FIFO_OVERRUN Interface Errors On PA-800 Series
15331
Created On 11/29/19 22:16 PM - Last Modified 05/30/20 02:53 AM
Symptom
- Seeing FIFO_OVERRUN counter increase on an interface
admin@pa> show system state filter sys.s1.p2.detail | match fifo
sys.s1.p2.detail: { 'pkts1024tomax_octets': 0x338300d10, 'pkts128to255_octets': 0x38db5149,
'pkts256to511_octets': 0x24eddd47, 'pkts512to1023_octets': 0x20f8656d,
'pkts64_octets': 0x1072a6a19, 'pkts65to127_octets': 0x1293ec46d, 'rcv_fifo_overrun': 0x68bb9, }
- Network monitoring tool does not indicate bursty traffic on interface
Environment
- PA-800 series
- PanOS 8.0.7+
Cause
- It is an intermittent congestion condition caused by paused frames on firewalls where flow control was enabled on adjacent firewalls.
Resolution
- Upgrade the PAN-OS versions to PAN-OS 8.1.10 or higher or 9.0.4 and higher versions.
- Once Upgraded, Run the command below
> set system setting hol-system enable
NOTE: This command is persistent across reboots and the fix is not available on PAN-OS 8.0 (End of Life).