cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1793
Views
0
Helpful
1
Replies

DMVPN Tunnel Interface having Total output drops

sudhir.rai
Level 1
Level 1

I have created tunnel interface 3101 with source interface as Dialer 1 , now the tun 3101 is showing output drops while the dialer is clean.

I have tried to clear counters on tun 3101 but no use....can you please suggest what could be the reason for this and how can i solve this.

PLease note there is no impact as such as i am able to reach the detsination, but because of this our monitoring tool gives an alert which needs to be resolved ...

attaching you the sh run in tun 3101 , sh int tun 3101 and sh int dia 1 output

interface Tunnel3101

description XXXXXX

bandwidth 2048

ip address x.x.x.x 255.255.255.0

no ip redirects

ip mtu 1400

ip bandwidth-percent eigrp 251 75

ip hello-interval eigrp 251 15

ip hold-time eigrp 251 45

ip flow ingress

ip nhrp authentication XXXX

ip nhrp map multicast  x.x.x.x

ip nhrp map  x.x.x.x  x.x.x.x

ip nhrp map multicast  x.x.x.x

ip nhrp map  x.x.x.x   x.x.x.x

ip nhrp network-id 3101

ip nhrp holdtime 300

ip nhrp nhs  x.x.x.x

ip nhrp nhs  x.x.x.x

delay 10001049

tunnel source Dialer1

tunnel mode gre multipoint

tunnel key 3101

tunnel protection ipsec profile CCCCC shared

hold-queue 4096 in

hold-queue 4096 out

end

POWveSJPyokoh01#sh int tun 3101

Tunnel3101 is up, line protocol is up

  Hardware is Tunnel

  Description: ** xxxxxxxxxxxxx**

  Internet address is 3.185.204.59/24

  MTU 17850 bytes, BW 2048 Kbit/sec, DLY 100010490 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation TUNNEL, loopback not set

  Keepalive not set

  Tunnel source x.x.x.x (Dialer1)

   Tunnel Subblocks:

      src-track:

         Tunnel3101 source tracking subblock associated with Dialer1

          Set of tunnels with source Dialer1, 1 member (includes iterators), on interface <OK>

  Tunnel protocol/transport multi-GRE/IP

    Key 0xC1D, sequencing disabled

    Checksumming of packets disabled

  Tunnel TTL 255, Fast tunneling enabled

  Tunnel transport MTU 1410 bytes

  Tunnel transmit bandwidth 8000 (kbps)

  Tunnel receive bandwidth 8000 (kbps)

  Tunnel protection via IPSec (profile "xxx_DMVPN")

  Last input 00:00:00, output never, output hang never

  Last clearing of "show interface" counters 01:46:10

  Input queue: 0/4096/0/0 (size/max/drops/flushes); Total output drops: 462

  Queueing strategy: fifo

  Output queue: 0/4096 (size/max)

  5 minute input rate 1000 bits/sec, 1 packets/sec

  5 minute output rate 0 bits/sec, 0 packets/sec

     5652 packets input, 518255 bytes, 0 no buffer

     Received 0 broadcasts (974 IP multicasts)

     0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

     1555 packets output, 148188 bytes, 0 underruns

     0 output errors, 0 collisions, 0 interface resets

     0 unknown protocol drops

     0 output buffer failures, 0 output buffers swapped out

===========================================

POWveSJPyokoh01#sh int dial 1

Dialer1 is up, line protocol is up (spoofing)

  Hardware is Unknown

  Description: *** XXXXXXXXXXXXXXXXXX***

  Internet address is x.x.x.x/32

  MTU 1500 bytes, BW 2048 Kbit/sec, DLY 20000 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation PPP, LCP Closed, loopback not set

  Keepalive set (10 sec)

  DTR is pulsed for 1 seconds on reset

  Interface is bound to Vi2

  Last input never, output never, output hang never

  Last clearing of "show interface" counters 2d23h

  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

  Queueing strategy: weighted fair

  Output queue: 0/1000/64/0 (size/max total/threshold/drops)

     Conversations  0/0/16 (active/max active/max total)

     Reserved Conversations 0/0 (allocated/max allocated)

     Available Bandwidth 1536 kilobits/sec

  5 minute input rate 0 bits/sec, 0 packets/sec

  5 minute output rate 0 bits/sec, 0 packets/sec

     282541 packets input, 54877999 bytes

     96891 packets output, 11502662 bytes

Bound to:

Virtual-Access2 is up, line protocol is up

  Hardware is Virtual Access interface

  MTU 1500 bytes, BW 56 Kbit/sec, DLY 20000 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation PPP, LCP Open

  Open: IPCP

  PPPoE vaccess, cloned from Dialer1

  Vaccess status 0x44, loopback not set

  Keepalive set (10 sec)

  Interface is bound to Di1 (Encapsulation PPP)

  Last input 00:00:00, output never, output hang never

  Last clearing of "show interface" counters 1w2d

  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

  Queueing strategy: fifo

  Output queue: 0/40 (size/max)

  5 minute input rate 0 bits/sec, 0 packets/sec

  5 minute output rate 0 bits/sec, 0 packets/sec

     814920 packets input, 139563240 bytes, 0 no buffer

     Received 0 broadcasts (0 IP multicasts)

     0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

     307082 packets output, 36208384 bytes, 0 underruns

     0 output errors, 0 collisions, 0 interface resets

     0 unknown protocol drops

     0 output buffer failures, 0 output buffers swapped out

     0 carrier transitions

1 Reply 1

paolo bevilacqua
Hall of Fame
Hall of Fame

That is normal, likely you have ADSL with low uplink bandwidth, from that the drops. You can try to streamline and simplify configuration  to get better performances, eg. MTU values are wrong, etc.