Dropped packets an latency issues

We had been having issues with our internet. I contacted our ISP and did some trouble shooting.
From their end, internet was fine but when pinging our Ext IP on the firewall they were drop packets.
From our firewall I pinged the Ext gateway, no dropped packets but

Reply from 70.x.x.x bytes=32 time=1ms TTL=254
Reply from 70.x.x.x bytes=32 time=6ms TTL=254
Reply from 70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=2ms TTL=254
Reply from  70.x.x.x: bytes=32 time=4ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=18ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=2ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=2ms TTL=254
Reply from  70.x.x.x: bytes=32 time=3ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=8ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=1ms TTL=254
Reply from  70.x.x.x: bytes=32 time=3ms TTL=254

This is our Setup
ATT Router -> HP Procurve 2626 -> WatchGuard XTM 510

Tech support suggested the issue is between the switch and the firewall.

How would I resolve this?
MECITAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

rm-entCommented:
ping is a lower priority command so accross the net there is the possiblity of dropped packets.

Can you check the interaface that is connected to your ISP and see if you have any erros on the physical port?
0
MECITAuthor Commented:
On the ATT router , they said there were no errors

From the switch to the ATT router, there were some  errors:

Errors (Since boot or last clear) :      
FCS Rx :  21 Drops Rx :  553
Alignment Rx :  20              Collisions Tx :  108
Runts Rx :  0                       Late Colln Tx :  553
Giants Rx :  0                      Excessive Colln :  0
Total Rx Errors :  21            Deferred Tx :  158

The errors stop accumilating when i changed the firewall from auto to 100M Full duplex.

Should it be at 1ms or is it normal to see 6ms, 8ms, 24ms everynow and then
0
rm-entCommented:
Try switching the cable that connects from ATT to the switch possibly a bad patch cable.

And if you are not getting the erros then setting the speed may have solved your issue, ATT's router may not be able to go auto.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
KuppingerCole Reviews AlgoSec in Executive Report

Leading analyst firm, KuppingerCole reviews AlgoSec's Security Policy Management Solution, and the security challenges faced by companies today in their Executive View report.

MECITAuthor Commented:
Should it be at 1ms or is it normal to see 6ms, 8ms, 24ms everynow and then.

0
mindwiseCommented:
that list of pings looks pretty normal to me....

colissions  (the errors) on the other hand do not look normal (unless you'd be using a hub, which you are not)

i don't quite understand how fixing the firewalls speed&duplex relates to the connection between the switch and the att router i must say....

some thoughts:

Is it possible the ATT router has a 10baseT interface ?  
what if you patch the firewall's untrust directly into the ATT router ?
did you try fixing the speed on both links on the switch, and the firewall and (if you are allowed) on the att router ? ( to 100Full) ?

it seems there is a mismatch between the switch and the att router, the errors suggest it's running half duplex (bad cable, 10Mbit support router) ....

I guess you'll have to try some of this and feed us some more info :)

Kr,

/M

try switching the cable as suggested (
0
MECITAuthor Commented:
The ATT router , switch ports, and firewall are all set to 100M Full duplex.

We swapped out the patch cable and tested the old one, it passed.
The router does not have a 10base T.
0
mindwiseCommented:
ok,

And do you have the same issues, errors stable now or rising, external ip of the firewall from the internet still suffering packet loss ?

i have to say it's weird to have packet loss only in one direction...

Tech support suggested the issue is between the switch and the firewall.

That should be easy to test by patching the firewall directly to the ATT router.... did you try that ?
0
IT-Monkey-DaveCommented:
More than once I've seen ports set at 100M Full Duplex to actually be operating at half-duplex.  Do not discount the possibility that you are not actually running all the ports Full Duplex just because that's how they're configured to operate.  I know it sounds counterintuitive but I've seen it many times.
0
MECITAuthor Commented:
Will try patching firewall to att router in the morning and will post the update.

Should I set all 3 hardware to auto?
0
MECITAuthor Commented:
I patched the firewall to the att router. Same issue dropping packets. Out of 1000 pings it drops 2

I repaced the firewall with a new one.
I replaced the att router with new one.
I replaced the switched.
I tested and replaced cables.

Performance is not an issue anymore but if not resolved i believe this will occur again.

Any ideas?

Should I worry since our interent is up an running?
0
mindwiseCommented:
2 pings of a thousand ?  gosh i think that's counted as  0% ;packet loss :)

honestly, i would not worry about such numbers.
More interesting is whether you're still seeing errors ( yeah i know you could only see them on the switch ;s )

I'm not sure if your WatchGuard allows you to check this, perhaps their KB  (it's been a long time since i did anything with the red boxes).

here's an article from watchguard on that, but i don't know if you use that particular watchguard platform:
lKnowledge base url
0
MECITAuthor Commented:
Thank you everyone for trying to help me on this issue.

I am not going to worry about it since performance is good and there is no down time.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Switches / Hubs

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.