PIX - dropped VLAN untagged packets

cdcjim2877 · ‎01-15-2009

Hi,

I am running version 7.0(7) on a PIX 515e. My question is I am seeing many dropped VLAN untagged packets. See output:

Interface Ethernet0 "outside", is up, line protocol is up

Hardware is i82559, BW 100 Mbps

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

MAC address 001a.a2a4.7c96, MTU 1500

IP address 2X.X.X.X, subnet mask 255.255.X.X

1154270 packets input, 1384583104 bytes, 0 no buffer

Received 3818 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

748746 packets output, 516938253 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (128/128) software (0/14)

output queue (curr/max blocks): hardware (0/11) software (0/1)

Received 1620863 VLAN untagged packets, 1359047144 bytes

Transmitted 1268550 VLAN untagged packets, 491662091 bytes

Dropped 27314 VLAN untagged packets

What does this mean?

Thanks,

Jim

m.sir · ‎01-15-2009

Do you have subinterfaces on that interface??? If yes might be that this interface will only accept tagged packets and untagged are dropped

M.

cdcjim2877 · ‎01-15-2009

No; here is the physical breakdown.

"Cloud"

|

PIX 515e

|

Barracuda Content Filter (310)

|

2821 ISR

|

3560 - core switch (VLAN's)

VLAN's are only assigned and working on and below the 3560. The content filter shows no input errors or CRC's leading to the PIX.