Download And Upload Speed Is Slow After Upgrade

15219

Created On 02/08/20 01:22 AM - Last Modified 06/12/23 21:10 PM

Interfaces

Installation

9.0

Next-Generation Firewall

Symptom

Users report that opening websites is taking too long
While using the "show interface" command the speed duplex negotiation is incorrect and does not match the actual speed and duplex setting.

admin@FW> show interface ethernet1/1

--------------------------------------------------------------------------------
Name: ethernet1/3, ID: 16
Link status:
  Runtime link speed/duplex/state: 100/half/up    => Incorrect, the connected switch is set to 1000/full
  Configured link speed/duplex/state: auto/auto/up
MAC address:
........
--------------------------------------------------------------------------------

Environment

Palo Alto Hardware Firewall
PAN-OS 9.0.0 and above.

Cause

The Speed and Duplex negotiation between Firewall and the connected switch is Incorrect. This causes slowness with the download as well as uploads.

Resolution

Set the correct Speed and Duplex setting. The example is given below.

Go to GUI: Network > Interfaces > ethernet > click the ethernet 1/1 interface (or the one configured in your network)
On the Popup, Click on the Advanced Tab
For Link Speed select 1000
For Link Duplex set it to Auto. Do not select full
For the Link State, select up
Click OK
Commit the changes.

Note: The duplex/speed setting must match the connected switch settings.

Additional Information

After making the changes the runtime link speed, duplex, and state will now display 1000, full, when "show interface ethernet1/1" is used.
When 1Gig (1000) speed is used, the duplex setting must be set to auto. If it is set to 'Full' the following error is displayed.