Hi Experts ,
We have an ASA (Earlier we had a PIX ) . It was required to test a new ISP link .The new ISP link was connected to the same interface on the ASA after removing the existing connection . The new public IP was also configured on the new interface by removing the old IP . The connectivity to ISP gets lost after around 30 minutes after the new ISP configurations. The connectivity to the Public ISP Gateway also gets lost .
But when we tried physically removing the new ISP connection and the new removed the new IP details from the interface and reconfigured the interface with the same IP details ,the connection gets restored . But this too doesn 't last long . Only for about 30 minutes . After around 30 minutes the connection gets lost .
The only suspicious thing that was noted that the interface input errors were high. Please see sh interface stats below for more details
sh int e0/0
Interface Ethernet0/0 "outside", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
MAC address 8843.e10c.552c, MTU 1500
IP address XX.XX.XX.XX, subnet mask XX.XX.XX.XX
306951524 packets input, 321152739248 bytes, 0 no buffer
Received 55151 broadcasts, 0 runts, 0 giants
13523741 input errors, 13523741 CRC, 0 frame, 0 overrun, 0 ignored, 0 ab
0 L2 decode drops
252200763 packets output, 65089678278 bytes, 0 underruns
0 output errors, 0 collisions, 5 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
input queue (curr/max packets): hardware (0/10) software (0/0)
output queue (curr/max packets): hardware (0/8) software (0/0)
Traffic Statistics for "outside":
306835093 packets input, 315426414716 bytes
252200862 packets output, 59861074687 bytes
4488945 packets dropped
1 minute input rate 18 pkts/sec, 4321 bytes/sec
1 minute output rate 20 pkts/sec, 1921 bytes/sec
1 minute drop rate, 1 pkts/sec
5 minute input rate 3 pkts/sec, 864 bytes/sec
5 minute output rate 13 pkts/sec, 1420 bytes/sec
5 minute drop rate, 0 pkts/sec
What can be the possible issue ? We have tried switching ISP a few times now and every time we are experiencing this same issue . Please help .
The CRC errors points to cable that is connecting to the interface may be faulty. But in your case they accumulated as you kept changing the connections to different ISP. Connect to ISP and clear the counters. Check if the error increase. Also, when you switch the ISP & IPs, you need to reload the device to clear arp (or 'clear arp table with proper command). The disconnect after 30mins looks like relates to this.