High cpu - Rate-limit cisco 6500
Hello,
my device is cisco 6509.
Explanation of the case:
Received to interface vlan (L3) 600M traffic (configured with Rate limit - 50 M).
Result :
1. 100 % cpu
2. the traffic was limited to 50M
How can I prevent High Cpu in this situation ?
Thanks.
I would suggest opening a case, or asking in a different forum. This form is for discussion about existing bugs for which a bugid has been identified.
Similar Messages
-
HIGH CPU IOS REACH 100 % - 6500 Series
Hi, please help us how can we minimize the cpu usage of our 6500 series core switch.. below is the cpu usage and the version.. i think we need upgrade the ios . please teach us detailed steps for opening ticket. thanks. attached here is the cpu ios usage.
CPU PROCESS
91.5% 90.3% 90.3% ios base
Version
Cisco Internetwork Operating System Software
IOS (tm) s72033_rp Software (s72033_rp-IPSERVICES_WAN-VM), Version 12.2(18)SXF14
, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by cisco Systems, Inc.
Compiled Thu 08-May-08 03:25 by kellythw
Image text-base: 0x01020150, data-base: 0x01021000
ROM: System Bootstrap, Version 12.2(17r)SX5, RELEASE SOFTWARE (fc1)
BOOTLDR:
XXXXXXXX uptime is 17 hours, 39 minutes
Time since RM-NT3-BB1 switched to active is 17 hours, 39 minutes
System returned to ROM by reload at 21:01:56 GMT Mon May 5 2014 (SP by reload)
System restarted at 21:05:06 GMT Mon May 5 2014
System image file is "sup-bootdisk:s72033-ipservices_wan-vz.122-18.SXF14.bin"
cisco WS-C6506-E (R7000) processor (revision 1.1) with 491520K/32768K bytes of m
emory.
Processor board ID SAL12351U4Q
SR71000 CPU at 600Mhz, Implementation 1284, Rev 1.2, 512KB L2 Cache
Last reset from s/w reset
Bridging software.
X.25 software, Version 3.0.0.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
TN3270 Emulation software.
391 Virtual Ethernet/IEEE 802.3 interfaces
146 Gigabit Ethernet/IEEE 802.3 interfaces
1917K bytes of non-volatile configuration memory.
65536K bytes of Flash internal SIMM (Sector size 512K).
Configuration register is 0x2102Sir Navevenk,
Please check bellow thanks.
1. sh proc cpu sorted
XXXXX#sh proc cpu sorted ?
% Unrecognized command
XXXXX#sh proc cpu ?
detailed Show CPU use per process detailed
history Show CPU history in graph format
| Output modifiers
2. sh proc cpu de ios-base | ex 0.0
CPU utilization for five seconds: 37%; one minute: 38%; five minutes: 39%
PID/TID 5Sec 1Min 5Min Process Prio STATE CPU
16408 33.1% 31.4% 31.4% ios-base 1d05h
1 0.2% 0.3% 0.4% 10 Receive 19m12s
3 4.6% 3.7% 3.2% 10 Receive 1h38m
7 5.6% 5.4% 6.0% 21 Intr 9h39m
8 3.0% 1.8% 1.8% 22 Intr 1h10m
12 0.6% 1.1% 2.1% 10 Receive 1h44m
13 5.3% 3.6% 1.4% 10 Receive 1h42m
14 3.6% 3.2% 2.1% 10 Reply 1h36m
15 1.5% 3.2% 1.3% 10 Receive 1h35m
19 6.9% 4.2% 3.5% 10 Receive 1h39m
20 1.8% 3.7% 3.2% 10 Reply 1h43m
Process sbin/ios-base, type IOS, PID = 16408
CPU utilization for five seconds: 14%/6%; one minute: 22%; five minutes: 22%
Task Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Task Name
3 1613034 32981487 48 0.39% 0.54% 0.55% 0 Service Task
4 1116381 11672688 95 0.31% 0.43% 0.44% 0 Service Task
17 1079952 702528 1537 0.71% 0.51% 0.44% 0 ARP Input
32 313016 507290 617 0.15% 0.14% 0.14% 0 RPCP Slave
41 549787 59949 9170 0.21% 0.19% 0.21% 0 HC Counter Timer
93 757717 199397 3800 0.21% 0.27% 0.28% 0 Compute load avg
125 1151381 13529847 85 0.15% 0.44% 0.46% 0 ION IP output
126 34179777 23406153 1460 8.00% 13.82% 13.29% 0 IP Input
131 5195876 9372573 554 0.71% 0.64% 1.15% 0 IP NAT Ager
168 3852539 25022469 153 0.95% 1.44% 1.49% 0 Standby (HSRP)
223 3494398 13872600 251 0.95% 1.45% 1.45% 0 Port manager per
3. Sh proc cpu
PID 5Sec 1Min 5Min Process
1 0.0% 0.5% 0.6% kernel
3 0.0% 0.0% 0.0% qdelogger
4 0.0% 0.0% 0.0% devc-pty
5 0.0% 0.0% 0.0% devc-mistral.proc
6 0.0% 0.0% 0.0% pipe
7 0.0% 0.0% 0.0% dumper.proc
4104 0.0% 0.0% 0.0% bflash_driver.proc
12297 0.0% 0.0% 0.0% pcmcia_driver.proc
12298 0.0% 0.0% 0.0% mqueue
12299 0.0% 0.0% 0.0% flashfs_hes.proc
12300 0.0% 0.0% 0.0% dfs_bootdisk.proc
12301 0.0% 0.0% 0.0% ldcache.proc
12302 0.0% 0.0% 0.0% watchdog.proc
12303 0.0% 0.0% 0.0% syslogd.proc
12304 0.0% 0.0% 0.0% name_svr.proc
12305 0.1% 0.0% 0.0% wdsysmon.proc
12306 0.0% 0.0% 0.0% sysmgr.proc
16386 0.0% 0.0% 0.0% chkptd.proc
16403 0.0% 0.0% 0.0% sysmgr.proc
16404 0.0% 0.0% 0.0% syslog_dev.proc
16405 0.0% 0.0% 0.0% itrace_exec.proc
16406 0.0% 0.0% 0.0% packet.proc
16407 0.0% 0.0% 0.0% installer.proc
16408 36.8% 30.7% 30.8% ios-base
16409 0.0% 0.0% 0.0% fh_fd_rf.proc
16410 0.0% 0.0% 0.0% fh_fd_oir.proc
16411 0.0% 0.0% 0.0% fh_fd_cli.proc
16412 0.0% 0.0% 0.0% fh_metric_dir.proc
16413 0.0% 0.0% 0.0% fh_fd_snmp.proc
16414 0.0% 0.0% 0.0% fh_fd_none.proc
16415 0.0% 0.0% 0.0% fh_fd_intf.proc
16416 0.0% 0.0% 0.0% fh_fd_gold.proc
16417 0.0% 0.0% 0.0% fh_fd_counter.proc
16418 0.0% 0.0% 0.0% fh_fd_timer.proc
16419 0.0% 0.0% 0.0% fh_fd_ioswd.proc
16420 0.0% 0.0% 0.0% fh_server.proc
16421 0.0% 0.0% 0.0% fh_policy_dir.proc
16422 0.0% 0.0% 0.0% ipfs_daemon.proc
16423 0.4% 0.4% 0.4% raw_ip.proc
16424 0.0% 0.0% 0.0% inetd.proc
16425 0.1% 0.1% 0.1% tcp.proc
16426 1.2% 1.5% 2.2% udp.proc
16427 0.7% 0.9% 1.1% iprouting.iosproc
16428 0.3% 0.5% 0.5% cdp2.iosproc
4.sh proc cpu detailed 16408
CPU utilization for five seconds: 29%; one minute: 34%; five minutes: 37%
PID/TID 5Sec 1Min 5Min Process Prio STATE CPU
16408 26.2% 27.9% 30.0% ios-base 1d05h
1 0.3% 0.3% 0.4% 10 Receive 19m13s
2 0.0% 0.0% 0.0% 5 Condvar 0.000
3 4.4% 3.2% 3.1% 10 Reply 1h38m
4 0.0% 0.0% 0.9% 10 Receive 1h35m
5 0.0% 0.0% 0.0% 11 Nanosleep 1.456
6 0.4% 1.5% 1.7% 10 Reply 1h32m
7 6.3% 5.7% 5.9% 21 Intr 9h40m
8 1.1% 1.7% 1.8% 22 Intr 1h10m
9 0.0% 0.0% 0.0% 23 Intr 3m14s
10 0.0% 0.0% 0.0% 25 Intr 0.000
11 0.0% 0.0% 0.0% 10 Reply 10.284
12 2.6% 1.4% 1.8% 10 Receive 1h44m
13 0.3% 2.6% 1.9% 10 Receive 1h42m
14 1.9% 2.7% 2.1% 10 Receive 1h36m
15 4.0% 3.6% 2.2% 10 Receive 1h35m
16 0.0% 0.0% 1.1% 10 Receive 1h38m
17 0.0% 0.0% 1.0% 10 Receive 1h33m
18 0.0% 0.0% 0.0% 20 Sigwaitin 0.068
19 4.2% 2.5% 3.0% 10 Receive 1h39m
20 0.7% 2.7% 3.1% 10 Receive 1h43m
Process sbin/ios-base, type IOS, PID = 16408
CPU utilization for five seconds: 16%/7%; one minute: 19%; five minutes: 21%
Task Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Task Name
1 264 1931 136 0.00% 0.00% 0.00% 1 Hot Service Task
2 2734366 47825930 57 0.87% 0.93% 1.03% 0 Service Task
3 1613598 32998937 48 0.23% 0.47% 0.53% 0 Service Task
4 1116773 11678121 95 0.15% 0.33% 0.40% 0 Service Task
5 1548 3907 396 0.00% 0.00% 0.00% 0 Chunk Manager
6 0 1 0 0.00% 0.00% 0.00% 0 Connection Mgr
7 68 2013 33 0.00% 0.00% 0.00% 0 DHCPD Timer
8 0 1 0 0.00% 0.00% 0.00% 0 PF Redun ICC Req
9 5296 48248 109 0.00% 0.00% 0.00% 0 Load Meter
10 276 231 1194 0.00% 0.13% 0.05% 1 Virtual Exec
11 820407 55486 14785 0.00% 0.39% 0.31% 0 Check heaps
12 0 1 0 0.00% 0.00% 0.00% 0 Pool Manager
13 0 2 0 0.00% 0.00% 0.00% 0 Timers
14 32864 105392 311 0.00% 0.00% 0.00% 0 EnvMon
15 0 1 0 0.00% 0.00% 0.00% 0 AAA_SERVER_DEADT
16 0 2 0 0.00% 0.00% 0.00% 0 AAA high-capacit
17 1080472 702876 1537 0.23% 0.42% 0.44% 0 ARP Input
18 0 2 0 0.00% 0.00% 0.00% 0 Serial Backgroun
19 935 89 10505 0.00% 0.00% 0.00% 0 Entity MIB API
20 320 24146 13 0.00% 0.00% 0.00% 0 Compute SRP rate
21 0 2 0 0.00% 0.00% 0.00% 0 DDR Timers
22 0 2 0 0.00% 0.00% 0.00% 0 Dialer event
23 0 1 0 0.00% 0.00% 0.00% 0 IFS Agent Manage
24 68 4026 16 0.00% 0.00% 0.00% 0 IPC Dynamic Cach
25 20 49 408 0.00% 0.00% 0.00% 0 PF_Split Sync Pr
26 0 1 0 0.00% 0.00% 0.00% 0 IPC Punt Process
27 4840 238240 20 0.00% 0.00% 0.00% 0 IPC Periodic Tim
28 2792 238239 11 0.00% 0.00% 0.00% 0 IPC Deferred Por
29 149640 419666 356 0.00% 0.04% 0.05% 0 IPC Seat Manager
30 0 1 0 0.00% 0.00% 0.00% 0 IPC Stdby Update
31 24 198 121 0.00% 0.00% 0.00% 0 EEM ED Syslog
32 313156 507543 617 0.31% 0.13% 0.13% 0 RPCP Slave
33 81072 162088 500 0.07% 0.03% 0.01% 0 RPCP Slave
34 14900 34458 432 0.00% 0.00% 0.00% 0 RPCP Slave
35 5000 12573 397 0.00% 0.00% 0.00% 0 RPCP Slave
36 1320 3539 372 0.00% 0.00% 0.00% 0 RPCP Slave
37 0 1 0 0.00% 0.00% 0.00% 0 Snmp ICC Process
38 4 83 48 0.00% 0.00% 0.00% 0 Cat6k SNMP
39 59 461 127 0.00% 0.00% 0.00% 0 Cat6k SNMP Trap
40 0 1 0 0.00% 0.00% 0.00% 0 SERIAL A'detect
Task Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Task Name
41 550027 59977 9170 0.21% 0.19% 0.21% 0 HC Counter Timer
42 4412 238241 18 0.00% 0.00% 0.00% 0 Dynamic ARP Insp
43 68 462 147 0.00% 0.00% 0.00% 0 rf proxy rp agen
44 16 11 1454 0.00% 0.00% 0.00% 0 NSP:IPC Task
45 51664 499624 103 0.07% 0.01% 0.00% 0 Net Critical I/O
46 0 1 0 0.00% 0.00% 0.00% 0 Critical Bkgnd
47 45528 562754 80 0.00% 0.00% 0.00% 0 Net Background
48 32 132 242 0.00% 0.00% 0.00% 0 Logger
49 6392 238199 26 0.00% 0.00% 0.00% 0 TTY Background
50 52012 267518 194 0.00% 0.00% 0.00% 0 Per-Second Jobs
51 84607 6042 14003 0.00% 0.02% 0.00% 0 Per-minute Jobs
52 8 11 727 0.00% 0.00% 0.00% 0 RPC Sync
53 0 3 0 0.00% 0.00% 0.00% 0 RPC rpc-slave-15
54 0 1 0 0.00% 0.00% 0.00% 0 PF Sync process
55 0 2 0 0.00% 0.00% 0.00% 0 SCP Multicast
56 0 7 0 0.00% 0.00% 0.00% 0 draco-oir-proces
57 396 896 441 0.00% 0.00% 0.00% 0 RPCP Slave
58 0 1 0 0.00% 0.00% 0.00% 0 EOBC Monitor Pro
59 76 513 148 0.00% 0.00% 0.00% 0 Env action
60 4 330 12 0.00% 0.00% 0.00% 0 svclc
61 0 5 0 0.00% 0.00% 0.00% 0 RPC rf_rfmib_not
62 885605 1935944 457 0.00% 0.00% 0.00% 0 Net Input
63 0 5 0 0.00% 0.00% 0.00% 0 MWAM CONFIG ON S
64 12 407 29 0.00% 0.00% 0.00% 0 itasca
65 0 2 0 0.00% 0.00% 0.00% 0 Flash ICC Server
66 0 2 0 0.00% 0.00% 0.00% 0 Const ICC reques
67 0 1 0 0.00% 0.00% 0.00% 0 Const ICC event
68 0 1 0 0.00% 0.00% 0.00% 0 Const ICC except
69 0 1 0 0.00% 0.00% 0.00% 0 ICC Local Reques
70 416 3328 125 0.00% 0.00% 0.00% 0 ICC Async mcast
71 0 1 0 0.00% 0.00% 0.00% 0 ICC_REQ Debug Pr
72 0 1 0 0.00% 0.00% 0.00% 0 ICC FC Process
73 0 1 0 0.00% 0.00% 0.00% 0 ICC FC Test Send
74 0 1 0 0.00% 0.00% 0.00% 0 ICC FC Test Low
75 0 1 0 0.00% 0.00% 0.00% 0 IfIndex Bulk Syn
76 0 1 0 0.00% 0.00% 0.00% 0 CWRP SPA TSM HA
77 0 1 0 0.00% 0.00% 0.00% 0 CWAN APS HA Proc
78 0 1 0 0.00% 0.00% 0.00% 0 CWAN IF EVENT HA
79 0 1 0 0.00% 0.00% 0.00% 0 CWAN LTL Mgr HA
80 0 1 0 0.00% 0.00% 0.00% 0 CWAN SRP HA Proc
81 0 1 0 0.00% 0.00% 0.00% 0 CWAN HA VLAN SYN
82 212 4060 52 0.00% 0.00% 0.00% 0 RF CWAN HA Proce
83 24520 239411 102 0.00% 0.00% 0.00% 0 Heartbeat Proces
84 0 2 0 0.00% 0.00% 0.00% 0 Switch IP Host T
85 0 14 0 0.00% 0.00% 0.00% 0 EEM RF Event Det
86 0 1 0 0.00% 0.00% 0.00% 0 Mistral Reset Pr
87 0 1 0 0.00% 0.00% 0.00% 0 ECC correctable
88 0 19 0 0.00% 0.00% 0.00% 0 PF_Init Process
89 12 21 571 0.00% 0.00% 0.00% 0 RPC pf-split-rp
90 20 19 1052 0.00% 0.00% 0.00% 0 RPC idprom-MP
91 0 1 0 0.00% 0.00% 0.00% 0 RTTYS Process
92 0 1 0 0.00% 0.00% 0.00% 0 BACK CHECK
93 758089 199450 3800 0.23% 0.30% 0.29% 0 Compute load avg
94 338541 2791511 121 0.07% 0.08% 0.08% 0 Service Task
95 0 1 0 0.00% 0.00% 0.00% 0 chkpt message ha
96 0 2 0 0.00% 0.00% 0.00% 0 cpf_process_msg_
97 0 1 0 0.00% 0.00% 0.00% 0 cpf_process_ipcQ
98 0 1 0 0.00% 0.00% 0.00% 0 IPC Apps Task
99 0 1 0 0.00% 0.00% 0.00% 0 RPCP Slave
100 0 26 0 0.00% 0.00% 0.00% 0 AggMgr Process
101 0 1 0 0.00% 0.00% 0.00% 0 SFF8472
102 0 1 0 0.00% 0.00% 0.00% 0 Remote Console P
103 0 1 0 0.00% 0.00% 0.00% 0 RTTYS Process
104 0 2 0 0.00% 0.00% 0.00% 0 CWAN OIR Handler
105 0 1 0 0.00% 0.00% 0.00% 0 spa_oir_audit_pr
106 0 1 0 0.00% 0.00% 0.00% 0 FPD Management P
Task Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Task Name
107 0 1 0 0.00% 0.00% 0.00% 0 FPD Action Proce
108 0 1 0 0.00% 0.00% 0.00% 0 DSX3MIB ll handl
109 0 1 0 0.00% 0.00% 0.00% 0 POS APS Event Pr
110 0 2 0 0.00% 0.00% 0.00% 0 CWAN port channe
111 0 1 0 0.00% 0.00% 0.00% 0 CE3 Mailbox
112 0 1 0 0.00% 0.00% 0.00% 0 CT3 Mailbox
113 0 2 0 0.00% 0.00% 0.00% 0 MIP Mailbox
114 0 1 0 0.00% 0.00% 0.00% 0 vcq_proc
115 0 1 0 0.00% 0.00% 0.00% 0 Earl NDE Task
116 3672 238244 15 0.00% 0.00% 0.00% 0 CWAN CHOCX PROCE
117 4496 238242 18 0.00% 0.00% 0.00% 0 CWAN CHDSX PROCE
118 0 1 0 0.00% 0.00% 0.00% 0 HAL Mailbox
119 0 1 0 0.00% 0.00% 0.00% 0 CWRP SPA ATM OIR
120 0 15 0 0.00% 0.00% 0.00% 0 Gemini L3 forwar
121 186288 323021 576 0.15% 0.06% 0.05% 0 esw_vlan_stat_pr
122 0 2 0 0.00% 0.00% 0.00% 0 Spanning Tree
123 0 2 0 0.00% 0.00% 0.00% 0 AAA Dictionary R
124 1015 401 2531 0.00% 0.00% 0.00% 0 SW VLAN RP
125 1151665 13536983 85 0.15% 0.23% 0.38% 0 ION IP output
126 34194165 23417270 1460 9.83% 11.61% 12.80% 0 IP Input
127 0 1 0 0.00% 0.00% 0.00% 0 Socket Timers
128 308 23714 12 0.00% 0.00% 0.00% 0 QOS Stats Gather
129 9636 24804 388 0.00% 0.00% 0.00% 0 CEF Scanner
130 96 2244 42 0.00% 0.00% 0.00% 0 DHCP Snooping
131 5196652 9375380 554 0.47% 0.66% 0.99% 0 IP NAT Ager
132 45100 1908039 23 0.07% 0.01% 0.00% 0 CEF RP IPC Backg
133 0 1 0 0.00% 0.00% 0.00% 0 MLS FIB RP
134 0 1 0 0.00% 0.00% 0.00% 0 mcast_rp_icc Pro
135 12 5 2400 0.00% 0.00% 0.00% 0 Const Rate Limit
136 0 1 0 0.00% 0.00% 0.00% 0 CWAN LTL manager
137 528 1699 310 0.00% 0.00% 0.00% 0 HWIF QoS Process
138 0 2 0 0.00% 0.00% 0.00% 0 AAA Server
139 0 1 0 0.00% 0.00% 0.00% 0 AAA ACCT Proc
140 0 1 0 0.00% 0.00% 0.00% 0 ACCT Periodic Pr
141 0 2 0 0.00% 0.00% 0.00% 0 QOS Stats Export
142 0 1 0 0.00% 0.00% 0.00% 0 SSS Manager
143 308 32181 9 0.00% 0.00% 0.00% 0 SSS Test Client
144 0 2 0 0.00% 0.00% 0.00% 0 Switch IP Host T
145 0 1 0 0.00% 0.00% 0.00% 0 Switch IP Admiss
146 0 1 0 0.00% 0.00% 0.00% 0 ARP HA
147 0 1 0 0.00% 0.00% 0.00% 0 HDLC HA
148 0 1 0 0.00% 0.00% 0.00% 0 RPCP Slave
149 0 1 0 0.00% 0.00% 0.00% 0 PPPATM Session d
150 0 2 0 0.00% 0.00% 0.00% 0 PASVC create VA
151 12364 7189 1719 0.00% 0.00% 0.00% 0 MOP Protocols
152 0 2 0 0.00% 0.00% 0.00% 0 IP Hdr Comp Proc
153 0 1 0 0.00% 0.00% 0.00% 0 AC Mgr
154 0 1 0 0.00% 0.00% 0.00% 0 DMLP Counter
155 8 14 571 0.00% 0.00% 0.00% 0 EAPoUDP Process
156 0 3 0 0.00% 0.00% 0.00% 0 cfib v6 per pref
157 0 2 0 0.00% 0.00% 0.00% 0 const ipfib per-
158 0 1 0 0.00% 0.00% 0.00% 0 RPCP Slave
159 0 1 0 0.00% 0.00% 0.00% 0 IP IRDP
160 584 68359 8 0.00% 0.00% 0.00% 0 DHCPD Database
161 219 1924 113 0.00% 0.00% 0.00% 1 Hot Service Task
162 208 1924 108 0.00% 0.00% 0.00% 1 Hot Service Task
163 251 1922 130 0.00% 0.00% 0.00% 1 Hot Service Task
164 0 2 0 0.00% 0.00% 0.00% 0 CWPA QoS
165 0 2 0 0.00% 0.00% 0.00% 0 Const TCAM Mgr R
166 0 1 0 0.00% 0.00% 0.00% 0 HTTP Timer
167 209768 103078 2035 0.00% 0.06% 0.07% 0 IPC LC Message H
168 3853927 25036944 153 0.47% 1.12% 1.36% 0 Standby (HSRP)
169 116 608 190 0.00% 0.00% 0.00% 0 IP SNMP
170 249944 404013 618 0.00% 0.05% 0.06% 0 CEF process
171 28888 120725 239 0.07% 0.01% 0.00% 0 HIDDEN VLAN Proc
172 252327 66898 3771 0.05% 0.08% 0.07% 0 Adj Manager
Task Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Task Name
173 172 4023 42 0.00% 0.00% 0.00% 0 IP Cache Ager
174 0 1 0 0.00% 0.00% 0.00% 0 CWAN-RP SCP Proc
175 0 15 0 0.00% 0.00% 0.00% 0 CWAN-RP SCP Inpu
176 8940 249596 35 0.00% 0.00% 0.00% 0 L3 Manager
177 0 1 0 0.00% 0.00% 0.00% 0 MLSM-CC Process
178 0 6 0 0.00% 0.00% 0.00% 0 mfib-const-rp Pr
179 275065 514397 534 0.00% 0.05% 0.11% 0 FM core
180 0 38 0 0.00% 0.00% 0.00% 0 SNMP Timers
181 3 1 3000 0.00% 0.00% 0.00% 0 PPP IP Add Route
182 101408 422029 240 0.39% 0.06% 0.05% 0 DHCPD Receive
183 0 1 0 0.00% 0.00% 0.00% 0 VFI Mgr
184 0 1 0 0.00% 0.00% 0.00% 0 PAD InCall
185 0 2 0 0.00% 0.00% 0.00% 0 X.25 Background
186 0 1 0 0.00% 0.00% 0.00% 0 X.25 Encaps Mana
187 0 1 0 0.00% 0.00% 0.00% 0 Inspect Timer
188 0 1 0 0.00% 0.00% 0.00% 0 Auth-proxy AAA B
189 28 806 34 0.00% 0.00% 0.00% 0 IP Admin SM Proc
190 0 1 0 0.00% 0.00% 0.00% 0 SLB CF process
191 0 1 0 0.00% 0.00% 0.00% 0 PPP HA
192 0 1 0 0.00% 0.00% 0.00% 0 IDS Timer
193 0 2 0 0.00% 0.00% 0.00% 0 MWAM_CONSOLE Tim
194 0 3 0 0.00% 0.00% 0.00% 0 L2TRACE SERVER
195 0 4 0 0.00% 0.00% 0.00% 0 IPv6 CEF process
196 0 1 0 0.00% 0.00% 0.00% 0 RARP Input
197 0 1 0 0.00% 0.00% 0.00% 0 PDU DISPATCHER
198 0 1 0 0.00% 0.00% 0.00% 0 Probe Input
199 0 1 0 0.00% 0.00% 0.00% 0 FR HA
200 0 75 0 0.00% 0.00% 0.00% 0 CWAN QinQ tasks
201 0 1 0 0.00% 0.00% 0.00% 0 COPS
202 0 1 0 0.00% 0.00% 0.00% 0 CHKPT DevTest
203 0 1 0 0.00% 0.00% 0.00% 0 ATM HA
204 0 2 0 0.00% 0.00% 0.00% 0 ATIP_UDP_TSK
205 0 2 0 0.00% 0.00% 0.00% 0 AAA Cached Serve
206 0 2 0 0.00% 0.00% 0.00% 0 LOCAL AAA
207 0 1 0 0.00% 0.00% 0.00% 0 SNMP ENGINE
208 0 1 0 0.00% 0.00% 0.00% 0 SNMP ConfCopyPro
209 0 1 0 0.00% 0.00% 0.00% 0 Laminar Icc Eve
210 0 2 0 0.00% 0.00% 0.00% 0 Laminar Config C
211 0 2 0 0.00% 0.00% 0.00% 0 SLB Main CPU pro
212 7912 1885 4197 0.00% 0.00% 0.00% 0 SNMP Traps
213 3 1 3000 0.00% 0.00% 0.00% 0 CCSWVOICE
214 0 2 0 0.00% 0.00% 0.00% 0 Rommon upgrade p
215 0 3 0 0.00% 0.00% 0.00% 0 RADIUS TEST CMD
216 0 2 0 0.00% 0.00% 0.00% 0 AAA SEND STOP EV
217 4 7 571 0.00% 0.00% 0.00% 0 RPC fabman_sp
218 0 14 0 0.00% 0.00% 0.00% 0 RPC lcc_sp
219 23224 329953 70 0.00% 0.00% 0.00% 0 NTP
220 988 2080 475 0.00% 0.00% 0.00% 0 RPC pm-mp
221 17856 830863 21 0.00% 0.00% 0.00% 0 PM Callback
222 4 11 363 0.00% 0.00% 0.00% 0 EC-Card-Cfg
223 3496382 13880531 251 0.00% 1.51% 1.50% 0 Port manager per
224 792 48148 16 0.00% 0.00% 0.00% 0 Max CPU utilizat
225 72 214 336 0.00% 0.00% 0.00% 0 RPC capi_rp
226 0 2 0 0.00% 0.00% 0.00% 0 RPC dot1x_aaa_rp
227 0 2 0 0.00% 0.00% 0.00% 0 RPC epld_sp2rp
228 40 205 195 0.00% 0.00% 0.00% 0 RPC idbman_sp2mp
229 111455 27328 4078 0.00% 0.04% 0.03% 0 RPC online_diag_
230 0 2 0 0.00% 0.00% 0.00% 0 RPC online_wan_d
231 32 16 2000 0.00% 0.00% 0.00% 0 RPC pagp_switch_
232 0 80 0 0.00% 0.00% 0.00% 0 RPC pm_switch_sp
233 0 2 0 0.00% 0.00% 0.00% 0 RPC psecure_rp
234 0 2 0 0.00% 0.00% 0.00% 0 RPC pt_switch_sp
235 12 79 151 0.00% 0.00% 0.00% 0 RPC qnq_switch_s
236 0 2 0 0.00% 0.00% 0.00% 0 RPC rf_cli_sp2rp
237 0 2 0 0.00% 0.00% 0.00% 0 RPC snmp_notify
238 0 6 0 0.00% 0.00% 0.00% 0 RPC snmp_stackli
Task Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Task Name
239 0 2 0 0.00% 0.00% 0.00% 0 RPC span_switch_
240 268 1289 207 0.00% 0.00% 0.00% 0 RPC stp_sp2mp_ap
241 0 2 0 0.00% 0.00% 0.00% 0 RPC sw_backup_in
242 104 672 154 0.00% 0.00% 0.00% 0 RPC sw_vlan_rp
243 0 6 0 0.00% 0.00% 0.00% 0 RPC udld_rp
244 156 620 251 0.00% 0.00% 0.00% 0 RPC vtp_const_ap
245 0 2 0 0.00% 0.00% 0.00% 0 VTPMIB EDIT BUFF
246 0 1 0 0.00% 0.00% 0.00% 0 RPCP Slave
247 24 31 774 0.00% 0.00% 0.00% 0 RPC c6k_power_rp
248 8 37 216 0.00% 0.00% 0.00% 0 RPC c6k_rp_envir
250 0 2 0 0.00% 0.00% 0.00% 0 Module enable-di
251 0 2 0 0.00% 0.00% 0.00% 0 RPC pikachu_rp
252 0 1 0 0.00% 0.00% 0.00% 0 RP L2 Applicatio
253 0 1 0 0.00% 0.00% 0.00% 0 Const FIB MAC
254 236 842 280 0.00% 0.00% 0.00% 0 Constellation Ba
255 24 57 421 0.00% 0.00% 0.00% 0 RPC pclc_g2_fw_r
256 0 2 0 0.00% 0.00% 0.00% 0 RPC chapi_rp
257 0 1 0 0.00% 0.00% 0.00% 0 CONST AFL
258 0 5 0 0.00% 0.00% 0.00% 0 PAgP-MP Process
259 0 5 0 0.00% 0.00% 0.00% 0 LACP-MP Process
260 8 34 235 0.00% 0.00% 0.00% 0 Logger ICC Proce
261 112 52 2153 0.00% 0.00% 0.00% 0 Syslog Traps
262 12 69 173 0.00% 0.00% 0.00% 0 rp to lc clock u
263 0 1 0 0.00% 0.00% 0.00% 0 LC Registry Expo
264 0 2 0 0.00% 0.00% 0.00% 0 RPC pclc_g2_agsm
265 96 112 857 0.00% 0.00% 0.00% 0 Online Diag EEM
266 0 1 0 0.00% 0.00% 0.00% 0 L3MM Process
267 0 2 0 0.00% 0.00% 0.00% 0 RPC itasca_rp
268 0 1 0 0.00% 0.00% 0.00% 0 HW Capacity ICC
269 0 2 0 0.00% 0.00% 0.00% 0 RPC error_detect
270 916 40190 22 0.00% 0.00% 0.00% 0 RP Error Detecti
271 0 2 0 0.00% 0.00% 0.00% 0 WiSM Process
272 0 1 0 0.00% 0.00% 0.00% 0 SONET Traps
273 0 10 0 0.00% 0.00% 0.00% 0 RPC aapi_rp
274 44 208 211 0.00% 0.00% 0.00% 0 QM Process on RP
275 0 2 0 0.00% 0.00% 0.00% 0 QM Reply Process
276 0 2 0 0.00% 0.00% 0.00% 0 QM Timer ACL Pro
277 0 3 0 0.00% 0.00% 0.00% 0 CWAN Bridge task
278 40 4027 9 0.00% 0.00% 0.00% 0 VACL Logger
279 0 1 0 0.00% 0.00% 0.00% 0 DHCP Snooping Sw
280 0 2 0 0.00% 0.00% 0.00% 0 SIP10G QM Proces
281 0 1 0 0.00% 0.00% 0.00% 0 Online Diag CNS
282 0 1 0 0.00% 0.00% 0.00% 0 Online Diag CNS
284 232 1922 120 0.00% 0.00% 0.00% 1 Hot Service Task
286 0 1 0 0.00% 0.00% 0.00% 0 NetFlow Agg Task
287 0 1 0 0.00% 0.00% 0.00% 0 CWAN OIR IPC Rea
288 0 1 0 0.00% 0.00% 0.00% 0 PF Clock Process
Thanks. -
Hi all,
I'm having high CPU usage with one of my Cisco 3845.
It works as an IP-IP Gateway and the CPU is quite high when the total number of calls only around 100-200 calls.
I check the CPU usage with "show process cpu sort" and it looks like there are some "hidden" processes that consuming CPU.
For example, 41% is total CPU, 25% is due to interrups, so CPU utilization on process level = 41 - 25 = 16%.
But as showed below, processes don't consume that much CPU, only around 7% ???
Please help to advise on this case. Any help is highly appreciated..
Thank you.
3845-GW#show process cpu sort | ex 0.00% 0.00% 0.00%
CPU utilization for five seconds: 41%/25%; one minute: 46%; five minutes: 47%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
382 6619708 1473171 4493 1.59% 1.81% 1.92% 0 CCSIP_SPI_CONTRO
141 4228940 10181955 415 1.35% 1.51% 1.57% 0 IP Input
65 2450824 163102 15026 1.19% 1.16% 1.17% 0 Per-Second Jobs
370 2702292 3709512 728 0.87% 0.88% 0.88% 0 VOIP_RTCP
224 321680 245640 1309 0.47% 0.49% 0.50% 0 AFW_application_
112 93940 18093506 5 0.39% 0.31% 0.32% 0 Ethernet Msec Ti
384 1058280 1553567 681 0.23% 0.28% 0.30% 0 CCSIP_UDP_SOCKET
2 18148 32905 551 0.07% 0.03% 0.02% 0 Load Meter
137 35644 4657843 7 0.07% 0.04% 0.05% 0 IPAM Manager
189 206392 267959 770 0.07% 0.05% 0.07% 0 TCP Protocols
30 30792 198554 155 0.07% 0.01% 0.00% 0 ARP Input
368 145456 176151 825 0.07% 0.04% 0.05% 0 CC-API_VCM
28 9628 32759 293 0.00% 0.01% 0.00% 0 Environmental mo
48 221352 37922 5837 0.00% 0.11% 0.11% 0 Net Background
63 16728 32924 508 0.00% 0.01% 0.00% 0 Compute load avg
64 72080 2781 25918 0.00% 0.01% 0.00% 0 Per-minute Jobs
6 371644 29792 12474 0.00% 0.14% 0.12% 0 Check heaps
176 12216 240288 50 0.00% 0.01% 0.00% 0 CEF: IPv4 proces
284 36416 4929826 7 0.00% 0.02% 0.01% 0 MMON MENG
307 12168 806151 15 0.00% 0.01% 0.00% 0 Atheros LED Ctro
335 35300 19755 1786 0.00% 3.16% 1.00% 708 Virtual Exec
3845-GW#sh int g0/0
GigabitEthernet0/0 is up, line protocol is up
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 1Gbps, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/2/56803 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 1551000 bits/sec, 5751 packets/sec
5 minute output rate 4207000 bits/sec, 7643 packets/sec
925128804 packets input, 939078510 bytes, 0 no buffer
Received 62732 broadcasts (0 IP multicasts)
0 runts, 0 giants, 2 throttles
2 input errors, 0 CRC, 0 frame, 2 overrun, 0 ignored
0 watchdog, 3763438515 multicast, 0 pause input
1472816545 packets output, 3214770103 bytes, 0 underruns
0 output errors, 2067720191 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 2281155551 late collision, 0 deferred
2 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
3845-GW#sh int g0/1
GigabitEthernet0/1 is up, line protocol is up
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 1Gbps, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/30335 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 1684000 bits/sec, 7697 packets/sec
5 minute output rate 3372000 bits/sec, 5632 packets/sec
1484558664 packets input, 2383177786 bytes, 0 no buffer
Received 208998 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
2 input errors, 0 CRC, 0 frame, 2 overrun, 0 ignored
0 watchdog, 3060386282 multicast, 0 pause input
903478941 packets output, 2814588854 bytes, 0 underruns
0 output errors, 2910776303 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 4157448025 late collision, 0 deferred
2 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped outHas this been something that just recently started happening, or have you had this issue for a while? Have you installed any new programs recently?
You may want to download Glary Utilities, which is a free software(they will ask you if you want to go Pro, just say no, the free version works very well). There is a module for startup manager. You can go in and disable stuff that starts with the computer. I would advise unchecking adobe, java, quicktime, printers, etc. Anything that doesn't REALLY need to start with the computer. The nice thing with Glary is that you can restart the computer, and if you find that you need one of the programs to start with windows, you can go back in and enable it again.
The Celeron 925 processor in your computer is a decent entry level processor, but if there are too many programs running in the background, it can bog down quick. I would also recommend downloading and running Malwarebytes Anti-malware, to be sure that there is nothing malicous running in the background.
Qosmio X875 i7-3630QM, 32GB RAM, OCZ SSD Qosmio X505 i7-920XM, PM55, 16GB RAM, OCZ SSD
Satellite Pro L350 T9900, GM45, 8GB RAM , Intel 320 SSD (my baby) Satellite L655 i7-620M, HM55, 8GB RAM, Intel 710 SSD (travel system) -
High CPU usage in cisco 7613 with rsp720-3cxl
Hi everybody,
our cisco 7613 has about 4.5 Gbps Tx/Rx IP traffic in total, and we run ospf with other cisco cloud for routing I list in the following some our router show.what is your idea about our high cpu usage .Is it in normal range with the listed cards and modules.How can I tune the rsp720 and other SIP-200,400,600 for better performances
why our interrupt rate is high ,and one thing more the total sum of 5sec in separate rows not equal to cpu utilization for five second 50%
show proc cpu sor
CPU utilization for five seconds: 50%/46%; one minute: 54%; five minutes: 59%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
8 196795220 12640741 15568 1.51% 0.38% 0.26% 0 Check heaps
224 1048610528 4169501364 0 1.19% 1.45% 1.44% 0 IP Input
13 374006320 3155162661 0 0.23% 0.26% 0.24% 0 ARP Input
217 119862004 985030884 121 0.15% 0.32% 0.25% 0 ADJ resolve pro
c
185 537716 1825736183 0 0.07% 0.03% 0.02% 0 ACE Tunnel Task
260 1550992 2983272818 0 0.07% 0.13% 0.15% 0 Ethernet Msec T
i
305 38186336 58050485 657 0.07% 0.02% 0.00% 0 XDR mcast
34 67208 11707798 5 0.07% 0.00% 0.00% 0 IPC Loadometer
27 232776 57160812 4 0.07% 0.01% 0.00% 0 IPC Periodic Ti
m
325 17539200 92894502 188 0.07% 0.15% 0.15% 0 CEF: IPv4 proce
s
195 7406636 43782487 169 0.07% 0.00% 0.00% 0 esw_vlan_stat_p
r
show ip route summ
IP routing table name is default (0x0)
IP routing table maximum-paths is 32
Route Source Networks Subnets Replicates Overhead Memory (bytes)
static 1 120 0 7620 20812
connected 0 313 0 18860 53836
ospf 98 17 4892 0 589020 863984
Intra-area: 89 Inter-area: 383 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 4437
bgp 12880 0 1 0 60 172
External: 1 Internal: 0 Local: 0
ospf 410 0 269 0 16220 47344
Intra-area: 1 Inter-area: 0 External-1: 0 External-2: 268
NSSA External-1: 0 NSSA External-2: 0
internal 137 260544
Total 155 5595 0 631780 1246692
sh module
Mod Ports Card Type Model Serial No.
1 0 4-subslot SPA Interface Processor-200 7600-SIP-200
2 0 4-subslot SPA Interface Processor-400 7600-SIP-400
3 24 CEF720 24 port 1000mb SFP WS-X6724-SFP
6 1 1-subslot SPA Interface Processor-600 7600-SIP-600
7 2 Route Switch Processor 720 (Active) RSP720-3CXL-GE
8 2 Route Switch Processor 720 (Cold) RSP720-3CXL-GE
show ver
System image file is "bootdisk:c7600rsp72043-adventerprisek9-mz.122-33.SRE2.bin"
1 SIP-200 controller .
1 SIP-400 controller (1 Channelized OC3/STM-1).
1 SIP-600 controller (1 TenGigabitEthernet).
2 Virtual Ethernet interfaces
28 Gigabit Ethernet interfaces
1 Ten Gigabit Ethernet interface
1 Channelized STM-1 port
1 Channelized STM-1 port
show int vlan 1
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 2d23h
Input queue: 0/75/2886/1830 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 2380531000 bits/sec, 287383 packets/sec
5 minute output rate 422133000 bits/sec, 254113 packets/sec
L2 Switched: ucast: 1200869468 pkt, 101172643240 bytes - mcast: 253599 pkt, 78
873415 bytes
L3 in Switched: ucast: 60947040633 pkt, 68919665115039 bytes - mcast: 0 pkt, 0
bytes mcast
L3 out Switched: ucast: 52594517004 pkt, 9869168832783 bytes mcast: 0 pkt, 0 b
ytes
62147839148 packets input, 69016175499764 bytes, 0 no buffer
Received 257634 broadcasts (0 IP multicasts)
0 runts, 0 giants, 15 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
53647248858 packets output, 10292998021217 bytes, 0 underruns
0 output errors, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped outThank you for your hints and replying
These are our show ibc in 1 min interval
Interface information:
Interface IBC0/0
5 minute rx rate 20045000 bits/sec, 30183 packets/sec
5 minute tx rate 47394000 bits/sec, 60212 packets/sec
19879272237 packets input, 4006174536193 bytes
19835355282 broadcasts received
19808585787 packets output, 3981305571968 bytes
90548 broadcasts sent
0 Bridge Packet loopback drops
19756362091 Packets CEF Switched, 1320184 Packets Fast Switched
0 Packets SLB Switched, 0 Packets CWAN Switched
Label switched pkts dropped: 0 Pkts dropped during dma: 339549
Invalid pkts dropped: 0 Pkts dropped(not cwan consumed): 0
IPSEC pkts dropped: 635184
Xconnect pkts processed: 0, dropped: 0
Xconnect pkt reflection drops: 0
Total paks copied for process level 0
Total short paks sent in route cache 2605317676
Total throttle drops 265338 Input queue drops 5831090
total spd packets classified (120217214 low, 174503 medium, 3073 high)
total spd packets dropped (339549 low, 0 medium, 0 high)
spd prio pkts allowed in due to selective throttling (0 med, 0 high)
IBC resets = 1; last at 23:52:49.004 Sat Jan 19 2013
Driver Level Counters: (Cumulative, Zeroed only at Reset)
Frames Bytes
Rx(0) 26537712 3421085217
Rx(1) 3449063135 2838813650
Tx(0) 3390340306 2016620276
Input Drop Frame Count
Rx0 = 0 Rx1 = 2488435
Per Queue Receive Errors:
FRME OFLW BUFE NOENP DISCRD DISABLE BADCOUNT
Rx0 0 0 0 0 0 0 0
Rx1 0 0 0 3633 0 0 0
Tx Errors/State:
One Collision Error = 0 More Collisions = 0
No Encap Error = 0 Deferred Error = 0
Loss Carrier Error = 0 Late Collision Error = 0
Excessive Collisions = 0 Buffer Error = 0
Tx Freeze Count = 0 Tx Intrpt Serv timeout= 1
Tx Flow State = FLOW_ON
Tx Flow Off Count = 0 Tx Flow On Count = 0
Counters collected at Idb:
Is input throttled = 0 Throttle Count = 0
Rx Resource Errors = 0 Input Drops = 2488435
Input Errors = 194243
Output Drops = 0 Giants/Runts = 0/0
Dma Mem Error = 0 Input Overrun = 0
Hash match table for multicast (in use 0, maximum 64 entries):
show ibc
Interface information:
Interface IBC0/0
5 minute rx rate 20194000 bits/sec, 30412 packets/sec
5 minute tx rate 47753000 bits/sec, 60663 packets/sec
19891125514 packets input, 4007158118761 bytes
19847185365 broadcasts received
19820407164 packets output, 3982279276274 bytes
90576 broadcasts sent
0 Bridge Packet loopback drops
19768178233 Packets CEF Switched, 1321008 Packets Fast Switched
0 Packets SLB Switched, 0 Packets CWAN Switched
Label switched pkts dropped: 0 Pkts dropped during dma: 339549
Invalid pkts dropped: 0 Pkts dropped(not cwan consumed): 0
IPSEC pkts dropped: 635574
Xconnect pkts processed: 0, dropped: 0
Xconnect pkt reflection drops: 0
Total paks copied for process level 0
Total short paks sent in route cache 2606549061
Total throttle drops 265338 Input queue drops 5831090
total spd packets classified (120252754 low, 174531 medium, 3074 high)
total spd packets dropped (339549 low, 0 medium, 0 high)
spd prio pkts allowed in due to selective throttling (0 med, 0 high)
IBC resets = 1; last at 23:52:49.004 Sat Jan 19 2013
Driver Level Counters: (Cumulative, Zeroed only at Reset)
Frames Bytes
Rx(0) 26550723 3422835145
Rx(1) 3461063605 176652699
Tx(0) 3402319442 3368513724
Input Drop Frame Count
Rx0 = 0 Rx1 = 2490155
Per Queue Receive Errors:
FRME OFLW BUFE NOENP DISCRD DISABLE BADCOUNT
Rx0 0 0 0 0 0 0 0
Rx1 0 0 0 3633 0 0 0
Tx Errors/State:
One Collision Error = 0 More Collisions = 0
No Encap Error = 0 Deferred Error = 0
Loss Carrier Error = 0 Late Collision Error = 0
Excessive Collisions = 0 Buffer Error = 0
Tx Freeze Count = 0 Tx Intrpt Serv timeout= 1
Tx Flow State = FLOW_ON
Tx Flow Off Count = 0 Tx Flow On Count = 0
Counters collected at Idb:
Is input throttled = 0 Throttle Count = 0
Rx Resource Errors = 0 Input Drops = 2490155
Input Errors = 194358
Output Drops = 0 Giants/Runts = 0/0
Dma Mem Error = 0 Input Overrun = 0
Hash match table for multicast (in use 0, maximum 64 entries):
and sorry what is your idea about total sum of 5sec in separate rows not equal to cpu utilization for five second 50% -
High CPU utilization in cisco 6509E
I am facing a issue with CISCO 6509E switch with high CPU utilization. it reaches to 65%-70% which usually reaches 20 to 30%.
Hi
Your High CPU is due to interrupts, see 65% alone due to interrupts out of 89%.
Also, see last 72 hours CPU history, CPU always between 50-70%.
7667565564544456465655555555544555455445456566765655555455955555568667
0632835054379725938088655171198331612347960635027367553873051450118873
100
90 * *
80 * *
70 ** * * * ** * ****
60 ******* * * ******** * * ************* * ** * *****
50 ********* *************************** *******************************
40 ###**************************************************************#####
30 ######***********################**#*****##############***############
20 ######################################################################
10 ######################################################################
0....5....1....1....2....2....3....3....4....4....5....5....6....6....7.
0 5 0 5 0 5 0 5 0 5 0 5 0
CPU% per hour (last 72 hours)
* = maximum CPU% # = average CPU%
Here's very good guide to troubleshoot the High CPU Utilization Due to Interrupts
Troubleshooting High CPU Utilization Due to Interrupts
http://www.cisco.com/c/en/us/support/docs/routers/7500-series-routers/41120-highcpu-interrupts.html
- Ashok
Please rate the post or mark as correct answer as it will help others looking for similar information -
Hello
I have a question,One GSR running IOS 12.0(17)S and CPU rate is below 10%.Now I upgraded this GSR to 12.0(26)S which is newnest version on CCO.Now I found that the CPU rate on grp is above 90%.the most part of CPU is used by process ip input.Between this upgrade ,I did not any configuation change.Can anyone enconter this problem ?thank you in advance ??I have heard about similar problems in this version with certain linecards and protocols. Check for known issues if you have access to Bug toolkit.
-
Hi All,
I have a cisco 2811 that is high in CPU usage. Below is my IOS version and process usage details.
Cisco IOS Software, 2800 Software (C2800NM-IPBASEK9-M), Version 12.4(24)T4, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Fri 03-Sep-10 05:39 by prod_rel_team
ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
ipscape-myob uptime is 6 weeks, 5 days, 17 hours, 18 minutes
System returned to ROM by reload at 10:33:59 UTC Thu Apr 10 2014
System image file is "flash:c2800nm-ipbasek9-mz.124-24.T4.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
Cisco 2811 (revision 53.51) with 514048K/10240K bytes of memory.
Processor board ID FHK1238F1D4
2 FastEthernet interfaces
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
62720K bytes of ATA CompactFlash (Read/Write)
Configuration register is 0x2102
CPU utilization for five seconds: 90%/77%; one minute: 79%; five minutes: 76%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
8 20693808 28614857 723 7.67% 1.24% 0.44% 0 IP SLAs Respond e
91 13460456 18459988 729 3.27% 0.67% 0.31% 0 IP Input
143 3167640 1026953957 3 1.19% 1.62% 1.68% 0 HQF Shaper Back g
184 809676 128826693 6 0.39% 0.38% 0.39% 0 PPP manager
196 1072 112 9571 0.31% 0.23% 0.06% 514 Virtual Exec
185 771340 128826711 5 0.23% 0.18% 0.16% 0 PPP Events
Could you please provide me some info on this issues.
Thank You!Has this been something that just recently started happening, or have you had this issue for a while? Have you installed any new programs recently?
You may want to download Glary Utilities, which is a free software(they will ask you if you want to go Pro, just say no, the free version works very well). There is a module for startup manager. You can go in and disable stuff that starts with the computer. I would advise unchecking adobe, java, quicktime, printers, etc. Anything that doesn't REALLY need to start with the computer. The nice thing with Glary is that you can restart the computer, and if you find that you need one of the programs to start with windows, you can go back in and enable it again.
The Celeron 925 processor in your computer is a decent entry level processor, but if there are too many programs running in the background, it can bog down quick. I would also recommend downloading and running Malwarebytes Anti-malware, to be sure that there is nothing malicous running in the background.
Qosmio X875 i7-3630QM, 32GB RAM, OCZ SSD Qosmio X505 i7-920XM, PM55, 16GB RAM, OCZ SSD
Satellite Pro L350 T9900, GM45, 8GB RAM , Intel 320 SSD (my baby) Satellite L655 i7-620M, HM55, 8GB RAM, Intel 710 SSD (travel system) -
High CPU Utilization on Cisco SGE-2000
Dear Experts,
We are using Two Cisco SGE-2000 in our network. but we are facing CPU utilization very high upto 95 to 98 percent.
we are unable to see in details why it's happend like in cisco RTR or Catalyst " sh proc cpu" there is see in details by which service it going high so then we can identity very easly but in Cisco L3 SGe-2000 only showing Percent not in details. so how can i find out.
We are getting on SGE-2000 this type of errors "2147480831 2012-Jul-06 13:14:45 Warning %IPFFT-W-SFFTREDYELLOW: IP SFFT"
how can solve this and why it's happend.
Please anyone help me for the same , i appreciate for this.
Thanks in ADV,D/Tom,
Thanks for your reply . you are right there is more than 400 users connected with this SW so how can i resolve this issue.
one more think should i go with this SW when connected more than 400 users and also we have configured with Static route and we have facing CPU utilization very high continue 90 to 99 percent. and how can i show in details which service is taking high percent of CPU utilization cause i am not able to show in details in this SW only percentage are showing.
This SW is reliable at this level ?? or not and i want to know how many BW perfonance capacity of this SW currentely we are using 100 mb P2P.
one SW at our CO (SGE-2000) with 150 users and conneted 100 mb P2P with same SGE-2000 at our HO with more than 400 usrs.
there is no any issue at our CO with the same SW.
Thanks once again!!! -
Hello,
I'm having almost 60-70% CPU utilization on a 6500 core for almost a day now. However cant seem to figure out what is overwhelming the CPU utlization. show cpu process sorted does not provide much information with top two processes being 'slcp process' - about 2-3% & spanning tree process which goes between 1-2%. The major change in the network was introduction of Nexus 2232 (10G) switches in the DC which are connected to 5K with 20 Gb uplinks to the 6500. Now almost 20 servers are connected to this switch, but none of them are going beyond 1.5 Gb/s.
Any help would be much appreciated.
Thank you.Hi,
Connecting 5ks to 6500 should not cause high CPU. Usually, when 6500s are configured in VSS mode, the CPU runs higher. Also if you are running a modular code, the CPU usually runs higher. Note that most newer IOS verions are not modular more .
Also, have a look at this doc for tips on troubleshooting high CPU.
http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/63992-6k-high-cpu.html
HTH -
Hi,
Well, I have this strange problem with 6500 and 4215. Everything works just fine, sensor is blocking and no real problem with that.
But, I get high cpu usage on my 6500 device whenever IDS is accessing it for ACL configuration.
I tried to sniff on this and I get this strange output from 6500 device whenever ssh session is established: 6500 is responsing one letter at a time (I mean one letter per packet), so it takes a lot of packets in order to this session to get accomplished.
Here is a log from 4215 :
"evError: eventId=1114377191440638275 severity=error
originator:
hostId: xxx
appName: nac
appInstanceId: 1162
time: 2005/08/17 14:40:14 2005/08/17 16:40:14 Summer
errorMessage: name=errSystemError ERROR: Syntax error from invalid input at device [Cisco] IP [x.x.x.x] state [Active]Text from device:
^
% Invalid input detected at '^' marker.
sw-01(config-if)# "
Anyone seen this before.
Just to mention, regular telnet/ssh sessions are not cpu intensive.
Thanks,
SasaThis could be due to very large ACLs and ACEs that you might be having. I wonder if there is a turbo acl ( as in pix) is there in IDS. If so, this will reduce the consumption of resources to a large extent.
-
High cpu when change "mls cef maximum-route ip" to more than 512K
Dear All
From cisco document 6500-sup720 and 7600-rsp720 are support IPv4 unicast and MPLS—512,000 routes by default. On my network we have route more than 400K which nearly reach to the limit then I tried to change from 512K to 1007K as below.
Router#sh mls cef maximum-routes
FIB TCAM maximum routes :
=======================
Current :-
IPv4 - 1007k
MPLS - 1k
IPv6 + IP Multicast - 8k (default)
After rebooted I got high cpu issue on both 6500-sup720 and 7600-rsp720 then I tried to tuning to other value such as 600K , 700K and so on but doesn't help.
Summary
- I have no cpu issue with default value for mls cef maximum-route
- I have cpu issue when tuning to other value such as 600K , 700K
Please advise.
PichetDear All
From cisco document 6500-sup720 and 7600-rsp720 are support IPv4 unicast and MPLS—512,000 routes by default. On my network we have route more than 400K which nearly reach to the limit then I tried to change from 512K to 1007K as below.
Router#sh mls cef maximum-routes
FIB TCAM maximum routes :
=======================
Current :-
IPv4 - 1007k
MPLS - 1k
IPv6 + IP Multicast - 8k (default)
After rebooted I got high cpu issue on both 6500-sup720 and 7600-rsp720 then I tried to tuning to other value such as 600K , 700K and so on but doesn't help.
Summary
- I have no cpu issue with default value for mls cef maximum-route
- I have cpu issue when tuning to other value such as 600K , 700K
Please advise.
Pichet -
High CPU caused by Multicast on 6500
Hello - could anyone please assist?
I'm see constant(often daily) alerts that indicate high CPU on one of our Cisco Cat 6500 core switches.
The PIDs refered to are:
276 - IP Input
560 - PIM Process
Combined, these 2 processes take the CPU over 85%, most often hitting 99%.
The core switch is also the Rendevous Point for the LAN.
Many thanks
LeeHi Lee,
You say this is a core router, but as people use this terms to mean different things, are there any directly connected hosts? If there are one thing to check for is hosts sending multicast traffic with TTL=1. If you run the command show ip traffic | in bad hop and look at the rate the "bad hop count" is increasing. If I had a £ for every time I've seen that problem.... I couldn't retire just yet, but at least I could go buy myself a beer or two.
If you're seeing the hop count increasing at a rapid rate there are a couple of options:
Take a read of Troubleshooting high CPU on a 6500 with sup720 starting from the section Tools used to determine the source of the traffic and identify the hosts sending multicast with TTL=1.
If the Catalyst 6500 use PFC 3B add the command mls rate-limit all ttl-failure 100 10 to drop the multicast traffic in hardware.
The first option will take you longer, but at least you identify the cause and can advise the application owner why they should change their applications behaviour.
Regards -
Configuring rate-limit in switch 6500
Good morning gentlemen
Consider a 6509E (supervisor 720 3B) switch with many interface VLANs configured, one of each related to each customer. Each interface VLAN had configured a rate-limit input and output configured representing the maximum bandwidth permitted for the customer.
I could configured that way using the old IOS s72033-ipservicesk9_wan-mz.122-18.SXF7.
Last weekend I had to upgrade that IOS to s72033-ipservicesk9_wan-mz.122-33.SXJ7. All rate-limits in VLAN interfaces disappeared, probably not supported in this new version.
Now, what's you recommendation to perform the same in this IOS version?...I only found the policy-map/service-policy way.
Follow my questions:
1 - "mls qos" is globally disabled. Should I configure globally or by interface VLAN?... Expected any impact?
I believe that only need "police" for QOS. No need for any other kind of QOS.
2 - Should I enable "mls qos vlan-based" for each physical layer 2 port connected to that switch related to each interface vlan with police?
Expected only one physical port (or port-channel) for each customer (and each VLAN) connected to a switch.
Thank you and regards
ChristianInteresting that I have just upgraded the IOS to the last version 12 release.
I think that for the reason that we are facing high CPU usage for "IP Input" process, something related to mls/cef is not tunned.
Anyone has any idea regarding the configuration presented?
Regards
Christian -
Our cisco 7206G2 BRAS have High CPU usage!!
Hi All,
i have high cpu utalization 70% usage with my BRAS 7206 while the online PPPoVPDN customers not more than 1200 online concurrent sessions
i revised the configuration but i coudn't found the cause of problem.
i monitord that when i tried to traceroute from ADSL client router any of the servers ip address behind servers network , it seems the packet go out through DEFAULT-ROUTE route map which results the following:
C:\Users\jit>tracert x.x.176.194
Tracing route to proxy.ctx.com [x.x.176.194]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms x.x.178.129
2 3 ms <1 ms <1 ms x.x.176.1
3 <1 ms <1 ms <1 ms z.z.66.129
4 <1 ms <1 ms <1 ms z.z.244.66.130
5 <1 ms <1 ms <1 ms pr.ctx.com [x.x.176.194]
Trace complete.
while the packet should go direct as the following:
C:\Users\jit>tracert x.x.176.194
Tracing route to pr.ctx.com [x.x.176.194]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms x.x.178.129
2 13 ms 31 ms 31 ms x.x.176.1
3 <1 ms <1 ms <1 ms pr.ctx.com [x.x.176.194]
Trace complete.
also i have heavy logs on console as the following:
e Virtual-Access646, changed state to down
1527210: Nov 5 08:25:03.825 GMT: %LINK-3-UPDOWN: Interface Virtual-Access646, c
hanged state to down
1527211: Nov 5 08:25:04.357 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access873, changed state to down
1527212: Nov 5 08:25:04.357 GMT: %LINK-3-UPDOWN: Interface Virtual-Access873, c
hanged state to down
1527213: Nov 5 08:25:05.701 GMT: %LINK-3-UPDOWN: Interface Virtual-Access1090,
changed state to up
1527214: Nov 5 08:25:05.705 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access1090, changed state to up
1527215: Nov 5 08:25:06.317 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty3 (31.223.180.2)
1527216: Nov 5 08:25:07.645 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access859, changed state to down
1527217: Nov 5 08:25:07.649 GMT: %LINK-3-UPDOWN: Interface Virtual-Access859, c
hanged state to down
1527218: Nov 5 08:25:09.005 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty2 (31.223.180.2)
1527219: Nov 5 08:25:09.485 GMT: %LINK-3-UPDOWN: Interface Virtual-Access1059,
changed state to up
1527220: Nov 5 08:25:09.489 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access1059, changed state to up
1527221: Nov 5 08:25:09.749 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access149, changed state to down
1527222: Nov 5 08:25:09.749 GMT: %LINK-3-UPDOWN: Interface Virtual-Access149, c
hanged state to down
1527223: Nov 5 08:25:11.269 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access494, changed state to down
1527224: Nov 5 08:25:11.269 GMT: %LINK-3-UPDOWN: Interface Virtual-Access494, c
hanged state to down
1527225: Nov 5 08:25:12.273 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access112, changed state to down
1527226: Nov 5 08:25:12.273 GMT: %LINK-3-UPDOWN: Interface Virtual-Access112, c
hanged state to down
1527227: Nov 5 08:25:12.309 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty2 (31.223.180.2)
1527228: Nov 5 08:25:13.029 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access869, changed state to down
1527229: Nov 5 08:25:13.029 GMT: %LINK-3-UPDOWN: Interface Virtual-Access869, c
hanged state to down
1527230: Nov 5 08:25:14.477 GMT: %LINK-3-UPDOWN: Interface Virtual-Access1201,
changed state to up
1527231: Nov 5 08:25:14.481 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access1201, changed state to up
1527232: Nov 5 08:25:14.733 GMT: %LINK-3-UPDOWN: Interface Virtual-Access946, c
hanged state to up
1527233: Nov 5 08:25:14.737 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access946, changed state to up
1527234: Nov 5 08:25:14.821 GMT: %LINK-3-UPDOWN: Interface Virtual-Access734, c
hanged state to up
1527235: Nov 5 08:25:14.825 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access734, changed state to up
1527236: Nov 5 08:25:14.973 GMT: %LINK-3-UPDOWN: Interface Virtual-Access97, ch
anged state to down
1527237: Nov 5 08:25:14.977 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access97, changed state to down
1527238: Nov 5 08:25:15.009 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty3 (31.223.180.2)
1527239: Nov 5 08:25:15.773 GMT: %LINK-3-UPDOWN: Interface Virtual-Access928, c
hanged state to up
1527240: Nov 5 08:25:15.777 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access928, changed state to up
1527241: Nov 5 08:25:17.921 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access698, changed state to down
1527242: Nov 5 08:25:17.925 GMT: %LINK-3-UPDOWN: Interface Virtual-Access698, c
hanged state to down
1527243: Nov 5 08:25:18.013 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty2 (31.223.180.2)
1527244: Nov 5 08:25:19.713 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access133, changed state to down
1527245: Nov 5 08:25:19.713 GMT: %LINK-3-UPDOWN: Interface Virtual-Access133, c
hanged state to down
1527246: Nov 5 08:25:19.873 GMT: %LINK-3-UPDOWN: Interface Virtual-Access696, c
hanged state to up
1527247: Nov 5 08:25:19.877 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access696, changed state to up
1527248: Nov 5 08:25:21.397 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty3 (31.223.180.2)
1527249: Nov 5 08:25:22.033 GMT: %LINK-3-UPDOWN: Interface Virtual-Access182, c
hanged state to up
1527250: Nov 5 08:25:22.037 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access182, changed state to up
1527251: Nov 5 08:25:22.273 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access718, changed state to down
1527252: Nov 5 08:25:22.273 GMT: %LINK-3-UPDOWN: Interface Virtual-Access718, c
hanged state to down
1527253: Nov 5 08:25:23.693 GMT: %LINK-3-UPDOWN: Interface Virtual-Access304, c
hanged state to up
1527254: Nov 5 08:25:23.697 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access304, changed state to up
1527255: Nov 5 08:25:23.841 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access1203, changed state to down
1527256: Nov 5 08:25:23.841 GMT: %LINK-3-UPDOWN: Interface Virtual-Access1203,
changed state to down
1527257: Nov 5 08:25:23.849 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access533, changed state to down
1527258: Nov 5 08:25:23.849 GMT: %LINK-3-UPDOWN: Interface Virtual-Access533, c
hanged state to down
1527259: Nov 5 08:25:23.849 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access403, changed state to down
1527260: Nov 5 08:25:23.849 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access1018, changed state to down
1527261: Nov 5 08:25:23.865 GMT: %LINK-3-UPDOWN: Interface Virtual-Access403, c
hanged state to down
1527262: Nov 5 08:25:23.865 GMT: %LINK-3-UPDOWN: Interface Virtual-Access1018,
changed state to down
1527263: Nov 5 08:25:23.869 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access212, changed state to down
1527264: Nov 5 08:25:23.869 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access674, changed state to down
1527265: Nov 5 08:25:23.869 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access76, changed state to down
1527266: Nov 5 08:25:23.869 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access389, changed state to down
1527267: Nov 5 08:25:23.869 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access1083, changed state to down
1527268: Nov 5 08:25:23.869 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access202, changed state to down
1527269: Nov 5 08:25:23.869 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access253, changed state to down
1527270: Nov 5 08:25:23.869 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access162, changed state to down
1527271: Nov 5 08:25:23.869 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access66, changed state to down
1527272: Nov 5 08:25:23.893 GMT: %LINK-3-UPDOWN: Interface Virtual-Access212, c
hanged state to down
1527273: Nov 5 08:25:23.897 GMT: %LINK-3-UPDOWN: Interface Virtual-Access674, c
hanged state to down
1527274: Nov 5 08:25:23.897 GMT: %LINK-3-UPDOWN: Interface Virtual-Access76, ch
anged state to down
1527275: Nov 5 08:25:23.897 GMT: %LINK-3-UPDOWN: Interface Virtual-Access389, c
hanged state to down
1527276: Nov 5 08:25:23.897 GMT: %LINK-3-UPDOWN: Interface Virtual-Access1083,
changed state to down
1527277: Nov 5 08:25:23.897 GMT: %LINK-3-UPDOWN: Interface Virtual-Access202, c
hanged state to down
1527278: Nov 5 08:25:23.897 GMT: %LINK-3-UPDOWN: Interface Virtual-Access253, c
hanged state to down
1527279: Nov 5 08:25:23.897 GMT: %LINK-3-UPDOWN: Interface Virtual-Access162, c
hanged state to down
1527280: Nov 5 08:25:23.897 GMT: %LINK-3-UPDOWN: Interface Virtual-Access66, ch
anged state to down
1527281: Nov 5 08:25:23.921 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access722, changed state to down
1527282: Nov 5 08:25:23.921 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access685, changed state to down
1527283: Nov 5 08:25:23.921 GMT: %LINK-3-UPDOWN: Interface Virtual-Access722, c
hanged state to down
1527284: Nov 5 08:25:23.929 GMT: %LINK-3-UPDOWN: Interface Virtual-Access685, c
hanged state to down
1527285: Nov 5 08:25:24.017 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty2 (31.223.180.2)
1527286: Nov 5 08:25:24.481 GMT: %LINK-3-UPDOWN: Interface Virtual-Access845, c
hanged state to up
1527287: Nov 5 08:25:24.485 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access845, changed state to up
1527288: Nov 5 08:25:25.445 GMT: %LINK-3-UPDOWN: Interface Virtual-Access437, c
hanged state to up
1527289: Nov 5 08:25:25.449 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access437, changed state to up
1527290: Nov 5 08:25:25.641 GMT: %LINK-3-UPDOWN: Interface Virtual-Access169, c
hanged state to up
1527291: Nov 5 08:25:25.645 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access169, changed state to up
1527292: Nov 5 08:25:25.693 GMT: %LINK-3-UPDOWN: Interface Virtual-Access90, ch
anged state to up
1527293: Nov 5 08:25:25.697 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access90, changed state to up
1527294: Nov 5 08:25:26.565 GMT: %LINK-3-UPDOWN: Interface Virtual-Access572, c
hanged state to up
1527295: Nov 5 08:25:26.569 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access572, changed state to up
1527296: Nov 5 08:25:26.729 GMT: %LINK-3-UPDOWN: Interface Virtual-Access912, c
hanged state to up
1527297: Nov 5 08:25:26.733 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access912, changed state to up
1527298: Nov 5 08:25:26.753 GMT: %LINK-3-UPDOWN: Interface Virtual-Access826, c
hanged state to up
1527299: Nov 5 08:25:26.757 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access826, changed state to up
1527300: Nov 5 08:25:26.777 GMT: %LINK-3-UPDOWN: Interface Virtual-Access714, c
hanged state to down
1527301: Nov 5 08:25:26.781 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access714, changed state to down
1527302: Nov 5 08:25:27.021 GMT: %LINK-3-UPDOWN: Interface Virtual-Access1011,
changed state to up
1527303: Nov 5 08:25:27.025 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access1011, changed state to up
1527304: Nov 5 08:25:27.245 GMT: %LINK-3-UPDOWN: Interface Virtual-Access622, c
hanged state to up
1527305: Nov 5 08:25:27.249 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access622, changed state to up
1527306: Nov 5 08:25:27.317 GMT: %LINK-3-UPDOWN: Interface Virtual-Access904, c
hanged state to up
1527307: Nov 5 08:25:27.321 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access904, changed state to up
1527308: Nov 5 08:25:27.345 GMT: %LINK-3-UPDOWN: Interface Virtual-Access675, c
hanged state to up
1527309: Nov 5 08:25:27.349 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access675, changed state to up
1527310: Nov 5 08:25:27.381 GMT: %LINK-3-UPDOWN: Interface Virtual-Access901, c
hanged state to up
1527311: Nov 5 08:25:27.385 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access901, changed state to up
1527312: Nov 5 08:25:27.385 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty3 (31.223.180.2)
1527313: Nov 5 08:25:27.541 GMT: %LINK-3-UPDOWN: Interface Virtual-Access1049,
changed state to up
1527314: Nov 5 08:25:27.545 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access1049, changed state to up
1527315: Nov 5 08:25:27.789 GMT: %LINK-3-UPDOWN: Interface Virtual-Access293, c
hanged state to up
1527316: Nov 5 08:25:27.793 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access293, changed state to up
1527317: Nov 5 08:25:28.401 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access848, changed state to down
1527318: Nov 5 08:25:28.405 GMT: %LINK-3-UPDOWN: Interface Virtual-Access848, c
hanged state to down
1527319: Nov 5 08:25:30.021 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty2 (31.223.180.2)
1527320: Nov 5 08:25:30.217 GMT: %LINK-3-UPDOWN: Interface Virtual-Access306, c
hanged state to up
1527321: Nov 5 08:25:30.221 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access306, changed state to up
1527322: Nov 5 08:25:30.741 GMT: %LINK-3-UPDOWN: Interface Virtual-Access991, c
hanged state to up
CN_LNS_G1#
1527323: Nov 5 08:25:30.749 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access991, changed state to up
1527324: Nov 5 08:25:33.021 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty3 (31.223.180.2)
1527325: Nov 5 08:25:34.569 GMT: %LINK-3-UPDOWN: Interface Virtual-Access221, c
hanged state to down
1527326: Nov 5 08:25:34.573 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access221, changed state to down
1527327: Nov 5 08:25:35.005 GMT: %LINK-3-UPDOWN: Interface Virtual-Access33, ch
anged state to up
1527328: Nov 5 08:25:35.009 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access33, changed state to up
1527329: Nov 5 08:25:35.293 GMT: %LINK-3-UPDOWN: Interface Virtual-Access840, c
hanged state to up
1527330: Nov 5 08:25:35.297 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access840, changed state to up
1527331: Nov 5 08:25:36.297 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty2 (31.223.180.2)
1527332: Nov 5 08:25:36.833 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access52, changed state to down
1527333: Nov 5 08:25:36.833 GMT: %LINK-3-UPDOWN: Interface Virtual-Access52, ch
anged state to down
1527334: Nov 5 08:25:37.273 GMT: %LINK-3-UPDOWN: Interface Virtual-Access868, c
hanged state to up
1527335: Nov 5 08:25:37.277 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access868, changed state to up
1527336: Nov 5 08:25:38.657 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access26, changed state to down
1527337: Nov 5 08:25:38.661 GMT: %LINK-3-UPDOWN: Interface Virtual-Access26, ch
anged state to down
1527338: Nov 5 08:25:39.029 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty3 (31.223.180.2)
1527339: Nov 5 08:25:40.089 GMT: %LINK-3-UPDOWN: Interface Virtual-Access142, c
hanged state to up
1527340: Nov 5 08:25:40.093 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access142, changed state to up
1527341: Nov 5 08:25:40.185 GMT: %LINK-3-UPDOWN: Interface Virtual-Access500, c
hanged state to up
1527342: Nov 5 08:25:40.189 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access500, changed state to up
1527343: Nov 5 08:25:41.453 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access83, changed state to down
1527344: Nov 5 08:25:41.453 GMT: %LINK-3-UPDOWN: Interface Virtual-Access83, ch
anged state to down
1527345: Nov 5 08:25:41.589 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access273, changed state to down
1527346: Nov 5 08:25:41.593 GMT: %LINK-3-UPDOWN: Interface Virtual-Access273, c
hanged state to down
1527347: Nov 5 08:25:41.661 GMT: %LINK-3-UPDOWN: Interface Virtual-Access832, c
hanged state to up
1527348: Nov 5 08:25:41.665 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access832, changed state to up
1527349: Nov 5 08:25:41.697 GMT: %LINK-3-UPDOWN: Interface Virtual-Access485, c
hanged state to up
1527350: Nov 5 08:25:41.701 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access485, changed state to up
1527351: Nov 5 08:25:42.285 GMT: %LINK-3-UPDOWN: Interface Virtual-Access788, c
hanged state to up
1527352: Nov 5 08:25:42.289 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access788, changed state to up
1527353: Nov 5 08:25:42.577 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to
15 by citynet on vty2 (31.223.180.2)
1527354: Nov 5 08:25:42.889 GMT: %LINK-3-UPDOWN: Interface Virtual-Access487, c
hanged state to up
1527355: Nov 5 08:25:42.893 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access487, changed state to up
1527356: Nov 5 08:25:42.993 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interfac
e Virtual-Access465, changed state to down
1527357: Nov 5 08:25:42.993 GMT: %LINK-3-UPDOWN: Interface Virtual-Access465, c
hanged state to down
1527358: Nov 5 08:25:43.209 GMT: %LINK-3-UPDOWN: Interface Virtual-Access843, c
hanged state to down
----->
here is the configuration :
upgrade fpd auto
version 15.0
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
hostname CTX_LNS_G1
boot-start-marker
boot system flash disk2:c7200p-advipservicesk9-mz.150-1.M3.bin
boot-end-marker
security authentication failure rate 10 log
security passwords min-length 6
logging userinfo
logging buffered 1x072
logging reload alerts
no logging console
enable password 7 xxxxxxx
aaa new-model
aaa group server radius CTX
server-private x.x.x.x auth-port 1812 acct-port 1813 key 7 xxxxxx
aaa authentication login default local
aaa authentication login userauthen local
aaa authentication ppp USERS group CTX
aaa authorization console
aaa authorization network USERS group CTX
aaa accounting delay-start
aaa accounting update newinfo periodic 60
aaa accounting network USERS
action-type start-stop
group CTX
aaa accounting resource USERS
action-type start-stop
group CTX
aaa dnis map enable
aaa server radius dynamic-author
client x.x.176.1 server-key 7 xxxxx
auth-type all
ignore session-key
ignore server-key
aaa session-id common
no ppp hold-queue
clock timezone GMT 2
clock summer-time CST recurring
clock calendar-valid
no ip source-route
no ip gratuitous-arps
ip cef
no ip bootp server
no ip domain lookup
ip domain name xxxx
ip name-server x.x.x.x
ip wccp 80 redirect-list cachebox80 password 7 ********
ip wccp 90 redirect-list cachebox90 password 7 ********
login block-for 200 attempts 3 within 180
no ipv6 cef
multilink bundle-name authenticated
vpdn enable
no vpdn ip udp ignore checksum
vpdn domain-delimiter @ suffix
vpdn-group BSA
! Default L2TP VPDN group
! Default PPTP VPDN group
accept-dialin
protocol any
virtual-template 2
lcp renegotiation on-mismatch
l2tp tunnel password 7 ****************
relay pppoe bba-group CTX
username ****** privilege 15 password 7 *********
redundancy
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
track 1 ip sla 1 reachability
delay down 30
track 2 ip sla 2 reachability
delay down 30
class-map match-all ICMP
match protocol icmp
class-map match-any bittorrent
match access-group name utorrent
match protocol bittorrent
class-map match-any WebEmail
match protocol http
match protocol secure-http
match protocol ftp
match protocol smtp
match protocol pop3
match protocol dns
class-map match-any VoIP
match protocol rtp
match protocol skype
match protocol rtcp
match protocol sip
class-map match-any 512-1M-home
match access-group name half-one-mega-home
class-map match-any Bussiness
match access-group name Bussiness
class-map match-any 4M-home
match access-group name four-mega-home
class-map match-any 2M-home
match access-group name two-mega-home
class-map match-any counterstrike
match access-group name counterstrike
class-map match-any overlimit
match access-group name overlimit
policy-map ICMP
class ICMP
priority 1024
police 1024000
policy-map 5M-limit
class overlimit
police cir 46000000
conform-action transmit
exceed-action drop
class class-default
policy-map qos-policy
class VoIP
priority percent 10
set dscp ef
class WebEmail
bandwidth remaining percent 70
class counterstrike
bandwidth remaining percent 15
class overlimit
class class-default
fair-queue
policy-map input_qos
class bittorrent
police cir 10000 bc 5000 be 5000
conform-action transmit
exceed-action drop
policy-map traffic-shaper
class Bussiness
police cir 4000000
conform-action transmit
exceed-action drop
class 512-1M-home
police cir 27000000
conform-action transmit
exceed-action drop
class 2M-home
police cir 10000000
conform-action transmit
exceed-action drop
class 4M-home
police cir 4000000
conform-action transmit
exceed-action drop
bba-group pppoe CTX
virtual-template 2
service profile CTX
interface Loopback0
ip address x.x.177.6 255.255.255.252
ip virtual-reassembly
interface Loopback1
ip address x.x.177.12 255.255.255.255
ip virtual-reassembly
ip policy route-map DEFAULT-ROUTE
interface Null0
no ip unreachables
interface GigabitEthernet0/1
description DMZ
no ip address
ip virtual-reassembly
load-interval 30
duplex full
speed auto
media-type rj45
negotiation auto
no mop enabled
hold-queue 4096 in
hold-queue 4096 out
interface GigabitEthernet0/1.995
encapsulation dot1Q 995
ip address x.x.176.189 255.255.255.252
interface GigabitEthernet0/1.1000
description Wireless+servers-network
encapsulation dot1Q 1000
ip address x.x.179.17 255.255.255.248 secondary
ip address x.x.178.1 255.255.255.252 secondary
ip address x.x.176.5 255.255.255.252 secondary
ip address x.x.176.1 255.255.255.252
ip policy route-map DEFAULT-ROUTE
interface GigabitEthernet0/1.2100
description CACHE
encapsulation dot1Q 2100
ip address x.x.176.193 255.255.255.252
ip wccp redirect exclude in
interface FastEthernet0/2
ip address x.x.176.197 255.255.255.252
no ip unreachables
ip virtual-reassembly
load-interval 30
duplex full
speed 100
interface GigabitEthernet0/2
description ADSL-BACKHUAL
ip address y.y.90.10 255.255.255.252
ip virtual-reassembly
ip policy route-map DEFAULT-ROUTE
load-interval 30
duplex full
speed 1000
media-type sfp
negotiation auto
keepalive 60
no mop enabled
hold-queue 4096 in
hold-queue 4096 out
interface GigabitEthernet0/3
no ip address
ip virtual-reassembly
load-interval 30
duplex full
speed 1000
media-type rj45
negotiation auto
no mop enabled
hold-queue 4096 in
hold-queue 4096 out
interface GigabitEthernet0/3.2
description ISPA
encapsulation dot1Q 999
ip address z.z.66.130 255.255.255.252
ip wccp 80 redirect out
ip wccp 90 redirect in
interface GigabitEthernet0/3.855
description ISPB
encapsulation dot1Q 855
ip address w.w.172.250 255.255.255.248
ip wccp 80 redirect out
ip wccp 90 redirect in
no cdp enable
interface Virtual-Template2
ip unnumbered Loopback1
no ip unreachables
ip verify unicast reverse-path
ip virtual-reassembly
ip policy route-map DEFAULT-ROUTE
ip tcp adjust-mss 1360
load-interval 30
peer default ip address pool BSA
keepalive 60
ppp encrypt mppe 128
ppp authentication ms-chap ms-chap-v2 pap chap callin USERS
ppp authorization USERS
ppp accounting USERS
ppp ipcp dns x.x.x.x
ppp ipcp wins reject
ppp timeout retry 15
ppp timeout authentication 15
ppp timeout idle 300
router bgp xxx
bgp router-id x.x.176.1
no bgp log-neighbor-changes
neighbor 10.20.172.249 remote-as www
neighbor 10.20.172.249 update-source GigabitEthernet0/3.855
neighbor 213.244.66.129 remote-as zzz
neighbor 213.244.66.129 password 7 *************
neighbor 213.244.66.129 update-source GigabitEthernet0/3.2
address-family ipv4
no synchronization
network x.x.176.0 mask 255.255.255.0
network x.x.177.0 mask 255.255.255.0
network x.x.178.0 mask 255.255.255.0
network x.x.179.0 mask 255.255.255.0
network x.x.180.0 mask 255.255.255.0
network x.x.181.0 mask 255.255.255.0
network x.x.182.0 mask 255.255.255.0
network x.x.183.0 mask 255.255.255.0
network x.x.184.0 mask 255.255.255.0
network x.x.185.0 mask 255.255.255.0
network x.x.186.0 mask 255.255.254.0
network x.x.188.0 mask 255.255.254.0
network x.x.190.0 mask 255.255.254.0
neighbor w.w.172.249 activate
neighbor w.w.172.249 weight 120
neighbor w.w.172.249 route-map B_LINE out
neighbor z.z.66.129 activate
neighbor z.z.66.129 weight 220
neighbor z.z.66.129 route-map ISPA in
neighbor z.z.66.129 route-map A_LINE out
maximum-paths 3
no auto-summary
exit-address-family
ip local pool BSA x.x.185.1 x.x.191.254
ip local pool BSA x.x.183.1 x.x.184.239
ip forward-protocol nd
no ip http server
ip http access-class 1
ip http authentication local
no ip http secure-server
ip route 10.100.100.0 255.255.255.0 x.x.176.6
ip route x.x.176.0 255.255.255.0 Null0
ip route x.x.176.8 255.255.255.252 x.x.178.2
ip route x.x.176.16 255.255.255.240 x.x.184.240
ip route x.x.176.32 255.255.255.252 x.x.178.2
ip route x.x.176.36 255.255.255.252 x.x.178.2
ip route x.x.176.40 255.255.255.252 x.x.178.2
ip route x.x.176.64 255.255.255.252 x.x.178.2
ip route x.x.176.68 255.255.255.252 x.x.178.2
ip route x.x.176.96 255.255.255.240 x.x.178.2
ip route x.x.176.112 255.255.255.240 x.x.178.2
ip route x.x.176.128 255.255.255.252 x.x.178.2
ip route x.x.176.132 255.255.255.252 x.x.178.2
ip route x.x.176.152 255.255.255.252 x.x.178.2
ip route x.x.176.160 255.255.255.224 x.x.178.2
ip route x.x.177.0 255.255.255.0 Null0
ip route x.x.177.0 255.255.255.252 x.x.179.18
ip route x.x.177.64 255.255.255.248 x.x.176.2
ip route x.x.178.0 255.255.255.0 Null0
ip route x.x.178.64 255.255.255.248 x.x.176.6
ip route x.x.178.120 255.255.255.248 x.x.178.2
ip route x.x.178.128 255.255.255.240 x.x.178.2
ip route x.x.178.144 255.255.255.248 x.x.178.2
ip route x.x.178.160 255.255.255.240 x.x.184.246
ip route x.x.178.176 255.255.255.248 x.x.184.249
ip route x.x.179.0 255.255.255.0 Null0
ip route x.x.179.0 255.255.255.248 x.x.178.2
ip route x.x.179.8 255.255.255.252 x.x.178.2
ip route x.x.179.12 255.255.255.252 x.x.178.2
ip route x.x.179.32 255.255.255.252 x.x.178.2
ip route x.x.179.36 255.255.255.252 x.x.178.2
ip route x.x.179.40 255.255.255.252 x.x.178.2
ip route x.x.179.44 255.255.255.252 x.x.178.2
ip route x.x.179.48 255.255.255.252 x.x.178.2
ip route x.x.179.52 255.255.255.252 x.x.178.2
ip route x.x.179.56 255.255.255.252 x.x.178.2
ip route x.x.179.60 255.255.255.252 x.x.178.2
ip route x.x.179.64 255.255.255.248 x.x.178.2
ip route x.x.180.0 255.255.255.0 Null0
ip route x.x.180.0 255.255.255.248 x.x.176.6
ip route x.x.180.8 255.255.255.248 x.x.176.6
ip route x.x.180.32 255.255.255.240 x.x.176.2
ip route x.x.180.48 255.255.255.248 x.x.178.2
ip route x.x.181.0 255.255.255.0 Null0
ip route x.x.182.0 255.255.255.0 Null0
ip route x.x.183.0 255.255.255.0 Null0
ip route x.x.184.0 255.255.255.0 Null0
ip route x.x.185.0 255.255.255.0 Null0
ip route x.x.186.0 255.255.254.0 Null0
ip route x.x.188.0 255.255.254.0 Null0
ip route x.x.190.0 255.255.254.0 Null0
ip route z.z.68.0 255.255.255.0 y.y.90.9
ip route z.z.96.0 255.255.255.0 y.y.90.9
ip access-list extended cache80
deny tcp host x.x.176.194 any eq www
deny ip any x.x.176.0 0.0.0.255
deny ip any x.x.178.0 0.0.0.255
deny ip any x.x.179.0 0.0.0.255
deny ip any x.x.180.0 0.0.0.255
deny ip any x.x.181.0 0.0.0.255
deny ip any x.x.182.0 0.0.0.255
deny ip any x.x.183.0 0.0.0.255
deny ip any x.x.184.0 0.0.0.255
deny ip any x.x.185.0 0.0.0.255
deny ip any x.x.186.0 0.0.0.255
deny ip any x.x.188.0 0.0.0.255
deny ip any x.x.190.0 0.0.0.255
permit tcp x.x.178.0 0.0.0.255 any eq www
permit tcp x.x.181.0 0.0.0.255 any eq www
permit tcp x.x.182.0 0.0.0.255 any eq www
permit tcp x.x.183.0 0.0.0.255 any eq www
permit tcp x.x.184.0 0.0.0.255 any eq www
permit tcp x.x.185.0 0.0.0.255 any eq www
permit tcp x.x.186.0 0.0.1.255 any eq www
permit tcp x.x.188.0 0.0.1.255 any eq www
permit tcp x.x.190.0 0.0.1.255 any eq www
ip access-list extended cache90
deny ip x.x.176.0 0.0.0.255 any
deny ip x.x.178.0 0.0.0.255 any
deny ip x.x.179.0 0.0.0.255 any
deny ip x.x.180.0 0.0.0.255 any
deny ip x.x.181.0 0.0.0.255 any
deny ip x.x.182.0 0.0.0.255 any
deny ip x.x.183.0 0.0.0.255 any
deny ip x.x.184.0 0.0.0.255 any
deny ip x.x.185.0 0.0.0.255 any
deny ip x.x.186.0 0.0.0.255 any
deny ip x.x.188.0 0.0.0.255 any
deny ip x.x.190.0 0.0.0.255 any
permit tcp any x.x.178.0 0.0.0.255
permit tcp any x.x.181.0 0.0.0.255
permit tcp any x.x.182.0 0.0.0.255
permit tcp any x.x.183.0 0.0.0.255
permit tcp any x.x.184.0 0.0.0.255
permit tcp any x.x.185.0 0.0.0.255
permit tcp any x.x.186.0 0.0.1.255
permit tcp any x.x.188.0 0.0.1.255
permit tcp any x.x.190.0 0.0.1.255
ip access-list extended four-mega-home
permit ip any x.x.183.0 0.0.0.127
ip access-list extended half-one-mega-home
permit ip any x.x.181.0 0.0.0.255
permit ip any x.x.182.0 0.0.0.255
ip access-list extended overlimit
permit ip any x.x.184.0 0.0.0.255
permit ip any x.x.183.0 0.0.0.255
permit ip any x.x.182.0 0.0.0.255
permit ip any x.x.181.0 0.0.0.255
ip access-list extended two-mega-home
permit ip any x.x.184.0 0.0.0.255
ip sla 1
icmp-echo 8.8.8.8 source-ip z.z.66.130
threshold 2000
tag A LINE 175Mb
frequency 5
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo 194.90.1.5 source-ip w.w.172.250
threshold 2000
tag B LINE 50Mb
frequency 5
ip sla schedule 2 life forever start-time now
no logging trap
access-list 1 remark Auto generated by SDM Management Access feature
access-list 1 remark CCP_ACL Category=1
access-list 1 permit x.x.178.150
access-list 1 permit x.x.178.140
access-list 10 permit x.x.178.0 0.0.0.255
access-list 10 permit x.x.179.0 0.0.0.255
access-list 10 permit x.x.181.0 0.0.0.255
access-list 10 permit x.x.182.0 0.0.0.255
access-list 10 permit x.x.183.0 0.0.0.255
access-list 10 permit x.x.184.0 0.0.0.255
access-list 10 permit x.x.185.0 0.0.0.255
access-list 10 permit x.x.186.0 0.0.1.255
access-list 10 permit x.x.188.0 0.0.1.255
access-list 10 permit x.x.190.0 0.0.1.255
access-list 30 permit x.x.176.0 0.0.0.255
access-list 30 permit x.x.177.0 0.0.0.255
access-list 30 permit x.x.180.0 0.0.0.255
access-list 100 permit tcp host x.x.178.150 host x.x.177.6 eq telnet
access-list 100 permit tcp host x.x.178.140 host x.x.177.6 eq telnet
access-list 100 permit tcp host x.x.180.4 host x.x.177.6 eq telnet
access-list 100 permit tcp host x.x.178.150 host x.x.177.6 eq www
access-list 100 permit tcp host x.x.178.140 host x.x.177.6 eq www
access-list 100 deny tcp any host x.x.177.6 eq telnet
access-list 100 deny tcp any host x.x.177.6 eq 22
access-list 100 deny tcp any host x.x.177.6 eq www
access-list 100 deny tcp any host x.x.177.6 eq 443
access-list 100 deny tcp any host x.x.177.6 eq cmd
access-list 100 deny udp any host x.x.177.6 eq snmp
access-list 100 permit ip any any
access-list 101 remark CCP_ACL Category=1
access-list 101 permit ip host x.x.178.150 any
access-list 101 permit ip host x.x.178.140 any
access-list 101 permit ip host x.x.180.2 any
access-list 101 permit ip host x.x.178.67 any
access-list 101 permit ip host x.x.1.2 any
access-list 101 deny ip any any
no cdp advertise-v2
no cdp run
route-map ISPA permit 10
set as-path prepend xxx
route-map A_LINE permit 10
match ip address 30
set as-path prepend xxx xxx xxx
route-map A_LINE permit 20
match ip address 10
route-map B_LINE permit 10
match ip address 10
set as-path prepend xxx xxx xxx
route-map B_LINE permit 20
match ip address 30
route-map DEFAULT-ROUTE permit 10
match ip address 10
set ip next-hop verify-availability z.z.66.129 1 track 1
set ip next-hop verify-availability w.w.172.249 2 track 2
route-map DEFAULT-ROUTE permit 20
match ip address 30
set ip next-hop verify-availability w.w.172.249 1 track 2
set ip next-hop verify-availability z.z.66.129 2 track 1
snmp-server community ********* RO
snmp-server trap-source GigabitEthernet0/1
radius-server host x.x.180.2 auth-port 1812 acct-port 1813 key 7 *******
control-plane
line con 0
transport output telnet
stopbits 1
line aux 0
transport output telnet
stopbits 1
line vty 0 4
access-class 101 in
password 7 ***********
transport input telnet ssh
event manager applet shutdown_BGP_Bline
event track 1 state down
action 1.0 cli command "enable"
action 1.1 cli command "clear ip bgp w.w.172.249 all"
event manager applet shutdown_BGP_Aline
event track 2 state down
action 2.0 cli command "enable"
action 2.1 cli command "clear ip bgp z.z.66.129 all"
endhi ,
have u found the soltution for this issue ??
if so ,
let me know it
regards -
6500 HIGH CPU, Standby HSRP state changes continuously
Hi All,
We are using two 6500 User distribution connected with port channel also WLC is connected on Dist-2 now, these two 6500 are connected with backend core 7609 running ospf in between. Spanning-tree root and Standby Active on Dist-1
Suddenly we are facing High CPU utilization on switches, couldn't able to ping nor login. However I could observe to the following through console.
Switch1 is stable, all the vlans are active, but on standby all the vlans are getting state changes, suspecting there are not getting hello's on time due to which it is going to active and standby.
%HSRP-5-STATECHANGE: Vlan208 Grp 208 state Standby -> Active
%HSRP-5-STATECHANGE: Vlan160 Grp 160 state Speak -> Standby
%HSRP-5-STATECHANGE: Vlan115 Grp 115 state Standby -> Active
%HSRP-5-STATECHANGE: Vlan156 Grp 156 state Speak -> Standby
%HSRP-5-STATECHANGE: Vlan208 Grp 208 state Speak -> Standby
%HSRP-5-STATECHANGE: Vlan209 Grp 209 state Speak -> Standby
%HSRP-5-STATECHANGE: Vlan196 Grp 196 state Speak -> Standby
%HSRP-5-STATECHANGE: Vlan112 Grp 112 state Speak -> Standby
%HSRP-5-STATECHANGE: Vlan196 Grp 196 state Standby -> Active
Configuration of Wireless VLAN
on both switch
interface Vlan198
ip address 10.X.X.X
ip helper-address
standby 198 ip 10.X.X.X
standby 198 timers 250 msec 750
standby 198 priority 90
standby 198 preempt
end
All the vlans having same timers and preempt on both switches,
we are not tracking any interface, can I remove preempt on secondary switch?
I have captured packets through netdr
Dist-2
interface Vl198, routine mistral_process_rx_packet_inlin, timestamp 23:53:02.823
dbus info: src_vlan 0xC6(198), src_indx 0x2(2), len 0x40(64)
bpdu 0, index_dir 0, flood 1, dont_lrn 0, dest_indx 0x40C6(16582)
F8020400 00C60000 00020000 40080168
S000 E0000560 8E0FFFF8 00000008 40C60000
mistral hdr: req_token 0x0(0), src_index 0x2(2), rx_offset 0x76(118)
requeue 0, obl_pkt 0, vlan 0xC6(198)
destmac FF.FF.FF.FF.FF.FF, srcmac 00.00.0C.07.AC.C6, protocol 0806
layer 3 data: 00010800 06040002 00000C07 ACC60A19 C601FFFF FFFFFFFF
0A19C601 00000000 00000000 00000000 00000000 0000C601
8300A369 00000000 0000FFFF
protocol ip: version 0x04, hlen 0x05, tos 0x00, totlen 48, identifier 0
df 0, mf 0, fo 0, ttl 1, src 10.X.X.X, dst 224.0.0.2
udp src 1985, dst 1985 len 28 checksum 0x53BE
Dist -1
interface Vl198, routine mistral_process_rx_packet_inlin, timestamp 23:48:26.830
dbus info: src_vlan 0xC6(198), src_indx 0x341(833), len 0x42(66)
bpdu 0, index_dir 0, flood 1, dont_lrn 0, dest_indx 0x40C6(16582)
60020401 00C60400 03410400 42080000 00110448 0E087C7C 00000008 40C60000
mistral hdr: req_token 0x0(0), src_index 0x341(833), rx_offset 0x76(118)
requeue 0, obl_pkt 0, vlan 0xC6(198)
destmac 01.00.5E.00.00.02, srcmac 00.00.0C.07.AC.C6, protocol 0800
protocol ip: version 0x04, hlen 0x05, tos 0x00, totlen 48, identifier 0
df 0, mf 0, fo 0, ttl 1, src 10.X.X.X, dst 224.0.0.2
udp src 1985, dst 1985 len 28 checksum 0x53BF
This issue is not continuous, its triggering intermittently sometime with in couple of hours or daysAfter digging I could able to find out
VLAN0195 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 165 last change occurred 00:31:14 ago
from GigabitEthernet6/14
VLAN0196 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 122 last change occurred 00:31:14 ago
from GigabitEthernet6/14
VLAN0197 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 291 last change occurred 00:31:14 ago
from GigabitEthernet6/14
VLAN0198 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 961 last change occurred 00:31:14 ago
from GigabitEthernet6/14
VLAN0199 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 1165 last change occurred 00:31:25 ago
from GigabitEthernet6/14
VLAN0200 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 888 last change occurred 00:31:25 ago
from GigabitEthernet6/14
Port g 6/14 config
interface GigabitEthernet6/14
switchport
switchport trunk encapsulation dot1q
switchport trunk native vlan 200
switchport trunk allowed vlan 195-200
switchport mode trunk
connected to Dist2- WLC
195 Wireless-Voice active
196 GTC-VIDEO active
197 IP_Camera active
198 Wireless-client active
199 Cisco-AP-MGMT active
200 NW-MGMT active
Rest of all vlans
VLAN0110 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 824 last change occurred 00:51:49 ago
from TenGigabitEthernet1/3
VLAN0111 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 680 last change occurred 00:51:49 ago
from TenGigabitEthernet1/3
Also some ports I can root inconsistent on secondary switch configured as root secondary
Ten gig1/3 is connected to floor switch
VLAN0110 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 297 last change occurred 00:37:47 ago
from StackPort1
VLAN0111 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 164 last change occurred 00:37:47 ago
from StackPort1
Maybe you are looking for
-
Getting network error in facebook app in my ipad mini
I'm using ipad min wi-fi. Facebook app is showing network error and while trying to open through Safari it is showing "WARNIGN!! your flash player is out of date. please update to continue" I have uninstalled and installed again. But it is not workin
-
Gamma function in formula node
I am running LabView V.6.1 and try to use the gamma function in a formula node. According to the HELP text ''Formula Node and Expression Node Functions'', the syntax for the Gamma funtion is gamma(x), but this leads to the block diagram error ''Formu
-
Default Storage Location of Child items in BOM
Hi Experts, We are facing a problem, when we create BOM, we have to manually put default Storage location (Backflush Storage Location) in each of the line item. Can somebody suggest me some solution sothat it should come automatically in all the line
-
My Library Screen is different than video
I have been studying Julianne Kost's video. Her Library screen is different than mine. I have lightroom 4 and so does she
-
HT3581 how do i unblock java on my mac?
.