4331 ISR stopped passing network traffic

[njacobe01]

So I have a strange issue. I have a new 4331 ISR that seems to be locking up. Randomly it will stop passing traffic unless it’s rebooted.  I can however ssh to it and command around (which is how I reload it), I can even view the logs and there are no errors shown. 

Its pingable from the internet but not the lan. 

Any thoughts? TIA

[Julio E. Moisa]

Hi

It could be a bug, you could open a case with the Cisco TAC, have you seen any errors on the interfaces? is possible to see the configuration and removing the sensitive info?

[Philip D'Ath]

I would try going to a gold star release like 3.16.6S or 16.3.4.

[Joseph W. Doherty]

On this 4331, you're not, per chance, using a default static route to the Internet only naming the interface?

[njacobe01]

So I’m on a gold version of the IOS and don’t have a default static route to the internet. 

Whats strange is is that it’s so random. I’ll get a notification that the site is down on a Saturday when no one is there at 1am and it can happen at 10:00 am on a Tuesday. It’s not every week but at least once a month. 

[Julio E. Moisa]

Hi

I suggest as it was mentioned previously by other member, upgrade the IOS, and open a case with the TAC.

[njacobe01]

I have updated the IOS and opened a TAC case, I was hoping that someone else had an idea while I wait for support to respond. 

[Richard Burts]

I find this statement in the original post interesting "Its pingable from the internet but not the lan. " especially in light of another statement saying that they can SSH to the router and that it responds to commands in the SSH session. Is the SSH sourced from the lan or from the Internet?

If the lan seems not reachable I wonder if it might be an issue with the arp table on the router? The next time that the problem occurs can you sho arp (or perhaps show ip arp) and post the results?

HTH

Rick

[tieungao]

Hi njacobe01,

Sorry if i resurrect the old thread, but i ran into the same problem and wonder if you were ever able to resolve the issue with TAC and mind sharing it?

Thank you.

[Richard Burts]

It is an old thread. But if you are really having the same symptoms it is quite appropriate to resurrect it. So you periodically lose the ability of devices on the LAN to access outside through this router. This router would not be pingable from inside but is pingable from outside and able to SSH to it from outside? If so I will repeat my suggestion that when it happens that you take a close look at the arp table on the router.

HTH

Rick