Hi
I have an ASA that's only being used for AnyConnect a few days ago, at random, the clients will lose their connection to the ASA. When I have been able to catch the drops, from the FW I'm no longer able to ping out to anything external. The only way I have been able to get it working again is to clear the ARP table on the ASA. Everything was working fine up until last weekend. No one has been in the server room and our office is locked down.
I've replaced all the cables on the ASA and on our core switch and I have changed ports on the switch and on the ASA tried another interface to be the inside. I've talked with the ISP and they are not seeing any issues on their end. I've actually talked to a few different engineers to confirm.
I'm at a loss on what else to try and starting to get some angry people.
Here's the interface stats from the Inside/Outside interfaces on the ASA
Interface Ethernet0/0 "outside", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
Input flow control is unsupported, output flow control is off
MAC address 001e.f75e.798e, MTU 1500
IP address X.X.X.X, subnet mask 255.255.255.240
25089590 packets input, 7293066956 bytes, 0 no buffer
Received 87438 broadcasts, 0 runts, 0 giants
4443 input errors, 0 CRC, 0 frame, 4443 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
28776226 packets output, 20981053260 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops, 0 tx hangs
input queue (blocks free curr/low): hardware (255/230)
output queue (blocks free curr/low): hardware (255/82)
Traffic Statistics for "outside":
25089568 packets input, 6840513179 bytes
28776226 packets output, 20461223167 bytes
200282 packets dropped
1 minute input rate 119 pkts/sec, 18991 bytes/sec
1 minute output rate 113 pkts/sec, 27023 bytes/sec
1 minute drop rate, 5 pkts/sec
5 minute input rate 169 pkts/sec, 29670 bytes/sec
5 minute output rate 169 pkts/sec, 63286 bytes/sec
5 minute drop rate, 4 pkts/sec
Interface Ethernet0/1 "inside", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
Input flow control is unsupported, output flow control is off
MAC address 001e.f75e.798f, MTU 1500
IP address 172.X.X.X, subnet mask 255.255.128.0
31058153 packets input, 18170013620 bytes, 0 no buffer
Received 2003566 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
26773309 packets output, 5470918137 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops, 0 tx hangs
input queue (blocks free curr/low): hardware (255/230)
output queue (blocks free curr/low): hardware (254/176)
Traffic Statistics for "inside":
31058151 packets input, 17575661046 bytes
26773309 packets output, 4912029066 bytes
1294731 packets dropped
1 minute input rate 146 pkts/sec, 19422 bytes/sec
1 minute output rate 141 pkts/sec, 17517 bytes/sec
1 minute drop rate, 14 pkts/sec
5 minute input rate 219 pkts/sec, 51327 bytes/sec
5 minute output rate 203 pkts/sec, 26824 bytes/sec
5 minute drop rate, 15 pkts/sec
