[cisco-bba] Cisco 7206VXR running out of steam at 20mb throughput

[Frank Bulk]

Please post a copy of "sh proc cpu | exc 0.00.*0.00"
 
Regards,
 
Frank

  _____  

From: cisco-bba-bounces at puck.nether.net
[mailto:cisco-bba-bounces at puck.nether.net] On Behalf Of Wayne @ CTL
Sent: Thursday, May 17, 2007 7:37 AM
To: cisco-bba at puck.nether.net
Subject: [cisco-bba] Cisco 7206VXR running out of steam at 20mb throughput



We have a Cisco 7206VXR router which is connected to interoute on one side
and a 3com 3300 with various VOIP Gateways (Cisco 53xx and 54xx) and HTTP
servers on the other, however its performance is not quite what we expected,
it seems to suffer from high CPU once throughout hits approx 20mb upwards,
til it gets to around 30mb when CPU is 90% and it becomes unuseable.

According to our Cisco dealer this unit should be good for 100mb plus
throughput no problems, so they are puzzled by the problem, they have sold
us some more ram we are now upto 1gb but it has made no difference.

I have tried introducing an access list firstly to rule out ICMP flood /
attack and then I blocked http as well to rule out code red.

I have also followed the Cisco guide to troubleshooting high CPU issue, and
enabled CEF and tried to make the config as simple as possible. I also used
IP accounting to identify that the traffic is as I expect (not DOS)

It seems the VOIP traffic maybe causing the problem, and a few people have
commented that the small packet size causes issues - this accounts for 90%
of the traffic going through this router.

Can anyone point me the right direction regarding what to try on this? 

Version:-  "disk2:c7200-is-mz.123-9.bin"
Here is the config:-

Current configuration : 2319 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable secret 5 ****
!
username ***
username ***
no aaa new-model
ip subnet-zero
!
!
ip cef
!

!
interface FastEthernet0/0
 ip address 212.*** 255.255.255.252
 duplex full
 no cdp enable
!
interface GigabitEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
 no negotiation auto
!
interface GigabitEthernet0/2
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
 no negotiation auto
!
interface GigabitEthernet0/3
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
 no negotiation auto
!
interface FastEthernet1/0
 ip address 84.*** 255.255.255.224 secondary
 ip address 212.*** 255.255.255.224 secondary
 ip address 89.*** 255.255.255.224 secondary
 ip address 212.*** 255.255.255.224
 duplex half
 no cdp enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 212.***

no ip http server
!
!
access-list 101 deny   icmp any any
access-list 101 permit ip any any
access-list 102 deny   icmp any any
access-list 102 deny   tcp any any eq www
access-list 102 deny   tcp any any eq 443
access-list 102 permit ip any any
!
snmp-server community ***
snmp-server enable traps tty
!
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 transport preferred all
 transport output all
 stopbits 1
line aux 0
 transport preferred all
 transport output all
 stopbits 1
line vty 0 4
 password ***
 login
 transport preferred all
 transport input all
 transport output all
line vty 5 10
 password ***
 login
 transport preferred all
 transport input all
 transport output all
!
!
end

I'm at a loss as to what to try next, so any pointers would be much
appreciated!

Thanks

Wayne






________________________________________________
Message sent using UebiMiau 2.7.9-pjm-patch

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-bba/attachments/20070517/6afa1d54/attachment.html