Testing Interfaces - iperf3- Total output drops

[joshhboss]

Hello and thanks in advance for looking over my post. 

I had some massive issues with my pfsense server and an older 10gig cisco 2960 interface..MASSIVE amount of CRC errors and they were connected with DAK cables that were new. Replaced them and issue persisted. I believe it could of been because of the interfaces. So I rebuilt the box and now im using my computer to run iperf test between my two laptops connecting to the server. 

I have my computers on two different vlans both coming from pfsense box and i run iperf but i get an insane amount of total output drops. no crc errors tho.. anyone seen this kind of behavior with iperf test and switches 

[Leo Laohoo]

Total output drops is one thing, CRC errors is another.  But using a 2960S/2960X with 10 Gbps and no QoS is asking for trouble.  

[joshhboss]

class-map match-all default_traffic
 description this is to mark traffic for a policy map
  match access-group 111
!
policy-map 100Megs_in_policy
 class default_traffic
  police 100000000 1000000 exceed-action drop
policy-map 1Meg_in_policy
 class default_traffic
  police 1000000 1000000 exceed-action drop
policy-map 20Megs_in_policy
 class default_traffic
  police 20000000 1000000 exceed-action drop
policy-map 30Megs_in_policy
 class default_traffic
  police 30000000 1000000 exceed-action drop
policy-map 15Megs_in_policy
 class default_traffic
  police 15000000 1000000 exceed-action drop
policy-map 150Megs_in_policy
 class default_traffic
  police 150000000 1000000 exceed-action drop
policy-map 25Megs_in_policy
 class default_traffic
  police 25000000 1000000 exceed-action drop
policy-map 50Megs_in_policy
 class default_traffic
  police 50000000 1000000 exceed-action drop
policy-map 10Megs_in_policy
 class default_traffic
  police 10000000 1000000 exceed-action drop
policy-map 3Megs_in_policy
 class default_traffic
  police 3000000 1000000 exceed-action drop
policy-map 5Megs_in_policy
 class default_traffic
  police 5000000 1000000 exceed-action drop
!

This is something that a friend of mine wrote for me to apply service policys to rate limit traffic on the interfaces for upload bandwidth.. Is there anyway to uses these policies to help with this issue im seeing or to just have a better a better set. If not, could you maybe give me some key terms to research to try and head in the right direction..

Really appreciate it.

[Leo Laohoo]

---

@joshhboss wrote:

This is something that a friend of mine wrote for me to apply service policys to rate limit traffic on the interfaces for upload bandwidth.. Is there anyway to uses these policies to help with this issue im seeing or to just have a better a better set. If not, could you maybe give me some key terms to research to try and head in the right direction..

---

I am of no authority when it comes to QoS.  @Joseph W. Doherty is better suited to answer that.

[Georg Pauwen]

Hello,

did you apply these service policies to your Vlan interfaces ?

interface Vlan 1

--> service-policy input 150Megs_in_policy

That said, if the output drops are visible on the physical ports, it means that the buffers are full and cannot handle the amount of traffic. Can you post the running configuration of your 2960 ?

[joshhboss]

Absolutely , I’ll do that went I get to work in about an hour. I normally only use the service policies when I’m trying to rate limit clients on access ports. Typically on trunk ports I never use any kind of Qos.. I’m thinking about it now on the 10gig interfaces because I’ve never actually use 10 gig before.. always worried about hiccups to the events live streams or voip services.