cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
631
Views
0
Helpful
6
Replies

ASA 5520 and Router 3660 back-to-back problem

hisham.khreisat
Level 1
Level 1

Hello all,

I have ASA 5520 and Router 3660, connected directly.

ASA(G0/1) ------ (F0/0) Router

---------------------------------------------------------------

I tired to change mtu , speed , and duplex in all cases, but nothing change the ping between each other keep interrupt.

in both way from ASA to Router, and from Router to ASA.

any one have any idea about that.

------------------------------------------------------------------------------

ASA

sh run int g0/1

!

interface GigabitEthernet0/1

description --- To GW_2 ---

nameif outside2

security-level 0

ip address 172.26.1.240 255.255.255.0

sh int g0/1

Interface GigabitEthernet0/1 "outside2", is up, line protocol is up

  Hardware is i82546GB rev03, BW 1000 Mbps

        Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)

        Description: --- To GW_2 ---

        MAC address c84c.7577.e89d, MTU 1500

        IP address 172.26.1.240, subnet mask 255.255.255.0

        694 packets input, 63430 bytes, 0 no buffer

        Received 0 broadcasts, 0 runts, 0 giants

        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

        0 L2 decode drops

        733 packets output, 77148 bytes, 0 underruns

        0 output errors, 0 collisions, 0 interface resets

        0 late collisions, 0 deferred

        0 input reset drops, 0 output reset drops

        input queue (curr/max packets): hardware (0/2)

        output queue (curr/max packets): hardware (0/2)

  Traffic Statistics for "outside2":

        694 packets input, 50788 bytes

        733 packets output, 63794 bytes

        11 packets dropped

      1 minute input rate 2 pkts/sec,  130 bytes/sec

      1 minute output rate 2 pkts/sec,  191 bytes/sec

      1 minute drop rate, 0 pkts/sec

      5 minute input rate 0 pkts/sec,  79 bytes/sec

      5 minute output rate 1 pkts/sec,  97 bytes/sec

      5 minute drop rate, 0 pkts/sec

ping 172.26.1.251 repeat 10

Sending 10, 100-byte ICMP Echos to 172.26.1.251, timeout is 2 seconds:

!?!!!???!?

Success rate is 50 percent (5/10), round-trip min/avg/max = 1/1/1 ms

-----------------------------------------------------------------

Router:

!

interface FastEthernet0/0

ip address 172.26.1.251 255.255.255.0

duplex auto

speed auto

end

FastEthernet0/0 is up, line protocol is up

  Hardware is AmdFE, address is 0008.21f1.7650 (bia 0008.21f1.7650)

  Internet address is 172.26.1.251/24

  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

     reliability 222/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  Keepalive set (10 sec)

  Full-duplex, 100Mb/s, 100BaseTX/FX

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 00:00:00, output 00:00:00, output hang never

  Last clearing of "show interface" counters never

  Queueing strategy: fifo

  Output queue 0/40, 0 drops; input queue 1/75, 11 drops

  5 minute input rate 0 bits/sec, 1 packets/sec

  5 minute output rate 1000 bits/sec, 1 packets/sec

     55464786 packets input, 1379807347 bytes

     Received 42717949 broadcasts, 0 runts, 0 giants, 0 throttles

     18247 input errors, 18247 CRC, 621 frame, 0 overrun, 0 ignored

     0 watchdog

     0 input packets with dribble condition detected

     6549852 packets output, 622462449 bytes, 0 underruns(154/76/0)

     104 output errors, 230 collisions, 120 interface resets

     0 babbles, 104 late collision, 8458 deferred

     0 lost carrier, 0 no carrier

     0 output buffer failures, 0 output buffers swapped out

!

!

ping 172.26.1.240

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.26.1.240, timeout is 2 seconds:

!!!.!

Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 ms

!

!

!

!

ping

Protocol [ip]:

Target IP address: 172.26.1.240

Repeat count [5]: 10

Datagram size [100]:

Timeout in seconds [2]:

Extended commands [n]:

Sweep range of sizes [n]:

Type escape sequence to abort.

Sending 10, 100-byte ICMP Echos to 172.26.1.240, timeout is 2 seconds:

.!!!!!.!!!

Success rate is 80 percent (8/10), round-trip min/avg/max = 1/1/1 ms

!

!

show version

Cisco Internetwork Operating System Software

IOS (tm) 3600 Software (C3660-IK8S-M), Version 12.2(1d), RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2002 by cisco Systems, Inc.

Compiled Mon 04-Feb-02 05:24 by srani

Image text-base: 0x60008960, data-base: 0x61320000

ROM: System Bootstrap, Version 12.0(6r)T, RELEASE SOFTWARE (fc1)

moi-center uptime is 5 weeks, 2 days, 58 minutes

System returned to ROM by reload

System image file is "flash:c3660-ik8s-mz.122-1d.bin"

cisco 3660 (R527x) processor (revision C0) with 55296K/10240K bytes of memory.

Processor board ID JAC0605A2ZC

R527x CPU at 225Mhz, Implementation 40, Rev 10.0, 2048KB L2 Cache

Channelized E1, Version 1.0.

MICA-6DM Firmware: CP ver 2720 - 5/30/2000, SP ver 2720 - 5/30/2000.

Bridging software.

X.25 software, Version 3.0.0.

SuperLAT software (copyright 1990 by Meridian Technology Corp).

Primary Rate ISDN software, Version 1.1.

3660 Chassis type: ENTERPRISE

2 FastEthernet/IEEE 802.3 interface(s)

62 Serial network interface(s)

4 ATM network interface(s)

60 terminal line(s)

2 Channelized E1/PRI port(s)

DRAM configuration is 64 bits wide with parity disabled.

125K bytes of non-volatile configuration memory.

16384K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

6 Replies 6

cadet alain
VIP Alumni
VIP Alumni

Hi,

Have tou tried with another cable?

Regards.

Alain.

Don't forget to rate helpful posts.

Yes I change the cable and the port on both router and ASA

ASA:

sh int g0/1 | i err

        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

        6591 packets output, 637436 bytes, 0 underruns

        0 output errors, 0 collisions, 1 interface resets

        0 late collisions, 0 deferred

---------------------------------------------------
Router:
sh int f0/0 | i err
     19181 input errors, 19181 CRC, 641 frame, 0 overrun, 0 ignored
     6554705 packets output, 622889027 bytes, 0 underruns(154/76/0)
     104 output errors, 230 collisions, 120 interface resets
     0 babbles, 104 late collision, 8517 deferred
---------------------------------
I keep got CRC on Router interface

Given the age of the router it may have faulty hardware.

If you have a CCO logon paste the output from the router interface here:

https://www.cisco.com/cgi-bin/Support/OutputInterpreter/home.pl

It makes several recommendations about changing the cabling or changing the router interface used to connect to the ASA.

See below some sections from the output interpreter:

WARNING: There have been 621 'frame errors' reported.
  This indicates the number of packets received incorrectly, having a CRC error
  and a non-integer number of octets. On a LAN, this is usually the result of collisions
  or a malfunctioning Ethernet device.
  TRY THIS: Monitor the level of frame errors over time. If they are increasing,
  try swapping interfaces and or ports to identify the problem.

WARNING: The CRC error rate is 0.03289% (greater than 1 in a million packets),
  and the collision rate is less than 0.1%.
  This can indicate excessive noise or transmission problems on the LAN or the LAN
  bus itself. A high number of CRCs is usually the result of collisions or a station
  transmitting bad data.
  TRY THIS: Check cables to determine whether any are damaged. If 100BaseTX is being
  used, ensure Category 5 cabling is being used and not another type, such as Category

Please remember to rate all posts that are helpful.

Can you use for testing, other interface on the router. I believe the interface is "damaged".

hisham.khreisat
Level 1
Level 1

I reconnect it the router to 3Com Switch as it was. this solved the problem and connected the ASA on 3 Com

I change the interface for router already.

Back to 3 com solved this issue thank you all.