[c-nsp] 3550 CPU Usage & IPSec

[Michael K. Smith - Adhost]

Hello Randal:

> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-
> bounces at puck.nether.net] On Behalf Of randal k
> Sent: Friday, November 21, 2008 9:56 AM
> To: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] 3550 CPU Usage & IPSec
> 
> Excuse my typo, my original answer of "IP Input" was completely wrong,
> since it's pretty easy to get them confused. I'm looking at it now and
> it's purely Interrupt traffic.
> 
> dist03.cos01#show proc cpu
> CPU utilization for five seconds: 26%/24%; one minute: 25%; five minutes: 26%
> 
> No, I'm not running anything on the 3550, it's purely a packet pusher.
> It is a 3550-12T, and hanging off of it is the customer's 3560g-24TS
> and VPN3000. All of the tunnels terminate on the Concentrator - the
> 3550 just does some basic layer3 forwarding and has no features.
> 
> Net -- 7206edge -- 6509core --- 3550dist --- 3560customer/VPN3000customer
> 
> That's why I find it a little bit odd that just forwarding IPSec
> packets (not originating/terminating them) is hitting the CPU.
> 
> Randal
> 

Do you have 'ip cef' enabled in the global settings?

Regards,

Mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 474 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20081121/72b7a220/attachment.bin>