Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

L2 decode drops

Does increasing "L2 decode drops" counter means faulty cable ? ASA (802.1q trunk) connects with 3560.

Interface Ethernet0/1 "", is up, line protocol is up

Hardware is i82546GB rev03, BW 100 Mbps, DLY 100 usec

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

Available but not configured via nameif

MAC address 0021.a09a.de9f, MTU not set

IP address unassigned

59189 packets input, 13303462 bytes, 0 no buffer

Received 9951 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

13319 L2 decode drops

41659 packets output, 5683701 bytes, 0 underruns

0 output errors, 0 collisions, 3 interface resets

0 late collisions, 2 deferred

0 input reset drops, 0 output reset drops, 0 tx hangs

input queue (blocks free curr/low): hardware (255/248)

output queue (blocks free curr/low): hardware (255/248)

FastEthernet0/18 is up, line protocol is up (connected)

Hardware is Fast Ethernet, address is 0019.5660.1194 (bia 0019.5660.1194)

Description: asa-1-75broad(e0/1)

MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA, loopback not set

Keepalive set (10 sec)

Full-duplex, 100Mb/s, media type is 10/100BaseTX

input flow-control is off, output flow-control is unsupported

ARP type: ARPA, ARP Timeout 04:00:00

Last input never, output 00:00:00, output hang never

Last clearing of "show interface" counters never

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

5 minute input rate 18000 bits/sec, 17 packets/sec

5 minute output rate 36000 bits/sec, 35 packets/sec

87687460 packets input, 1495683997 bytes, 0 no buffer

Received 1901447 broadcasts (0 multicast)

1 runts, 0 giants, 0 throttles

1 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

0 watchdog, 1901389 multicast, 0 pause input

0 input packets with dribble condition detected

243267167 packets output, 1465350456 bytes, 0 underruns

0 output errors, 0 collisions, 1 interface resets

0 babbles, 0 late collision, 0 deferred

0 lost carrier, 0 no carrier, 0 PAUSE output

0 output buffer failures, 0 output buffers swapped out

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: L2 decode drops

Not necessarily a faulty cable. Could be traffic on VLANs that the ASA does not have configured. Since you are connected to a switch, there may be PVST spanning tree running on VLANs even though nothing is routed to the ASA.

Use the "allowed vlan" switchport subcommand on the 3560 to black output packets on unknown VLAN IDs. Note with some STP implementations there will always be STP packets going out untagged.

If you are positive nobody is going to accidentally create a packet loop some years down the road when the ASA is removed from that switchport, then you may also want to consider "spanning-tree bpdufilter enable" on the 3560 port.

1 REPLY
New Member

Re: L2 decode drops

Not necessarily a faulty cable. Could be traffic on VLANs that the ASA does not have configured. Since you are connected to a switch, there may be PVST spanning tree running on VLANs even though nothing is routed to the ASA.

Use the "allowed vlan" switchport subcommand on the 3560 to black output packets on unknown VLAN IDs. Note with some STP implementations there will always be STP packets going out untagged.

If you are positive nobody is going to accidentally create a packet loop some years down the road when the ASA is removed from that switchport, then you may also want to consider "spanning-tree bpdufilter enable" on the 3560 port.

14247
Views
0
Helpful
1
Replies
CreatePlease login to create content