Есть циска дома. На ней настроен NAT, интернет подается через Ethernet+PPPoE
если провод напрямую в комп втыкаешь и PPPoE на компе то скорость получается
Down 97Мегабит \Up 70Мегабит. по данным speedtest.net
Если через циску то получается Down 30/ up 22мегабита.
больше никак не получается. если ставлю MTU 1492  ip tcp adjust-mss 1452 то скорость еще ниже.
иногда начинает сбрасывать соединения , конкретно в браузере появляется connection was reset.
помогите настроить или устранить причину такой низкой скорости.
Пробова Speed и Duplex во всех вариантах на скорость не влияет существенно.
провода тоже исключил.

sh ver

Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(6)T11, RELEASE SOFTWARE (fc2)
ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE
 
uptime is 5 hours, 45 minutes
System returned to ROM by reload
System image file is "flash:c870-advipservicesk9-mz.124-6.T11.bin"
Last reload reason: Reload Command
 
Cisco 877 (MPC8272) processor (revision 0x200) with 118784K/12288K bytes of memory.
Processor board ID FCZ111823RQ
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
4 FastEthernet interfaces
1 ATM interface
128K bytes of non-volatile configuration memory.
24576K bytes of processor board System flash (Intel Strataflash)
 
Configuration register is 0x2102

sh run

 
 
Building configuration...
 
Current configuration : 7451 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname senator
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 informational
!
no aaa new-model
!
resource policy
!
clock timezone PCTime 6
no ip source-route
ip cef
!
!
!
!
ip tcp path-mtu-discovery
ip domain name [cut]
ip name-server 212.19.149.226
ip name-server 212.154.152.18
ip inspect name CBAC-OUT tcp router-traffic
ip inspect name fullspeed cuseeme timeout 3600
ip inspect name fullspeed ftp timeout 3600
ip inspect name fullspeed rcmd timeout 3600
ip inspect name fullspeed realaudio timeout 3600
ip inspect name fullspeed smtp timeout 3600
ip inspect name fullspeed tftp timeout 30
ip inspect name fullspeed udp timeout 30
ip inspect name fullspeed tcp timeout 3600
ip inspect name fullspeed h323 timeout 3600
ip inspect name fullspeed http java-list 20 timeout 3600
ip inspect name fullspeed netshow
ip inspect name fullspeed rtsp
ip ddns update method DynDNS
 HTTP     
  add [url=http://[cut]http://[cut[/url]]...
 interval maximum 28 0 0 0
!         
vpdn enable
!         
vpdn-group pptp-serv
! Default PPTP VPDN group
 accept-dialin
  protocol pptp
  virtual-template 1
!         
!         
!         
crypto pki trustpoint example
 enrollment terminal pem
 revocation-check none
!         
crypto pki trustpoint TP-self-signed-3341485556
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3341485556
 revocation-check none
 rsakeypair TP-self-signed-3341485556
!         
!         
crypto pki certificate chain example
 certificate ca 01
  30820290 308201F9 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 
[cut]
 
username admin privilege 15 secret 5 [password]
 
 
! 
!
!
!
!
interface ATM0
 no ip address
 shutdown
 no atm ilmi-keepalive
 dsl operating-mode auto 
!
interface FastEthernet0
 description Desktop
 switchport access vlan 2
!
interface FastEthernet1
 switchport access vlan 2
 speed 100
!         
interface FastEthernet2
 switchport access vlan 2
 speed 100
!
interface FastEthernet3
description ProviderWAN
 duplex full
 pppoe enable group global
 pppoe-client dial-pool-number 1
!
interface Virtual-Template1 
 ip unnumbered Dialer0
 ip mroute-cache
 peer default ip address pool VPN
 ppp authentication ms-chap ms-chap-v2
 ppp ipcp mask 255.255.255.0
!
interface Vlan1
 ip address dhcp
 ip inspect fullspeed in
 pppoe enable group global
 pppoe-client dial-pool-number 1
!
interface Vlan2
 ip address 192.168.1.151 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface Dialer0
 ip ddns update hostname [myhostname].doesntexist.org
 ip ddns update DynDNS
 ip address negotiated
 no ip redirects
 ip mtu 1452
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 ip tcp adjust-mss 1412
 dialer pool 1
 dialer redial interval 20 attempts 5000 re-enable 10
 dialer-group 1
 no cdp enable
 ppp authentication chap callin
 ppp chap hostname [login]
 ppp chap password 0 [password]
!         
ip route 0.0.0.0 0.0.0.0 Dialer0
!         
!         
ip http server
ip http access-class 1
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.100 21 interface Dialer0 21
ip nat inside source static tcp 192.168.1.100 20 interface Dialer0 20
ip nat inside source static udp 192.168.1.3 6881 interface Dialer0 6881
ip nat inside source static tcp 192.168.1.2 8080 interface Dialer0 8080
ip nat inside source static tcp 192.168.1.2 3389 interface Dialer0 3389
ip nat inside source static udp 192.168.1.100 51413 interface Dialer0 51413
ip nat inside source static tcp 192.168.1.100 9999 interface Dialer0 9999
ip nat inside source static tcp 192.168.1.2 12446 interface Dialer0 12446
ip nat inside source static tcp 192.168.1.100 51413 interface Dialer0 51413
ip nat inside source static tcp 192.168.1.100 9091 interface Dialer0 9091
!         
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!         
!         
!         
!         
control-plane
!         
!         
line con 0
 login local
 no modem enable
line aux 0
line vty 0 4
 access-class 101 in
 privilege level 15
 login local
 transport input telnet ssh
 transport output telnet ssh
!         
scheduler max-task-time 5000
!         
webvpn context Default_context
 ssl authenticate verify all
 !        
 no inservice
!         
end