Cisco ISR-1921w/over-runs

[jaegerg]

I have Cisco ISR 1921 with input errors and over-runs.  The original interface G0/0 was showing the overruns and input errors and the recommended Cisco fix was to update the IOS as this was a bug.  The router was updated to running 156-1.T3.bin but I still have the error.  The configuration for G0/0 was moved to G0/1 with the same error on that interface.  Has anyone seen this and what did you do to resolve please?  TIA

Reported stats for "sh int g0/1":  13981991 input errors, 0 CRC, 0 frame, 13981991 overrun, 0 ignored

[balaji.bandi]

Can you post below information :

show run

show interface g0/1 (full if this active)

what is the device connected to this interface ? is this interface part of Port-channel ?

[jaegerg]

The device is not part of a port-channel but is directly connected to a firewall (Fortinet):
GigabitEthernet0/1 is up, line protocol is up
  Hardware is CN Gigabit Ethernet, address is b0fa.eb5b.a021
  Description: <<** LAN, Melody Paige **>>
  Internet address is
  MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 6/255, rxload 5/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full Duplex, 1Gbps, media type is RJ45
  output flow-control is unsupported, input flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:03, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/76 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 22870000 bits/sec, 3624 packets/sec
  5 minute output rate 23921000 bits/sec, 3811 packets/sec
     3939666397 packets input, 2879783981 bytes, 0 no buffer
     Received 106268 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     14044671 input errors, 0 CRC, 0 frame, 14044671 overrun, 0 ignored
     0 watchdog, 33291 multicast, 0 pause input
     1268360266 packets output, 60387743 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     33291 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out

[Larry Sullivan · Accepted solution]

Is the FW interface reporting any errors?  What are the configs for the FW interface?  The link to the FW is direct?  Nothing in between?

[jaegerg]

There is a direct link to the FW (Fortinet),  the configuration at the link G0/0 is pretty basic with an IP and subnetmask,  speed auto and duplex auto.  There are several secondary IPs on that interface as well.

[jaegerg]

I will check with the customer on the Firewall side of the configuration and report back, thanks!

[balaji.bandi]

Hope fully Fotigate interface also have 1GB connection.

clear counters and see how soon they are buidling errors ?

[jaegerg]

The over runs start appearing as soon after the clear counters is run and I bring up the sh int g0/1.

[jaegerg]

It is not a Port Channel and it is only configured with 4 secondary IP addresses and primary IP address, speed and duplex set at auto.  Not sure what the speed of the Firewall Interface will need to check and report back, thanks.