USG Flex 100H and GS1920-24HPv2 VLAN and LAG Internet speed issue

snekbaev
snekbaev Posts: 9 image  Freshman Member
First Comment Friend Collector First Anniversary
in Security

Hi,

USG fw: V1.35(ABXF.2)
Switch fw: V5.00(ABMI.1)

I've configured everything needed: separate zones (not using existing LAN zone), VLANs, policies, configured LAG (LACP) on 3 ports and connected to switch. Everything seems to be fine, however, after that I decided to test Internet speed using services like speedtest.net and fast.com, the former showed 1/3 of our 1 Gb/s WAN, sometimes it's half, occasionally climbs to 7xx-8xx Mb/s, but generally seems to stay 1/3 or 1/2-ish, while fast.com shows around 100 Mb/s, usually a bit lower, with rare spikes to 150 Mb/s, but consistently close to 100 Mb/s over multiple tests. I tested by connecting the PC to the modem - close to max, plugged it to USG directly into LAN zone (reserved some ports for troubleshooting), lower, but still closer to the max, however, via switch - as described above. Tried mingling with cables, unplugged 2 out of 3 LAG ports, changed LAG to be 2 port only, moved switch LAG ports from 26, 27, 28 into 1-24 range (22, 23, 24) - same thing. Tried changing LAG hashing algorithm to src-dst-mac, same on the switch, doesn't seem to make much difference from what my config of src-dst-ip-mac and src-dst-ip on the switch was. In the end, to rule out LAG-related issue I removed port 22 from LAG on the switch and port 6 from the USG. Then in the "Interfaces" on USG for all VLANs changed the member from LAG interface to p6. And then when tested speeds were like as if I'm plugged into USG directly - near max. Changed VLANs back to use existing LAG the issue came back, changed to p6 - all good.

What am I missing from the configuration? Or is there a problem with the software given, afair, this USG model just recently got VLAN support for LAG interfaces?

Thank you!

Follow up questions:

  1. for LAG (LACP) do I need to have odd or even number of ports for the best utilization?
  2. on GS1920 there are extra combo ports, for the best performance, should I keep the switch LAG ports in the 1-24 range or can I move them back to 25-28 combo port range?

Thanks again!

All Replies

  • PeterUK
    PeterUK Posts: 4,169 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited October 4

    So in short testing without a LAG to the USG speed is fine but not with a LAG?

    This might be a performance issue not known?

    So why you need a LAG? as the USG FLEX 100H only has 1Gb a LAG would not seem to help here? I could understand if you had two LAG groups per subnet to have LAN traffic between subnets go fast or if you had the FLEX 200H with 2.5Gb as WAN and LAG 1Gb ports to even out the bandwidth.

    so some tests you can do are get a Download Manager like FDM 3.9.7

    Free Download Manager for Windows | Download

    Find a test download or ISO and start with one thread and see how fast that downloads (after Preparing files on the disk should pick up speed) then add threads + to see if download speed scales.

  • snekbaev
    snekbaev Posts: 9 image  Freshman Member
    First Comment Friend Collector First Anniversary

    Hi,

    in my (limited networking) understanding idea is to create a somewhat single channel/pathway with several 1 Gb/s lanes, so that traffic from/to VLANs between (depending on policies) and outgoing to WAN will utilize the same pipe but will be sorted depending on their ip/mac values, felt simpler, at least. And yes, I'm interested why LAG (even with one cable connected) behaves the way it does

    Thank you!

  • PeterUK
    PeterUK Posts: 4,169 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary

    So yes do the download I said you could also check the CPU of the Flex as you download

  • snekbaev
    snekbaev Posts: 9 image  Freshman Member
    First Comment Friend Collector First Anniversary

    will check next week when in the office, but earlier looked at CPU while doing speedtest.net, if not mistaken it stayed under 15%-20%. However, won't be surprised if speed will be good, as mentioned in the original post: occasionally speedtest.net did go close to ~800 MB/s, but not as stable (and higher) when just port was used. The fast.com test, on the other hand, immediately indicates an issue ~1/10 speed vs when going through port.

  • snekbaev
    snekbaev Posts: 9 image  Freshman Member
    First Comment Friend Collector First Anniversary

    ah, forgot to ask earlier: at home I have GS1900 and after the LAG interface was created I've assigned my VLANs to that interface, not ports. But in GS1920 UI I don't see the LAG interface in VLAN configuration, only ports, so I assigned VLANs to ports that are in the LAG group. AFAIR, I tried clicking around but didn't see an option to actually use LAG (as I have at home). Is this the way it is done in case of GS1920? Wasn't 1900's approach more logical or? Thank you!

  • PeterUK
    PeterUK Posts: 4,169 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited October 6

    I don't think currently the FLEX H had VLAN LAG support

    As for the GS1900 LAG I'm not sure about that one I'm thinking what you might be seeing in the LAG Management that list available with ports and VLAN? The GS1920 and other models to add VLAN to a LAG you don't do it at the LAG section but VLAN section after setup of the LAG.

  • snekbaev
    snekbaev Posts: 9 image  Freshman Member
    First Comment Friend Collector First Anniversary

    before posting I read:

    • https://community.zyxel.com/en/discussion/29502/vlan-over-lag-is-not-currently-supported-wtf
    • https://support.zyxel.eu/hc/en-us/articles/27011543473298--FAQE-USG-FLEX-H-Series-VLAN-Assignment-to-LAG-Interface-uOS-1-32-Why-does-the-new-UI-approach-allow-configuration-of-unsupported-features

    given I'm on 1.35 assumed I'm good, I didn't see any "beta" notice.

    In GS1900: "Configuration → VLAN → VLAN Port" there for each VLAN I select from the dropdown I can see all my ports and then LAG1 to LAG8 listed. And I have configured LAGx for VLANs I need, not the ports in these LAG groups. Similarly, if I go to "Configuration → VLAN → Port" it also lists all the ports and LAG1-LAG8 separately. In GS1920 when configuring LAG interfaces it shows predefined names like T1 to T14, ok, but then when I need to configure VLAN (different view) I only see ports, not a single Tx interface. Thus I assumed I actually need to configure ports instead of Tx interfaces which made less sense to me unlike with GS1900. So either I've missed something in the UI or there's a bug in the firmware and LAG interfaces are not listed or this is how you configure GS1920 when it comes to LAG and VLAN which is, as mentioned, less intuitive.

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,035 image  Guru Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @snekbaev

    I did a local test with GS1920-8HP, and I got over 920 Mb/s of 1Gb/s ISP download speed (topology WAN — USG FLEX 100H ==LAG== GS1920-8HP — PC). May I know when you test the speed test, were there other traffic sharing the WAN throughput? If you confirmed there's no other clients, please help to provide a remote PC for us to test and check.

    Zyxel Melen


  • snekbaev
    snekbaev Posts: 9 image  Freshman Member
    First Comment Friend Collector First Anniversary

    Hi, @Zyxel_Melen

    I was alone in the office basically dealing with USG/switch, other devices were connected yes, but the day before I remember trying pulling some of those off the switch as well. The speedtest.net occasionally gives me 6xx/7xx/8xx Mb/s, but fast.com is never fast when was via LAG or it was a really bad luck if managed to hit fast or low speeds while changing the cable though was rerunning tests every time multiple times.

    Do you have instructions regarding the remote PC given if I will be, possibly, changing cables for VLANs to test and it might be loosing connectivity? We can use my MBP (tether via phone) for you to connect and do the speed tests through another Windows client PC connected to the switch. Also it would be great to do this during off-hours.

    Also, before we proceed can you please answer some of the questions asked earlier:

    1. for LAG (LACP) do I need to have odd or even number of ports for the best utilization?
    2. on GS1920 there are extra combo ports, for the best performance, should I keep the switch LAG ports in the 1-24 range or can I move them back to 25-28 combo port range? How are they internally wired? Like if 25-28 ports work great stand-alone, but slower if 'LAG'ed etc.? Any down-sides using them as regular ports to client devices or must they be connected to other smaller local switches (currently connected to 1-24 range)?
    3. given the device models I have, is my approach of creating a 3-port LAG for the purposes of routing traffic between several VLANs, Internet etc. optimal for all connected (via switch only) wired and wireless devices given USG has policies configured for who can access what?
    4. in GS1900 I assign VLANs to the LAG interface, but GS1920 has it differently and I need to assign VLANs to individual ports, not the LAG interface, right or?

    Thank you!

    P.S.: if you want you can also send me the config screenshots of the test setup you had, I can validate my settings and see if things change, this way we may save time and effort. Thanks again!

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,035 image  Guru Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    edited October 8

    Hi @snekbaev

    for LAG (LACP) do I need to have odd or even number of ports for the best utilization?

    This is not a required option for optimal utilization. You can use an odd or even number of ports to set LAG(LACP).

    on GS1920 there are extra combo ports, for the best performance, should I keep the switch LAG ports in the 1-24 range or can I move them back to 25-28 combo port range?

    Both are fine.

    How are they internally wired?

    LAG(LACP) is a logical port that combines multiple physical ports.

    https://community.zyxel.com/en/discussion/20495/tutorial-of-switch-link-aggregation-v4-80

    Like if 25-28 ports work great stand-alone, but slower if 'LAG'ed etc.?

    No, it should not have slow issue.

    Any down-sides using them as regular ports to client devices or must they be connected to other smaller local switches (currently connected to 1-24 range)?

    No, just as normal as a copper port. The comble port porvides the flexibility for the user to choose fiber connection or copper connection.

    given the device models I have, is my approach of creating a 3-port LAG for the purposes of routing traffic between several VLANs, Internet etc. optimal for all connected (via switch only) wired and wireless devices given USG has policies configured for who can access what?

    It is hard to answer this question without your topology or scenario. I suggest checking our handbook first to learn the use case.

    https://download.zyxel.com/USG_FLEX_100H/handbook/USG%20FLEX%20100H_uOS1.35_Handbook_v2.pdf

    Chapter 5, Title: "How to set up a Link Aggregation Group (LAG) interface" Page 272

    in GS1900 I assign VLANs to the LAG interface, but GS1920 has it differently and I need to assign VLANs to individual ports, not the LAG interface, right or?

    GS1900 VLAN assign page has LAG interface, and GS1920 doesn't. For GS1920, please assign the LAG port members as the VLAB member.

    I will send the configuration to you via private message.

    Zyxel Melen


Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）