firewalling

[ashishdpatel1]

Hi, i have a 5520 ASA which is connected to 2811 router , the issue is that on the outside interface which is connected to router lots of input errors and overruns is observed due to which lot of latency is faced by outside vpn users when they connect. need some solution on the same.. we have change the cable and speed duplex setting already..

thanks..

[Shrikant Sundaresh]

Hi Ashish,

Are you aware of the rate of traffic going through the link, when you see increase in overruns?

Overruns indicate that the rate of packets coming on the interface is so high, that the ASA is unable to pick the packet off the wire.

If that's the case then you would need to see if that rate of traffic is normal. If it is then you might need to divide the traffic somehow between 2 interfaces.

Please attach the output of "show tech" if possible. The block usage and traffic statistics along with the config might help in determining why there are overruns.

Also, please check that the speed and duplex settings are hardcoded rather than set to auto on both ends.

-Shrikant