Hello,

I am experiencing slow WAN throughput.  For example, a simple speed test from online yields I'm only getting 50mbit/sec when we have 100.  I haven't gone up to the colo yet to do a physical test from the firewall, but it's a sneaking suspicion my switch is somehow being overrun with unnecessary traffic.  The speed test is being performed on a VM on an R410 (Win10) on ESXi 6.5.

The way the previous networking team set up the switch is VLAN 801 = ISP, so my WAN on the primary firewall and my VPN firewall are connected to three ports on the first switch and three ports on the failover switch.  VLAN 301-303 are 10.200.0.0/24, 172.16.99.0/24, and 172.16.100.0/24 for servers and VMs.

Currently all clients are set to have the Internet router as the default gateway, so basically all traffic is hitting it and then either going out or coming back in and going somewhere else.

My questions are this:

1. What can I do to possibly eliminate the possibility of certain hardware outside of physically being there.

2. How can we setup the 6248 to act as the router for inter-VLAN traffic and forward all other traffic to the WAN firewall?

3. What is the optimal setup?  The way it is now or the method from question 2?

 

Thanks,

Gabriel