Possible traffic routing issue

[CR34M3]

I suspect you have an ip conflict on your network. Can you change the Billion router IP and then test? If this doesn't work change the IPs on the PCs one up or down and see if it fixes the problem.

Changed the router IP. Tested. Still got crap speeds.

For speed and duplex settings use the ff link:

http://www.oit.umn.edu/network/speed-duplex/windows-xp/index.htm

Noticed the one network adapter (mobo integrated) on the second PC doesn't have a "Speed & Duplex" option. I switched to the other network adapter (which was disabled) and now things seem to be working.

Does seem like a weird fluke though... Let's see if it stays fine.

 

[CR34M3]

I suspect you have an ip conflict on your network. Can you change the Billion router IP and then test? If this doesn't work change the IPs on the PCs one up or down and see if it fixes the problem.

Changed the router IP. Tested. Still got crap speeds.

For speed and duplex settings use the ff link:

http://www.oit.umn.edu/network/speed-duplex/windows-xp/index.htm

Noticed the one network adapter (mobo integrated) on the second PC doesn't have a "Speed & Duplex" option. I switched to the other network adapter (which was disabled) and now [-]things seem to be working.[/-] ...nope still crap.

Does seem like a weird fluke though... [-]Let's see if it stays fine.[/-]

EDIT: Worked only for about 2 tests.

 

[CR34M3]

Please also run "ipconfig /all" on BOTH pandy and cr34m3-pc and display the results. I'm pretty certain one of the PCs has been set up incorrectly. The inconsistent ping times in post #9 point to this.

>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : CR34M3-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter RouterLink:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-23-54-05-6E-BF
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.140(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.2
DNS Servers . . . . . . . . . . . : 192.168.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 12:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:9d38:6abd:1013:68c:3f57:fe73(Preferred)
Link-local IPv6 Address . . . . . : fe80::1013:68c:3f57:fe73%11(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.{97600EC6-4E3A-43DA-A084-7241F923F240}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : pandy
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Router Link:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DGE-528T Gigabit Ethernet Adapter
Physical Address. . . . . . . . . : 90-94-E4-5F-67-60
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.141
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.2
DNS Servers . . . . . . . . . . . : 192.168.0.1

As an aside -- with my network as described, what would be the ideal way to set it up?

 

[howardb]

I'm not an expert, but why are your DNS Server settings 192.168.0.1 ? Should they not be the same as the default gateway in this setup.

 

[CR34M3]

I'm not an expert, but why are your DNS Server settings 192.168.0.1 ? Should they not be the same as the default gateway in this setup.

If I remember correctly, it's some kind of DNS proxy server. I can change it to Google DNS or something else, it doesn't affect my connectivity. Might this have an effect on the local network speed?

 

[howardb]

If I remember correctly, it's some kind of DNS proxy server. I can change it to Google DNS or something else, it doesn't affect my connectivity. Might this have an effect on the local network speed?

Not too sure. My setup has the DNS set to the router/modem IP and I get full speed. Previously I used IS DNS values and it seemed to slow the internal network sharing speed. Give it a try, you can always change it back. Which proxy server are you using?

 

[Stratt]

If I remember correctly, it's some kind of DNS proxy server. I can change it to Google DNS or something else, it doesn't affect my connectivity. Might this have an effect on the local network speed?

WISP's do this quite often, using internal ranges for their clients, and then NAT'ing on their core links, this saves on expensive public ranges. Using their DNS server (192.168.0.1) would actually be the best, as this will be the lowest latency DNS server on your connection. It wont affect your speed but you will resolve host names much quicker (given that the DNS server is performing as it should, and having a decent size cache).

Regarding your speed issue between the two PC's, I wonder if the Billion is not the cause of the issue. You said that when the two PC's are connected directly speed is normal, but when connected to the Billion it is slow. It should simply allow switching on a layer 2 level. To test this please do a "tracert pandy" from your PC and post the result. You should see no hops except for pandy's IP if the Billion is simply switching. Is both PC's and the Mikrotik connected to the LAN ports on the Billion?

What happens when you disconnect the Mikrotik from the Billion and then try and copy something through the Billion between the two PC's?

I see you posted the output of the ipconfig /all of the static config's of the PC's, is there any difference between those output's and when you do a ipconfig /all when the two PC's are set to DHCP (You said it works fine when getting DHCP values)?

Lastly on the Mikrotik, please open a terminal and paste the output of a "ip address pr" and "ip route pr"

 

[CR34M3]

Apologies for the delay in replying.

Regarding your speed issue between the two PC's, I

wonder if the Billion is not the cause of the issue.

I'm thinking this too, but I'm not sure how to approach the problem.

You said that when the two PC's are connected directly speed is normal, but when connected to the Billion it is slow. It should simply allow switching on a layer 2 level. To test this please do a "tracert pandy" from your PC and post the result. You should see no hops except for pandy's IP if the Billion is simply switching.

>tracert pandy

Tracing route to pandy [192.168.1.141]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 141.1.168.192.in-addr.arpa [192.168.1.141]

Trace complete.

This is what it should look like, right? (btw, it looks similar if I do a trace from pandy) My problem is just how erratic my speeds are. Here's a prime example:

Without uTorrent running --
>ping pandy

Pinging pandy [192.168.1.141] with 32 bytes of data:
Reply from 192.168.1.141: bytes=32 time=2ms TTL=128
Reply from 192.168.1.141: bytes=32 time=2ms TTL=128
Reply from 192.168.1.141: bytes=32 time=3ms TTL=128
Reply from 192.168.1.141: bytes=32 time=2ms TTL=128

Ping statistics for 192.168.1.141:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 3ms, Average = 2ms

With uTorrent running --
>ping pandy

Pinging pandy [192.168.1.141] with 32 bytes of data:
Reply from 192.168.1.141: bytes=32 time=1081ms TTL=128
Reply from 192.168.1.141: bytes=32 time=1130ms TTL=128
Reply from 192.168.1.141: bytes=32 time=940ms TTL=128
Reply from 192.168.1.141: bytes=32 time=1141ms TTL=128

Ping statistics for 192.168.1.141:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 940ms, Maximum = 1141ms, Average = 1073ms

Is both PC's and the Mikrotik connected to the LAN ports on the Billion?

Yes. Mikrotik is connected to port 1, the PCs to ports 2 and 3 (for what it's worth).

What happens when you disconnect the Mikrotik from the Billion and then try and copy something through the Billion between the two PC's?

As mentioned earlier, this works fine -- I get speeds close to the 100mbps limit of the router.Note that the router's DHCP is enabled while I do this.

I see you posted the output of the ipconfig /all of the static config's of the PC's, is there any difference between those output's and when you do a ipconfig /all when the two PC's are set to DHCP (You said it works fine when getting DHCP values)?

Nothing changes if I use auto IPs, except for the DNS servers which now point to 168.210.2.2 and 196.14.239.2. With the setup like this, I get frequent timeouts on pings and my local network is essentially unusable.

Just to clear up confusion; the previous successful test was with the router's DHCP enabled and the Microtik disconnected. DHCP from the WISP is a local network FAIL.

Lastly on the Mikrotik, please open a terminal and paste the output of a "ip address pr" and "ip route pr"

[admin@MikroTik] > ip address pr
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 ;;; default configuration
192.168.88.1/24 192.168.88.0 ether1

[admin@MikroTik] > ip route pr
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADC 192.168.88.0/24 192.168.88.1 bridge1 0

 

[CR34M3]

Not too sure. My setup has the DNS set to the router/modem IP and I get full speed. Previously I used IS DNS values and it seemed to slow the internal network sharing speed. Give it a try, you can always change it back. Which proxy server are you using?

If I change the DNS to my router then I lose my internet connection. So this doesn't seem to work for me.

 

[Stratt]

[admin@MikroTik] > ip address pr
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 ;;; default configuration
192.168.88.1/24 192.168.88.0 ether1

[admin@MikroTik] > ip route pr
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADC 192.168.88.0/24 192.168.88.1 bridge1 0

Ahh this means they are not NAT'ing your local network over theirs, but simply routing it. Without proper IP allocation, or user error a conflict is bound to happen. I wonder if your problem is not that someone else on their network is using your IP's. We can test this by doing the following:

On the Mikrotik please open a terminal and run the following command, and paste the output here:

ping arp-ping=yes interface=bridge1 count=10 192.168.1.141
and
ping arp-ping=yes interface=bridge1 count=10 192.168.1.140

We should only see one MAC address replying, if there is more than one there is a IP conflict and your ISP/WISP will have to sort it out. At least you will have proof then

 

[CR34M3]

Ahh this means they are not NAT'ing your local network over theirs, but simply routing it. Without proper IP allocation, or user error a conflict is bound to happen. I wonder if your problem is not that someone else on their network is using your IP's. We can test this by doing the following:

On the Mikrotik please open a terminal and run the following command, and paste the output here:

ping arp-ping=yes interface=bridge1 count=10 192.168.1.141
and
ping arp-ping=yes interface=bridge1 count=10 192.168.1.140

We should only see one MAC address replying, if there is more than one there is a IP conflict and your ISP/WISP will have to sort it out. At least you will have proof then

I think we might be on to something here...
I did the test for 139 (my ADSL router IP after I changed it to see if it helps), 140 and 141:

[admin@MikroTik] > ping arp-ping=yes interface=bridge1 count=10 192.168.1.139
HOST SIZE TTL TIME STATUS
50:67:F0:3A:91:CA 470ms
50:67:F0:3A:91:CA 480ms
50:67:F0:3A:91:CA 624ms
50:67:F0:3A:91:CA 626ms
50:67:F0:3A:91:CA 439ms
50:67:F0:3A:91:CA 443ms
50:67:F0:3A:91:CA 148ms
50:67:F0:3A:91:CA 157ms
50:67:F0:3A:91:CA 114ms
50:67:F0:3A:91:CA 127ms
sent=5 received=10 packet-loss=-100% min-rtt=114ms avg-rtt=362ms
max-rtt=626ms
HOST SIZE TTL TIME STATUS

[admin@MikroTik] > ping arp-ping=yes interface=bridge1 count=10 192.168.1.140
HOST SIZE TTL TIME STATUS
00:23:54:05:6E:BF 1ms
50:67:F0:3A:91:CA 129ms
50:67:F0:3A:91:CA 135ms
00:23:54:05:6E:BF 0ms
50:67:F0:3A:91:CA 126ms
50:67:F0:3A:91:CA 132ms
00:23:54:05:6E:BF 0ms
50:67:F0:3A:91:CA 196ms
50:67:F0:3A:91:CA 205ms
00:23:54:05:6E:BF 0ms
sent=4 received=10 packet-loss=-150% min-rtt=0ms avg-rtt=92ms
max-rtt=205ms
HOST SIZE TTL TIME STATUS

[admin@MikroTik] > ping arp-ping=yes interface=bridge1 count=10 192.168.1.141
HOST SIZE TTL TIME STATUS
90:94:E4:5F:67:60 0ms
50:67:F0:3A:91:CA 77ms
50:67:F0:3A:91:CA 83ms
90:94:E4:5F:67:60 0ms
50:67:F0:3A:91:CA 2ms
50:67:F0:3A:91:CA 6ms
90:94:E4:5F:67:60 0ms
50:67:F0:3A:91:CA 86ms
50:67:F0:3A:91:CA 89ms
90:94:E4:5F:67:60 0ms
sent=4 received=10 packet-loss=-150% min-rtt=0ms avg-rtt=34ms
max-rtt=89ms

For the PCs I see my MACs (the quick ones) and 50:67:F0:3A:91:CA. For the router, only 50:67:F0:3A:91:CA. Is it possible to have one MAC address replying to 3 different IP pings on the same network???

EDIT: Mail sent to the WISP. Let's see if they know this MAC...

 

[Stratt]

It is possible to setup multiple IP's for the same hardware interface or device, in fact there isn't really a limit. Mikrotik, Cisco etc can all do it. Someone is using the same IP's as you on .140 and .141, and the MAC/Hardware Identifier is listed in your output. The ISP that issued you these IP's need to follow up and check who is using them, seeing that they do not supply a NAT solution (which would have solved this problem). This would explain your bad speed between devices, and your internet access must have been terrible too. Let me know if you get it sorted out, good luck

 

[CR34M3]

It is possible to setup multiple IP's for the same hardware interface or device, in fact there isn't really a limit. Mikrotik, Cisco etc can all do it. Someone is using the same IP's as you on .140 and .141, and the MAC/Hardware Identifier is listed in your output. The ISP that issued you these IP's need to follow up and check who is using them, seeing that they do not supply a NAT solution (which would have solved this problem). This would explain your bad speed between devices, and your internet access must have been terrible too. Let me know if you get it sorted out, good luck

Something is weird here and I'm curious as to how this exactly works. When doing the same ping request for other random IPs (even 8.8.8.8) the same MAC replies.

Strange thing is that I haven't really notice it on the internet side. Still getting my nominal 3Mbps for international site.

Let's wait and see what the WISP has to say. But thanks for the help so far.