Forum Discussion

Sumanta_88744's avatar
Sumanta_88744
Icon for Cirrus rankCirrus
Jan 14, 2015

Interface between F5 and Cisco Catalyst 6500 gives errors

Hi Experts

We are having a network setup in which a F5 pair is inline with a Cisco Catalyst 6509 switch at the ingress and a Juniper SRX5800 at the egress. When the Catalyst switch directly sends traffic to SRX firewall, everything appears normal. When the F5 is introduced inline, the network team is complaining that data throughput is degraded with overrun errors on Cisco Catalyst interface connected to F5 VIPRION. Up link is on 40 Gbps optical QSFP+ with LACP enabled on all 4 links.

output from F5

tmsh list net interface 1/1.1 all-properties net interface 1/1.1 { bundle not-supported description none enabled flow-control tx-rx force-gigabit-fiber disabled if-index 481 lldp-admin txonly lldp-tlvmap 130943 mac-address 00:23:e9:a2:1a:0a media-active 10000SR-FD media-fixed auto media-max 10000T-FD media-sfp auto mtu 9198 prefer-port sfp serial MRM02Q0 sflow { poll-interval 0 poll-interval-global yes } stp enabled stp-auto-edge-port enabled stp-edge-port true stp-link-type auto vendor "F5 NETWORKS INC."

output from Cisco

Output queue: 0/40 (size/max) 5 minute input rate 2548484000 bits/sec, 382555 packets/sec 5 minute output rate 457456000 bits/sec, 331137 packets/sec 12677305900 packets input, 11050608179895 bytes, 0 no buffer Received 650427 broadcasts (649675 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 2 frame, 204081380 overrun, 0 ignored 0 watchdog, 0 multicast, 0 pause input 0 input packets with dribble condition detected 10184651100 packets output, 1685471574404 bytes, 0 underruns 0 output errors, 0 collisions, 12 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 PAUSE output 0 output buffer failures, 0 output buffers swapped out

1 Reply

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Jan 15, 2015

    Odd, I don't see any LACP in the F5 output. You'd want to compare whatever method is used on the Catalyst with whatever you have configured on the F5. This from a Cisco article;

    Overrun: Number of times the receiver hardware was unable to hand received data to a hardware buffer because the input rate exceeded the receiver’s ability to handle the data.

    suggests the Cisco can't keep up. If it's a bundle why have you only shown us one link?

    It might help if you could post the full interface output and configuration for both devices.