<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16414" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=375032615-17052007><FONT face=Tahoma
color=#0000ff size=2>Please post a copy of "sh proc cpu | exc
0.00.*0.00"</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=375032615-17052007><FONT face=Tahoma
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=375032615-17052007><FONT face=Tahoma
color=#0000ff size=2>Regards,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=375032615-17052007><FONT face=Tahoma
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=375032615-17052007><FONT face=Tahoma
color=#0000ff size=2>Frank</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> cisco-bba-bounces@puck.nether.net
[mailto:cisco-bba-bounces@puck.nether.net] <B>On Behalf Of </B>Wayne @
CTL<BR><B>Sent:</B> Thursday, May 17, 2007 7:37 AM<BR><B>To:</B>
cisco-bba@puck.nether.net<BR><B>Subject:</B> [cisco-bba] Cisco 7206VXR running
out of steam at 20mb throughput<BR></FONT><BR></DIV>
<DIV></DIV>
<P>We have a Cisco 7206VXR router which is connected to interoute on one side
and a 3com 3300 with various VOIP Gateways (Cisco 53xx and 54xx) and HTTP
servers on the other, however its performance is not quite what we
expected, it seems to suffer from high CPU once throughout hits approx 20mb
upwards, til it gets to around 30mb when CPU is 90% and it becomes
unuseable.<BR><BR>According to our Cisco dealer this unit should be good for
100mb plus throughput no problems, so they are puzzled by the problem, they have
sold us some more ram we are now upto 1gb but it has made no
difference.<BR><BR>I have tried introducing an access list firstly to rule
out ICMP flood / attack and then I blocked http as well to rule out code
red.<BR><BR>I have also followed the Cisco guide to troubleshooting high CPU
issue, and enabled CEF and tried to make the config as simple as possible. I
also used IP accounting to identify that the traffic is as I expect (not
DOS)<BR><BR>It seems the VOIP traffic maybe causing the problem, and a few
people have commented that the small packet size causes issues - this accounts
for 90% of the traffic going through this router.<BR><BR>Can anyone point me the
right direction regarding what to try on this? <BR><BR>Version:-
"disk2:c7200-is-mz.123-9.bin"<BR>Here is the config:-<BR><BR>Current
configuration : 2319 bytes<BR>!<BR>version 12.3<BR>service timestamps debug
datetime msec<BR>service timestamps log datetime msec<BR>no service
password-encryption<BR>!<BR>hostname
Router<BR>!<BR>boot-start-marker<BR>boot-end-marker<BR>!<BR>enable secret 5
****<BR>!<BR>username ***<BR>username ***<BR>no aaa new-model<BR>ip
subnet-zero<BR>!<BR>!<BR>ip cef<BR>!</P>
<P>!<BR>interface FastEthernet0/0<BR> ip address 212.***
255.255.255.252<BR> duplex full<BR> no cdp enable<BR>!<BR>interface
GigabitEthernet0/1<BR> no ip address<BR> shutdown<BR> duplex
auto<BR> speed auto<BR> media-type rj45<BR> no negotiation
auto<BR>!<BR>interface GigabitEthernet0/2<BR> no ip
address<BR> shutdown<BR> duplex auto<BR> speed
auto<BR> media-type rj45<BR> no negotiation auto<BR>!<BR>interface
GigabitEthernet0/3<BR> no ip address<BR> shutdown<BR> duplex
auto<BR> speed auto<BR> media-type rj45<BR> no negotiation
auto<BR>!<BR>interface FastEthernet1/0<BR> ip address 84.***
255.255.255.224 secondary<BR> ip address 212.*** 255.255.255.224
secondary<BR> ip address 89.*** 255.255.255.224 secondary<BR> ip
address 212.*** 255.255.255.224<BR> duplex half<BR> no cdp
enable<BR>!<BR>ip classless<BR>ip route 0.0.0.0 0.0.0.0 212.***</P>
<P>no ip http server<BR>!<BR>!<BR>access-list 101 deny icmp any
any<BR>access-list 101 permit ip any any<BR>access-list 102 deny
icmp any any<BR>access-list 102 deny tcp any any eq
www<BR>access-list 102 deny tcp any any eq 443<BR>access-list 102
permit ip any any<BR>!<BR>snmp-server community ***<BR>snmp-server enable traps
tty<BR>!<BR>!<BR>!<BR>!<BR>!<BR>gatekeeper<BR> shutdown<BR>!<BR>!<BR>line
con 0<BR> transport preferred all<BR> transport output
all<BR> stopbits 1<BR>line aux 0<BR> transport preferred
all<BR> transport output all<BR> stopbits 1<BR>line vty 0
4<BR> password ***<BR> login<BR> transport preferred
all<BR> transport input all<BR> transport output all<BR>line vty 5
10<BR> password ***<BR> login<BR> transport preferred
all<BR> transport input all<BR> transport output
all<BR>!<BR>!<BR>end</P>
<P>I'm at a loss as to what to try next, so any pointers would be much
appreciated!<BR><BR>Thanks<BR><BR>Wayne<BR><BR><BR></P><BR><BR>________________________________________________<BR>Message
sent using UebiMiau 2.7.9-pjm-patch<BR></BODY></HTML>