topic PIX 501 Collisions Outside Interface in Network Security

PIX 501 Collisions Outside Interface

joel-metz — Fri, 21 Feb 2020 08:02:29 GMT

PIX 501 outside interface has high number of collisions. It operates at 10mb half duplex with no way of changing the settings. Is there anyway to descrease or eliminate the amount of collisions that are taking place?

Sincerely,

Joel

Re: PIX 501 Collisions Outside Interface

bphan — Tue, 29 Mar 2005 07:01:49 GMT

Hi Joel:

What kind of a switch hub is it that the PIX 501 is plugged into?

We tested the 501 in our lab with ethernet0 (outside) plugged into a catalyst 1900 switch with the port harcoded to 100full on both ends, and the interface negotiated to 100full successfully.

See below:

pixfirewall(config)# sh ver

Cisco PIX Firewall Version 6.3(4)

Cisco PIX Device Manager Version 3.0(0)132

Compiled on Fri 02-Jul-04 00:07 by morlee

pixfirewall up 41 days 16 hours

Hardware: PIX-501, 16 MB RAM, CPU Am5x86 133 MHz

Flash E28F640J3 @ 0x3000000, 8MB

BIOS Flash E28F640J3 @ 0xfffd8000, 128KB

0: ethernet0: address is 0007.5057.e29a, irq 9

1: ethernet1: address is 0007.5057.e29b, irq 10

Licensed Features:

Failover: Disabled

VPN-DES: Enabled

VPN-3DES-AES: Enabled

Maximum Physical Interfaces: 2

Maximum Interfaces: 2

Cut-through Proxy: Enabled

Guards: Enabled

URL-filtering: Enabled

Inside Hosts: 50

------------

pixfirewall(config)# interface ethernet0 100full

pixfirewall(config)# sh int

interface ethernet0 "outside" is up, line protocol is up

Hardware is i82559 ethernet, address is 0007.5057.e29a

IP address 172.18.124.251, subnet mask 255.255.255.0

MTU 1500 bytes, BW 100000 Kbit full duplex

2954197 packets input, 221416489 bytes, 0 no buffer

Received 2943338 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

3201 packets output, 606124 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (128/128) software (0/8)

output queue (curr/max blocks): hardware (0/1) software (0/1)

interface ethernet1 "inside" is up, line protocol is up

Hardware is i82559 ethernet, address is 0007.5057.e29b

IP address 10.10.10.1, subnet mask 255.255.255.0

MTU 1500 bytes, BW 100000 Kbit full duplex

21944369 packets input, 1500611077 bytes, 0 no buffer

Received 21944369 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

0 packets output, 0 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

Thanks,

Binh

Re: PIX 501 Collisions Outside Interface

fedrodri — Tue, 29 Mar 2005 07:21:28 GMT

Hi, Joel

Is your PIX outside interface hard-coded to work at 10Mbps Halfduplex, or is it set to auto? What about the peer device (switch/hub, or other device)? Any chance that you can hard-code it on both end? On the PIX side the command would be:

interface ethernet0 10baset

Take a look at the following link, you might find it useful:

-- Troubleshooting Ethernet Collisions:

http://www.cisco.com/en/US/tech/tk389/tk214/technologies_tech_note09186a008009446d.shtml

You can also paste the 'show interface' output into the following link (Output Interpreter) for more useful information...

-- Output Interpreter Tool (CCO loging required):

https://www.cisco.com/cgi-bin/Support/OutputInterpreter/home.pl?locale=en

Hope that helps!

Federico Rodriguez

Re: PIX 501 Collisions Outside Interface

scoclayton — Tue, 29 Mar 2005 13:27:58 GMT

Collisions are a fact of life with half duplex ethernet connections. There is nothing you can do about unless you can switch to a full duplex mode.

Scott