Web server communication causes router restart

Unanswered Question
Jun 27th, 2007

Our remote office is installing a Sharp AR-M207 (MFP). The tech configured the network settings, and I can ping it with no problem. However, each time I attempt to interact with the webserver, (Internet Explorer over the WAN) the router reboots. I thought it might be a power issue, but the MFP is now plugged in away from the router. Once the router came back up, I ran a couple ip scans over the WAN to try and load up the router a bit. Next I VNC'd to one of the LAN workstations and used it to interact with the webserver and had no problems. Then I tried to connect to the webserver from here (over the WAN) and the router rebooted again. It's happened four times so far. We have unplugged the MFP from the network and I'm monitoring the link to verify the WAN link connectivity. The tech is planning to do a firmware update on the NIC if nothing else shows up. Anybody ever see this before? Thanks.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
Wilson Samuel Wed, 06/27/2007 - 11:00

Hi,

Sounds very interesting...

Generally everytime a Router reboots, it logs the reason in the sh ver.

May I request you to paste the output from sh ver of the router in order to better understand what might have caused the reboot.

Regards,

Wilson Samuel

elbyte Wed, 06/27/2007 - 11:12

This is all that I found in the log. It was the same for each reboot...

*Jun 27 11:24:56.692: %LINK-5-CHANGED: Interface FastEthernet0/1, changed state to administratively down

*Jun 27 11:24:57.864: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up

*Jun 27 11:24:58.420: %SYS-5-RESTART: System restarted --

Cisco IOS Software, C2600 Software (C2600-JK9S2-M), Version 12.3(14)T4, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2005 by Cisco Systems, Inc.

Compiled Thu 08-Sep-05 14:49 by kehsiao

*Jun 27 11:24:58.424: %SNMP-5-COLDSTART: SNMP agent on host XXXX_VPN is undergoing a cold start

*Jun 27 11:24:58.508: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON

*Jun 27 11:24:58.572: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host xxx.xxx.xxx.xxx started - CLI initiated

*Jun 27 11:24:59.424: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to down

*Jun 27 11:25:05.660: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up

*Jun 27 11:25:11.660: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host xxx.xxx.xxx.xxx started - reconnection

*Jun 27 11:26:14.493: %LINK-3-UPDOWN: Interface ATM0/0, changed state to up

*Jun 27 11:26:17.493: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0/0, changed state to up

*Jun 27 11:26:19.997: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnelxxx, changed state to up

*Jun 27 11:26:20.973: %ATM-5-UPDOWN: Interface ATM0/0, Changing autovc 8/35 to PVC activated.

*Jun 27 11:26:21.961: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for

destaddr=xx.xx.xxx.xxx, prot=50, spi=0x7xxxxxxx(xxxxxxxxxx), srcaddr=xxx.xxx.xxx.xxx

*Jun 27 11:26:29.493: %CRYPTO-4-IKMP_NO_SA: IKE message from xxx.xxx.xxx.xxx has no SA and is not an initialization offer

*Jun 27 11:26:34.998: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnelxxx, changed state to down

*Jun 27 11:26:39.998: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnelxxx, changed state to up

Wilson Samuel Wed, 06/27/2007 - 11:24

Hi,

Thanks for the info, could you also paste the sh ver output, actually I'm looking for something like this(enclosed in the stars):

If you require further assistance please contact us by sending email to

[email protected].

Cisco 7206VXR (NPE400) processor (revision A) with 114688K/16384K bytes of memory.

Processor board ID 26811579

R7000 CPU at 350MHz, Implementation 39, Rev 3.3, 256KB L2 Cache

6 slot VXR midplane, Version 2.6

***Last reset from power-on****

PCI bus mb0_mb1 (Slots 0, 1, 3 and 5) has a capacity of 600 bandwidth points.

Current configuration on bus mb0_mb1 has a total of 890 bandwidth points.

The set of PA-2FE, PA-POS-2OC3, and I/O-2FE qualify for "half

bandwidth points" consideration, when full bandwidth point counting

results in oversubscription, under the condition that only one of the

two ports is used. With this adjustment, current configuration on bus

mb0_mb1 has a total of 690 bandwidth points.

This configuration has oversubscripted the PCI bus and is not a

supported configuration.

PCI bus mb2 (Slots 2, 4, 6) has a capacity of 600 bandwidth points.

Current configuration on bus mb2 has a total of 300 bandwidth points

This configuration is within the PCI bus capacity and is supported.

Please refer to the following document "Cisco 7200 Series Port Adaptor

Hardware Configuration Guidelines" on Cisco.com <http://www.cisco.com>

for c7200 bandwidth points oversubscription and usage guidelines.

And any other info that it might have, moreover I would also like to run a Bug Toolkit on the IOS version.

Kind REgards,

Wilson Samuel

elbyte Wed, 06/27/2007 - 11:30

Thanks for your interest. Here's the "sh ver"

XXXX_VPN#sh ver

Cisco IOS Software, C2600 Software (C2600-JK9S2-M), Version 12.3(14)T4, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2005 by Cisco Systems, Inc.

Compiled Thu 08-Sep-05 14:49 by kehsiao

ROM: System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE (fc1)

XXXX_VPN uptime is 1 hour, 56 minutes

System returned to ROM by error - a SegV exception, PC 0x81E6781C at 11:24:56 MDT Wed Jun 27 2007

System restarted at 11:29:26 MDT Wed Jun 27 2007

System image file is "flash:c2600-jk9s2-mz.123-14.T4.bin"

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

[email protected].

Cisco 2621XM (MPC860P) processor (revision 0x100) with 127308K/3764K bytes of memory.

Processor board ID JAD06500GWT (2787821242)

M860 processor: part number 5, mask 2

2 FastEthernet interfaces

1 ATM interface

32K bytes of NVRAM.

32768K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

Wilson Samuel Wed, 06/27/2007 - 11:48

Hi,

The router had crashed due to the SegV exception and I strongly suspect either Memory issue or Bug.

You may like to cross check for any known Bugs by either pasting the sh stacks info to let us help you.

http://www.cisco.com/en/US/customer/products/hw/routers/ps359/products_tech_note09186a0080189ddb.shtml

Or alternatively you may open up a TAC Case, in case if its not a known bug yet.

You may also like to visit the following URL

http://www.cisco.com/en/US/customer/products/hw/iad/ps397/products_tech_note09186a00800b4447.shtml

I hope this helps,

Please rate if it helps,

Kind Regards,

Wilson Samuel

elbyte Wed, 06/27/2007 - 12:24

Here is the stack info, but maybe not enough to diagnose the problem? I put it into the output analyzer and it might be a bug. We have been running this version for about a year now and never had this problem until today.

XXXX_VPN#sh stacks

Minimum process stacks:

Free/Size Name

5524/6000 Clock Update Proc

5584/6000 SPAN Subsystem

59388/60000 script background loader

2568/3000 allegro libretto init

11000/12000 Router Init

3656/12000 Init

5412/6000 RADIUS INITCONFIG

2576/3000 Rom Random Update Process

34924/36000 TCP Command

10156/12000 Virtual Exec

Interrupt level stacks:

Level Called Unused/Size Name

1 532353 6072/9000 Network interfaces

2 0 9000/9000 Timebase Reference Interrupt

3 0 9000/9000 PA Management Int Handler

6 14 8920/9000 16552 Con/Aux Interrupt

7 2303380 8912/9000 MPC860 TIMER INTERRUPT

Spurious interrupts: 1

System was restarted by error - a SegV exception, PC 0x81E6781C at 11:24:56 MDT Wed Jun 27 2007

C2600 Software (C2600-JK9S2-M), Version 12.3(14)T4, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Compiled Thu 08-Sep-05 14:49 by kehsiao

Image text-base: 0x80008098, data-base: 0x826E9AC0

Stack trace from system failure:

FP: 0x84AAC010, RA: 0x81E6F090

FP: 0x84AAC058, RA: 0x82414BBC

FP: 0x84AAC0A0, RA: 0x82410CB0

FP: 0x84AAC0C8, RA: 0x80C22194

FP: 0x84AAC0E0, RA: 0x809E80FC

FP: 0x8453C7B8, RA: 0x80C11C54

FP: 0x8453C7C8, RA: 0x80C11C54

FP: 0x8453C800, RA: 0x809E81BC

***************************************************

******* Information of Last System Crash **********

***************************************************

The last crashinfo failed to be written.

Please verify the exception crashinfo configuration

the filesytem devices, and the free space on the

filesystem devices.

Using crashinfo_FAILED.

%Error opening crashinfo_FAILED (No such file or directory)

srimural Wed, 06/27/2007 - 13:52

Hi,

Can you take the o/p of sh proc mem and continue to watch it. Are you observing any memory leaks in the sense any process holding the memory and also see for any access-list which has the HTTP port mapped which are logging the packet matched. this also can eat up memory and cpu process. Also check for bugs associated with the IOS. Certain IOS trains have some memory leak issues.

I hope my hints have give you some idea.

Thanks and Regards,

Srinath.Muralidharan

Cable&Wireless

[email protected]

elbyte Wed, 06/27/2007 - 14:25

Thanaks for chiming in Srinath. The router is working fine right now, as it has for the last year. The reload only happens when I attempt to access the webserver on the MFP.

Actions

This Discussion