[cisco-bba] LNS with 7200 with NPE-G1

vince at cisco.com vince at cisco.com
Tue Oct 18 15:29:39 EDT 2005


 I would also check for fragmentation of the IP packets.

show ip traffic

V.

> -----Original Message-----
> From: cisco-bba-bounces at puck.nether.net 
> [mailto:cisco-bba-bounces at puck.nether.net] On Behalf Of 
> Christian Schmit
> Sent: Tue Oct 18, 2005 3:13 PM
> To: cisco-bba at puck.nether.net
> Subject: Re[2]: [cisco-bba] LNS with 7200 with NPE-G1
> 
> 
> Current IP traffic is as follows:
> 
> 5 minute input rate 29094000 bits/sec, 6718 packets/sec
> 5 minute output rate 29254000 bits/sec, 6702 packets/sec
> 
> I noticed that in and out traffic are nearly the same which 
> is not what I expected for ADSL connections where the max 
> upstream is 192 kbit/s and max downstream is 3 Mbit/s.
> 
> Regarding the CPU the "L2X Data Daemon" uses most. No other 
> process shown any significant CPU usage.
> 
> sh proc cpu:
> ------------
> CPU utilization for five seconds: 13%/9%; one minute: 12%; 
> five minutes: 12% .
> .
> 14  4.55%  3.93%  3.96%   0 L2X Data Daemon
> 
> 
> Regarding the L2TP setup I terminated the 4 LAC devices from 
> the telco in "vpdn-group 1". Would creating a separate 
> vpdn-group for each LAC be of any benefit?
> 
> Currently I have:
> 
> 7206VXR#sh vpdn tunnel
> 
> L2TP Tunnel Information Total tunnels 4 sessions 207
> LocID RemID Remote Name   State  Remote Address  Port  
> Sessions VPDN Group
> 2999  12    LAC           est    xxxxxxxxxxxxx   1701  21       1
> 55524 5516  LAC           est    xxxxxxxxxxxxx   1701  78       1
> 29502 14    LAC           est    xxxxxxxxxxxxx   1701  53       1
> 18896 82    LAC           est    xxxxxxxxxxxxx   1701  55       1
> %No active L2F tunnels
> %No active PPTP tunnels
> 
>  
> Is there an IOS image supporting MPF that can be recommended 
> in a production environment for an LNS?
> 
> Christian
> 
>  
> DP> Your config is very basic, I don't see anything that would cause 
> DP> process switching or something detrimental to the CPU. How much 
> DP> traffic, in aggregate, are these 200 users pushing (bps and pps)? 
> DP> 16k sessions is a control-plane limitation, but if you have 
> DP> broadband traffic, you'll hit the data-plane limit much 
> faster (16k 
> DP> is really for narrowband). MPF can greatly help improve 
> data-plane performance.
> 
> DP> Dennis
> 
> DP> Christian Schmit [cschmit at vo.lu] wrote:
> >> 
> >> We are currently running a test setup using a 7200/G1 
> device as LNS. 
> >> The telco operates as LAC Juniper ERX devices.
> >> 
> >> Everything is working as expected but the CPU load on the 
> G1 is quite 
> >> high. Having around 200 PPP sessions on the LNS the CPU load is 
> >> already at 11%. In other words this would mean that around 
> 2000 users 
> >> would put the box to 100% CPU usage which is very far away 
> from the 
> >> advertised 16 000 broadband sessions for the G1.
> >> 
> >> Running IP-Plus 12.3(16).
> >> 
> >> Do I have a CPU killer in my config?
> >> 
> >> Christian
> >> 
> >> 
> >> My config:
> >> -----------
> >> version 12.3
> >> service timestamps debug datetime msec service timestamps log 
> >> datetime msec service password-encryption no service dhcp !
> >> hostname LNS
> >> !
> >> boot-start-marker
> >> boot-end-marker
> >> !
> >> enable password xxxxxxxxxxxxxxxxxxxxxxxxxx !
> >> clock timezone GMT 1
> >> clock summer-time MET recurring last Sun Mar 3:00 last Sun 
> Oct 3:00 
> >> aaa new-model !
> >> !
> >> aaa authentication login default enable aaa authentication ppp 
> >> default group radius aaa authorization network default 
> group radius 
> >> aaa accounting delay-start aaa accounting update periodic 240 aaa 
> >> accounting network default start-stop group radius aaa session-id 
> >> common ip subnet-zero no ip source-route !
> >> !
> >> ip cef
> >> no ip domain lookup
> >> ip name-server xxxxxxxxxxxx
> >> ip name-server xxxxxxxxxxxx
> >> !
> >> vpdn enable
> >> vpdn ip udp ignore checksum
> >> !
> >> vpdn-group 1
> >>  accept-dialin
> >>   protocol l2tp
> >>   virtual-template 1
> >>  terminate-from hostname LAC
> >>  lcp renegotiation on-mismatch
> >>  l2tp tunnel password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> >> !
> >> interface Loopback0
> >>  ip address xxxxxxxxxxxxxxxxxxxxx
> >> !
> >> interface Loopback1
> >>  ip address xxxxxxxxxxxxxxxxxxxxx
> >> !
> >> interface GigabitEthernet0/1
> >>  description Connection to Vlan 13
> >>  ip address xxxxxxxxxxxxxxxxxxxx
> >>  ip ospf message-digest-key 10 md5 7 xxxxxxxxxxxxxxxxxx  
> duplex full  
> >> speed 1000  media-type rj45  no negotiation auto !
> >> interface GigabitEthernet0/2
> >>  no ip address
> >>  shutdown
> >>  duplex auto
> >>  speed auto
> >>  media-type rj45
> >>  negotiation auto
> >> !
> >> interface GigabitEthernet0/3
> >>  no ip address
> >>  shutdown
> >>  duplex auto
> >>  speed auto
> >>  media-type rj45
> >>  negotiation auto
> >> !
> >> interface Virtual-Template1
> >>  ip unnumbered Loopback1
> >>  ip tcp adjust-mss 1420
> >>  ip mroute-cache
> >>  peer default ip address pool VODSL
> >>  ppp mtu adaptive
> >>  ppp authentication pap chap
> >> !
> >> router ospf 101
> >>  log-adjacency-changes
> >>  area 0 authentication message-digest  summary-address 
> >> xxxxxxxxxxxxxxxxxxxx  summary-address xxxxxxxxxxxxxxxxxxxxx  
> >> redistribute connected subnets  redistribute static subnets  
> >> passive-interface Virtual-Template1  network 
> xxxxxxxxxxxxxxxxxxx area 
> >> 0  network xxxxxxxxxxxxxxxxxxx area 0 !
> >> ip local pool VODSL xxxxxxxxxxxxxxxxxxxx ip local pool VODSL 
> >> xxxxxxxxxxxxxxxxxxxx ip classless ip route 0.0.0.0 0.0.0.0 
> >> xxxxxxxxxxxxxxxxx ip route xxxxxxxxxxxxxxxxxxxxxxxxx 
> Loopback0 10 ip 
> >> route xxxxxxxxxxxxxxxxxxxxxxxxx Loopback0 10 ip route 
> >> xxxxxxxxxxxxxxxxxxxxxxxxx Loopback0 10 no ip http server !
> >> !
> >> access-list 1 permit xxxxxxxxxxxxxxxxx
> >> access-list 1 deny   any
> >> access-list 50 permit xxxxxxxxxxxxxxxx
> >> access-list 50 deny   any
> >> no cdp run
> >> !
> >> snmp-server community xxxxxxxxxxxxxxxxx RW 1 !
> >> radius-server attribute nas-port format d radius-server host 
> >> xxxxxxxxxx auth-port 1645 acct-port 1646 key 7 xxxxx
> >> 
> >> radius-server domain-stripping
> >> radius-server unique-ident 3
> >> radius-server vsa send accounting
> >> !
> >> !
> >> gatekeeper
> >>  shutdown
> >> !
> >> line con 0
> >>  stopbits 1
> >> line aux 0
> >>  stopbits 1
> >> line vty 0 4
> >>  access-class 50 in
> >> !
> >> ntp clock-period 17180061
> >> ntp server xxxxxxxxxxxx
> >> ntp server xxxxxxxxxxxx
> >> !
> >> end
> >> 
> >> 
> >> 
> >> 
> >> 
> >> 
> >> 
> >> _______________________________________________
> >> cisco-bba mailing list
> >> cisco-bba at puck.nether.net
> >> https://puck.nether.net/mailman/listinfo/cisco-bba
> 
> 
> 
> _______________________________________________
> cisco-bba mailing list
> cisco-bba at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-bba
> 


More information about the cisco-bba mailing list