[nsp] IP CEF on AS5350
Security
security at cytanet.com.cy
Sun Jun 15 19:33:22 EDT 2003
Dear OLI
Thanks very much for your support. I disable tcp header compression and
enable ip CEF and cpu is normal.. So what is your recomendation? Should i
uprade the AS5350 and AS5300 (I chaeck it also on AS5300 AS) to 12-2 to use
both CEF and tcp header-compresion or leave CEF and disable tcp
header-compression without uprading? In case I upgrate and use both CEF and
tcp-header will it improve the performance of the Access-servers?
Thankw again for your support
>Hi,
>
>I assume you are using TCP header compression, aren't you? You need 12.2
>or later to use TCP header compression with CEF, so either upgrade to
>12.2 mainline or 12.2(2)XB11 or disable header compression before
>enabling CEF.
>The high CPU is caused by the alignment corrections
>(http://www.cisco.com/warp/public/63/highcpu.html).
>
> oli
>
>----Original Message----
>From: Security [mailto:security at cytanet.com.cy]
>Sent: Sonntag, 15. Juni 2003 01:14
>To: Oliver Boehmer (oboehmer)
>Cc: cisco-nsp at puck.nether.net
>Subject: RE: [nsp] IP CEF on AS5350
>
>> Here is the output you requested. I enable IP CEF and proc cpu jumb
>> from 10% without CEF to 82% with only 73 users connected to the
>> AS5350 out of 212 users that the AS can handle.
>>
>> Thanks
>>
>> #sh proc cpu | exclude 0.00
>> CPU utilization for five seconds: 82%/79%; one minute: 51%; five
>> minutes: 33%
>> PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
>> 49 24219776 37354277 648 2.36% 2.38% 2.77% 0 IP Input
>>
>> 88 819028 40491 20227 0.16% 0.15% 0.16% 0 Compute
>> load avg
>>
>>
>> Alignment data for:
>> 5350 Software (C5350-IS-M), Version 12.1(5)XM8, EARLY DEPLOYMENT
>> RELEASE SOFTWARE (fc1)
>> TAC Support: http://www.cisco.com/tac
>> Compiled Thu 21-Feb-02 12:51 by uma
>>
>> Total Corrections 46369468, Recorded 47, Reads 46369468, Writes 0
>>
>> Initial Initial
>> Address Count Access Type Traceback
>> 407EFCA2 56082 32bit read 0x6048A9C8 0x6048B49C 0x6043CC98
>> 0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 407EFCBE 56082 32bit read 0x6048A9F8
>> 0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 407EFCAA 59955 32bit
>> read 0x6048AAC8 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
>> 407EFCAA 45828 32bit read
>> 0x6048AB1C 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 407EFCBE 55978
>> 32bit read 0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x6017A564 0x60171EAC 0x601D29A8
>> 407B6F7E 23451 32bit read 0x6048AAD8 0x6048B49C 0x6043CC98
>> 0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 407B6F82 23451 32bit read 0x6048AAEC
>> 0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 407B6F8E 3977 32bit
>> read 0x6048AC38 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
>> 407B6F8E 60131 32bit read
>> 0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 407B6F8E 45922
>> 32bit read 0x6048AD48 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x6017A564 0x60171EAC 0x601D29A8
>> 407B6F8E 21905 32bit read 0x6048ADA0 0x6048B49C 0x6043CC98
>> 0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 407B6F8A 19424 32bit read 0x6048AE80
>> 0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 407B6F86 18712 32bit
>> read 0x6048AF08 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
>> 407B6F8E 20747 32bit read
>> 0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 407CE1EE 23992
>> 32bit read 0x6048AB38 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x6017A564 0x60171EAC 0x601D29A8
>> 407CE1F2 23992 32bit read 0x6048AB4C 0x6048B49C 0x6043CC98
>> 0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 41C226C3 38 16bit read 0x6048A9D8
>> 0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 40896E22 14 32bit
>> read 0x6048A9C8 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0
>> 40896E3E 14 32bit read
>> 0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x601770A4
>> 0x602F9038 0x602F92D0 40896E2A 11
>> 32bit read 0x6048AAC8 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x601770A4 0x602F9038 0x602F92D0
>> 40896E2A 9 32bit read 0x6048AB1C 0x6048B49C 0x6043CC98
>> 0x6037254C 0x6034E330 0x601770A4
>> 0x602F9038 0x602F92D0 40896E2E 6 32bit read 0x6048AB38
>> 0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x601770A4 0x602F9038 0x602F92D0 40896E32 6 32bit
>> read 0x6048AB4C 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0
>> 40896E3E 8 32bit read
>> 0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x601770A4
>> 0x602F9038 0x602F92D0 40896E3E 8
>> 32bit read 0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x601770A4 0x602F9038 0x602F92D0
>> 40896E3E 8 32bit read 0x6048AD48 0x6048B49C 0x6043CC98
>> 0x6037254C 0x6034E330 0x601770A4
>> 0x602F9038 0x602F92D0 40896E3E 8 32bit read 0x6048ADA0
>> 0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x601770A4 0x602F9038 0x602F92D0 40896E3A 8 32bit
>> read 0x6048AE80 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0
>> 40896E36 8 32bit read
>> 0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x601770A4
>> 0x602F9038 0x602F92D0 40896E3E 7
>> 32bit read 0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x601770A4 0x602F9038 0x602F92D0
>> 408302FE 3 32bit read 0x6048AAD8 0x6048B49C 0x6043CC98
>> 0x6037254C 0x6034E330 0x601770A4
>> 0x602F9038 0x602F92D0 40830302 3 32bit read 0x6048AAEC
>> 0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x601770A4 0x602F9038 0x602F92D0 4081EEFE 3 32bit
>> read 0x6048AB84 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0
>> 407BD482 2 32bit read
>> 0x6048A9C8 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C
>> 0x602AABDC 0x6025C5C4 407BD49E 2
>> 32bit read 0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x60178E6C 0x602AABDC 0x6025C5C4
>> 407BD48A 2 32bit read 0x6048AAC8 0x6048B49C 0x6043CC98
>> 0x6037254C 0x6034E330 0x60178E6C
>> 0x602AABDC 0x6025C5C4 407BD48A 2 32bit read 0x6048AB1C
>> 0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4 407BD48E 1 32bit
>> read 0x6048AB38 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
>> 407BD492 1 32bit read
>> 0x6048AB4C 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C
>> 0x602AABDC 0x6025C5C4 407BD49E 1
>> 32bit read 0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x60178E6C 0x602AABDC 0x6025C5C4 407BD49E 1 32bit read
>> 0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C
>> 0x602AABDC 0x6025C5C4 407BD49E 1 32bit read 0x6048AD48
>> 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC
>> 0x6025C5C4 407BD49E 1 32bit read 0x6048ADA0 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
>> 407BD49A 1 32bit read 0x6048AE80 0x6048B49C 0x6043CC98
>> 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4 407BD496
>> 1 32bit read 0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4 407BD49E 1 32bit
>> read 0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x60178E6C 0x602AABDC 0x6025C5C4 4081976E 1 32bit read
>> 0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C
>> 0x602AABDC 0x6025C5C4
>>
>> No spurious memory references have been recorded.
>>
>>
>>
>> Cisco Internetwork Operating System Software
>> IOS (tm) 5350 Software (C5350-IS-M), Version 12.1(5)XM8, EARLY
>> DEPLOYMENT RELEASE SOFTWARE (fc1)
>> TAC Support: http://www.cisco.com/tac
>> Copyright (c) 1986-2002 by cisco Systems, Inc.
>> Compiled Thu 21-Feb-02 12:51 by uma
>> Image text-base: 0x60008968, data-base: 0x60E80000
>>
>> ROM: System Bootstrap, Version 12.2(1r)1, RELEASE SOFTWARE (fc1)
>> BOOTFLASH: 5350 Software (C5350-BOOT-M), Experimental Version
>> 12.1(20000922:142008) [nag-flo_t_0110 101]
>>
>> lyk-3 uptime is 2 days, 8 hours, 55 minutes
>> System returned to ROM by reload at 14:07:42 eet Thu Jun 12 2003
>> System restarted at 14:09:08 eet Thu Jun 12 2003
>> System image file is "flash:c5350-is-mz.121-5.XM8.bin"
>>
>> cisco AS5350 (R7K) processor (revision O) with 131072K/65536K bytes of
>> memory.
>> Processor board ID JAE064705YE
>> R7000 CPU at 250Mhz, Implementation 39, Rev 1.0, 256KB L2, 2048KB L3
>> Cache Last reset from IOS reload
>> Channelized E1, Version 1.0.
>> Bridging software.
>> X.25 software, Version 3.0.0.
>> Primary Rate ISDN software, Version 1.1.
>> Manufacture Cookie Info:
>> EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x32,
>> Board Hardware Version 3.33, Item Number 800-5171-02,
>> Board Revision B0, Serial Number JAE064705YE,
>> PLD/ISP Version 1.0, Manufacture Date 25-Nov-2002.
>> Processor 0x14, MAC Address 0x0B4682593C
>> Backplane HW Revision 1.0, Flash Type 5V
>> 2 FastEthernet/IEEE 802.3 interface(s)
>> 250 Serial network interface(s)
>> 216 terminal line(s)
>> 8 Channelized E1/PRI port(s)
>> 512K bytes of non-volatile configuration memory.
>> 32768K bytes of processor board System flash (Read/Write)
>> 8192K bytes of processor board Boot flash (Read/Write)
>>
>> Configuration register is 0x2102
>>
>>
>>
>> > > We are running a few AS5350 access-servers for our dial-up
>> > > PSTN/ISDN customers. Enabling IP CEF on the AS5350 (it is enabled
>> > > by default), saturates the CPU (99% proc cpu) when there are
>> > > about 100 connectionw on the AS5350. Disabling IP CEF everythning
>> > > is back to normal. The IOS that the Access servers are ryunning
>> > > is is-mz.21-5.XM8
>> > >
>> > > CAn you please advice?
>> >
>> > Which process is eating up the CPU? Can u post a "show proc cpu |
>> > exclude 0.00" as well as an "show ver" and "show align" when the
>> > problem happens?
>> >
>>
>>
>>
>> > It could be CSCds63384, not sure until I see "show ver" and "show
>> > align"..
>> >
>> > You might also want to upgrade to a more recent IOS release, I'd
>> > recommend 12.2(2)XB11, but make sure you do some lab-tests before
>> > you upgrade as the PPP and AAA code is much differnt in 12.2T/12.2XB
>> > compared to previous versions...
>> >
>> > oli
>> >
>> >
>> >
>> _____________________________
>> CYTANET WebMail
>> http://webmail.cytanet.com.cy
>
_____________________________
CYTANET WebMail
http://webmail.cytanet.com.cy
More information about the cisco-nsp
mailing list