Cisco Firewall :: How To Clear Input Errors In ASA5540 Interface

Feb 26, 2013

My Expertise with Cisco ASA is Very less. I have observed Input errors in a Couple of Interfaces in Cisco ASA 5540 Firewall.   [code] I need to Clear the Input errors on this particular Interface.Will Clear interface GigabitEthernet 0/0 will work?

View 4 Replies


ADVERTISEMENT

Cisco Security :: ASA5540 Interface Input Errors - Overrun

Nov 16, 2009

Why packets overrun are incrementing on the ASA even when I've only 40Mbps of throughput traffic?All interface are 1000- Full Duplex, both on ASA and on Catalyst3750.I've test the ASA5540 generating GET HTTP, about 40Mbit of traffic.When I use one ingress interface and one egress interface, interface input overrun counter is zero.When I use the same traffic with 3 ingress interfaces(slot0) and 3 egress interfaces(slot1), interface input overrun counter increase(60k overrun in only 2 minutes).

View 4 Replies View Related

Cisco Firewall :: 5580-40 - Input Errors / Overruns And Reset Drops On 10Gig Interface?

May 10, 2012

I have an issue with input errors, overruns, and input reset drops on the inside interface of an 5580-40 (v8.2.5: Transparent mode)  The box is not stressed at all according to the 'show' commands in the Cisco troubleshooting performance document for PIX/ASA v8.2.5.  Nothing stands out because is pretty much normal, nothing (processes, RAM, blocks, IO...) really being highly utilized.  I have replaced the 10Gig card and that seemed to work because the rate of errors has gone down tremedously.  The next step is to RMA the whole box.My question is what would be the cause of the inside interface to stop processing traffic (I say that because the syslog server stops receiving messages) for some periods of 30 seconds periodically throughout the day and clients lose their connections (ie Outlook, IBM Sametime, Oracle, MSSQL..etc).  Can the issue be somewhere related to the overruns and input errors?

View 2 Replies View Related

Cisco WAN :: Input Errors On 1841 LAN Interface

Nov 4, 2011

I use an 1841 router as an internet facing firewall with a 10MB MetroE connection.  Lately users started reporting slow internet download speeds and web pages timing out.  Bandwidth reports do not show the link as being saturated so I looked at the interfaces on the 1841.   The interface connected to the provider shows OK as far as errors but the LAN side of the router shows steadily increasing input errors.  It doesn't show any other errors, no CRC, frame, runts, giants or overruns, just generic input errors.  What type of errors are those?  Nothing is being logged on the console.
 
I moved the connection to another switch ports and the errors continue.  I switched it down to 10MB and also changed the switch and the errors slow down but don't stop.  Interestingly, the switch side never shows any errors.  What can I do here?  I guess it can be a bad interface but that is such a rare thing that I am hesitant to replace the router.

View 11 Replies View Related

Cisco Switching/Routing :: Input Errors On Many Interface WS-C3750G-12S

Apr 16, 2013

We are facing since one month in our two Cisco WS-C3750G-12S on many interfaces input errors when data transer or ping (ICMP) increase input erros. Not only port 1 but many interface has same issue, i have change new IOS but still same issue, once i have erase startup config but same issue we are facing and finaly i have replace same new switch with the same IOS it's working fine.(c3750-ipservicesk9-mz.122-55.SE4.bin) [code]

View 11 Replies View Related

Cisco WAN :: Input Errors On Fastethernet Interface Router 2811

Feb 22, 2012

I have this output from show interfaces command for the fastethernet interface on a 2811 router.
 
find the causes of the crc and the ignored input errors on the interface?
 
The interface  configuration is:
 
interface FastEthernet0/0description VLANS_CHILE
no ip address

[Code]....

View 6 Replies View Related

Cisco Switching/Routing :: WS-X4548-GB-RJ45 Frequent Input Errors Of Module Interface

Oct 21, 2012

I have been making effort to solve frequent input errors of module interface(WS-X4548-GB-RJ45) in our Backbone Switch(Cat4506).Let me show you show interface information.Rx-No-pkt-buff value is increased continuously even though traffic rate of interfaces is lower than 20Mbps.We have two Backbone Switch which is operated by HA via HSRP.What bring buffer shortage to our network ? [code]

View 2 Replies View Related

Cisco Firewall :: 5540 ASA Interface Input Error On Outside Interface

May 28, 2013

We are having Cisco ASA 5540 having Cisco Adaptive Security Appliance Software Version 8.0(5)23 at certain time of moment daily wer are facing latency and packetdrop wherin when I checked for ASA Interface which gives me " Input Errors" on outside interface ,so can any one tell me what are the causes to get input errors on cisco asa outisde interface.

View 2 Replies View Related

Cisco Firewall :: ASA5540 Management Interface IP Addressing?

May 9, 2011

How does one allow /31 mask for an management interface on an ASA5540 using version 8.3(1)?
 
I need to configure a 192.168.x.y /31 on the management 0/0 interface of a ASA5540 and it is providing me with the following error:ERROR: /31 mask is not allowed

View 1 Replies View Related

Cisco Firewall :: ASA5540 - No ICMP Reply From Inside Sub-interface

Apr 28, 2013

I need to monitor with ping the inside sub-interface of my ASA5540, is that possible? I get the ICMP requests but no replys going out from the box.
 
 I need to ping the 192.168.10.250 from the 192.168.5.55:
  
ASA Version 8.0(5) 
interface GigabitEthernet0/1
nameif inside

[Code].....

View 2 Replies View Related

Cisco :: ASA5540 - Run Firewall To Display MTU Packet Size Being Received On Interface?

Jul 5, 2012

I have a ASA5540 firewall set-up with an interface MTU of 1500.  
 
I suspect that we are receiving packets with a larger MTU but have not found an easy way of confirming this.  Any command that can be run on the firewall to display the MTU packet size being received on an interface?
 
We are also running Solar Winds so could query an OID if such a variable exists.

View 1 Replies View Related

Cisco Firewall :: 2960 Switch - CRC Errors At PIX 535 Interface

Dec 14, 2011

I have a PIX 535 connected through OFC to Cisco 2960 Switch.
 
PIX end - G0 (SC type Connector) - Switch End - Gi1/0/28 (LC type connector)
 
When I am pinging from either side, I am getting packet drops.  CRC error is increasing at PIX interface.
 
Speed settings, tried with
 
auto - auto
auto - nonegotiate
nonegotiate - auto
nonegotiate - nonegotiate
 
But no improvements.  When its connected with SC - SC connector, its working fine.
 
Switch also working fine when connected LC - LC.Switch OS is 15.x  version.
  
Cisco PIX Security Appliance Software Version 7.0(4) <system>
Device Manager Version 5.0(4) Cisco PIX Security Appliance Software Version 7.0(4) <system>Device Manager Version 5.0(4)

View 1 Replies View Related

Cisco WAN :: Output Drops And Input Errors On 7204 With NPE 300

May 11, 2011

My router, a Cisco 7204 with NPE 300, is experiencing output drops and input errors on a fastethernet interface. I have a 100Mbps connection with less than 15Mbps utilization at peak times.
 
FastEthernet1/0 is up, line protocol is up  Hardware is DEC21140, address is 0014.a985.1a1c (bia 0014.a985.1a1c)  Internet address is 38.102.66.134/30  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,     reliability 255/255, txload 3/255, rxload 1/255 

[Code]....

View 17 Replies View Related

Cisco :: 3560 Not Showing CRC And Input Errors In Logging

Oct 21, 2012

I ran into a problem a few weeks ago and am still trying to figure out why either the 3560 switch or our Cacti syslog server did not alert us when one of our ports was experiencing heavy CRC and Input errors. 
 
I had upgraded the IOS to 12.2(55)SE6 and rebooted the switch.  About a week later, someone was troubleshooting why print jobs were having problems printing to a high speed printer.  When I looked at the interface it showed a few thousand CRC and Input errors.  I cleared the counters and had them print again and watched as the CRC and Input errors went up.  When I did a "show log" there were no error messages.  Looking at our Cacti Syslog there were also no errors present for the past 6 months.
 
We found that the device on the port was set to auto speed and duplex and the switch port was at 100/Full.  Once we got them to match the problem was resolved, but we were left wondering why we never got any alerts.
 
We also have some 3548 and 3550 model switches that Cacti picks up %LINK-4-ERROR for any ports that show CRC and Input errors.  I did some research and it appears that the 3560 switches do not have the LINK facility code.  I believe it has been replaced with a PHY link code but I'm not sure.  We do have some "%PHY-4-EXCESSIVE_ERRORS: Excessive FCS, data, or idle word errors found" but they are all for 3750 switches.  I could not find any 3560 that had alerted for that error or the LINK error.
 
I also tripped port security on the 3560 switch just to make sure that it was reporting correctly to Cacti and that alert did show up. 
 
My question is how do I get a 3560 switch to alert in the logging buffer for CRC/Input/FCS errors?  Also, how I can generate CRC and Input errors on purpose for testing?  I tried mismatching the speed/duplex/Auto and only got collissions, no CRC or Input errors.

View 2 Replies View Related

Cisco Switching/Routing :: CRC And Input Errors On WS-C2960-24TT-L?

Jul 1, 2012

I am not sure why the CRC and input errors are increasing in fastethernet port...This port is used as Intradomain cross connect to Data Center service provider for LAN extension between two Data Centers in different locations... The link is 100 MB. The switch port is directly connected to patch panel of DC provider and I believe they have some L3 switch or some other device that is providing LAN extension...
 
#sh interfaces fastEthernet 0/23
FastEthernet0/23 is up, line protocol is up (connected)
  Hardware is Fast Ethernet, address is 0019.3050.1497 (bia 0019.3050.1497)
  Description: ASA_VPN_TO
  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

[code]....

View 26 Replies View Related

Cisco WAN :: 1812 Input Errors On Fast Ethernet Increasing

Dec 5, 2011

I'm using a Cisco 1812 to route traffic from a small location with 10 users.. Users are complaning about packet loss, and programs with live database connection is freezing..On the router i've checked one of the Fastethernet interfaces, and I can see that the input errors are increasing constantly. [code]

View 5 Replies View Related

Cisco Switching/Routing :: CRC And Input Errors On WS-C2960-24TT-L

Oct 2, 2012

I am not sure why the CRC and input errors are increasing in fastethernet port...This port is used as Intradomain cross connect to Data Center service provider for LAN extension between two Data Centers in different locations... The link is 100 MB. The switch port is directly connected to patch panel of DC provider and I believe they have some L3 switch or some other device that is providing LAN extension...
 
#sh interfaces fastEthernet 0/23
FastEthernet0/23 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is 0019.3050.1497 (bia 0019.3050.1497)

[Code].....

View 3 Replies View Related

Cisco Switching/Routing :: ASR 1002X Receiving Runt And Input Errors

Mar 15, 2013

I have an ASR 1002x connected to a 6513.  Connection is from ASR Gig Copper SFP to 6513 Copper 10/100/1000 port.  The ASR is recevinig Runt and input errors.  I have removed the negotiation auto command on both boxes and hard coded the speed etc and still errors occur.  I have also added the negotiation auto to both devices and also removed it with out hard coding the speed at and same results.  Everytime I have seen these errors is has been to collision caused by a duplex mismatch.

View 4 Replies View Related

Cisco Switching/Routing :: 3560G Input And Crc Errors Only On Built In Ports?

Mar 11, 2013

I have an odd situation where I cannot get a device connected to a built in switchport with out input and crc errors.  When connecting to a GLC-T sfp it works fine.Here is my test layout
 
Outdoor wireless AP --- 10' of cat6 cable --- Gigabit POE injector --- 10' Cat6 cable --- 3560G port 48.  (input and crc errors)
 
When I do this there are input and crc errors on the switch port.  This has been confirmed on three different switches and three different outdoor AP's.  We though at first it was the injector, but when we run the same setup, but instead connect the device to port 49 with a GLC-T sfp there are no errors.
 
Outdoor wireless AP --- 10' of cat6 cable --- Gigabit POE injector --- 10' Cat6 cable --- 3560G port 49 (GLC-T).  (No errors)
 
I have upgraded the 3560G to the latest ios and still it has the same problem.  If I run the same setup to a 2960 there are no errors at all.
 
Outdoor wireless AP --- 10' of cat6 cable --- Gigabit POE injector --- 10' Cat6 cable --- 2960 port g0/1  (No errors)
 
I have also tried manually setting the speed on the 3560G with no success. 

View 9 Replies View Related

Cisco Firewall :: ASA 5510 7.2.1 High Traffic On Outside Interface Very High Input?

Oct 13, 2011

Today I've received reports of slow internet access/activity and have noticed myself that it seems a bit slow today.  On the dashboard of our asa 5510 the "outside interface" traffic usage is running constantly high. It's at the top of the graph. How can I tell what is causing the spike in utilization. It usually runs at about 1500-2000 Kbps, and now it's up over 10,000.

View 6 Replies View Related

Cisco WAN :: 2911 Platform - Clear Interface On IOS 15.1

Jan 3, 2012

During WAN troubleshooting, I did a "clear interface ser0/0/0" on a branch router. It has two WAN links. I lost ssh/telnet connectivity but both WAN links were still replying to pings. We did a manual power off of the router to regain connectivity.Is there a known issue with this command on this IOS version? We're using Cisco 2911 platform with IOS 15.1-1.T2 version.

View 1 Replies View Related

Cisco :: TOP-N Interface Errors Not Showing In LMS 4.1

Dec 4, 2011

No date in the TOP-N Interface Errors portlet showing in LMS 4.1, but data for TOP-N Interface Utilization is displayed like expected. The Interface Errors poller show active(without errors) with same Instances as Interface Utilization.

View 1 Replies View Related

Cisco WAN :: 2911 Forward Packet Based On Input Interface

Mar 25, 2013

I have a 2911 router connected to two different ISP. Is it posible to route traffic based on what interface the traffic came first?Lets say I have the deault route to use interface gig0/0(ISP1),  but a certain ip packet reach the router by interface gig0/1(ISP2). Is there any way (if possible without using source NAT) that I could route traffic back to that ip address using interface gig0/1. The source Ip addresses are not fixed, so I can not use Policy Based Routing.

View 1 Replies View Related

Cisco WAN :: Input Queue Drops On 6500 VLan Interface?

Dec 6, 2011

Vlan interface would be dropping packets on the input queue? Refer to the drops/flushes below.  This is from a 6500 with a Sup720, there are a number of vlans on it. This 6500 and it's HSRP partner are exhibiting the same symptoms on all the vlans I bothered to check.  This particular vlan is quite lightly used, there are only about fifteen user PC's (each with 100 Mb interfaces) on it.
 
There is a bit of information on input queue drops on Cisco, but this is focused on physical interfaces where I can understand some packets being dropped.  I would think that Vlan interfaces would have different issues.I note the "no buffer" errors as well, that also concerns me, especially as that counter is quite close to the "flushes".
 
Vlan123 is up, line protocol is up  Hardware is EtherSVI, address is 00d0.04fd.6000 (bia 00d0.04fd.6000)  Description: Vlan123  Internet address is 10.123.123.7/24  MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 1/255, rxload 1/255  Encapsulation ARPA, loopback not set  Keepalive not supported  ARP type: ARPA, ARP Timeout 04:00:00 
[Code] .......

View 3 Replies View Related

Cisco Wireless :: Interface Radio0-802.11A With CRC Errors 1400 Series

Nov 1, 2011

I have to bridge 1400 series which  in the virtual interface has a CRC errors, i don´t the reason, maybe the link (point-point bridge) is misaligned.

View 3 Replies View Related

Cisco Switching/Routing :: Catalyst 4506 Count Interface Input / Output Rate Always 0

Jan 20, 2013

Our customer get the problem that the switch count the 5mins input/output rate of connected traffic interface always ZERO.The problem only occur in the module 3,4 and 5 interface, module 2 has no problems.
 
-------------------------------------------------------------------------------------------------
Catayst 4506E
12.2(52)SG
 Chassis Type : WS-C4506-E
Power consumed by backplane : 0 Watts
Mod Ports Card Type                              Model              Serial No.---+-----+--------------------------------------+------------------+-----------1     6  Sup 6-E 10GE (X2), 1000BaseX (SFP)     WS-X45-SUP6-E       2    48  10/100/1000BaseT (RJ45)                WS-X4548-GB-RJ45   3    48  10/100/1000BaseT (RJ45)                WS-X4648-RJ45-E    4    48  10/100/1000BaseT (RJ45)                WS-X4648-RJ45-E    5    48  10/100/1000BaseT (RJ45)                WS-X4648-RJ45-E   

[code]....+

View 2 Replies View Related

Cisco Firewall :: ASA5540 - EAL4 Transparent Firewall Config

Mar 14, 2011

I am configuring an ASA5540 firewall for a client, only difference to usual being that it is to run in Transparent mode. I have looked through for an EAL4 transparent firewall config guide but found nothing and therefore assumed that the usual one would be used.The clients security bod has now come back and insisted MAC filtering should be used but I can find no reference of this anywhere. Does MAC filtering is required to make a transparent box EAL4 compliant and if so where I can find documentation supporting this?

View 1 Replies View Related

Cisco Switching/Routing :: 2921 / Catalyst 3560 - Router Interface Input Queue Drops?

Nov 6, 2011

i have an 2921 connected to an Catalyst 3560. My router interface shows quite a lot of input queue drops. Load is not too much max 5/255.

View 1 Replies View Related

Cisco Firewall :: VPN Between ASA5540 And Router

Sep 10, 2008

I had a working vpn configuration between a local and a remote router; the remote router is not under my administration.Now I moved the vpn termination from my side to an ASA5540 software version 8.0(3). The tunnel is up but there is no reachability. The "show crypto ipsec sa" on the ASA shows encapsulated packets but NO decapsulated packets! Routing and no_nat are properly configured.

View 28 Replies View Related

Cisco Firewall :: K-value Mismatch With EIGRP On ASA5540

Mar 7, 2011

I have an ASA- 5585X (v.8.2.4) directly connected to an upstream 6509, which is running EIGRP. I configured the ASA for EIGRP with same AS# and network numbers and no auto-summary.   Here are the log messages I got:
 
Mar  8 15:11:08: %PIM-5-NBRCHG: neighbor 164.72.178.28 UP on interface Vlan150 (vrf default) Mar  8 15:11:08: %PIM-5-DRCHG: DR change from neighbor 0.0.0.0 to 164.72.178.28 on interface Vlan150 (vrf default)
Mar  8 15:11:11: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 164.72.178.28 (Vlan150) isup: new adjacencyMar  8 16:16:08: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 164.72.178.25 (Vlan150) isup: new adjacency
Mar  8 16:18:54: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 164.72.178.25 (Vlan150) is down: K-value mismatch
 
I lost my SSH connection to the upstream 6509 and couldn't get it back. Luckily I didn't lose my ASDM connection to the ASA, so I disabled EIGRP and went to look at the logs on the 6509.
 
What causes a K-value mismatch, and how to I rectify the situation?

View 1 Replies View Related

Cisco Firewall :: ASA5540 Configured With Standby IP

Aug 6, 2012

I have this 2x ASA5540 firewall and notice the it is configured with a standby ip. The firewall is run in Active/Passive mode.However, the standby ip of this firewall is not point to the secondary firewall and vice versa for the primary firewall. [code]

1) May i know how is this configuration valid in the first place? I have checked through the configuration. None of the configuration is related to this ip address.
 
2) Can we remove this standby ip address on both the firewall and correct to the correct primary and seconadary ip address in both firewall?
 
3) We tried to use this ip address but cannot be used ? Is it related to the configuration of the standby ip address.Do note that the ping to this ip address x.x.x.120 is unreachable.

View 1 Replies View Related

Cisco Firewall :: One ASA5540 With Two 3750 Connections

Jan 9, 2013

i have two CAT3750 need to place in L3, and it supposed that used as L3 switches by SVI for L2 routing, and I want to these two configured as redundancy by HSRP. but now I can only have one ASA5540 to connects these of L3 switches.
 
so, here is my questions:
 
1. does ASA5540 support multi vlan?

2. does it support spanning tree protocol?

3. if I've choiced to use trunking between two L3 switches, does it can pass through HSRP hello msg?

4. achive network redundancy

View 3 Replies View Related

Cisco Wireless :: Output Errors / Transmit Discards And Big Buffer Errors On 1121 AP?

Sep 13, 2011

I have a AIR-AP1121G-A-K9 running c1100-k9w7-tar.123-7.JA2 (Autonomous)We have monitoring setup with Orion NPM and we consistently see output errors, Transmit discards and big buffer errors The users at the site have not reporting any issues but was wondering how to prevent these or are these normal?What causes the output errors on Wireless Radio ? How to troubleshoot further ?
 
Radio0-802.11G
Total Output Errors         0              47749
Small Buffer Misses
4 misses
139 misses

[code]....

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved