[nsp] High CPU on 2600

[Voll, Scott]

Have you looked at how much ICMP traffic your getting on the box?  We
had routers dieing with all the ICMP traffic the viruses were putting
out.

On the Sh Proccess CPU see what your  IP Input looks like.  If it seems
really high block ICMP and log it and see if that's your problem.

Scott

-----Original Message-----
From: Joel Perez [mailto:jperez at numind.net] 
Sent: Thursday, October 23, 2003 7:20 AM
To: cisco-nsp at puck.nether.net
Subject: [nsp] High CPU on 2600

Hey guys,
 
I have a small problem. I have a 2600 in a remote office doing NAT'ing
serving about 20-25 people. Everything works fine except that the cpu on
the 2600 is thru the roof.
They aren't generating much traffic, probably about 1.5 megs. The 2600
is only using the FastEth for the internal and external interaces. Can
the NAT'ing be making my CPU that high?
Here is the config I have now:
 
 
ip subnet-zero
ip cef
!
interface FastEthernet0/0
 description ---------------"Gateway to Internet"---------------
 ip address 1.2.3.4 255.255.255.0
 ip nat outside
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
 no fair-queue
!
interface FastEthernet0/1
 description ---------------"Gateway To Etrade"---------------
 ip address 5.6.7.8 255.255.255.0
 ip nat inside
 duplex auto
 speed auto
!
ip nat pool Traders 1.2.3.4 1.2.3.4 prefix-length 24
ip nat inside source list 1 pool Traders overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 1.2.3.1
!
!
access-list 1 permit 10.64.14.0 0.0.0.255
 
Regards,
 
----------------------------------------------
Joel Perez <jperez at ntera.net>  | IP Engineer
http://www.ntera.net/                 | Ntera
305.914.3412
 
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/