how to troubleshoot the Throttles in the router - Page 2

rasmus.elmholt · ‎08-01-2023

Hi everyone

I have a 1921 router with a WAN interface where I see a lot of packet drops. I can see that the drops are throttles and overruns but I does not know how to find the culprit for why it happens.

I don't have any CPU issues or anything of the like on this router.

R1#show int gi 0/0
GigabitEthernet0/0 is up, line protocol is up 
  Hardware is CN Gigabit Ethernet, address is c067.af50.8a40 (bia c067.af50.8a40)
  Description: Yderside interface
  Internet address is 195.xx.xx.xx/25
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec, 
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full Duplex, 100Mbps, media type is RJ45
  output flow-control is unsupported, input flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/2498545/1023776 (size/max/drops/flushes); Total output drops: 74
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 252000 bits/sec, 147 packets/sec
  5 minute output rate 87000 bits/sec, 21 packets/sec
     2230357044 packets input, 3275392715 bytes, 1093734 no buffer
     Received 530570600 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 223188 throttles 
     633215588 input errors, 0 CRC, 0 frame, 633215588 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     3125809638 packets output, 1809711886 bytes, 0 underruns
     0 output errors, 0 collisions, 3 interface resets
     13700099 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     8 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out

Joseph W. Doherty · ‎08-03-2023

I suspect Paul had the other physical end of the router's WAN interface in mind.

IPSec termination, eh? That may, or may not, be significant.

So far, all we seem to know is your router, occasionally, cannot keep up with your WAN interface's ingress traffic. IPSec traffic, might, or again, might not be significant factor.

How much information can you provide?

I ask, because if your limited in what you can reveal, reduces the odds of others being helpful. BTW, this isn't a complaint, just with limited information, those trying to assist are handicapped.

If your wondering why I mention this, there are still unanswered questions found in my prior replies.