Nokia Firewall has drop packets when connected to catalyst 4507

[chunhian-tan]

When connected Nokia Firewall IP350 to Catalyst 4507, at the Nokia Firewall side, we can see the inerrs(think is input error)counter is keep increasing.

But at the Catalyst 4507 side, we did not notice any error packets on the interface connected to nokia firewall.

What is the problem??? Is it hardware incompatible???

[peter.mainwaring]

No, the hardware will not be incompatible. The first thing I would check is the speed/duplex settings on the Nokia and the 4507. There may be a problem with autonegotiation between the two devices, or if one side is set to a specific speed/duplex and the other side is set to auto, that can cause problems too.

Try setting both sides to 100/full and check the error count. We also have servers that will only run properly at 100/half, so it is worth trying this if you still get errors at 100/full.

Pete

[chunhian-tan]

Hi Pete,

Thanks for your reply.

Actually, we had tried to hard code Nokia Firewall and Catalyst to 100 Full and 100 Half.

We still got the same results.

And I have checked that Nokia Firewall connect to Catalyst 6500, will not have this problem.

[peter.mainwaring]

That seems a bit strange then. So you get input errors if you connect the Nokia to the 4507 but not if you connect it to a 6500? Do you use the same cable to connect the Nokia to the 4507 and the 6500? (Although I wouldn't expect it to be a cable problem).

Perhaps there is a problem with the port on the 4507. Could you connect another device to the port on the 4507 to see if you get any input errors reported on that device or maybe connect the Nokia to a different port on the 4507?

Pete

[chunhian-tan]

Not cable problem as well.

We changed catalyst 4507 ports. Outcome still the same.

[a.awan]

Try configuring the command switchport mode access on the Catalyst 4507 port connecting to the Nokia firewall if you have not already done so. Can you also post the interface configuration of your 4507 and a show interface for the same.

[chunhian-tan]

Please find the attached interface config for catalyst 4507

[mmadruga]

Hi!

I just want to make a comment. I had a similar problem and when I saw your question and the answers you got, I remembered the case I opened(Case E284406)

We connected a Catalyst 2950 to Nokia Firewall 330 (we had a switch 3COM before) and the result was the interface losing connection with the Nokia. The interface went to intermittent link up/down situations.

We made many tests, changing the switch carrier-delay default value, configuring switch mode access and changing the speed and duplex model in both Cisco and Nokian equipment. Sometimes both in auto, sometimes just one in auto and so on. But we concluded that there was no intermittent link up/down situations when the speed is in 10M (duplex could be in half or duplex).

In the end we kept both sides in 10M/full(hardcode)

I just want to share this experience with you.Good luck!

Marcelle.