Alarm/Errors on Cisco 2811 Router 1

[robspwing]

Hi All,

Thanks in advance. We have some users (remote and internal) complaining about voice quality (both use the avaya softphone). I looked at the back of our Cisco 2811 router and I see the amber light next to alarm.

I did a show interface on the serial interface that faces our ISP. I see "Total output drops: 8098"

I would assume this could be an issue, I am not sure where to start to see what the problem could be.

Any direction would help.
Thanks

 

[North323]

how big is your ISP pipe? are you doing any QOS? Have you cleared the counters on the interface, see if they increment? do a show interface command, see what your negotiated speed is. does it match the ISP? have you had your ISP run some after hours tests?

 

[robspwing]

I hope I answer these correctly. Some of this is still new to me.

The ISP pipe should be a T-1.

I am not sure how to check the QOS.

I have not cleared the counters to see if they increment, what is the command for that?

here is what I get from the show interface command:

Serial0/0/0:0 is up, line protocol is up
Hardware is GT96K Serial
Description: <== T1 to ISP ==>
Internet address is 1.2.3.4/5
MTU 1500 bytes, BW 1536 Kbit, DLY 20000 usec,
reliability 255/255, txload 5/255, rxload 38/255
Encapsulation PPP, LCP Open
Listen: CDPCP
Open: IPCP, loopback not set
Keepalive set (10 sec)
Last input 00:00:07, output 00:00:03, output hang never
Last clearing of "show interface" counters 28w6d
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 8098
Queueing strategy: weighted fair
Output queue: 0/1000/64/8087 (size/max total/threshold/drops)
Conversations 0/172/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 1152 kilobits/sec
5 minute input rate 232000 bits/sec, 19 packets/sec
5 minute output rate 32000 bits/sec, 15 packets/sec
223033865 packets input, 300525349 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
1200348 input errors, 1200347 CRC, 510108 frame, 284711 overrun, 0 ignored, 903541 abort
183149162 packets output, 4104089951 bytes, 0 underruns
0 output errors, 0 collisions, 23 interface resets
0 output buffer failures, 0 output buffers swapped out
51 carrier transitions
Timeslot(s) Used:1-24, SCC: 0, Transmitter delay is 0 flags

 

[North323]

you are doing some sort of qos 'Queueing strategy: weighted fair'

this is a problem: 1200348 input errors, 1200347 CRC, 510108 frame, 284711 overrun, 0 ignored, 903541 abort

can you post a scrubbed config? i would schedule some after hours testing on this circuit.

 

[robspwing]

Let me get that scrubbed config.
I did have the ISP do some after hours testing about a month ago but they said that they did not see anything wrong. It was a pain trying to get them to test so who knows what or if they tested.

 

[robspwing]

North,

I assume that is a scrubbed down Show Run that you need?

 

[North323]

yes with out the public IP's and usernames/passwords....did you ever clear the counters on that interface after the ISP tested?

 

[robspwing]

Current configuration : 5127 bytes
!
! Last configuration change at 18:00:13 utc Mon Apr 6 2009 by someone
! NVRAM config last updated at 21:54:13 utc Fri Jan 16 2009 by someone
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service linenumber
service sequence-numbers
!
hostname 2811Router
!
boot-start-marker
boot-end-marker
!
card type t1 0 0
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 warnings
logging console critical
logging monitor informational
!
no aaa new-model
!
resource policy
!
clock timezone utc 0
no network-clock-participate wic 0
no ip source-route
ip tcp synwait-time 10
!
!
ip cef
!
!
no ip bootp server
no ip domain lookup
ip domain name yourdomain.com
ip ssh time-out 60
ip ssh authentication-retries 2
ip ips name IPS
!
!
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-1742402169
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-111111111111
revocation-check none
rsakeypair TP-self-signed-111111111111
!
!
crypto pki certificate chain TP-self-signed-111111111111
certificate self-signed 01
04050030 308201BF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
(took out some of the info out of here to save space)

quit
username someone privilege 15 secret 5 $$$$$$$$$$$$$$$
username someoneelse privilege 15 secret 5 #################
!
!
controller T1 0/0/0
framing esf
linecode b8zs
channel-group 0 timeslots 1-24
!
controller T1 0/0/1
framing esf
linecode b8zs
channel-group 0 timeslots 1-24
!
!
!
!
!
!
interface FastEthernet0/0
description <== Connection to Firewall ==>$ES_LAN$
ip address 1.2.3.5 255.255.255.240
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
duplex full
speed 100
no cdp enable
no mop enabled
!
interface FastEthernet0/1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
shutdown
duplex auto
speed auto
no mop enabled
!
interface Serial0/0/0:0
description <== T1 to ISP ==>
ip address 1.2.3.4 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
encapsulation ppp
ip route-cache flow
!
interface Serial0/0/1:0
no ip address
!
ip route 0.0.0.0 0.0.0.0 1.2.3.6
!
!
no ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
banner motd ^C

W A R N I N G W A R N I N G W A R N I N G W A R N I N G

This is a company computer system.

This computer system is to be accessed or used only by personnel with explicit
written authorization. Unauthorized use of this system, for any purposes, is
unlawful and might be subject to civil and/or criminal penalties. Any use of
this system may be logged or monitored without further notification. Use of
the system constitutes consent to any such monitoring. Any logs collected
during monitoring may be used as evidence in civil and/or criminal proceedings.

W A R N I N G W A R N I N G W A R N I N G W A R N I N G
^C
!
line con 0
exec-timeout 5 0
login local
transport preferred none
line aux 0
privilege level 15
login local
modem InOut
modem autoconfigure type usr_sportster
transport input all
stopbits 1
speed 19200
flowcontrol hardware
line vty 0 4
exec-timeout 5 0
privilege level 15
login local
transport preferred none
transport input telnet ssh
line vty 5 15
exec-timeout 5 0
privilege level 15
login local
transport preferred none
transport input telnet ssh
!
scheduler allocate 20000 1000
ntp clock-period 17180214
ntp server 1.1.1.0
!
end

 

[robspwing]

how do I clear the counters on that interface?

 

[robspwing]

ok, I just cleared the counters.

 

[North323]

ok good, now keep an eye on that, see if they increment. you could have dropped packets because your port is set to 100/full mb but the T1 pipe is only 1.5mb so there could be some drops and/or retransmits. you may have to do some shaping on your part, especially for voice.

 

[robspwing]

Thanks North,

I will keep an eye on the drops.
What do you suggest regarding the port speed for the T1?

I am not sure what to "shape" regarding voice traffic so any advice would help.

 

[North323]

i would call the ISP and tell them what you are seeing and ask them if 'shaping' is required. they may also have some sort of 'shaping' policy on their next hop device which can also cause the drops. make sure you need it...we can take it from there

 

[robspwing]

no drops so far. does the amber light (alarm light) go off by itself or do I need to clear that also?

 

[North323]

is it an alarm light? does it blink? could be a duplex mismatch can you post your ' ' sho int s0/0/0:0 ' and your sho int fa0/0/ it should tell you what your negotiated speed is.

 

[robspwing]

Serial0/0/0:0 is up, line protocol is up
Hardware is GT96K Serial
Description: <== T1 to ISP ==>
Internet address is 1.2.3.4/30
MTU 1500 bytes, BW 1536 Kbit, DLY 20000 usec,
reliability 255/255, txload 8/255, rxload 13/255
Encapsulation PPP, LCP Open
Listen: CDPCP
Open: IPCP, loopback not set
Keepalive set (10 sec)
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 01:50:47
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/172/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 1152 kilobits/sec
5 minute input rate 82000 bits/sec, 50 packets/sec
5 minute output rate 51000 bits/sec, 46 packets/sec
229753 packets input, 143136757 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
200921 packets output, 52776915 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
Timeslot(s) Used:1-24, SCC: 0, Transmitter delay is 0 flags



FastEthernet0/0 is up, line protocol is up
Hardware is MV96340 Ethernet, address is 0023.0414.ab70 (bia 0023.0414.ab70)
Description: <== Connection to Firewall ==>$ES_LAN$
Internet address is 1.5.6.7/28
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 61000 bits/sec, 52 packets/sec
5 minute output rate 91000 bits/sec, 56 packets/sec
172835722 packets input, 1294758413 bytes
Received 1152 broadcasts, 0 runts, 0 giants, 0 throttles
14 input errors, 0 CRC, 0 frame, 0 overrun, 14 ignored
0 watchdog
0 input packets with dribble condition detected
214275542 packets output, 1988032600 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out

 

[robspwing]

on the serial0/0/0:0 it shows a constant amber light next to the word AL. I assume that meant alarm.

 

[North323]

thats very possible. could mean a duplex mismatch. i would check with your ISP. right now s0/0/0:0 is set for auto duplex auto speed. may need to be duplex full speed 100

 

[robspwing]

Thanks North,

I see the speed/duplex for FastEthernet0/0 but I do not see the speed/duplex for s0/0/0:0 that you mentioned above.

 

[North323]

correct...when you dont see it like fa0/0 its means its set to duplex auto speed auto which is normal. i would talk to the ISP to find out what speed you need to have it at and whether or not you need some traffic shaping for voice/data improvement or to address dropeed packets.