Subject says it all—Internet downloads are fast at 120+Mbps when I connect a system directly to the SRX, but are slow at 20Mbps when I connect the same system (and other systems) and the SRX to the switch. Obviously there’s some incompatibility with the switch and the SRX, but I don’t know how to pinpoint and resolve this.
> show version
Hostname: srx300
Model: srx300
Junos: 15.1X49-D45
JUNOS Software Release [15.1X49-D45]> show interfaces ge-0/0/1 extensive
Physical interface: ge-0/0/1, Enabled, Physical link is Up
Interface index: 136, SNMP ifIndex: 509, Generation: 139
Link-level type: Ethernet, MTU: 1514, LAN-PHY mode, Link-mode: Full-duplex,
Speed: 100mbps, BPDU Error: None, MAC-REWRITE Error: None, Loopback: Disabled,
Source filtering: Disabled, Flow control: Disabled, Auto-negotiation: Enabled,
Remote fault: Online
Device flags : Present Running
Interface flags: SNMP-Traps Internal: 0x0
Link flags : None
CoS queues : 8 supported, 8 maximum usable queues
Hold-times : Up 0 ms, Down 0 ms
Current address: ec:13:db:d9:6c:01, Hardware address: ec:13:db:d9:6c:01
Last flapped : 2016-12-07 00:24:00 MST (22:45:46 ago)
Statistics last cleared: 2016-12-06 23:23:53 MST (23:45:53 ago)
Traffic statistics:
Input bytes : 2422255344 108936 bps
Output bytes : 13097241379 234064 bps
Input packets: 7719003 88 pps
Output packets: 10939869 82 pps
Input errors:
Errors: 1, Drops: 0, Framing errors: 1, Runts: 0, Policed discards: 1039,
L3 incompletes: 0, L2 channel errors: 0, L2 mismatch timeouts: 0,
FIFO errors: 0, Resource errors: 0
Output errors:
Carrier transitions: 8, Errors: 0, Drops: 0, Collisions: 0, Aged packets: 0,
FIFO errors: 0, HS link CRC errors: 0, MTU errors: 0, Resource errors: 0
Egress queues: 8 supported, 4 in use
Queue counters: Queued packets Transmitted packets Dropped packets
0 10937518 10937518 0
1 0 0 0
2 0 0 0
3 4488 4488 0
Queue number: Mapped forwarding classes
0 best-effort
1 expedited-forwarding
2 assured-forwarding
3 network-control
Active alarms : None
Active defects : None
MAC statistics: Receive Transmit
Total octets 2587006103 12977681914
Total packets 7772305 10719634
Unicast packets 7285080 10716586
Broadcast packets 186578 3048
Multicast packets 300647 0
CRC/Align errors 1 0
FIFO errors 0 0
MAC control frames 0 0
MAC pause frames 0 0
Oversized frames 0
Jabber frames 0
Fragment frames 0
VLAN tagged frames 0
Code violations 0
Filter statistics:
Input packet count 0
Input packet rejects 0
Input DA rejects 0
Input SA rejects 0
Output packet count 0
Output packet pad count 0
Output packet error count 0
CAM destination filters: 2, CAM source filters: 0
Autonegotiation information:
Negotiation status: Complete
Link partner:
Link mode: Full-duplex, Flow control: None, Remote fault: OK
Local resolution:
Flow control: None, Remote fault: Link OK
Packet Forwarding Engine configuration:
Destination slot: 0
CoS information:
Direction : Output
CoS transmit queue Bandwidth Buffer Priority Limit
% bps % usec
0 best-effort 95 950000000 95 0 low none
3 network-control 5 50000000 5 0 low none
Interface transmit statistics: Disabled
Logical interface ge-0/0/1.0 (Index 71) (SNMP ifIndex 515) (Generation 136)
Flags: Up SNMP-Traps 0x0 Encapsulation: ENET2
Traffic statistics:
Input bytes : 2422252764
Output bytes : 13096598625
Input packets: 7719009
Output packets: 10939898
Local statistics:
Input bytes : 9047602
Output bytes : 12549025
Input packets: 91223
Output packets: 29277
Transit statistics:
Input bytes : 2413205162 106640 bps
Output bytes : 13084049600 231416 bps
Input packets: 7627786 85 pps
Output packets: 10910621 81 pps
Security: Zone: Internal
Allowed host-inbound traffic : bfd bgp dvmrp igmp ldp msdp nhrp ospf pgm
pim rip router-discovery rsvp sap vrrp dhcp http https ping ssh telnet
Flow Statistics :
Flow Input statistics :
Self packets : 36414
ICMP packets : 957
VPN packets : 0
Multicast packets : 89447
Bytes permitted by policy : 2301144984
Connections established : 132135
Flow Output statistics:
Multicast packets : 0
Bytes permitted by policy : 13098798455
Flow error statistics (Packets dropped due to):
Address spoofing: 0
Authentication failed: 0
Incoming NAT errors: 0
Invalid zone received packet: 0
Multiple user authentications: 0
Multiple incoming NAT: 0
No parent for a gate: 0
No one interested in self packets: 0
No minor session: 0
No more sessions: 0
No NAT gate: 0
No route present: 84297
No SA for incoming SPI: 0
No tunnel found: 0
No session for a gate: 0
No zone or NULL zone binding 0
Policy denied: 3270
Security association not active: 0
TCP sequence number out of window: 0
Syn-attack protection: 0
User authentication errors: 0
Protocol inet, MTU: 1500, Generation: 149, Route table: 0
Flags: Sendbcast-pkt-to-re
Addresses, Flags: Is-Preferred Is-Primary
...
Generation: 154