Cisco Cisco ASA 5512-X Adaptive Security Appliance - No Payload Encryption 문제 해결 가이드

Contents

Introduction

Prerequisites

Requirements

Components Used

Problem

Causes of Interface Overruns

Steps to Troubleshoot the Cause of Interface Overruns

Potential Causes and Solutions

CPU on the ASA is Periodically Too Busy to Process Incoming Packets (CPU Hogs)

Traffic Profile Processed Periodically Oversubscribes the ASA

Intermittent Packet Bursts Oversubscribe the ASA Interface FIFO Queue

Enable Flow Control to Mitigate Interface Overruns

Related Information

Introduction

This document describes the "overrun" error counter and how to investigate performance issues or
packet loss problems on the network. An administrator might notice errors reported in the show
interface command output on the Adaptive Security Appliance (ASA).

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

This document is not restricted to specific software and hardware versions.

The information in this document was created from the devices in a specific lab environment. All of
the devices used in this document started with a cleared (default) configuration. If your network is
live, make sure that you understand the potential impact of any command.

Problem

The ASA interface error counter "overrun" tracks the number of times that a packet was received
on the network interface, but there was no available space in the interface FIFO queue to store the
packet. Thus, the packet was dropped. The value of this counter can be seen with the show
interface command.

Example output that displays the problem: