Urgent Pls Help - Debug Ethernet Interface on ASA

shaw.chris · ‎10-15-2008

Hi, is there command to debug an Interface on an ASA5510 (7.2) ?

We are experiencing intermittent disconnections on the outside ASA interface which is connected to our ISP's 1841 router.

This is bringing down our remote VPN L2L connections

I have switched the interface to 100mb Full Duplex from auto to match the setting on the 1841 and I'm using a crossover but the issue still occurs with this error in the logs

"Line protocol on Interface Ethernet0/0, changed state to down"

The Interface and VPN then comes back up straight away but all RDP sessions running over our links are disconnected

Thanks,

Chris

Patrick Iseli · ‎10-15-2008

Start with a " show interface " command and look for error codes.

Here is also a good guide for troubleshooting this kind of issues.

http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/intrface.html

Check that you have the same interface duplex and speed settings on both ends (100MB Full Duplex).

sincerely

Patrick

shaw.chris · ‎10-15-2008

Thanks, here are the Interface stats, seems to be OK

Interface Ethernet0/0 "OUTSIDE", is up, line protocol is up

Hardware is i82546GB rev03, BW 1000 Mbps

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

MAC address xxxxxxxxxxx, MTU 1500

IP address x.x.x.x, subnet mask 255.255.255.240

6850202 packets input, 5812329681 bytes, 0 no buffer

Received 4410 broadcasts, 0 runts, 0 giants

3 input errors, 3 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

0 L2 decode drops

6628378 packets output, 4889643034 bytes, 0 underruns

0 output errors, 0 collisions, 2 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

input queue (curr/max packets): hardware (2/21) software (0/0)

output queue (curr/max packets): hardware (0/5) software (0/0)

Traffic Statistics for "OUTSIDE":

6850193 packets input, 5679324994 bytes

6628383 packets output, 4756896907 bytes

18704 packets dropped

1 minute input rate 31 pkts/sec, 3012 bytes/sec

1 minute output rate 39 pkts/sec, 34197 bytes/sec

1 minute drop rate, 0 pkts/sec

5 minute input rate 34 pkts/sec, 15824 bytes/sec

5 minute output rate 31 pkts/sec, 12659 bytes/sec

5 minute drop rate, 0 pkts/sec

Control Point Interface States:

Interface number is 1

Interface config status is active

Interface state is active