Cisco 3845 router %IP_VFR-3-SYSTEM_ERROR: Vlan1: IP VFR System failure - Unable to coalesce fragments

[viswa sai]

Hi

I am receiving this following error in Cisco 3845 router  with IOS image c3845-advipservicesk9-mz.124-5b.bin

%IP_VFR-3-SYSTEM_ERROR: Vlan1: IP VFR System failure - Unable to coalesce fragments

Under VLAN 1 i configured the following

 ip virtual-reassembly max-fragments 64 max-reassemblies 512

and have the rate-limits as well

rate-limit input access-group 39 14336000 128000 256000 conform-action transmit exceed-action drop
 rate-limit input access-group 38 6144000 128000 256000 conform-action transmit exceed-action drop
 rate-limit input access-group 37 6656000 128000 256000 conform-action transmit exceed-action drop
 rate-limit input access-group 50 2048000 256000 256000 conform-action transmit exceed-action drop
 rate-limit output access-group 139 14336000 128000 256000 conform-action transmit exceed-action drop
 rate-limit output access-group 138 6144000 128000 256000 conform-action transmit exceed-action drop
 rate-limit output access-group 137 6656000 128000 256000 conform-action transmit exceed-action drop
 rate-limit output access-group 150 2048000 256000 256000 conform-action transmit exceed-action drop
 ip route-cache flow

i have increased the buffer size to Log Buffer (10240000 bytes):

I have tried searching over internet, but i didnt get any help!!!

[Philip D'Ath]

Out of desperation I would try upgrading to a gold star release like 15.1.4M10.  That software release you are using is pretty old now.

https://software.cisco.com/download/release.html?mdfid=279042634&flowid=7525&softwareid=280805680&release=15.1.4M10&relind=AVAILABLE&rellifecycle=MD&reltype=latest

[Vinit Jain]

Are you getting any other error as well such as "%IP_VFR-4-FRAG_TABLE_OVERFLOW:" or any tracebacks?

Could you please share the below logs:

- show version

- show run interface <>  // interface where ip virtual-reassembly is configured.

Since when are you seeing this problem. you can try performing the below to see how many fragments are being created.

1) Turn off virtual fragmentation reassembly. 
2) Set up a sniffer off of the interface that's reporting the error  to capture the fragmented packets and find out where they are coming from.

i noticed your comment on "you have increased the log buffer". Any reason for doing that?

Regards

Vinit

[viswa sai]

Rose>sh ver
Cisco IOS Software, 3800 Software (C3845-ADVIPSERVICESK9-M), Version 12.4(5b), RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2006 by Cisco Systems, Inc.
Compiled Wed 19-Apr-06 06:34 by ssearch

ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)

Rose uptime is 2 weeks, 2 days, 21 hours, 11 minutes
System returned to ROM by power-on
System restarted at 13:33:19 IST Sun Jun 19 2016
System image file is "flash:c3845-advipservicesk9-mz.124-5b.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 3845 (revision 1.0) with 1007616K/40960K bytes of memory.
16 FastEthernet interfaces
3 Gigabit Ethernet interfaces
4 Serial interfaces


1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
479K bytes of NVRAM.
255488K bytes of ATA System CompactFlash (Read/Write)

Configuration register is 0x2102\


------------------------------------


interface Vlan1

 ip address 1x.1x.5x.81 255.255.255.248 secondary
 ip address 1xx.xx.xx.145 255.255.255.248 secondary
 ip address 1xx.xx.xx.89 255.255.255.248 secondary
 ip address 1xx.xx.xx.81 255.255.255.248 secondary
 ip address 1xx6.1x.xx.67 255.255.255.224
 ip virtual-reassembly max-fragments 64 max-reassemblies 512
 rate-limit input access-group 39 14336000 128000 256000 conform-action transmit exceed-action drop
 rate-limit input access-group 38 6144000 128000 256000 conform-action transmit exceed-action drop
 rate-limit input access-group 37 6656000 128000 256000 conform-action transmit exceed-action drop
 rate-limit input access-group 50 2048000 256000 256000 conform-action transmit exceed-action drop
 rate-limit output access-group 139 14336000 128000 256000 conform-action transmit exceed-action drop
 rate-limit output access-group 138 6144000 128000 256000 conform-action transmit exceed-action drop
 rate-limit output access-group 137 6656000 128000 256000 conform-action transmit exceed-action drop
 rate-limit output access-group 150 2048000 256000 256000 conform-action transmit exceed-action drop
 ip route-cache flow
 ip ospf priority 0
 load-interval 30
 ipv6 address XXX
 ipv6 enable
 ipv6 ospf XX area 0

interface GigabitEthernet1/0
 description ## TO UPLINK##
 load-interval 30
end

#sh vlan-switch

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa1, Gi1
2    VLAN0002                         active    Fa1, Fa1

i have connected a router which is placed for nating purpose to this router