02-08-2011 01:29 PM - edited 03-11-2019 12:47 PM
I'm seeing a ton of underrun and overrun errors on g0/0 (outside) of an asa5540.
It looks as though the utilization is only 51mpbs, so it should be able to keep up, right?
I've verified both the ASA and my switch are set for 1000gbps full duplex, any ideas what might be causing this?
sho int g0/0
Interface GigabitEthernet0/0 "outside", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Full-Duplex(Full-duplex), 1000 Mbps(1000 Mbps)
MAC address 0022.90fe.07b8, MTU 1500
IP address 74.200.245.18, subnet mask 255.255.255.248
117882126 packets input, 61320497020 bytes, 0 no buffer
Received 45921540 broadcasts, 0 runts, 0 giants
149787 input errors, 1 CRC, 0 frame, 149786 overrun, 0 ignored, 0 abort
4273548 L2 decode drops
70740348 packets output, 57688384741 bytes, 546122 underruns
0 output errors, 0 collisions, 6 interface resets
0 late collisions, 0 deferred
0 input reset drops, 355 output reset drops, 1 tx hangs
input queue (blocks free curr/low): hardware (511/486)
output queue (blocks free curr/low): hardware (296/0)
Traffic Statistics for "outside":
36724232 packets input, 15846597931 bytes
45514606 packets output, 41549599250 bytes
674556 packets dropped
1 minute input rate 32698 pkts/sec, 17559783 bytes/sec
1 minute output rate 47494 pkts/sec, 56725332 bytes/sec
1 minute drop rate, 494 pkts/sec
5 minute input rate 33753 pkts/sec, 20708401 bytes/sec
5 minute output rate 46468 pkts/sec, 53553807 bytes/sec
5 minute drop rate, 496 pkts/sec
02-08-2011 02:01 PM
Hi Gregory,
Can you Hardcode speed/duplex on both Devices ? I had similar issue and hardcoding did help.
Manish
02-08-2011 02:02 PM
Yes, I've done that already. It did not work.
Thanks though!
02-25-2011 08:10 AM
Did you get this resolved? I have the same issue. I captured all the traffic using a sniffer and found that one of my devices was sending all kinds of traffic. You might see output discards on your switch as well. The device that was causing it on my end was a Aruba wireless controller. Once I shut it down for a test the issue stopped immedialty with 0 input errors.
04-26-2011 01:37 PM
was caused by overutilization, diverted some traffic away from the firewall and it's fine now.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide