Hello,
i set up the policy that only particular network segment connect to CCwangserver(linux),recently i use the filezilla sftp to upload file,the file only 200k .jpg
but the upload speed become slowly,it never happen before. when disable the policy following the below,the upload speed become normal
Allow2CCwang cli 254 Yes Yes No No Yes Yes
(L2/3): Mg2CCwang -> ACCEPT
DenytoCCwang cli 198 Yes Yes No Yes Yes Yes
(L2/3): ALL2CCwang -> DROP
log interval: 30
how can i fix that ?
thank you
-> show qos config
QoS Configuration:
Enabled : Yes
Pending changes : None
Classifier:
Default queues : 8
Default queue service : strict-priority
Trusted ports : No
Default bridged disposition : accept
Default routed disposition : accept
Default IGMP/MLD disposition: accept
Logging:
Log lines : 256
Log level : 6
Log to console : No
Forward log : No
Stats interval : 60 seconds
Userports:
Filter : spoof
Shutdown: none
Debug : info
ERROR: Invalid entry: "rule"
-> show policy rule
Policy From Prec Enab Act Refl Log Trap Save
BlockQuarMac cli 260 Yes Yes No No Yes Yes
(L2/3): QuanrantineCond -> DROP
Allow2CCwang cli 254 Yes Yes No No Yes Yes
(L2/3): Mg2CCwang -> ACCEPT
DenytoCCwang cli 198 Yes Yes No Yes Yes Yes
(L2/3): ALL2CCwang -> DROP
log interval: 30
qos policy
Re: qos policy
it is difficult to understand your policies. So please sent us:
show configuration snapshot qos
BR Silvio
show configuration snapshot qos
BR Silvio
Re: qos policy
Hello,Sir:
i'm late to reply,here is the snapshot about part of policy. i concerned about if its cache or buffer is full,i'm not sure.
policy network group Mgccwang x.x.157.120 mask 255.255.255.128 x.x.164.70 mask 255.255.255.0 x.x.167.231 mask 255.255.255.224 x.x.58.1 mask 255.255.255.0 x.x.156.213 mask 255.255.255.192
policy network group ccwangser x.x.164.229
policy service ssh protocol 6 destination tcp port 22
policy rule Allow2CCwang precedence 254 condition Mg2CCwang action ACCEPT
policy rule DenytoCCwang precedence 198 condition ALL2CCwang action DROP log
policy condition ALL2CCwang destination network group ccwangser service group AccessProtocol
policy condition Mg2CCwang source network group Mgccwang destination network group ccwangser
maybe should clean this, is it the factor?
! System service :
swlog appid ALL level alert
swlog appid WEB level warning
swlog appid FTP level warning
any help is appreciated.
i'm late to reply,here is the snapshot about part of policy. i concerned about if its cache or buffer is full,i'm not sure.
policy network group Mgccwang x.x.157.120 mask 255.255.255.128 x.x.164.70 mask 255.255.255.0 x.x.167.231 mask 255.255.255.224 x.x.58.1 mask 255.255.255.0 x.x.156.213 mask 255.255.255.192
policy network group ccwangser x.x.164.229
policy service ssh protocol 6 destination tcp port 22
policy rule Allow2CCwang precedence 254 condition Mg2CCwang action ACCEPT
policy rule DenytoCCwang precedence 198 condition ALL2CCwang action DROP log
policy condition ALL2CCwang destination network group ccwangser service group AccessProtocol
policy condition Mg2CCwang source network group Mgccwang destination network group ccwangser
maybe should clean this, is it the factor?
! System service :
swlog appid ALL level alert
swlog appid WEB level warning
swlog appid FTP level warning
any help is appreciated.
Re: qos policy
Hi,
ssh uses the same port 22 like sftp. Maybe this is the reason.
about the question to clean: Yes - somebody has increased the log level for this appid. You can set it back to info (=6).
BR Silvio
ssh uses the same port 22 like sftp. Maybe this is the reason.
about the question to clean: Yes - somebody has increased the log level for this appid. You can set it back to info (=6).
BR Silvio