[nsp] 6500 Native IOS ACLs
Rubens Kuhl Jr.
rkjnsp@ieg.com.br
Wed, 13 Nov 2002 16:19:03 -0200
Is RPF checking enabled on any interface ? This halves maximum FIB size to
112,000 routes... replacing RPF with inbound ACLs removes this limitation.
Even if it's not your current problem, it will haunt you very soon unless
you filter a lot of routes and default them.
Rubens Kuhl Jr.
----- Original Message -----
From: "Clinton Work" <work@scripty.com>
To: "Cisco-NSP" <cisco-nsp@puck.nether.net>
Sent: Wednesday, November 13, 2002 4:05 PM
Subject: Re: [nsp] 6500 Native IOS ACLs
| The router is taking a full BGP feed with 120,000 routes and its possible
| that the PFC2 resources could be exhausted and its punting some packet
| procesing to the MSFC2. Is there are way to verify PFC2 overload?
|
| router#show int stat
| Interface Vlan1 is disabled
|
| Vlan111
| Switching path Pkts In Chars In Pkts Out Chars Out
| Processor 4867037 1415878403 4798955 2732640617
| Route cache 3668823677 1074330783 117086380 4005823617
| Distributed cache 0 0 457424479 1876946560
| Total 3673690733 2490226633 579309828 25479049
|
| Vlan112
| Switching path Pkts In Chars In Pkts Out Chars Out
| Processor 4949929 1421352004 4821062 2724319068
| Route cache 1699973459 754377857 1798272847 2095289959
| Distributed cache 0 0 1297230468 3020192762
| Total 1704923393 2175729969 3100324379 3544834581
|
| GigabitEthernet1/1
| Switching path Pkts In Chars In Pkts Out Chars Out
| Processor 31994066 272721020 6215190 926542294
| Route cache 448401771 1027366728 482785841 3035744832
| Distributed cache 3980311035 3145911164 969352654 2306832280
| Total 165739576 151031616 1458353685 1974152110
|
| GigabitEthernet3/3
| Switching path Pkts In Chars In Pkts Out Chars Out
| Processor 80926 21850020 0 0
| Route cache 0 0 0 0
| Distributed cache 4129090186 3297662366 0 0
| Total 4129171112 3319512386 0 0
|
|
| On Wed, Nov 13, 2002 at 05:48:27PM +0000, Marc Williams wrote:
| > Worth checking if any of your acls are logging. That burns cpu bigtime.
| >
| > --
| > marc
| >
| >
| >
| >
|
| --
| =========================================================================
| Clinton Work clinton@scripty.com
| Calgary, Alberta
| _______________________________________________
| cisco-nsp mailing list real_name)s@puck.nether.net
| http://puck.nether.net/mailman/listinfo/cisco-nsp
| archive at http://puck.nether.net/pipermail/cisco-nsp/