[nsp] IP CEF on AS5350
Oliver Boehmer (oboehmer)
oboehmer at cisco.com
Sun Jun 15 13:31:42 EDT 2003
Hi,
> Thanks very much for your support. I disable tcp header compression
> and enable ip CEF and cpu is normal..
Ok, cool.
> So what is your recomendation?
> Should i uprade the AS5350 and AS5300 (I chaeck it also on AS5300 AS)
> to 12-2 to use both CEF and tcp header-compresion or leave CEF and
> disable tcp header-compression without uprading? In case I upgrate
> and use both CEF and tcp-header will it improve the performance of
> the Access-servers?
Well, it really depends what you want to achieve. Under normal
circumstances, you will not see an increased performance with CEF on an
access servers. CEF will bring you some new features (like unicast RPF
checks) and will help you against cache churns when Nimbda-like viruses
spread.
Slow-speed modem users will benefit from TCP header compression...
So I'd probably upgrade, I'd consider 12.2(2)XB11 for both AS5300 and
AS5350, but make sure you test it within your environment before you
deploy it as a lot changed between 12.1/12.2 and 12.2T/12.2XB..
oli
>
> Thankw again for your support
> > Hi,
> >
> > I assume you are using TCP header compression, aren't you? You need
> > 12.2 or later to use TCP header compression with CEF, so either
> > upgrade to
> > 12.2 mainline or 12.2(2)XB11 or disable header compression before
> > enabling CEF. The high CPU is caused by the alignment corrections
> > (http://www.cisco.com/warp/public/63/highcpu.html).
> >
> > oli
> >
> > ----Original Message----
> > From: Security [mailto:security at cytanet.com.cy]
> > Sent: Sonntag, 15. Juni 2003 01:14
> > To: Oliver Boehmer (oboehmer)
> > Cc: cisco-nsp at puck.nether.net
> > Subject: RE: [nsp] IP CEF on AS5350
> >
> > > Here is the output you requested. I enable IP CEF and proc cpu
> > > jumb from 10% without CEF to 82% with only 73 users connected to
> > > the AS5350 out of 212 users that the AS can handle.
> > >
> > > Thanks
> > >
> > > #sh proc cpu | exclude 0.00
> > > CPU utilization for five seconds: 82%/79%; one minute: 51%; five
> > > minutes: 33% PID Runtime(ms) Invoked uSecs 5Sec 1Min
> > > 5Min TTY Process 49 24219776 37354277 648 2.36% 2.38%
> > > 2.77% 0 IP Input
> > >
> > > 88 819028 40491 20227 0.16% 0.15% 0.16% 0
> > > Compute load avg
> > >
> > >
> > > Alignment data for:
> > > 5350 Software (C5350-IS-M), Version 12.1(5)XM8, EARLY DEPLOYMENT
> > > RELEASE SOFTWARE (fc1) TAC Support: http://www.cisco.com/tac
> > > Compiled Thu 21-Feb-02 12:51 by uma
> > >
> > > Total Corrections 46369468, Recorded 47, Reads 46369468, Writes 0
> > >
> > > Initial Initial
> > > Address Count Access Type Traceback
> > > 407EFCA2 56082 32bit read 0x6048A9C8 0x6048B49C 0x6043CC98
> > > 0x6037254C 0x6034E330 0x6017A564
> > > 0x60171EAC 0x601D29A8 407EFCBE 56082 32bit read 0x6048A9F8
> > > 0x6048B49C 0x6043CC98 0x6037254C
> > > 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 407EFCAA 59955 32bit
> > > read 0x6048AAC8 0x6048B49C
> > > 0x6043CC98 0x6037254C 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
> > > 407EFCAA 45828 32bit read
> > > 0x6048AB1C 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x6017A564
> > > 0x60171EAC 0x601D29A8 407EFCBE
> > > 55978 32bit read 0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C
> > > 0x6034E330 0x6017A564 0x60171EAC
> > > 0x601D29A8 407B6F7E 23451 32bit read 0x6048AAD8 0x6048B49C
> > > 0x6043CC98 0x6037254C 0x6034E330
> > > 0x6017A564 0x60171EAC 0x601D29A8 407B6F82 23451 32bit read
> > > 0x6048AAEC 0x6048B49C 0x6043CC98
> > > 0x6037254C 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 407B6F8E
> > > 3977 32bit read 0x6048AC38
> > > 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x6017A564 0x60171EAC
> > > 0x601D29A8 407B6F8E 60131 32bit
> > > read 0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
> > > 0x6017A564 0x60171EAC 0x601D29A8
> > > 407B6F8E 45922 32bit read 0x6048AD48 0x6048B49C 0x6043CC98
> > > 0x6037254C 0x6034E330 0x6017A564
> > > 0x60171EAC 0x601D29A8 407B6F8E 21905 32bit read 0x6048ADA0
> > > 0x6048B49C 0x6043CC98 0x6037254C
> > > 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 407B6F8A 19424
> > > 32bit read 0x6048AE80
> > > 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x6017A564 0x60171EAC
> > > 0x601D29A8 407B6F86 18712 32bit
> > > read 0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
> > > 0x6017A564 0x60171EAC 0x601D29A8
> > > 407B6F8E 20747 32bit read 0x6048B0C0 0x6048B49C 0x6043CC98
> > > 0x6037254C 0x6034E330 0x6017A564
> > > 0x60171EAC 0x601D29A8 407CE1EE 23992 32bit read 0x6048AB38
> > > 0x6048B49C 0x6043CC98 0x6037254C
> > > 0x6034E330 0x6017A564 0x60171EAC 0x601D29A8 407CE1F2 23992
> > > 32bit read 0x6048AB4C
> > > 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x6017A564 0x60171EAC
> > > 0x601D29A8 41C226C3 38 16bit
> > > read 0x6048A9D8 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
> > > 0x6017A564 0x60171EAC 0x601D29A8
> > > 40896E22 14 32bit read 0x6048A9C8 0x6048B49C 0x6043CC98
> > > 0x6037254C 0x6034E330 0x601770A4
> > > 0x602F9038 0x602F92D0 40896E3E 14 32bit read 0x6048A9F8
> > > 0x6048B49C 0x6043CC98 0x6037254C
> > > 0x6034E330 0x601770A4 0x602F9038 0x602F92D0 40896E2A 11 32bit
> > > read 0x6048AAC8 0x6048B49C
> > > 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0
> > > 40896E2A 9 32bit read
> > > 0x6048AB1C 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x601770A4
> > > 0x602F9038 0x602F92D0 40896E2E
> > > 6 32bit read 0x6048AB38 0x6048B49C 0x6043CC98 0x6037254C
> > > 0x6034E330 0x601770A4 0x602F9038
> > > 0x602F92D0 40896E32 6 32bit read 0x6048AB4C 0x6048B49C
> > > 0x6043CC98 0x6037254C 0x6034E330
> > > 0x601770A4 0x602F9038 0x602F92D0 40896E3E 8 32bit read
> > > 0x6048AC38 0x6048B49C 0x6043CC98
> > > 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0 40896E3E
> > > 8 32bit read 0x6048AD00
> > > 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038
> > > 0x602F92D0 40896E3E 8 32bit
> > > read 0x6048AD48 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
> > > 0x601770A4 0x602F9038 0x602F92D0
> > > 40896E3E 8 32bit read 0x6048ADA0 0x6048B49C 0x6043CC98
> > > 0x6037254C 0x6034E330 0x601770A4
> > > 0x602F9038 0x602F92D0 40896E3A 8 32bit read 0x6048AE80
> > > 0x6048B49C 0x6043CC98 0x6037254C
> > > 0x6034E330 0x601770A4 0x602F9038 0x602F92D0 40896E36 8
> > > 32bit read 0x6048AF08 0x6048B49C
> > > 0x6043CC98 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0
> > > 40896E3E 7 32bit read
> > > 0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x601770A4
> > > 0x602F9038 0x602F92D0 408302FE
> > > 3 32bit read 0x6048AAD8 0x6048B49C 0x6043CC98 0x6037254C
> > > 0x6034E330 0x601770A4 0x602F9038
> > > 0x602F92D0 40830302 3 32bit read 0x6048AAEC 0x6048B49C
> > > 0x6043CC98 0x6037254C 0x6034E330
> > > 0x601770A4 0x602F9038 0x602F92D0 4081EEFE 3 32bit read
> > > 0x6048AB84 0x6048B49C 0x6043CC98
> > > 0x6037254C 0x6034E330 0x601770A4 0x602F9038 0x602F92D0 407BD482
> > > 2 32bit read 0x6048A9C8
> > > 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC
> > > 0x6025C5C4 407BD49E 2 32bit
> > > read 0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
> > > 0x60178E6C 0x602AABDC 0x6025C5C4
> > > 407BD48A 2 32bit read 0x6048AAC8 0x6048B49C 0x6043CC98
> > > 0x6037254C 0x6034E330 0x60178E6C
> > > 0x602AABDC 0x6025C5C4 407BD48A 2 32bit read 0x6048AB1C
> > > 0x6048B49C 0x6043CC98 0x6037254C
> > > 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4 407BD48E 1
> > > 32bit read 0x6048AB38
> > > 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC
> > > 0x6025C5C4 407BD492 1 32bit
> > > read 0x6048AB4C 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
> > > 0x60178E6C 0x602AABDC 0x6025C5C4 407BD49E 1 32bit read
> > > 0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C
> > > 0x602AABDC 0x6025C5C4 407BD49E 1 32bit read 0x6048AD00
> > > 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC
> > > 0x6025C5C4 407BD49E 1 32bit read 0x6048AD48 0x6048B49C
> > > 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
> > > 407BD49E 1 32bit read 0x6048ADA0 0x6048B49C 0x6043CC98
> > > 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4 407BD49A
> > > 1 32bit read 0x6048AE80 0x6048B49C 0x6043CC98 0x6037254C
> > > 0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4 407BD496 1 32bit
> > > read 0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330
> > > 0x60178E6C 0x602AABDC 0x6025C5C4 407BD49E 1 32bit read
> > > 0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C
> > > 0x602AABDC 0x6025C5C4 4081976E 1 32bit read 0x6048AB84
> > > 0x6048B49C 0x6043CC98 0x6037254C 0x6034E330 0x60178E6C 0x602AABDC
> > > 0x6025C5C4
> > >
> > > No spurious memory references have been recorded.
> > >
> > >
> > >
> > > Cisco Internetwork Operating System Software
> > > IOS (tm) 5350 Software (C5350-IS-M), Version 12.1(5)XM8, EARLY
> > > DEPLOYMENT RELEASE SOFTWARE (fc1)
> > > TAC Support: http://www.cisco.com/tac
> > > Copyright (c) 1986-2002 by cisco Systems, Inc.
> > > Compiled Thu 21-Feb-02 12:51 by uma
> > > Image text-base: 0x60008968, data-base: 0x60E80000
> > >
> > > ROM: System Bootstrap, Version 12.2(1r)1, RELEASE SOFTWARE (fc1)
> > > BOOTFLASH: 5350 Software (C5350-BOOT-M), Experimental Version
> > > 12.1(20000922:142008) [nag-flo_t_0110 101]
> > >
> > > lyk-3 uptime is 2 days, 8 hours, 55 minutes
> > > System returned to ROM by reload at 14:07:42 eet Thu Jun 12 2003
> > > System restarted at 14:09:08 eet Thu Jun 12 2003
> > > System image file is "flash:c5350-is-mz.121-5.XM8.bin"
> > >
> > > cisco AS5350 (R7K) processor (revision O) with 131072K/65536K
> > > bytes of memory. Processor board ID JAE064705YE
> > > R7000 CPU at 250Mhz, Implementation 39, Rev 1.0, 256KB L2, 2048KB
> > > L3 Cache Last reset from IOS reload
> > > Channelized E1, Version 1.0.
> > > Bridging software.
> > > X.25 software, Version 3.0.0.
> > > Primary Rate ISDN software, Version 1.1.
> > > Manufacture Cookie Info:
> > > EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x32,
> > > Board Hardware Version 3.33, Item Number 800-5171-02,
> > > Board Revision B0, Serial Number JAE064705YE,
> > > PLD/ISP Version 1.0, Manufacture Date 25-Nov-2002.
> > > Processor 0x14, MAC Address 0x0B4682593C
> > > Backplane HW Revision 1.0, Flash Type 5V
> > > 2 FastEthernet/IEEE 802.3 interface(s)
> > > 250 Serial network interface(s)
> > > 216 terminal line(s)
> > > 8 Channelized E1/PRI port(s)
> > > 512K bytes of non-volatile configuration memory.
> > > 32768K bytes of processor board System flash (Read/Write)
> > > 8192K bytes of processor board Boot flash (Read/Write)
> > >
> > > Configuration register is 0x2102
> > >
> > >
> > >
> > > > > We are running a few AS5350 access-servers for our dial-up
> > > > > PSTN/ISDN customers. Enabling IP CEF on the AS5350 (it is
> > > > > enabled by default), saturates the CPU (99% proc cpu) when
> > > > > there are about 100 connectionw on the AS5350. Disabling IP
> > > > > CEF everythning is back to normal. The IOS that the Access
> > > > > servers are ryunning is is-mz.21-5.XM8
> > > > >
> > > > > CAn you please advice?
> > > >
> > > > Which process is eating up the CPU? Can u post a "show proc cpu
> > > > | exclude 0.00" as well as an "show ver" and "show align" when
> > > > the problem happens?
> > > >
> > >
> > >
> > >
> > > > It could be CSCds63384, not sure until I see "show ver" and
> > > > "show align"..
> > > >
> > > > You might also want to upgrade to a more recent IOS release, I'd
> > > > recommend 12.2(2)XB11, but make sure you do some lab-tests
> > > > before you upgrade as the PPP and AAA code is much differnt in
> > > > 12.2T/12.2XB compared to previous versions...
> > > >
> > > > oli
> > > >
> > > >
> > > >
> > > _____________________________
> > > CYTANET WebMail
> > > http://webmail.cytanet.com.cy
> >
> _____________________________
> CYTANET WebMail
> http://webmail.cytanet.com.cy
More information about the cisco-nsp
mailing list