Wireless Access

 View Only

  • 1.  SSID in tunnel mode slow that Bridge SSID

    Posted Oct 09, 2023 04:39 AM

    Hi,

    Currently were are deploy  Aruba 7010 standaalone controller with 17 Aruba 505. Controller uplink to Core Switch using LACP 2Gb port. The SSID using tunnel mode uisng wpa2. The internet speed is 1GB. When we do speed test or ipert we only can get around 400mbps speed for upload and down.  If we change the ssid to bridge mode tje speedtest or iperf we can get 600mbps. Also we already try enabke drop multicast also same. Is this limited for tunnel mode? We also already try with decrypt-tunel the speed also same around 400mbps. Is it any tunnel feature that can cause this different?. Is there away to improve wifi speed in tunnnel mode.? Or is  this beacuse of controller 7010? Current firmware version is 8.10.0.7.



  • 2.  RE: SSID in tunnel mode slow that Bridge SSID
    Best Answer

    Posted Oct 09, 2023 11:01 AM

    If you are trying to optimize the tunneled throughput you'll need to make sure that jumbo frames are enabled and allowed between the AP and controller.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 3.  RE: SSID in tunnel mode slow that Bridge SSID

    Posted Oct 10, 2023 04:30 AM

    Hi,

    Do you mean we might to enable the jumbo frame at controller (firewall enable jumbo processing and controller port), then AP in  default ap system (SAP MTU) and switch port to AP and Controller?


    Original Message


  • 4.  RE: SSID in tunnel mode slow that Bridge SSID

    Posted Oct 10, 2023 05:54 AM

    At least have jumbo enabled on the switch ports-VLANs that connect to the AP, controller, and any links that are between switches on the path between AP/controller.

    The point is that tunneled traffic adds a few bytes for the GRE tunnel and if it exceeds the MTU at any point in the path, packets may be dropped or fragmented, resulting in degraded performance.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 5.  RE: SSID in tunnel mode slow that Bridge SSID

    Posted Oct 10, 2023 07:27 AM

    Hi Chulcher and Herman,

    Thanks, The MTU really help increase the performance. Now the speed same as bridge mode.


    Original Message


  • 6.  RE: SSID in tunnel mode slow that Bridge SSID

    Posted Oct 10, 2023 10:07 AM

    The key thing is that unless jumbo frames are enabled all the way between the AP and controller, a feature of 802.11n and above networks, A-MSDU, will be disabled on the SSID. A-MSDU makes transferring data more efficient, so with it disabled it will be slower than with it enabled. 

    You could try putting the SSID into decrypt-tunnel mode for comparison. With decrypt-tunnel, the encryption/decryption of user traffic is done at the AP, and A-MSDU will be enabled, even if you don't have jumbo frame capability between the AP and controller. 




  • 7.  RE: SSID in tunnel mode slow that Bridge SSID

    Posted Feb 17, 2025 02:06 AM

    Actually, there's another impact when jumbo frames are NOT enabled: all TCP connections via APs in tunnel mode will have MSS limited to 1382 bytes (MTU 1422), since GRE tunnel has 78 bytes overhead.

    To achieve full 1500 byte MTU for wireless clients, switches between APs and controller must support at least mini-jumbo frames (1578 bytes).

    Of course it's much better if switches support large, 9000 byte jumbo frames, since this will enable aggregtion (A-MSDU) which improves performance by 20 - 30 %.


    Original Message


Related Content