Output que drops are a function of the recipient host (in your case, the firewall) unable to keep up with the data that is being sent by the switch. I am sure if you have the switchport enabled to send and receive Ethernet pause frames, you would see the a ton of input frames coming from the firewall.
This problem isn't with your switch unable to keep up. It's with your firewall. Sure you could do things like policing your outbound traffic, but your probably better taking a more higher scope view as to what is the best QOS policies would be best suited and where (i.e where to mark your traffic) in your environment. Then executing your policies.
On Oct 24, 2010, at 11:10 AM, <satitcha_at_hotmail.com> wrote:
> Hi Experts,
>
>
> Anyone used to face the problem like me as following ?
>
>
> My C2960G-48TC-L is experiencing with increasing Number of "Total output
> drops",
>
> The currunt port configuration is
>
> interface GigabitEthernet0/42
>
> switchport mode trunk
> hold-queue 4096 in
> hold-queue 4096 out
>
> This port connecting Juniper ISG1000.
>
>
>
>
> GigabitEthernet0/42 is up, line protocol is up (connected)
> Hardware is Gigabit Ethernet, address is 001e.79b5.98aa (bia 001e.79b5.98aa)
> Description:
> MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
> reliability 255/255, txload 91/255, rxload 72/255
> Encapsulation ARPA, loopback not set
> Keepalive set (10 sec)
> Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
> input flow-control is off, output flow-control is unsupported
> ARP type: ARPA, ARP Timeout 04:00:00
> Last input never, output 00:00:00, output hang never
> Last clearing of "show interface" counters 00:47:00
> Input queue: 0/4096/0/0 (size/max/drops/flushes); Total output drops: 13973
> Queueing strategy: fifo
> Output queue: 0/4096 (size/max)
> 5 minute input rate 283709000 bits/sec, 81227 packets/sec
> 5 minute output rate 360446000 bits/sec, 91608 packets/sec
> 221238391 packets input, 91509183985 bytes, 0 no buffer
> Received 0 broadcasts (0 multicasts)
> 0 runts, 0 giants, 0 throttles
> 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
> 0 watchdog, 0 multicast, 0 pause input
> 0 input packets with dribble condition detected
> 251606682 packets output, 119990227117 bytes, 0 underruns
> 0 output errors, 0 collisions, 0 interface resets
> 0 babbles, 0 late collision, 0 deferred
> 0 lost carrier, 0 no carrier, 0 PAUSE output
> 0 output buffer failures, 0 output buffers swapped out
>
>
>
>
>
> MLS QOS not yet globally enabled.
>
>
>
>
> Anyone, please answer me,
>
>
>
> Even, MLS QOS not yet enabled,
>
> Does this problem related to ASIC Egress Queue or not ?
>
>
>
> Can i solve by changing queue-set's threshold ?
>
>
>
> mls qos queue-set output 1 threshold 4 400 400 50 400
>
>
>
> If yes, can you reccomend this threshold value ?
>
>
>
> ------------------------
>
>
> I'm suspect on Egress ASIC queue is over subscribed or not ,
>
>
>
> Let's see this output command.
>
>
>
> C2960G#show mls qos interface gigabitEthernet 0/42 statistics
> GigabitEthernet0/42 (All statistics are in packets)
>
>
>
> dscp: incoming
> -------------------------------
>
>
>
> 0 - 4 : 3187746198 0 4254333459 0 31422903
> 5 - 9 : 0 0 0 0 0
> 10 - 14 : 0 0 0 0 0
> 15 - 19 : 0 0 0 0 0
> 20 - 24 : 0 0 0 0 0
> 25 - 29 : 0 0 0 0 0
> 30 - 34 : 0 0 0 0 0
> 35 - 39 : 0 0 0 0 0
> 40 - 44 : 0 0 0 0 0
> 45 - 49 : 0 0 0 3800999 0
> 50 - 54 : 0 0 0 0 0
> 55 - 59 : 0 0 0 0 0
> 60 - 64 : 0 0 0 0
> dscp: outgoing
> -------------------------------
>
>
>
> 0 - 4 : 2747292853 0 236493558 0 32115386
> 5 - 9 : 0 0 0 0 0
> 10 - 14 : 0 0 0 0 0
> 15 - 19 : 0 0 0 0 0
> 20 - 24 : 0 0 0 0 0
> 25 - 29 : 0 0 0 0 0
> 30 - 34 : 0 0 0 0 0
> 35 - 39 : 0 0 0 0 0
> 40 - 44 : 0 0 0 0 0
> 45 - 49 : 0 0 0 16655381 0
> 50 - 54 : 0 0 0 0 0
> 55 - 59 : 0 0 0 0 0
> 60 - 64 : 0 0 0 0
> cos: incoming
> -------------------------------
>
>
>
> 0 - 4 : 3226787070 0 0 0 0
> 5 - 7 : 0 0 0
> cos: outgoing
> -------------------------------
>
>
>
> 0 - 4 : 3051430973 0 529583 0 0
> 5 - 7 : 0 3998432 315848
> Policer: Inprofile: 0 OutofProfile: 0
>
>
>
>
> C2960G# show platform port-asic stats drop gigabitEthernet 0/42
>
>
>
> Interface Gi0/42 TxQueue Drop Statistics
> Queue 0
> Weight 0 Frames 0
> Weight 1 Frames 0
> Weight 2 Frames 0
> Queue 1
> Weight 0 Frames 0
> Weight 1 Frames 0
> Weight 2 Frames 0
> Queue 2
> Weight 0 Frames 0
> Weight 1 Frames 0
> Weight 2 Frames 0
> Queue 3
> Weight 0 Frames 0
> Weight 1 Frames 0
> Weight 2 Frames 43279243
>
>
>
> C2960G#show mls qos interface gigabitEthernet 0/42 buffers
> GigabitEthernet0/42
> QoS is disabled. When QoS is enabled, following settings will be applied
> The port is mapped to qset : 1
> The allocations between the queues are : 25 25 25 25
>
>
>
>
> C2960G#show mls qos queue-set
> Queueset: 1
> Queue : 1 2 3 4
> ----------------------------------------------
> buffers : 25 25 25 25
> threshold1: 100 200 100 100
> threshold2: 100 200 100 100
> reserved : 50 50 50 50
> maximum : 400 400 400 400
> Queueset: 2
> Queue : 1 2 3 4
> ----------------------------------------------
> buffers : 25 25 25 25
> threshold1: 100 200 100 100
> threshold2: 100 200 100 100
> reserved : 50 50 50 50
> maximum : 400 400 400 400
>
>
>
> C2960G#show controllers utilization
> Port Receive Utilization Transmit Utilization
> Gi0/1 0 1
> Gi0/2 0 0
> Gi0/3 0 0
> Gi0/4 0 0
> Gi0/5 0 1
> Gi0/6 0 0
> Gi0/7 0 1
> Gi0/8 0 0
> Gi0/9 0 1
> Gi0/10 0 0
> Gi0/11 0 0
> Gi0/12 0 0
> Gi0/13 0 0
> Gi0/14 0 0
> Gi0/15 0 0
> Gi0/16 0 0
> Gi0/17 0 0
> Gi0/18 5 4
> Gi0/19 0 0
> Gi0/20 0 0
> Gi0/21 0 0
> Gi0/22 0 0
> Gi0/23 0 0
> Gi0/24 0 0
> Gi0/25 0 0
> Gi0/26 4 5
> Gi0/27 0 0
> Gi0/28 0 0
> Gi0/29 0 0
> Gi0/30 3 0
> Gi0/31 4 0
> Gi0/32 3 2
> Gi0/33 0 0
> Gi0/34 0 0
> Gi0/35 0 0
> Gi0/36 0 0
> Gi0/37 0 0
> Gi0/38 0 0
> Gi0/39 0 0
> Gi0/40 0 0
> Gi0/41 0 0
> Gi0/42 35 49
> Gi0/43 8 20
> Gi0/44 26 3
> Gi0/45 0 0
> Gi0/46 0 0
> Gi0/47 0 0
> Gi0/48 0 0
>
> Total Ports : 48
> Switch Receive Bandwidth Percentage Utilization : 1
> Switch Transmit Bandwidth Percentage Utilization : 1
>
> Switch Fabric Percentage Utilization : 1
>
>
>
> C2960G#show controllers gigabitEthernet 0/42 utilization
> Receive Bandwidth Percentage Utilization : 39
> Transmit Bandwidth Percentage Utilization : 51
>
>
>
>
>
>
> Best regards,
>
>
>
>
> Satit Chanoupragan
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Sun Oct 24 2010 - 15:52:54 ART
This archive was generated by hypermail 2.2.0 : Mon Nov 01 2010 - 06:42:06 ART