[nsp] High CPU on 2600

Chris Griffin cgriffin at ufl.edu
Thu Oct 23 12:37:17 EDT 2003


Joel,
	This can be caused by a large number of translations in your NAT
(overload) pool commonly caused by hosts sweeping IP space looking for
hosts to attack.  Very common with nachi infected hosts.  Check out
"show ip nat statistics"

Chris

On Thu, 2003-10-23 at 10:20, Joel Perez wrote:
> Hey guys,
>  
> I have a small problem. I have a 2600 in a remote office doing NAT'ing
> serving about 20-25 people. Everything works fine except that the cpu on
> the 2600 is thru the roof.
> They aren't generating much traffic, probably about 1.5 megs. The 2600
> is only using the FastEth for the internal and external interaces. Can
> the NAT'ing be making my CPU that high?
> Here is the config I have now:
>  
> 
> ip subnet-zero
> ip cef
> !
> interface FastEthernet0/0
>  description ---------------"Gateway to Internet"---------------
>  ip address 1.2.3.4 255.255.255.0
>  ip nat outside
>  duplex auto
>  speed auto
> !
> interface Serial0/0
>  no ip address
>  shutdown
>  no fair-queue
> !
> interface FastEthernet0/1
>  description ---------------"Gateway To Etrade"---------------
>  ip address 5.6.7.8 255.255.255.0
>  ip nat inside
>  duplex auto
>  speed auto
> !
> ip nat pool Traders 1.2.3.4 1.2.3.4 prefix-length 24
> ip nat inside source list 1 pool Traders overload
> no ip http server
> ip classless
> ip route 0.0.0.0 0.0.0.0 1.2.3.1
> !
> !
> access-list 1 permit 10.64.14.0 0.0.0.255
>  
> Regards,
>  
> ----------------------------------------------
> Joel Perez <jperez at ntera.net>  | IP Engineer
> http://www.ntera.net/                 | Ntera
> 305.914.3412
>  
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
-- 
Chris Griffin                           cgriffin at ufl.edu
Network Engineer - CCNP                 Phone: (352) 392-2061
OIT - Network Services                  Fax:   (352) 392-9440
University of Florida                   Gainesville, FL 32611



More information about the cisco-nsp mailing list