topic Cisco ASA interface input error on outside inteface in Network Security

Cisco ASA interface input error on outside inteface

Pranav Gade — Tue, 12 Mar 2019 01:50:34 GMT

Hi Team,

We are having Cisco ASA 5540 having

Cisco Adaptive Security Appliance Software Version 8.0(5)23

at certain time of moment daily wer are facing latency and packetdrop

wherin when I checked for ASA Interface which gives me " Input Errors" on outside interface ,so can any one tell me what are the causes to get input errors on cisco asa outisde interface

and also please give us soluiton on the same.

Interface GigabitEthernet0/0 "", is up, line protocol is up

Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec

Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)

Available for allocation to a context

MAC address 001e.be79.5088, MTU not set

IP address unassigned

2516132626 packets input, 1725688403033 bytes, 0 no buffer

Received 6919 broadcasts, 0 runts, 0 giants

1022738 input errors, 0 CRC, 0 frame, 1022738 overrun, 0 ignored, 0 abort

0 L2 decode drops

2161563833 packets output, 1024175348846 bytes, 328 underruns

0 output errors, 0 collisions, 0 interface resets

0 late collisions, 0 deferred

0 input reset drops, 0 output reset drops, 0 tx hangs

input queue (curr/max packets): hardware (0/33) software (0/0)

output queue (curr/max packets): hardware (1/511) software (0/0)

Regards

Cisco ASA interface input error on outside inteface

Marvin Rhoads — Wed, 29 May 2013 12:42:40 GMT

Nornally we would not expect overrun input errors on a 5540 platform.

You are running very old code though and ther are several bugs specifically related to overrun that are fixed in later releases. If you have a support contract, I'd recommend upgrading to at least 8.2(5) for more stability.

Are you perhaps doing web filtering on your ASA? That has been noted to have the potental to casue overruns as well. See this thread.

Cisco ASA interface input error on outside inteface

Pranav Gade — Wed, 29 May 2013 13:59:37 GMT

Hi Marvin,

Thanks for your reply....

No we are not running web filtering on ASA.. I just want tto understand is overrun on outiside interface impacr slowness and packet drop of the traffic.

Rather than upgrading ios is there any other solution ?

Reagrds

Pranav