ASA 9.1 dropping packets whilst 8.4 doesn't

[ksherwood]

I have a test bed that traverses an ASA 5550 running 8.4.3 software. PINGs go through perfectly end to end.

As soon as I upgrade the ASA to version 9.1 the PINGs still work but drop occasional packets consistently.

Back to 8.4 and perfect again.

Why ???

[Vibhor Amrodia]

Hi,

To be honest , I don't think this might be something related to the software ocde but still to verify , why don't you try to enable the logging on the ASA device and see if you might get a log on the ASA saying that the traffic has been dropped ?

Also , give us some more information about what the configuration is relative to this traffic we are talking about ?

Thanks and Regards,

Vibhor Amrodia

[ksherwood]

Vib,

       I'm sorry but it has everything to do with the software. As I said, the only issue is dropped packets with 9.1 and not with 8.4  If you want me to clarify, the configs are exactly the same and the result is like this:

8.4 Pings !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

9.1 Pings !!!!!!!!!!!!!!!!..!!!!!!!!!!.!!!!!!!!!!!!!!!!..!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!..!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!...!!!!!!!!!!!!!!!!!

I've tried 9.1.2 and 9.1.5 and 9.1.5-21  with the same results.  What upgrade changes could cause occasional packets to drop ?

Kevin.

[ksherwood]

It must be buggy software as I am only losing the occasional packet. It's not routing as it is actually getting 98% of the packets through, just not all.

As soon as I go back to 8.4 it is 100% !

[bradleyordner]

Hi, 

I am actually having a similar problem. When i upgrade to 9.1.5 or 9.1.1 when the device reboots I can ping a few device, but I cannot ping my radius servers. Once i go back to 8.4.6, connectivity is restored. 

Does anyone know what defaults are applied to the ASA when you upgrade to 9.x, possibly this could be causing the issue?

[bradleyordner]

Check your routing. I did another test on 9.1 code and found that my next hop was unavailable on both codes (we using static routing *sigh). On 8.x it looks like it uses the default route, but on the 9.1 code it doesn't. I know your environment might be different, but best to double check.