• October 24, 2020, 02:17:21 PM
Welcome, Guest. Please login or register. Registration is free.
Did you miss your activation email?

Author Topic: how to improve speed on RFS 4000  (Read 6361 times)

0 Members and 1 Guest are viewing this topic.

Offline SSLee

  • Rookie
  • **
  • Posts: 7
how to improve speed on RFS 4000
« on: July 25, 2014, 08:08:14 AM »
Hi,

I've the RFS 4000 and APxx models with supporting 802.11a/b/g/n. Now I compared with another brand when I down load a file from file server, in the same environment. I found that Motorola RFS 4000 can delivery a file with rate around 2.5MB/s while another brand can delivery 5+ MB(byte)/s.

If you have any idea to adjust a parameter or suggest, please kindly let me know. Thanks.
« Last Edit: July 25, 2014, 08:10:01 AM by SSLee »


Offline McNulty

  • Sr. Member
  • ****
  • Posts: 217
Re: how to improve speed on RFS 4000
« Reply #1 on: July 26, 2014, 02:34:47 AM »
Could you please post your RFS config here? (remove personal information)

Offline SSLee

  • Rookie
  • **
  • Posts: 7
Re: how to improve speed on RFS 4000
« Reply #2 on: July 26, 2014, 05:43:18 AM »
Here're my configurations.


!
! Configuration of RFS4000 version 5.4.4.0-008R
!
!
version 2.2
!
!
ip access-list BROADCAST-MULTICAST-CONTROL
 permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic"
 permit udp any eq 67 any eq dhcpc rule-precedence 11 rule-description "permit DHCP replies"
 deny udp any range 137 138 any range 137 138 rule-precedence 20 rule-description "deny windows netbios"
 deny ip any 224.0.0.0/4 rule-precedence 21 rule-description "deny IP multicast"
 deny ip any host 255.255.255.255 rule-precedence 22 rule-description "deny IP local broadcast"
 permit ip any any rule-precedence 100 rule-description "permit all IP traffic"
!
mac access-list PERMIT-ARP-AND-IPv4
 permit any any type ip rule-precedence 10 rule-description "permit all IPv4 traffic"
 permit any any type arp rule-precedence 20 rule-description "permit all ARP traffic"
!       
firewall-policy default
 no ip dos tcp-sequence-past-window
!
!
mint-policy global-default
!
meshpoint-qos-policy default
!
wlan-qos-policy default
 qos trust dscp
 qos trust wmm
!
radio-qos-policy default
!
aaa-policy aaa1
 authentication server 1 onboard controller
!
captive-portal cap1
 connection-mode https
 server host 192.168.10.100
 server mode centralized
 use aaa-policy aaa1
!       
wlan Profile1
 ssid TF-WiFi-Test
 vlan 1
 bridging-mode tunnel
 encryption-type tkip
 authentication-type none
 wpa-wpa2 psk 0 xxx xxxxx
 use captive-portal cap1
 captive-portal-enforcement
!
ap300 default-ap300
 interface radio1
 interface radio2
!
radius-user-pool-policy test1
 user test1 password 0 xxx xxxxx
!
radius-server-policy Test1
 use radius-user-pool-policy test1
!
dhcp-server-policy default
 dhcp-pool default-vlan-1
  network 192.168.0.0/16
  address range 192.168.10.101 192.168.10.200
  default-router 192.168.1.254
  dns-server 192.168.1.10
!
!
management-policy default
 no http server
 https server
 ssh
 user admin password 1 xxxxxxxxxxxxxxxxxxx
role superuser access all
no snmp-server manager v2
!
l2tpv3 policy default
!
profile rfs4000 default-rfs4000
 ip name-server 192.168.1.11
 autoinstall configuration
 autoinstall firmware
 use radius-server-policy Test1
 crypto ikev1 policy ikev1-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ikev2 policy ikev2-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 crypto ikev1 remote-vpn
 crypto ikev2 remote-vpn
 crypto auto-ipsec-secure
 interface radio1
 interface radio2
 interface up1
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface ge1
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface ge2
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface ge3
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface ge4
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface ge5
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface wwan1
 interface pppoe1
 use firewall-policy default
 logging on
 service pm sys-restart
 router ospf
!
profile ap71xx default-ap71xx
 autoinstall configuration
 autoinstall firmware
 crypto ikev1 policy ikev1-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ikev2 policy ikev2-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 crypto ikev1 remote-vpn
 crypto ikev2 remote-vpn
 crypto auto-ipsec-secure
 interface radio1
 interface radio2
 interface radio3
 interface ge1
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface ge2
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface vlan1
  ip address dhcp
  ip address zeroconf secondary
  ip dhcp client request options all
 interface wwan1
 interface pppoe1
 use firewall-policy default
 logging on
 service pm sys-restart
 router ospf
!
profile ap6532 default-ap6532
 autoinstall configuration
 autoinstall firmware
 crypto ikev1 policy ikev1-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ikev2 policy ikev2-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 crypto ikev1 remote-vpn
 crypto ikev2 remote-vpn
 crypto auto-ipsec-secure
 crypto load-management
 interface radio1
 interface radio2
 interface ge1
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface vlan1
  ip address dhcp
  ip address zeroconf secondary
  ip dhcp client request options all
 interface pppoe1
 use firewall-policy default
 logging on
 service pm sys-restart
 router ospf
!
profile ap650 default-ap650
 autoinstall configuration
 autoinstall firmware
 crypto ikev1 policy ikev1-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ikev2 policy ikev2-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 crypto ikev1 remote-vpn
 crypto ikev2 remote-vpn
 crypto auto-ipsec-secure
 crypto load-management
 interface radio1
  wlan Profile1 bss 1 primary
 interface radio2
  wlan Profile1 bss 1 primary
 interface ge1
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface vlan1
  ip address dhcp
  ip address zeroconf secondary
  ip dhcp client request options all
 interface pppoe1
 use firewall-policy default
 logging on
 service pm sys-restart
!
profile ap6521 default-ap6521
 autoinstall configuration
 autoinstall firmware
 interface radio1
 interface ge1
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface vlan1
  ip address dhcp
  ip address zeroconf secondary
  ip dhcp client request options all
 interface pppoe1
 use firewall-policy default
 logging on
 service pm sys-restart

!
profile ap622 default-ap622
 autoinstall configuration
 autoinstall firmware
 crypto ikev1 policy ikev1-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ikev2 policy ikev2-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 crypto ikev1 remote-vpn
 crypto ikev2 remote-vpn
 crypto auto-ipsec-secure
 crypto load-management
 interface radio1
 interface radio2
 interface ge1
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface vlan1
  ip address dhcp
  ip address zeroconf secondary
  ip dhcp client request options all
 use firewall-policy default
 logging on
 service pm sys-restart
!
rf-domain default
 timezone Asia/xx
 country-code xx
!
rfs4000 xx-xx-F8-4F-xx-xx
 use profile default-rfs4000
 use rf-domain default
 hostname Controller
 license xxxxxxxxxxxxxxxxxxxx
 license xxxxxxxxxxxxxxxxxxxx
 interface vlan1
  description "Virtual Interface for LAN"
  ip address 192.168.10.100/16
  ip address zeroconf secondary
 use captive-portal server cap1
 logging on
 logging console warnings
 logging buffered warnings
!
ap650 xx-xx-F8-9E-xx-xx
 use profile default-ap650
 use rf-domain default
 hostname ap650-9Exxxx
!
end
« Last Edit: July 26, 2014, 05:48:05 AM by SSLee »

Offline McNulty

  • Sr. Member
  • ****
  • Posts: 217
Re: how to improve speed on RFS 4000
« Reply #3 on: July 26, 2014, 06:31:23 PM »
You could try to disable the default firewall policy, and you could try changing the WLAN bridging from tunnel to local.

Other than that check the radio settings and ensure that 802.11n rate are enabled and the 802.11b rates are disabled. (For the test you can disable g-rates as well) 2.5MB/s is typical for 802.11g speed connection so if you were getting 5MB/s then it was likely using 802.11n

Check with your other brand of AP, was the client connected tot the 5G radio or the 2.4G radio? ensure that it is connecting to the equivalent radio on the Motorola.

Offline SSLee

  • Rookie
  • **
  • Posts: 7
Re: how to improve speed on RFS 4000
« Reply #4 on: July 28, 2014, 12:46:32 AM »
Thanks you.

Let's try and will update a result later.

Offline noobie

  • Full Member
  • ***
  • Posts: 92
Re: how to improve speed on RFS 4000
« Reply #5 on: July 28, 2014, 01:57:10 AM »
you have tkip encryption under wlan config, which essentially limits you to legacy a/b/g rates only (i.e. max 54Mbps). 802.11n standard does not support TKIP or WEP. Use CCMP to get 802.11n speeds. Btw, why do you need captive portal and encryption on the same WLAN?

P.S. disabling b AND g rates and keeping only -n is never a good idea, since -n requires you to have at least one basic data-rate from b/g range. Make sure you are connecting to the 5GHz radio and this radio uses 40mhz wide channel to get max throughput.

Offline SSLee

  • Rookie
  • **
  • Posts: 7
Re: how to improve speed on RFS 4000
« Reply #6 on: July 28, 2014, 02:12:21 AM »
Thanks!

I'd like to use captive portal and Encryption (TKIP will be replaced later with your suggestion) on the same WLAN, because internal users are allowed to use without to enter a username/password (just enter a key on the 1st time) and guest users are required to login by using captive portal occasionally.

Offline SSLee

  • Rookie
  • **
  • Posts: 7
Re: how to improve speed on RFS 4000
« Reply #7 on: August 01, 2014, 12:19:01 PM »
After altering your suggested solution, now my WLAN can delivery speed more than 5+MB and better than the other brand. The main reason I changed was encryption.

Thanks all of you.