Question : Problem: VLAN "flickering" - ping request timed out infrequently

I am setting up a VLAN on our network, mostly made up of cisco 3750 switches. It will only be used on one switch. This VLAN will be tunneled through an ASA box to another network in another company. It should not talk to any other VLANs except to be able to use the tunnel (though for starters I will keep it open to test)

I've set up:
vlan access-map map_ki 10
 action forward
 match ip address ki_acl
interface Vlan54
 description ....
 ip address 192.168.54.1 255.255.255.0
ip access-list extended ki_acl
 permit ip any any

in the asa box I added to the outside accesslist permiting this VLAN out to any on port 80

My problem:
it seems to "time out". if I ping or try to access a webpage it sometimes completes the action and sometimes not.
if I ping -t an inside ip and google side by side they might give 10 successes then 20 request timed out then again success. And the two pings are not consistent either.

I've tried changing ports on the switch as well as the cables so I've pretty much ruled those out.

how do I troubleshoot this?

Answer : Problem: VLAN "flickering" - ping request timed out infrequently

Awfully odd way to structure this.
Does the ASA have an unused Ethernet port on it? If yes, just connect it to an access port in vlan54.
If no, consider trunking a port between the switch and the asa and create a sub-interface for vlan54.
This way all traffic restrictions are at the asa proper and not on the switch. As long as the vlan54 interface of the asa has a lower security level than the inside, zero traffic will be allowed, but all vlan54 traffic will be allowed out. Setting it up for the vpn to another company is piece of cake.
Random Solutions  
 
programming4us programming4us