Firewall broadcasting

hassan_oudeh · ‎03-30-2007

guys,

i have configured a new 525 Firwall into my network recently, but something starnge happend to the internal network.

i noticed slowing down the entire network some times some of my application not responding and getting dissconneting (even the pinging inside the same network oscillate ).

does the firewall generate such aproblem (broadcasting) ??

i've attached the config

thanks in advance,

hasan

abinjola · ‎03-30-2007

Firstly you are running an obsolete code on the new FW (6.2.2)

Secondly does sh int shows up any error on interface ?....also what are the instantatenous values for sh conn count..sh xlate count (when the issue occurs)?

hassan_oudeh · ‎03-30-2007

First of all Thanks for your response, the following are the sh int,sh xlate count and sh connection count

pixfirewall# sh int

interface ethernet0 "outside" is up, line protocol is up

Hardware is i82559 ethernet, address is 0011.2026.6f0e

IP address XX.XX.XX.130, subnet mask 255.255.255.240

MTU 1500 bytes, BW 10000 Kbit half duplex

2560677 packets input, 1870286438 bytes, 0 no buffer

Received 214445 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

1956691 packets output, 399125631 bytes, 0 underruns

0 output errors, 932 collisions, 0 interface resets

0 babbles, 0 late collisions, 4453 deferred

0 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (128/128) software (0/3)

output queue (curr/max blocks): hardware (0/51) software (0/51)

interface ethernet1 "inside1" is up, line protocol is up

Hardware is i82559 ethernet, address is 0011.2026.6f0f

IP address 192.168.0.253, subnet mask 255.255.255.0

MTU 1500 bytes, BW 100000 Kbit full duplex

2795251 packets input, 469386042 bytes, 0 no buffer

Received 315948 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

3066074 packets output, 2706764097 bytes, 0 underruns

0 output errors, 827 collisions, 0 interface resets

0 babbles, 0 late collisions, 2780 deferred

979 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (128/128) software (0/20)

output queue (curr/max blocks): hardware (2/31) software (0/18)

pixfirewall# sh conn count

19 in use, 235 most used

pixfirewall# sh xlate count

10 in use, 349 most used

pixfirewall#