[nsp] IP CEF on AS5350

Security security at cytanet.com.cy
Sun Jun 15 19:33:22 EDT 2003


Dear OLI

Thanks very much for your support. I disable tcp header compression and
enable ip CEF and cpu is normal.. So what is your recomendation? Should i
uprade the AS5350 and AS5300 (I chaeck it also on AS5300 AS) to 12-2 to use
both CEF and tcp header-compresion or leave CEF and disable tcp
header-compression without uprading? In case I upgrate and use both CEF and
tcp-header will it improve the performance of the Access-servers?   


Thankw again for your support 
>Hi,
>
>I assume you are using TCP header compression, aren't you? You need 12.2
>or later to use TCP header compression with CEF, so either upgrade to
>12.2 mainline or 12.2(2)XB11 or disable header compression before
>enabling CEF.
>The high CPU is caused by the alignment corrections
>(http://www.cisco.com/warp/public/63/highcpu.html).
>
>	oli
>
>----Original Message----
>From: Security [mailto:security at cytanet.com.cy]
>Sent: Sonntag, 15. Juni 2003 01:14
>To: Oliver Boehmer (oboehmer)
>Cc: cisco-nsp at puck.nether.net
>Subject: RE: [nsp] IP CEF on AS5350
>
>> Here is the output you requested. I enable IP CEF and proc cpu jumb
>> from 10% without CEF to 82% with only 73 users connected to the
>> AS5350 out of 212  users that the AS can handle.
>> 
>> Thanks
>> 
>> #sh proc cpu | exclude 0.00
>> CPU utilization for five seconds: 82%/79%; one minute: 51%; five
>> minutes: 33%
>>  PID  Runtime(ms)  Invoked  uSecs    5Sec   1Min   5Min TTY Process
>>   49    24219776  37354277    648   2.36%  2.38%  2.77%   0 IP Input
>> 
>>   88      819028     40491  20227   0.16%  0.15%  0.16%   0 Compute
>> load avg
>> 
>> 
>> Alignment data for:
>> 5350 Software (C5350-IS-M), Version 12.1(5)XM8, EARLY DEPLOYMENT
>> RELEASE SOFTWARE (fc1)
>> TAC Support: http://www.cisco.com/tac
>> Compiled Thu 21-Feb-02 12:51 by uma
>> 
>> Total Corrections 46369468, Recorded 47, Reads 46369468, Writes 0
>> 
>>  Initial         Initial
>>  Address  Count  Access Type   Traceback
>> 407EFCA2  56082  32bit read    0x6048A9C8 0x6048B49C 0x6043CC98
>>                                0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 407EFCBE  56082  32bit read    0x6048A9F8
>>                                0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 407EFCAA  59955  32bit
>>                                read    0x6048AAC8 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
>>                                407EFCAA  45828  32bit read   
>> 0x6048AB1C 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x6017A564
>>                                0x60171EAC 0x601D29A8 407EFCBE  55978 
>> 32bit read    0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>>                                0x6017A564 0x60171EAC 0x601D29A8
>> 407B6F7E  23451  32bit read    0x6048AAD8 0x6048B49C 0x6043CC98
>>                                0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 407B6F82  23451  32bit read    0x6048AAEC
>>                                0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 407B6F8E   3977  32bit
>>                                read    0x6048AC38 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
>>                                407B6F8E  60131  32bit read   
>> 0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x6017A564
>>                                0x60171EAC 0x601D29A8 407B6F8E  45922 
>> 32bit read    0x6048AD48 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>>                                0x6017A564 0x60171EAC 0x601D29A8
>> 407B6F8E  21905  32bit read    0x6048ADA0 0x6048B49C 0x6043CC98
>>                                0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 407B6F8A  19424  32bit read    0x6048AE80
>>                                0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 407B6F86  18712  32bit
>>                                read    0x6048AF08 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
>>                                407B6F8E  20747  32bit read   
>> 0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x6017A564
>>                                0x60171EAC 0x601D29A8 407CE1EE  23992 
>> 32bit read    0x6048AB38 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>>                                0x6017A564 0x60171EAC 0x601D29A8
>> 407CE1F2  23992  32bit read    0x6048AB4C 0x6048B49C 0x6043CC98
>>                                0x6037254C 0x6034E330 0x6017A564
>> 0x60171EAC 0x601D29A8 41C226C3     38  16bit read    0x6048A9D8
>>                                0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 40896E22     14  32bit
>>                                read    0x6048A9C8 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0
>>                                40896E3E     14  32bit read   
>> 0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x601770A4
>>                                0x602F9038 0x602F92D0 40896E2A     11 
>> 32bit read    0x6048AAC8 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>>                                0x601770A4 0x602F9038 0x602F92D0
>> 40896E2A      9  32bit read    0x6048AB1C 0x6048B49C 0x6043CC98
>>                                0x6037254C 0x6034E330 0x601770A4
>> 0x602F9038 0x602F92D0 40896E2E      6  32bit read    0x6048AB38
>>                                0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x601770A4 0x602F9038 0x602F92D0 40896E32      6  32bit
>>                                read    0x6048AB4C 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0
>>                                40896E3E      8  32bit read   
>> 0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x601770A4
>>                                0x602F9038 0x602F92D0 40896E3E      8 
>> 32bit read    0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>>                                0x601770A4 0x602F9038 0x602F92D0
>> 40896E3E      8  32bit read    0x6048AD48 0x6048B49C 0x6043CC98
>>                                0x6037254C 0x6034E330 0x601770A4
>> 0x602F9038 0x602F92D0 40896E3E      8  32bit read    0x6048ADA0
>>                                0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x601770A4 0x602F9038 0x602F92D0 40896E3A      8  32bit
>>                                read    0x6048AE80 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0
>>                                40896E36      8  32bit read   
>> 0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x601770A4
>>                                0x602F9038 0x602F92D0 40896E3E      7 
>> 32bit read    0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>>                                0x601770A4 0x602F9038 0x602F92D0
>> 408302FE      3  32bit read    0x6048AAD8 0x6048B49C 0x6043CC98
>>                                0x6037254C 0x6034E330 0x601770A4
>> 0x602F9038 0x602F92D0 40830302      3  32bit read    0x6048AAEC
>>                                0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x601770A4 0x602F9038 0x602F92D0 4081EEFE      3  32bit
>>                                read    0x6048AB84 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0
>>                                407BD482      2  32bit read   
>> 0x6048A9C8 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C
>>                                0x602AABDC 0x6025C5C4 407BD49E      2 
>> 32bit read    0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>>                                0x60178E6C 0x602AABDC 0x6025C5C4
>> 407BD48A      2  32bit read    0x6048AAC8 0x6048B49C 0x6043CC98
>>                                0x6037254C 0x6034E330 0x60178E6C
>> 0x602AABDC 0x6025C5C4 407BD48A      2  32bit read    0x6048AB1C
>>                                0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4 407BD48E      1  32bit
>>                                read    0x6048AB38 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
>>                                407BD492      1  32bit read   
>> 0x6048AB4C 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C
>>                                0x602AABDC 0x6025C5C4 407BD49E      1 
>> 32bit read    0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x60178E6C 0x602AABDC 0x6025C5C4 407BD49E      1  32bit read   
>> 0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C
>> 0x602AABDC 0x6025C5C4 407BD49E      1  32bit read    0x6048AD48
>> 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC
>> 0x6025C5C4 407BD49E      1  32bit read    0x6048ADA0 0x6048B49C
>> 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
>> 407BD49A      1  32bit read    0x6048AE80 0x6048B49C 0x6043CC98
>> 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4 407BD496     
>> 1  32bit read    0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C
>> 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4 407BD49E      1  32bit
>> read    0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
>> 0x60178E6C 0x602AABDC 0x6025C5C4 4081976E      1  32bit read   
>> 0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C
>> 0x602AABDC 0x6025C5C4               
>> 
>> No spurious memory references have been recorded.
>> 
>> 
>> 
>> Cisco Internetwork Operating System Software
>> IOS (tm) 5350 Software (C5350-IS-M), Version 12.1(5)XM8, EARLY
>> DEPLOYMENT RELEASE SOFTWARE (fc1)
>> TAC Support: http://www.cisco.com/tac
>> Copyright (c) 1986-2002 by cisco Systems, Inc.
>> Compiled Thu 21-Feb-02 12:51 by uma
>> Image text-base: 0x60008968, data-base: 0x60E80000
>> 
>> ROM: System Bootstrap, Version 12.2(1r)1, RELEASE SOFTWARE (fc1)
>> BOOTFLASH: 5350 Software (C5350-BOOT-M), Experimental Version
>> 12.1(20000922:142008) [nag-flo_t_0110 101]
>> 
>> lyk-3 uptime is 2 days, 8 hours, 55 minutes
>> System returned to ROM by reload at 14:07:42 eet Thu Jun 12 2003
>> System restarted at 14:09:08 eet Thu Jun 12 2003
>> System image file is "flash:c5350-is-mz.121-5.XM8.bin"
>> 
>> cisco AS5350 (R7K) processor (revision O) with 131072K/65536K bytes of
>> memory.
>> Processor board ID JAE064705YE
>> R7000 CPU at 250Mhz, Implementation 39, Rev 1.0, 256KB L2, 2048KB L3
>> Cache Last reset from IOS reload
>> Channelized E1, Version 1.0.
>> Bridging software.
>> X.25 software, Version 3.0.0.
>> Primary Rate ISDN software, Version 1.1.
>> Manufacture Cookie Info:
>>  EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x32,
>>  Board Hardware Version 3.33, Item Number 800-5171-02,
>>  Board Revision B0, Serial Number JAE064705YE,
>>  PLD/ISP Version 1.0,  Manufacture Date 25-Nov-2002.
>> Processor 0x14, MAC Address 0x0B4682593C
>> Backplane HW Revision 1.0, Flash Type 5V
>> 2 FastEthernet/IEEE 802.3 interface(s)
>> 250 Serial network interface(s)
>> 216 terminal line(s)
>> 8 Channelized E1/PRI port(s)
>> 512K bytes of non-volatile configuration memory.
>> 32768K bytes of processor board System flash (Read/Write)
>> 8192K bytes of processor board Boot flash (Read/Write)
>> 
>> Configuration register is 0x2102
>> 
>> 
>> 
>> > > We are running a few AS5350 access-servers for our dial-up
>> > > PSTN/ISDN customers. Enabling IP CEF on the AS5350 (it is enabled
>> > > by default), saturates the CPU (99% proc cpu) when there are
>> > > about 100 connectionw on the AS5350. Disabling IP CEF everythning
>> > > is back to normal. The IOS that the Access servers are ryunning
>> > > is is-mz.21-5.XM8 
>> > > 
>> > > CAn you please advice?
>> > 
>> > Which process is eating up the CPU? Can u post a "show proc cpu |
>> > exclude 0.00" as well as an "show ver" and "show align" when the
>> > problem happens? 
>> > 
>> 
>> 
>> 
>> > It could be CSCds63384, not sure until I see "show ver" and "show
>> > align".. 
>> > 
>> > You might also want to upgrade to a more recent IOS release, I'd
>> > recommend 12.2(2)XB11, but make sure you do some lab-tests before
>> > you upgrade as the PPP and AAA code is much differnt in 12.2T/12.2XB
>> > compared to previous versions...
>> > 
>> > 	oli
>> > 
>> > 
>> > 
>> _____________________________
>> CYTANET WebMail
>> http://webmail.cytanet.com.cy
>
_____________________________
CYTANET WebMail
http://webmail.cytanet.com.cy


More information about the cisco-nsp mailing list