2.4ghz speed slow

[Sethg103]

I’m having issues with the 2.4ghz network. At first when connecting to an SSID it says connected, no internet. Shortly after that it starts working, but extremely slow. Speed tests have it at .016mbps download and 1mbps upload. Using a wifi analyzer I notice the only channel it stays on is 11. I have a smart rf policy that has channel 1,6, and 11 for the 2.4ghz network but it looks like it’s stuck on 11. 

I need some help getting the 2.4ghz network working. If I enable the same SSID on the same AP connected to the same port but enable it on the 5ghz radio it works great. Upload and download speeds are both about 200mbps.

[Sethg103]

Here is the running config for the AP. It’s connected to a controller in a different broadcast domain.

!### show running-config
!
! Configuration of AP310 version 7.5.1.3-004R
!
!
version 2.7
!
!
ip snmp-access-list default
 permit any
!
firewall-policy default
 no ip dos smurf
 no ip dos twinge
 no ip dos invalid-protocol
 no ip dos router-advt
 no ip dos router-solicit
 no ip dos option-route
 no ip dos ascend
 no ip dos chargen
 no ip dos fraggle
 no ip dos snork
 no ip dos ftp-bounce
 no ip dos tcp-intercept
 no ip dos broadcast-multicast-icmp
 no ip dos land
 no ip dos tcp-xmas-scan
 no ip dos tcp-null-scan
 no ip dos winnuke
 no ip dos tcp-fin-scan
 no ip dos udp-short-hdr
 no ip dos tcp-post-syn
 no ip dos tcphdrfrag
 no ip dos ip-ttl-zero
 no ip dos ipspoof
 no ip dos tcp-bad-sequence
 no ip dos tcp-sequence-past-window
 no ip-mac conflict
 no ip-mac routing conflict
 dhcp-offer-convert
 no stateful-packet-inspection-l2
!
!
mint-policy global-default
!
wlan-qos-policy default
 qos trust dscp
 qos trust wmm
!
radio-qos-policy default
!
wlan SethTest
 ssid SethTest
 vlan 1
 bridging-mode local
 encryption-type ccmp
 authentication-type none
 no multi-band-operation
 no protected-mgmt-frames
 wpa-wpa2 psk 0 testing1
!
smart-rf-policy default
 assignable-power 2.4GHz min 10
 channel-list 5GHz 36,40,44,48,149,153,157,161,165
 no select-shutdown
 no smart-sensor
 smart-sensor auto-trigger
 smart-sensor band smart-band-5GHz
 no smart-sensor tri-radio-only
!
!
management-policy default
 no telnet
 no http server
 https server
 rest-server
 no ftp
 ssh
 user admin password 1 censored role superuser access all
 snmp-server community 0 private rw
 snmp-server community 0 public ro
 snmp-server user snmptrap v3 encrypted des auth md5 0 admin123
 snmp-server user snmpmanager v3 encrypted des auth md5 0 admin123
!
profile ap310 "8120 - AP310"
 ip name-server 192.168.2.3
 ip name-server 192.168.32.13
 ip domain-name censored
 no autoinstall configuration
 no autoinstall firmware
 device-upgrade auto ap310 ap360
 crypto ikev1 policy ikev1-default 
  isakmp-proposal default encryption aes-256 group 2 hash sha 
 crypto ikev2 policy ikev2-default 
  isakmp-proposal default encryption aes-256 group 2 hash sha 
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 crypto ikev1 remote-vpn
 crypto ikev2 remote-vpn
 crypto auto-ipsec-secure
 crypto load-management
 crypto remote-vpn-client
 interface radio1
  data-rates bgn
  wlan SethTest bss 1 primary
 interface radio2
 interface bluetooth1
  shutdown
  mode le-sensor
 interface ge1
 interface ge2
 interface vlan1
  ip address dhcp
  ip dhcp client request options all
 interface pppoe1
 use firewall-policy default
 ntp server 0.north-america.pool.ntp.org 
 ntp server us.pool.ntp.org 
 rf-domain-manager capable
 controller vlan 1
 service pm sys-restart
 router ospf
 adoption-mode controller
!
rf-domain 8120
 location 8120
 timezone America/New_York
 country-code us
 use smart-rf-policy default
 ad-wips-wireless-mitigation disable
 ad-wips-wired-mitigation disable
 channel-list dynamic
 control-vlan 1
!
ap310 20-9E-F7-FB-78-EF
 use profile "8120 - AP310"
 use rf-domain 8120
 hostname 8120-Planning-310e
 area "8120 Planning"
 controller host 192.168.0.126
!
!
end
 

[ckelly]

If you want, grab a copy of the running-config and strip out anything you don’t want seen and post it. I’ll look through it and see if there’s anything in the actual config that might have something to do with this behavior.

[Sethg103]

That was a good question. It looks like if I ping the AP from the client or even the switch behind the AP that packets are getting dropped, and the response time is high, 600-1000ms for some packets. HOWEVER if I run traceroute and ping commands on the AP pinging various devices on the network and internet the replies come back at a normal rate of around 1ms. It’s something weird with the 2.4ghz because it works fine on 5ghz. 

I’ll reach out to GTAC. If we get it working I’ll reply with the solution in case anyone else down the road runs into this as well. 

[ckelly]

Out of curiosity, what does the client connection speed indicate?

Even though speeds are slow, can the client get a consistent set of PING replies to the AP or something behind it?

I’m not sure what else might be causing this. If I had a 310 I’d try to replicate it. This isn’t something I’ve run across before.

At this point though, GTAC will need to do a deeper dive.