connection drops on some machines

[Izac ICT]

Hello,

We have a site to site connection to data center.

I have some clients on my network they experience short drops on their RDP/RDS sessions. Not all clients are experiencing this issue, just random VM users or RDS users. They are connected to different switches.

I checked the networks graphs etc and there is no down time.

How can I find the reason for these drops and fix it?

Once I had issue with ISP with saturated line on their backbone, it took long time for them to accept it, how do you guys prove/troubleshoot these kind of issues?

Thank you.

Izac

[Georg Pauwen]

Hello,

where are the RDP/RDS sessions going to ? The first thing to do is to check the interfaces the users are connected to for drops (show interfaces x), also, if there is a WAN link involved, check for drops there as well. Actually, post the output of this show command here, and we can have a look...

[Izac ICT]

Hello Georg,

Thank you for your message. Please see below.

WAN Port - RDP Initiator site

GigabitEthernet3/0/23 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 4c4e.35f0.e797 (bia 4c4e.35f0.e797)
Description: uplink TO DATA CENTER
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 3/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:01, output 00:00:06, output hang never
Last clearing of "show interface" counters 19w6d
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 13790000 bits/sec, 1884 packets/sec
5 minute output rate 4568000 bits/sec, 1424 packets/sec
133979963560 packets input, 184450648402815 bytes, 0 no buffer
Received 6225540 broadcasts (6220093 multicasts)
0 runts, 0 giants, 0 throttles
10 input errors, 4 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 6220093 multicast, 0 pause input
0 input packets with dribble condition detected
34833296926 packets output, 22134708830715 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out

WAN Port - at Destination

GigabitEthernet2/1/2 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 00d7.8ff9.7232 (bia 00d7.8ff9.7232)
Description: fiber link to OFFICE
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 4/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not set
Full-duplex, 1000Mb/s, link type is auto, media type is 1000BaseLX SFP
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:11, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 6700000 bits/sec, 1794 packets/sec
5 minute output rate 17277000 bits/sec, 2327 packets/sec
242975860095 packets input, 287866593046662 bytes, 0 no buffer
Received 923407 broadcasts (903872 multicasts)
0 runts, 0 giants, 0 throttles
76 input errors, 76 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 903872 multicast, 0 pause input
0 input packets with dribble condition detected
242227628323 packets output, 294432209066817 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

CLIENT

GigabitEthernet1/0/38 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 0042.5abd.d126 (bia 0042.5abd.d126)
Description: DATA + VOICE
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:20, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 39270
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 8000 bits/sec, 4 packets/sec
5 minute output rate 12000 bits/sec, 5 packets/sec
106932290 packets input, 19734450187 bytes, 0 no buffer
Received 568573 broadcasts (533389 multicasts)
0 runts, 0 giants, 0 throttles
26 input errors, 26 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 533389 multicast, 0 pause input
0 input packets with dribble condition detected
228494869 packets output, 191860863922 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

[Izac ICT]

There are about 80 people using RDP from that location and only about 5-10 drop but are able to reconnect right away.

Any ideas?