<P>We have a Cisco 7206VXR router which is connected to interoute on one
side and a 3com 3300 with various VOIP Gateways (Cisco 53xx and 54xx) and
HTTP servers on the other, however its performance is not quite what we
expected, it seems to suffer from high CPU once throughout hits approx 20mb
upwards, til it gets to around 30mb when CPU is 90% and it becomes
unuseable.<BR><BR>According to our Cisco dealer this unit should be good for
100mb plus throughput no problems, so they are puzzled by the problem, they
have sold us some more ram we are now upto 1gb but it has made no
difference.<BR><BR>I have tried introducing an access list firstly to
rule out ICMP flood / attack and then I blocked http as well to rule out
code red.<BR><BR>I have also followed the Cisco guide to troubleshooting
high CPU issue, and enabled CEF and tried to make the config as simple as
possible. I also used IP accounting to identify that the traffic is as I
expect (not DOS)<BR><BR>It seems the VOIP traffic maybe causing the
problem, and a few people have commented that the small packet size causes
issues - this accounts for 90% of the traffic going through this
router.<BR><BR>Can anyone point me the right direction regarding what to try
on this? <BR><BR>Version:- "disk2:c7200-is-mz.123-9.bin"<BR>Here
is the config:-<BR><BR>Current configuration : 2319 bytes<BR>!<BR>version
12.3<BR>service timestamps debug datetime msec<BR>service timestamps log
datetime msec<BR>no service password-encryption<BR>!<BR>hostname
Router<BR>!<BR>boot-start-marker<BR>boot-end-marker<BR>!<BR>enable secret 5
****<BR>!<BR>username ***<BR>username ***<BR>no aaa new-model<BR>ip
subnet-zero<BR>!<BR>!<BR>ip cef<BR>!</P>
<P>!<BR>interface FastEthernet0/0<BR> ip address 212.***
255.255.255.252<BR> duplex full<BR> no cdp
enable<BR>!<BR>interface GigabitEthernet0/1<BR> no ip
address<BR> shutdown<BR> duplex auto<BR> speed
auto<BR> media-type rj45<BR> no negotiation auto<BR>!<BR>interface
GigabitEthernet0/2<BR> no ip address<BR> shutdown<BR> duplex
auto<BR> speed auto<BR> media-type rj45<BR> no negotiation
auto<BR>!<BR>interface GigabitEthernet0/3<BR> no ip
address<BR> shutdown<BR> duplex auto<BR> speed
auto<BR> media-type rj45<BR> no negotiation auto<BR>!<BR>interface
FastEthernet1/0<BR> ip address 84.*** 255.255.255.224
secondary<BR> ip address 212.*** 255.255.255.224 secondary<BR> ip
address 89.*** 255.255.255.224 secondary<BR> ip address 212.***
255.255.255.224<BR> duplex half<BR> no cdp enable<BR>!<BR>ip
classless<BR>ip route 0.0.0.0 0.0.0.0 212.***</P>
<P>no ip http server<BR>!<BR>!<BR>access-list 101 deny icmp any
any<BR>access-list 101 permit ip any any<BR>access-list 102 deny
icmp any any<BR>access-list 102 deny tcp any any eq
www<BR>access-list 102 deny tcp any any eq 443<BR>access-list
102 permit ip any any<BR>!<BR>snmp-server community ***<BR>snmp-server
enable traps
tty<BR>!<BR>!<BR>!<BR>!<BR>!<BR>gatekeeper<BR> shutdown<BR>!<BR>!<BR>line
con 0<BR> transport preferred all<BR> transport output
all<BR> stopbits 1<BR>line aux 0<BR> transport preferred
all<BR> transport output all<BR> stopbits 1<BR>line vty 0
4<BR> password ***<BR> login<BR> transport preferred
all<BR> transport input all<BR> transport output all<BR>line vty 5
10<BR> password ***<BR> login<BR> transport preferred
all<BR> transport input all<BR> transport output
all<BR>!<BR>!<BR>end</P>
<P>I'm at a loss as to what to try next, so any pointers would be much
appreciated!<BR><BR>Thanks<BR><BR>Wayne<BR><BR><BR></P><BR />
<BR />
________________________________________________<BR />
Message sent using UebiMiau 2.7.9-pjm-patch<BR />