topic Can't enable the Gigabit Ethernet ports on ASA5510 in Network Security

Can't enable the Gigabit Ethernet ports on ASA5510

LPT Administrator — Tue, 12 Mar 2019 02:22:18 GMT

The ASA5510 has the Security Plus license and is running version 8.2(5).

When I set either Ethernet 0/0 (my inside interface) or Ethernet 0/1 to 1000 Full, the port shuts down on the switch and the ASA.

If I set both to AUTO and AUTO, they work fine, but only at 100mb.

I have tried all possible combinations between the switch and the ASA and nothing works except for AUTO and AUTO.

The switch is a 3750G-48TS stacked with 3750G-48PS.

Is there a problem with the ASA or am I missing something here?

Re: Can't enable the Gigabit Ethernet ports on ASA5510

Julio Carvajal — Wed, 07 Aug 2013 04:39:20 GMT

Hello,

Is the switch connected to any other Gig device and succesfull negotiated the speed ?

Can you get into the ASA via console and share : show interface eth 0/0 while set on gig speed?

Have you tried to connect the ASA to other device and run the link at Gig speed?

Also, I know you already did it but if you do a show version do you see the security plus license applied?

Check my blog at http:laguiadelnetworking.com for further information.

Cheers,

Julio Carvajal Segura

Re: Can't enable the Gigabit Ethernet ports on ASA5510

LPT Administrator — Wed, 07 Aug 2013 15:06:08 GMT

Thanks for the reply. I will try connecting it to another switch tonight and see what happens.

The show version positively shows: This platform has an ASA 5510 Security Plus license.

show interface | include Hardware

Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec

Hardware is i82546GB rev03, BW 100 Mbps, DLY 100 usec

Hardware is i82557, BW 100 Mbps, DLY 10 usec

Re: Can't enable the Gigabit Ethernet ports on ASA5510

Julio Carvajal — Wed, 07 Aug 2013 16:28:03 GMT

Hello,

Yes, we can see the change has been done,

Let us know how it works with another device,

Check my blog at http:laguiadelnetworking.com for further information.

Cheers,

Julio Carvajal Segura

Re: Can't enable the Gigabit Ethernet ports on ASA5510

LPT Administrator — Thu, 08 Aug 2013 01:39:48 GMT

Ok, tried the same tests with 2 different switches (2960G and a 3750X).

Same result.
The port goes dead when the ASA port is switched into 1000mb speed.

I turned off spanning-tree and that made no difference.

I tried the same things on the other Gigabit por t with the same result.

I don't know what the problem is but it is very frustrating!

I may have to open a TAC case on it.

Any other ideas?

This is what the interface shows after the change:

ASA5510# show interface Ethernet 0/0
Interface Ethernet0/0 "inside", is down, line protocol is down
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Full-Duplex, 1000 Mbps
Input flow control is unsupported, output flow control is off
MAC address 000a.b861.42c0, MTU 1500
IP address 10.1.1.253, subnet mask 255.255.255.0
40570346 packets input, 6769235797 bytes, 0 no buffer
Received 1636430 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
21787 L2 decode drops
56328710 packets output, 60144184448 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 7 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops, 0 tx hangs
input queue (blocks free curr/low): hardware (255/255)
output queue (blocks free curr/low): hardware (255/255)
Traffic Statistics for "inside":
40544992 packets input, 5865423869 bytes
56328714 packets output, 59097584736 bytes
320252 packets dropped
      1 minute input rate 0 pkts/sec, 0 bytes/sec
      1 minute output rate 0 pkts/sec, 0 bytes/sec
      1 minute drop rate, 0 pkts/sec

      5 minute input rate 0 pkts/sec, 0 bytes/sec
      5 minute output rate 0 pkts/sec, 0 bytes/sec
      5 minute drop rate, 0 pkts/sec
ASA5510#

And this is what it shows when I put it back to AUTO:

ASA5510#show interface Ethernet 0/0
Interface Ethernet0/0 "inside", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
Input flow control is unsupported, output flow control is off
MAC address 000a.b861.42c0, MTU 1500
IP address 10.1.1.253, subnet mask 255.255.255.0
40571202 packets input, 6769679567 bytes, 0 no buffer
Received 1636504 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
21787 L2 decode drops
56329394 packets output, 60144471427 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 7 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops, 0 tx hangs
input queue (blocks free curr/low): hardware (255/253)
output queue (blocks free curr/low): hardware (255/252)
Traffic Statistics for "inside":
40545848 packets input, 5865850893 bytes
56329398 packets output, 59097858103 bytes
320260 packets dropped
      1 minute input rate 8 pkts/sec, 2226 bytes/sec
      1 minute output rate 7 pkts/sec, 3720 bytes/sec
      1 minute drop rate, 0 pkts/sec

      5 minute input rate 0 pkts/sec, 0 bytes/sec
      5 minute output rate 0 pkts/sec, 0 bytes/sec
      5 minute drop rate, 0 pkts/sec
ASA5510#

Can't enable the Gigabit Ethernet ports on ASA5510

LPT Administrator — Thu, 08 Aug 2013 23:55:27 GMT

I feel like such an idiot!!! After opening a TAC case I replaced the network cable and now it works fine! Very strange...that cable worked perfectly for several years. Even stranger; I used a different cable to connect to switches when I tested it last night. I will have to check that cable for faults.

Lesson learned...case closed!

Can't enable the Gigabit Ethernet ports on ASA5510

Julio Carvajal — Fri, 09 Aug 2013 00:43:26 GMT

Hello,

Thanks for the heads up, This happens to all of us all of the time,

Please mark the question as answered so future users can learn about this.

Check my blog at http:laguiadelnetworking.com for further information.

Cheers,

Julio Carvajal Segura