topic Re: FWSM drop packets after change from single to multi context in Network Security https://community.cisco.com/t5/network-security/fwsm-drop-packets-after-change-from-single-to-multi-context/m-p/660887#M1037323 <HTML><HEAD></HEAD><BODY><P>Hello, </P><P></P><P>The 'show interface' commands in a context shows packets dropped by policy (access list, implied drops, broadcast packet drops) - not packets dropped because of interface errors. </P><P></P><P>If you want to see the interface errors, you have to change to the system context using a 'ch con system' and do a 'show interface' there.</P><P></P><P>--Jason</P><P></P><P>Please rate this message if it helped solve some or all of your issue/question.</P><P></P><P></P></BODY></HTML> Thu, 07 Dec 2006 02:59:33 GMT jgervia_2 2006-12-07T02:59:33Z FWSM drop packets after change from single to multi context https://community.cisco.com/t5/network-security/fwsm-drop-packets-after-change-from-single-to-multi-context/m-p/660886#M1037321 <P>Hello all</P><P></P><P>A few days ago I changed the mode of our FWSM 3.1 from single mode to multicontext. I created one context, made it admin, and configured it with the same config as the FWSM had as a single mode. Everything seems to work fine, packets are forwarded as before through the interfaces</P><P>The problem is that after the mode change the context in use is reporting a large amount of dropped packets on all interfaces.</P><P>Example: Traffic Statistics for "INTERNET":</P><P> 364 packets input, 51877 bytes</P><P> 279 packets output, 327922 bytes</P><P> 150 packets dropped</P><P>Nothing out of the ordinary is shown in any logs and all pings to and from the different interfaces are 100%.</P><P>Is this part of the multicontext/classifier process or is this a sign of an error?</P><P></P><P>Regards</P><P>Fredrik Hofgren</P> Mon, 11 Mar 2019 09:04:54 GMT https://community.cisco.com/t5/network-security/fwsm-drop-packets-after-change-from-single-to-multi-context/m-p/660886#M1037321 hoffa2000 2019-03-11T09:04:54Z Re: FWSM drop packets after change from single to multi context https://community.cisco.com/t5/network-security/fwsm-drop-packets-after-change-from-single-to-multi-context/m-p/660887#M1037323 <HTML><HEAD></HEAD><BODY><P>Hello, </P><P></P><P>The 'show interface' commands in a context shows packets dropped by policy (access list, implied drops, broadcast packet drops) - not packets dropped because of interface errors. </P><P></P><P>If you want to see the interface errors, you have to change to the system context using a 'ch con system' and do a 'show interface' there.</P><P></P><P>--Jason</P><P></P><P>Please rate this message if it helped solve some or all of your issue/question.</P><P></P><P></P></BODY></HTML> Thu, 07 Dec 2006 02:59:33 GMT https://community.cisco.com/t5/network-security/fwsm-drop-packets-after-change-from-single-to-multi-context/m-p/660887#M1037323 jgervia_2 2006-12-07T02:59:33Z Re: FWSM drop packets after change from single to multi context https://community.cisco.com/t5/network-security/fwsm-drop-packets-after-change-from-single-to-multi-context/m-p/660888#M1037325 <HTML><HEAD></HEAD><BODY><P>Thats interesting. Because my connected vlans and the traffic on them has not changed. We use Solarwinds Orio to monitor our Cisco equipment. If it's true what you say, then the OID that Solarwinds access on the single context FWSM to retrieve dropped packets due to interface errors has changed meaning and in a multicontext FWSM show the number of packets dropped by policy. This render the indicator useless in my perspective, especially since I can't find a way to change the OID in Solarwinds</P></BODY></HTML> Thu, 07 Dec 2006 20:25:04 GMT https://community.cisco.com/t5/network-security/fwsm-drop-packets-after-change-from-single-to-multi-context/m-p/660888#M1037325 hoffa2000 2006-12-07T20:25:04Z