qos policy

[mayyola]

Hello,

i set up the policy that only particular network segment connect to CCwangserver(linux),recently i use the filezilla sftp to upload file,the file only 200k .jpg

but the upload speed become slowly,it never happen before. when disable the policy following the below,the upload speed become normal

Allow2CCwang cli 254 Yes Yes No No Yes Yes
(L2/3): Mg2CCwang -> ACCEPT

DenytoCCwang cli 198 Yes Yes No Yes Yes Yes
(L2/3): ALL2CCwang -> DROP
log interval: 30

how can i fix that ?

thank you



-> show qos config
QoS Configuration:
Enabled : Yes
Pending changes : None
Classifier:
Default queues : 8
Default queue service : strict-priority
Trusted ports : No
Default bridged disposition : accept
Default routed disposition : accept
Default IGMP/MLD disposition: accept
Logging:
Log lines : 256
Log level : 6
Log to console : No
Forward log : No
Stats interval : 60 seconds
Userports:
Filter : spoof
Shutdown: none
Debug : info

ERROR: Invalid entry: "rule"
-> show policy rule
Policy From Prec Enab Act Refl Log Trap Save
BlockQuarMac cli 260 Yes Yes No No Yes Yes
(L2/3): QuanrantineCond -> DROP

Allow2CCwang cli 254 Yes Yes No No Yes Yes
(L2/3): Mg2CCwang -> ACCEPT

DenytoCCwang cli 198 Yes Yes No Yes Yes Yes
(L2/3): ALL2CCwang -> DROP
log interval: 30

[silvio]

it is difficult to understand your policies. So please sent us:
show configuration snapshot qos

BR Silvio

[mayyola]

Hello,Sir:


i'm late to reply,here is the snapshot about part of policy. i concerned about if its cache or buffer is full,i'm not sure.

policy network group Mgccwang x.x.157.120 mask 255.255.255.128 x.x.164.70 mask 255.255.255.0 x.x.167.231 mask 255.255.255.224 x.x.58.1 mask 255.255.255.0 x.x.156.213 mask 255.255.255.192
policy network group ccwangser x.x.164.229

policy service ssh protocol 6 destination tcp port 22

policy rule Allow2CCwang precedence 254 condition Mg2CCwang action ACCEPT
policy rule DenytoCCwang precedence 198 condition ALL2CCwang action DROP log

policy condition ALL2CCwang destination network group ccwangser service group AccessProtocol
policy condition Mg2CCwang source network group Mgccwang destination network group ccwangser

maybe should clean this, is it the factor?
! System service :
swlog appid ALL level alert
swlog appid WEB level warning
swlog appid FTP level warning

any help is appreciated.

[silvio]

Hi,
ssh uses the same port 22 like sftp. Maybe this is the reason.

about the question to clean: Yes - somebody has increased the log level for this appid. You can set it back to info (=6).

BR Silvio