03-26-2010 12:57 PM - edited 03-04-2019 07:56 AM
I have a 7206VXR that has been receiving input errors on the GigE ports. We are a small ISP, and this is our edge router. My boss (with mostly copper telephone experience) is convinced these errors are causing every single strange thing on our network, while I think they aren't much to worry about. Hopefully someone can give me some ideas.
Port configuration is:
Serial 1/0 - DS3 to first upstream provider.
Gi 0/1 - GigE link to second upstream provider, next hop is Cat3560 (provider-owned) then converted to fiber. We contract for 50Mbps on this circuit, which is the provider throttles at their head-end.
Gi 0/2 - GigE link to our network, connected to iPolicy firewall, then NetEqualizer bandwidth manager, then our Cat3560. Trunk carries 6 VLANs.
Router has NPE-G2 processor, is running 12.4(11)T IOS, and has NAT and BGP in operation - we have about 150 users on NAT, the other 1500+ are on public IPs. We very seldom receive errors off Se1/0. I have port stats for the two GigE ports at the bottom, both for 5 minute periods.
Doing a 'debug ip error' seems to point to NAT timeouts - about 2/3 of the errors have a destination from my NAT pool with a 'dispose udp.noport' message.
I would appreciate any guidance on whether I should be concerned, and suggestions on corrective actions if needed. Thanks in advance.
Louis
#sho int gi 0/1
GigabitEthernet0/1 is up, line protocol is up
Hardware is MV64460 Internal MAC, address is 0008.a4e9.2c1b (bia 0008.a4e9.2c1b)
MTU 1500 bytes, BW 50000 Kbit, DLY 10 usec,
reliability 255/255, txload 34/255, rxload 111/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 00:04:58
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 21774000 bits/sec, 3036 packets/sec
5 minute output rate 6748000 bits/sec, 3132 packets/sec
940499 packets input, 845923486 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
180 input errors, 0 CRC, 0 frame, 0 overrun, 180 ignored
0 watchdog, 148 multicast, 0 pause input
0 input packets with dribble condition detected
970633 packets output, 260172899 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
#show int gi 0/2
GigabitEthernet0/2 is up, line protocol is up
Hardware is MV64460 Internal MAC, address is 0008.a4e9.2c1a (bia 0008.a4e9.2c1a)
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 254/255, txload 6/255, rxload 2/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 00:05:01
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 8165000 bits/sec, 3373 packets/sec
5 minute output rate 24073000 bits/sec, 3841 packets/sec
923522 packets input, 294899255 bytes, 0 no buffer
Received 1446 broadcasts, 0 runts, 0 giants, 0 throttles
9147 input errors, 0 CRC, 0 frame, 0 overrun, 9147 ignored
0 watchdog, 4726 multicast, 0 pause input
0 input packets with dribble condition detected
1030977 packets output, 793217761 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
03-26-2010 01:12 PM
G0/2 is not ok - too many ignores.
Can you relate these to traffic peaks / drops on serial (of which you have not sent the output) ?
Also since you're as ISP, I would recommend you to run 12.2SRE - especially tailored and tested for you guys.
03-29-2010 08:30 AM
At a quick glance, it doesn't seem like the errors on Gi0/2 track with traffic on Se1/0. Below is stats on all three ports from the same 5 min period. Traffic was much higher on Se1/0 than in period in first post, but number of input errors on Gi0/2 are similar.
I'll look into going to 12.2SRE - I have a few versions of IOS, but not sure if I have that one stored.
#sho int gi 0/1
GigabitEthernet0/1 is up, line protocol is up
Hardware is MV64460 Internal MAC, address is 0008.a4e9.2c1b (bia 0008.a4e9.2c1b)
MTU 1500 bytes, BW 50000 Kbit, DLY 10 usec,
reliability 255/255, txload 25/255, rxload 115/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 00:05:01
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 22739000 bits/sec, 2872 packets/sec
5 minute output rate 5048000 bits/sec, 3014 packets/sec
831739 packets input, 803510646 bytes, 0 no buffer
Received 1 broadcasts, 0 runts, 0 giants, 0 throttles
180 input errors, 0 CRC, 0 frame, 0 overrun, 180 ignored
0 watchdog, 147 multicast, 0 pause input
0 input packets with dribble condition detected
890401 packets output, 186543890 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
#sho int gi 0/2
GigabitEthernet0/2 is up, line protocol is up
Hardware is MV64460 Internal MAC, address is 0008.a4e9.2c1a (bia 0008.a4e9.2c1a)
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 254/255, txload 10/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 00:05:01
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 7390000 bits/sec, 4020 packets/sec
5 minute output rate 41467000 bits/sec, 5472 packets/sec
1203035 packets input, 275241121 bytes, 0 no buffer
Received 1449 broadcasts, 0 runts, 0 giants, 0 throttles
9431 input errors, 0 CRC, 0 frame, 0 overrun, 9431 ignored
0 watchdog, 4768 multicast, 0 pause input
0 input packets with dribble condition detected
1672560 packets output, 1578908815 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
#sho int se 1/0
Serial1/0 is up, line protocol is up
Hardware is M1T-T3+ pa
MTU 4470 bytes, BW 44210 Kbit, DLY 200 usec,
reliability 255/255, txload 11/255, rxload 105/255
Encapsulation HDLC, crc 16, loopback not set
Keepalive set (10 sec)
Restart-Delay is 10 secs
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 00:04:57
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 18297000 bits/sec, 2556 packets/sec
5 minute output rate 2059000 bits/sec, 941 packets/sec
823575 packets input, 758104850 bytes, 0 no buffer
Received 30 broadcasts, 0 runts, 0 giants, 0 throttles
0 parity
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
290737 packets output, 77293897 bytes, 0 underruns
0 output errors, 0 applique, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
rxLOS inactive, rxLOF inactive, rxAIS inactive
txAIS inactive, rxRAI inactive, txRAI inactive
03-29-2010 08:52 AM
Are you connecting to something that doesn't support flow control ?
If so, please disable on rotuer as well.
03-29-2010 12:03 PM
No, everything we have runs flow control. I'd be happy to turn it off to check - but does a 7200 allow you to control flow control on the GigE ports? The thread here (https://supportforums.cisco.com/thread/2009715) indicates you can't disable on the router.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide