Create a Post
Showing results for 
Search instead for 
Did you mean: 

"auto-negotiation on speed" and "link-speed" are different

Dear All,


My 1G ISP is connected to eth1.

Then we find the speed test result is slow.

The show interfaces all Appears below result:


Interface eth1
state on
mac-addr XXXXXX
type ethernet
link-state link up
mtu 1500
auto-negotiation on
speed 1000M
ipv6-autoconfig Not configured
duplex full
monitor-mode off
link-speed 100M/full
comments Sonicwallx1_Wan
ipv4-address XXXXXX
ipv6-address Not Configured
ipv6-local-link-address Not Configured


Why this is happening with both speeds different?

0 Kudos
2 Replies

The firewall interface is Gigabit capable and set by default to operate at 1000Mbps, but cannot go faster than 100Mbps.  This could be because the ISP router is only set to run at 100Mbps, or you are using a Cat3 cable instead of a Cat5e or Cat6 cable; Cat3 can only link at 100Mbps.

Run command netstat -ni, if you are taking RX-ERRs you almost certainly have a duplex mismatch with your ISP running at 100/half and your firewall running at 100/full.  Assuming you are supposed to be running at only 100Mbps due to your agreement with the ISP, tell the ISP to hardcode to 100/full and hardcode your firewall interface to 100/full as well.  Duplex negotiation is more or less broken in Fast Ethernet (100Mbps) but was thankfully fixed with Gigabit Ethernet.

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at
0 Kudos

Well, I check it out and only no more than 10 in either RX/TX Error/Drop.

Interestingly, the speed test results sometimes reach 3XX Mbps.
0 Kudos