05-18-2011 02:38 AM - edited 03-06-2019 05:06 PM
Hello all,
I have ASA 5520 and Router 3660, connected directly.
ASA(G0/1) ------ (F0/0) Router
---------------------------------------------------------------
I tired to change mtu , speed , and duplex in all cases, but nothing change the ping between each other keep interrupt.
in both way from ASA to Router, and from Router to ASA.
any one have any idea about that.
------------------------------------------------------------------------------
ASA
sh run int g0/1
!
interface GigabitEthernet0/1
description --- To GW_2 ---
nameif outside2
security-level 0
ip address 172.26.1.240 255.255.255.0
sh int g0/1
Interface GigabitEthernet0/1 "outside2", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
Description: --- To GW_2 ---
MAC address c84c.7577.e89d, MTU 1500
IP address 172.26.1.240, subnet mask 255.255.255.0
694 packets input, 63430 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 L2 decode drops
733 packets output, 77148 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (curr/max packets): hardware (0/2)
output queue (curr/max packets): hardware (0/2)
Traffic Statistics for "outside2":
694 packets input, 50788 bytes
733 packets output, 63794 bytes
11 packets dropped
1 minute input rate 2 pkts/sec, 130 bytes/sec
1 minute output rate 2 pkts/sec, 191 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 79 bytes/sec
5 minute output rate 1 pkts/sec, 97 bytes/sec
5 minute drop rate, 0 pkts/sec
ping 172.26.1.251 repeat 10
Sending 10, 100-byte ICMP Echos to 172.26.1.251, timeout is 2 seconds:
!?!!!???!?
Success rate is 50 percent (5/10), round-trip min/avg/max = 1/1/1 ms
-----------------------------------------------------------------
Router:
!
interface FastEthernet0/0
ip address 172.26.1.251 255.255.255.0
duplex auto
speed auto
end
FastEthernet0/0 is up, line protocol is up
Hardware is AmdFE, address is 0008.21f1.7650 (bia 0008.21f1.7650)
Internet address is 172.26.1.251/24
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 222/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Queueing strategy: fifo
Output queue 0/40, 0 drops; input queue 1/75, 11 drops
5 minute input rate 0 bits/sec, 1 packets/sec
5 minute output rate 1000 bits/sec, 1 packets/sec
55464786 packets input, 1379807347 bytes
Received 42717949 broadcasts, 0 runts, 0 giants, 0 throttles
18247 input errors, 18247 CRC, 621 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
6549852 packets output, 622462449 bytes, 0 underruns(154/76/0)
104 output errors, 230 collisions, 120 interface resets
0 babbles, 104 late collision, 8458 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
!
!
ping 172.26.1.240
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.26.1.240, timeout is 2 seconds:
!!!.!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 ms
!
!
!
!
ping
Protocol [ip]:
Target IP address: 172.26.1.240
Repeat count [5]: 10
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 10, 100-byte ICMP Echos to 172.26.1.240, timeout is 2 seconds:
.!!!!!.!!!
Success rate is 80 percent (8/10), round-trip min/avg/max = 1/1/1 ms
!
!
show version
Cisco Internetwork Operating System Software
IOS (tm) 3600 Software (C3660-IK8S-M), Version 12.2(1d), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Mon 04-Feb-02 05:24 by srani
Image text-base: 0x60008960, data-base: 0x61320000
ROM: System Bootstrap, Version 12.0(6r)T, RELEASE SOFTWARE (fc1)
moi-center uptime is 5 weeks, 2 days, 58 minutes
System returned to ROM by reload
System image file is "flash:c3660-ik8s-mz.122-1d.bin"
cisco 3660 (R527x) processor (revision C0) with 55296K/10240K bytes of memory.
Processor board ID JAC0605A2ZC
R527x CPU at 225Mhz, Implementation 40, Rev 10.0, 2048KB L2 Cache
Channelized E1, Version 1.0.
MICA-6DM Firmware: CP ver 2720 - 5/30/2000, SP ver 2720 - 5/30/2000.
Bridging software.
X.25 software, Version 3.0.0.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
Primary Rate ISDN software, Version 1.1.
3660 Chassis type: ENTERPRISE
2 FastEthernet/IEEE 802.3 interface(s)
62 Serial network interface(s)
4 ATM network interface(s)
60 terminal line(s)
2 Channelized E1/PRI port(s)
DRAM configuration is 64 bits wide with parity disabled.
125K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
05-18-2011 02:51 AM
Hi,
Have tou tried with another cable?
Regards.
Alain.
05-18-2011 02:55 AM
Yes I change the cable and the port on both router and ASA
05-18-2011 02:58 AM
ASA:
sh int g0/1 | i err
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
6591 packets output, 637436 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
05-18-2011 03:26 AM
Given the age of the router it may have faulty hardware.
If you have a CCO logon paste the output from the router interface here:
https://www.cisco.com/cgi-bin/Support/OutputInterpreter/home.pl
It makes several recommendations about changing the cabling or changing the router interface used to connect to the ASA.
See below some sections from the output interpreter:
WARNING: There have been 621 'frame errors' reported.
This indicates the number of packets received incorrectly, having a CRC error
and a non-integer number of octets. On a LAN, this is usually the result of collisions
or a malfunctioning Ethernet device.
TRY THIS: Monitor the level of frame errors over time. If they are increasing,
try swapping interfaces and or ports to identify the problem.
WARNING: The CRC error rate is 0.03289% (greater than 1 in a million packets),
and the collision rate is less than 0.1%.
This can indicate excessive noise or transmission problems on the LAN or the LAN
bus itself. A high number of CRCs is usually the result of collisions or a station
transmitting bad data.
TRY THIS: Check cables to determine whether any are damaged. If 100BaseTX is being
used, ensure Category 5 cabling is being used and not another type, such as Category
Please remember to rate all posts that are helpful.
05-18-2011 03:39 AM
Can you use for testing, other interface on the router. I believe the interface is "damaged".
05-18-2011 05:20 AM
I reconnect it the router to 3Com Switch as it was. this solved the problem and connected the ASA on 3 Com
I change the interface for router already.
Back to 3 com solved this issue thank you all.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide