48.0 54.0
channel 2462
station-role root
no cdp enable
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no snmp trap link-status
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
no ip address
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
bridge-group 1
bridge-group 1 spanning-disabled
!
interface BVI1
ip dhcp client update dns
ip ddns update test
ip address 10.9.88.2 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip classless
!
ip http server
ip http secure-server
ip nat inside source route-map internet interface FastEthernet4 overload
!
ip radius source-interface BVI1
access-list 150 permit ip 10.9.88.0 0.0.0.255 10.10.0.0 0.0.255.255
access-list 160 deny ip 10.9.88.0 0.0.0.255 10.10.0.0 0.0.255.255
access-list 160 permit ip 10.9.88.0 0.0.0.255 any
snmp-server community ledcorsnmp RO
snmp-server enable traps tty
no cdp run
route-map internet permit 10
match ip address 160
!
radius-server attribute 32 include-in-access-req format %h
radius-server host 10.10.7.4 auth-port 1645 acct-port 1646 key corled
radius-server retransmit 2
radius-server timeout 4
radius-server deadtime 1
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
exec-timeout 0 0
no modem enable
line aux 0
line vty 0 4
privilege level 15
password cisco
transport input telnet ssh
!
scheduler max-task-time 5000
end
Wireless_871#
This archive was generated by hypermail 2.1.4 : Thu May 01 2008 - 08:25:50 ART