I have a 3560X that is directly connected to an ASA 5505. I am seeing output drops on the 3560X interface that connects to the ASA. Below are the troubleshooting commands I have ran, but I don't see any indication to what is causing the problem.
3560X
show run int gig 0/24
!
interface GigabitEthernet0/24
description To SJ-ASA-5505-A
no switchport
ip address 172.17.5.129 255.255.255.248
load-interval 30
end
show int gig 0/24
GigabitEthernet0/24 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 44d3.ca2d.e041 (bia 44d3.ca2d.e041)
Description: To SJ-ASA-5505-A
Internet address is 172.17.5.129/29
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 78/255, rxload 2/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 00:17:21
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 52219
Queueing strategy: fifo
Output queue: 0/40 (size/max)
30 second input rate 1030000 bits/sec, 1421 packets/sec
30 second output rate 30784000 bits/sec, 3100 packets/sec
1357921 packets input, 125902224 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
2921490 packets output, 3618171270 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out
show controllers gig 0/24 utilization
Receive Bandwidth Percentage Utilization : 1
Transmit Bandwidth Percentage Utilization : 28
ASA 5505
show run int eth0/1
interface Ethernet0/1
show int eth0/1
Interface Ethernet0/1 "", is up, line protocol is up
Hardware is 88E6095, BW 100 Mbps, DLY 100 usec
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
Available but not configured via nameif
MAC address 0022.9051.d810, MTU not set
IP address unassigned
3666626874 packets input, 3792120130920 bytes, 0 no buffer
Received 2 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 L2 decode drops
85899377236 switch ingress policy drops
2593273425 packets output, 1186781461235 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
0 rate limit drops
0 switch egress policy drops
show run int vlan 1
interface Vlan1
nameif inside
security-level 100
ip address 172.17.5.130 255.255.255.248
show int vlan 1
Interface Vlan1 "inside", is up, line protocol is up
Hardware is EtherSVI, BW 100 Mbps, DLY 100 usec
MAC address 0022.9051.d817, MTU 1500
IP address 172.17.5.130, subnet mask 255.255.255.248
Traffic Statistics for "inside":
3664712280 packets input, 3723344791180 bytes
2593350130 packets output, 1131025416517 bytes
58887 packets dropped
1 minute input rate 2744 pkts/sec, 3353520 bytes/sec
1 minute output rate 1263 pkts/sec, 88577 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 2792 pkts/sec, 3410504 bytes/sec
5 minute output rate 1293 pkts/sec, 90418 bytes/sec
5 minute drop rate, 0 pkts/sec
