Interfaces show bandwidth usage exceeded, but traffic counters are within limits

Publication Date:  2016-10-31 Views:  1443 Downloads:  0
Issue Description

An interface generates "bandwidth usage exceeded the log threshold" logs when it goes UP.

The interface Peak rate counters show that traffic is actually within limits.

Alarm Information
Sep  4 2016 19:06:00+02:00 HGKESW01006 %%01IFNET/4/BWRATE_IN_RISING(l)[438523]:Interface input flow bandwidth usage exceeded the log threshold. (Interface=62, BandWidthUsage=100, LogThreshold=80, InterfaceName=GigabitEthernet1/0/6)
Sep  4 2016 19:06:00+02:00 HGKESW01006 %%01IFNET/4/BWRATE_OUT_RISING(l)[438524]:Interface output flow bandwidth usage exceeded the log threshold. (Interface=62, BandWidthUsage=100, LogThreshold=80, InterfaceName=GigabitEthernet1/0/6)
Sep  4 2016 19:06:01+02:00 HGKESW01006 %%01IFPDT/4/IF_STATE(l)[438525]:Interface GigabitEthernet1/0/6 has turned into UP state.
Sep  4 2016 19:06:06+02:00 HGKESW01006 %%01IFPDT/4/IF_STATE(l)[438528]:Interface GigabitEthernet1/0/6 has turned into DOWN state.
Sep  4 2016 19:06:09+02:00 HGKESW01006 %%01IFNET/4/BWRATE_IN_RESUME(l)[438529]:Interface input flow bandwidth usage was restored to the log threshold. (Interface=62, BandWidthUsage=74, LogThreshold=80, InterfaceName=GigabitEthernet1/0/6)
Sep  4 2016 19:06:09+02:00 HGKESW01006 %%01IFNET/4/BWRATE_OUT_RESUME(l)[438530]:Interface output flow bandwidth usage was restored to the log threshold. (Interface=62, BandWidthUsage=67, LogThreshold=80, InterfaceName=GigabitEthernet1/0/6)

Handling Process

The topology was analyzed and it was revealed there are no forwarding loops.

QoS rate limits were configured on the interface, but they did not take effect:

qos lr outbound cir 700000 cbs 87500000
qos lr inbound cir 700000 cbs 87500000

Root Cause

It was discovered that the access device connected to the interface was configured with 10Mbps Ethernet speed.

The 10Mbps speed was easily exceeded, causing the bandwidth usage logs.

%2016-Sep-04 19:06:01.260.1+02:00  01IFPDT/4/DUPLEX_HALF(D)[513406]:Slot=CCC0/0; Interface GigabitEthernet1/0/6 duplex mode log. (PhyStatus=UP, PreDuplex=FULL, CurrDuplex=FULL, Speed=10M, Function=IFPDT_ChangePortStatus, Line=909)
%2016-Sep-04 19:06:06.680.2+02:00  01IFPDT/4/DUPLEX_HALF(D)[513408]:Slot=CCC0/0; Interface GigabitEthernet1/0/6 duplex mode log. (PhyStatus=DOWN, PreDuplex=FULL, CurrDuplex=HALF, Speed=0M, Function=IFPDT_ChangePortStatus, Line=909)

Solution

Replace the access device NIC with a NIC capable of higher speeds.

END