Internet Speed Upgrade

Greetings everyone.  My Cisco router froze again and it has been doing it since I upgraded my internet speed.  Is there some configuration that I have to change on my router to allow a certain speed?  The problem has been occurring frequently and even has occurred after Cisco replaced my initial router.  Any help would be great.  
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Have you had your provider replace the Nortel router that the T1 is coming in on? You shouldn't have to change the speed of your router as the speed changed on the Nortel your WAN interface is ethernet and didn't get an upgrade.  
lets see if your WAN interface is logging errors. Issue the following command and post the output.
show interface
aclaus225Author Commented:

FastEthernet4 is up, line protocol is up
  Hardware is PQUICC_FEC, address is 001a.6dd3.b78e (bia 001a.6dd3.b78e)
  Description: $ETH-WAN$$FW_OUTSIDE$
  Internet address is
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Half-duplex, 100Mb/s, 100BaseTX/FX
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 522000 bits/sec, 81 packets/sec
  5 minute output rate 211000 bits/sec, 77 packets/sec
     287119 packets input, 236078894 bytes
     Received 137 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog
     0 input packets with dribble condition detected
     269301 packets output, 83073211 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out

Open in new window

aclaus225Author Commented:
My issue, though, is that I cannot log in to my router once this happens.  My router goes into ROMMON mode at a certain point.  I was unsuccessful in getting the stack trace this time but previous outputs are here:
which I see you helped me with.  
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

Your interface is running at half duplex and 100 mbps. Find out what the Nortel is and configure it to match. If it went to half duplex it may have failed the negotiation. You may want to hard code the WAN to the below settings. But sheck with your provider and find out what their side is.
duplex half
speed 10
aclaus225Author Commented:
Would what you are suggesting actually make the router boot into safe mode?  
Umm shouldn't... Did it make the router reboot?
aclaus225Author Commented:
No, what I am asking is if the half duplex and speed of 100 mbps would cause the router to eventually boot into safe mode if that is not what the Nortel router has on it.  
If it doesn't freeze when running by itself i would think the problem is with the vendor and the T1 using Nortel equipment. I am a bit confused why are you placing the router in front of a Nortel router. Should the provider have a DSU/CSU or some other handoff.
It could cause errors on the line which could cause the line to have a buffer overflow which could cause a problem. But usually no.
But what needs to happen is that both sides needs match regardless.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
aclaus225Author Commented:
The Nortel functions as the CSU/DSU.  It is not a router like the Cisco router.  
aclaus225Author Commented:
It actually may not be a CSU/DSU, but it is a Nortel SR1001.  That is what the company put in for us when they upgraded our internet speed.
Don JohnstonInstructorCommented:
The five minute input/output rate is not near what the router is capable of. If the router is going to Rommon, I would suspect a memory leak or some other type of IOS bug.

What IOS version/feature set are you running? Can you post the output of a "show version".
aclaus225Author Commented:
aclaus225Author Commented:

WSC#show ver
Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(22)T, REL
Technical Support:
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Fri 10-Oct-08 12:57 by prod_rel_team
ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE
WSC uptime is 1 hour, 57 minutes
System returned to ROM by reload
System image file is "flash:c870-advsecurityk9-mz.124-22.T.bin"
Last reload reason: Unknown reason
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
If you require further assistance please contact us by sending email to
Cisco 871 (MPC8272) processor (revision 0x200) with 118784K/12288K bytes of memo
Processor board ID FHK105118A5
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
5 FastEthernet interfaces
128K bytes of non-volatile configuration memory.
20480K bytes of processor board System flash (Intel Strataflash)
Configuration register is 0x2102 (will be 0x2002 at next reload)

Open in new window

The router has been changed out and the IOS has changed versions. The only common denominater is the ISPs router.
Can you leave a console cable connected to the router and log the output in hyperterminal? I would like to see what the syslogging shows prior to the problem. I would suspect the router would output some information if it is locking up.
aclaus225Author Commented:
Unfortunately because of the incompetent people that I work under I have no computer that can stay connected to the router.  I am the sys admin for the school and I have to work off a desktop computer so every time an issue comes up with the router I have to go hunt down someone's laptop.  All the other outputs are listed above such as show run, show tech, show proc and even the stack traces.  
Do you have any small 5 port switches? Try sticking that in between the ISP router and your 871. (make sure it is either MDI auto detecting or you use a cross over cable)
Is there a server on the network somewhere that you could send logging to? Setting an appropriate log level may offer some insight into events leading up to the failure. It won't catch all device crashes, but in the absence of a console log, it would help. Given that you've changed out router devices, there is also the possibility of an externally sourced event that's causing the router to crash.
aclaus225Author Commented:
Alright, I need some kind of configuration code to set up logging this way.  Can someone provide me with something like this?  I mean, the router cannot be connected to a physical computer, so it must do network logging.  Is this even possible?
logging on
logging host <IP ADDRESS>
logging trap debug

You can download a free syslog server from here 
Not only possible, but highly recommended as a best practice. Network device memory for logging and history is both limited and volatile, exporting events to a central log server allows for good event collection and troubleshooting, both of individual devices and the network as a whole. Since a device crash, like in your case, wipes the log on the device, external permanant storage is your only option to see if the device is reporting anything before it goes down. I recommend this for all network devices that are capable of logging to a remote host.

bkepford's syslog collector suggestion is a good one for a Windows-centric environment, and you can use vanilla syslogd or (better) syslog-ng for Unix hosts.
aclaus225Author Commented:
How do I set up the Kiwi server to capture the data?  It just seems illogical to me at this point.  I didn't specify a file on the router, so how do I set up Kiwi to do the logging and all the port information?
Syslog, as a protocol, uses udp/514 for transport. A syslog collector is a passive agent, in that it sits on the socket and accepts whatever packets are sent to it. Refer to bkepford's example when configuring your router, making the obvious substitution of <IP Address> for the address of the server on your network hosting the Kiwi collector.

Assuming you downloaded the latest version of Kiwi, once it's running, in either user or service mode, 99% of the configuration is already done for it to perform basic operations. Something as simple as logging into your router, entering and leaving configuration mode, should generate a log message to be transmitted to your collector. Assuming default install options, logs will begin to appear in C:\Program Files\Syslogd\Logs\SyslogCatchAll.txt as they are received.

If messages don't appear on the Kiwi display when you expect them to be, be sure to check for ACLs that may be blocking delivery of udp/514 from the router to the collector. You may need to supply:

logging source-interface <interface name>

If source interface isn't declared, log messages will be sourced from whichever interface is 'closest' to the log collector, from a routing perspective (probably the subnet gateway.)
aclaus225Author Commented:
Alright, from being run ragged I put in the wrong IP Address.  I went in and corrected what IP it was logging to and it works correctly.  
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.