Interface Rate Limit Drops

[Charlie Taylor]

We are seeing rate limit drops on a new internet ethernet connection. I can't seem to find an explanation that does not have Qos in the reason for the rate limit drops.

Here is what we see on a ASA 5520 running 6.4.

Interface GigabitEthernet1/2 "outside", is up, line protocol is up

  Hardware is VCS7380 rev01, BW 1000 Mbps, DLY 10 usec

        Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)

        Input flow control is unsupported, output flow control is unsupported

        Media-type configured as RJ45 connector

        Description: Outside connection to TWT port 0/1

        MAC address c84c.xxxx.xxx, MTU 1500

        IP address xxx.xxx.xxx.xxx, subnet mask 255.255.255.252

        189630202 packets input, 151713633224 bytes, 0 no buffer

        Received 201 broadcasts, 0 runts, 0 giants

        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

        0 L2 decode drops

        168620541 packets output, 79755781476 bytes, 0 underruns

        0 pause output, 0 resume output

        0 output errors, 0 collisions, 0 interface resets

        0 late collisions, 0 deferred

        0 input reset drops, 0 output reset drops

        406895 rate limit drops

        input queue (blocks free curr/low): hardware (0/0)

        output queue (blocks free curr/low): hardware (0/0)

  Traffic Statistics for "outside":

        189563376 packets input, 148146509320 bytes

        169040114 packets output, 76924197238 bytes

        2782075 packets dropped

      1 minute input rate 1398 pkts/sec,  1258861 bytes/sec

      1 minute output rate 1195 pkts/sec,  418651 bytes/sec

      1 minute drop rate, 8 pkts/sec

      5 minute input rate 2109 pkts/sec,  1888351 bytes/sec

      5 minute output rate 1881 pkts/sec,  1019056 bytes/sec

      5 minute drop rate, 11 pkts/sec

When I do a 'sh run int g1/2' it shows nothing but the actual interface so I think that its not being dropped by us. The interface utilization is low so I dont think thats the issue.

I am sure there is an easy explanation of why there are packets dropping, does anyone have it?

THANKS!!!!

[SHAWN EFTINK]

Charlie,

Couple of items.

1. This is the SMB Security Community and I wouldn't suggest questions related to an ASA 5520, which is definitely not a SMB device, be asked here.  This would probably be the more appropriate community.
   
   • https://supportforums.cisco.com/community/netpro/security/firewall
     
2. That said, you mentioned you're running 6.4.  Have you looked into upgrading the latest firmware?  I believe the current is 9.x.
   
   • If not, I would recommend starting there.  I will caution that there were a number of changes in 8.x and 9.x so be sure to read up on release notes prior to the upgrade or consider leveraging a Cisco Partner to assist.
     
     • BTW, yes we are a Cisco Partner, have vast experience with ASAs, and would be happy to assist.  Feel free to send me a private message if you would like. 
       

Shawn Eftink
CCNA/CCDA

Please rate all helpful posts and mark correct answers to assist others searching for solutions in the community.

[Charlie Taylor]

Thanks, I moved it.

Also had wrong version... I was looking at asdm version, whoops.

Thanks,

C.T.