Solved

Cisco ISR 2901

Posted on 2013-11-18
6
1,778 Views
Last Modified: 2013-11-24
I replaced my old Cisco 2825 with a new Cisco 2901 router and I was able to do almost everything after I moved the configuration but cannot connect into the network via https from the outside.
I did a show log on the router and it is giving me the following error:

*Nov 19 04:18:41.843: %IP_VFR-3-COALESCE_ERROR: Unable to coalesce fragments arriving through GigabitEthernet0/1.xxx - datagram 3994 bytes is too big. UDP packet xx.xx.xx.xx:53 -> 5.254.103.113:80 has ident: 7326 flags:0x40000000 and 3 fragments

I see over a dozen of these errors on my show log on the router.

I have upgraded router from:


OLD IOS
c2900-universalk9-mz.SPA.151-2.T5.bin"

NEW IOS

c2900-universalk9-mz.SPA.153-3.M1.bin

What do I need to do to fix this problem.

I can go on the internet from this network but cannot connect into this network from the internet.

Thanks
0
Comment
Question by:daryldavies
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 10

Expert Comment

by:koudry
ID: 39660496
My first thought is that you have MTU issue, i.e. you have packet larger than your port GigabitEthernet0/1 can accommodate. If you do "Show interface GigabitEthernet0/1", you will see that MTU is 1500. You should also see that you the giant counter will be incrementing.  You may want to try adjusting the MTU on port GigabitEthernet0/1.

Second thought, you may be hitting a bug - see also https://supportforums.cisco.com/thread/2110260

Alternatively, you can keep the new IOS but adjust buffer size - see also https://supportforums.cisco.com/thread/2215525
0
 

Author Comment

by:daryldavies
ID: 39660712
I tried the following config on the router: ip virtual-reassembly in max-fragments 64 max-reassemblies 1024

I have seen no difference. The error still comes up and i cannot cannot access anything from the outside of the network.


I did a sh int gi 0/1 and got the following:


GigabitEthernet0/1 is up, line protocol is up
  Hardware is CN Gigabit Ethernet, address is c067.af7a.cec1 (bia c067.af7a.cec1)
  Description: -INSIDE-
  MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  1., loopback not set
  Keepalive set (10 sec)
  Full Duplex, 1Gbps, media type is RJ45
  output flow-control is XON, input flow-control is XON
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 2802000 bits/sec, 425 packets/sec
  5 minute output rate 2789000 bits/sec, 402 packets/sec
     21041859 packets input, 4181740538 bytes, 0 no buffer
     Received 1352453 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 2876 multicast, 0 pause input
     19640306 packets output, 4086524617 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     2237 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     1 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
0
 
LVL 10

Expert Comment

by:koudry
ID: 39660820
These are only suggestions:

(1) try changing MTU size using command "ip mtu" - check if maximum configurable MTU is enough to cover 3994 bytes, e.g. 4000 bytes - see also http://www.cisco.com/en/US/docs/ios/12_2/ipaddr/command/reference/1rfip2.html

(2) Check if the packets coming to the router, have DF (Do not Fragment) set. If DF is set, then the packets cannot be broken. I don't think that is the issue, but it is worth checking. You can use a packet analyser like WireShark for this. If the DF flag is set, try taking it off if possible.

(3) Try ping with different packet sizes

(4) Reload router

(5) Try another IOS, the very latest if possible - if you have CCO account, you should be able to download IOS.

(6) If everything fails, raise a TAC case with Cisco - this must be the last resort, as it could take some time to get to the bottom of the problem.
0
Major Incident Management Communications

Major incidents and IT service outages cost companies millions. Often the solution to minimizing damage is automated communication. Find out more in our Major Incident Management Communications infographic.

 
LVL 10

Expert Comment

by:koudry
ID: 39660848
This experts-exchange post, mentions possible IOS bug.

http://www.experts-exchange.com/Hardware/Networking_Hardware/Routers/Q_28171813.html
0
 

Accepted Solution

by:
daryldavies earned 0 total points
ID: 39661056
I restarted the next hop with is a cable modem and it resolved the problem. For some reason the next hop cached the old routers mac-address and that's the reason the new router was throwing errors.

Thanks to everyone for all your help with this.
0
 

Author Closing Comment

by:daryldavies
ID: 39672411
I restarted next hop and that fixed the issue
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Deny permission ACL 16 56
Ping in Fortigate 2 55
Urgent !I am connecting a cisco catalyst 3560 switch amber light on port 15 76
Understanding Extended-Access List 6 74
While it is possible to put two routes in place with the secondary having a higher metric, this may not always work. In the event of a failure that does not bring down the physical interface on the router the primary route is not removed. There is a…
In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question