[c-nsp] 3640 and 3DES IPSec

Ted Mittelstaedt tedm at toybox.placo.com
Fri Sep 23 04:53:38 EDT 2005


Oh come off it, there's been reports of problems with CEF for
years.  And it hasn't gone away anytime soon, I had a new
load-balanced ip cef setup blow chunks running 12.2 IOS about
3-4 months ago on a 3620.  I finally threw the config in the trash
and went to MPPP and it's run fine ever since.

The only time I've had CEF work right was on our 7206's running
12.2 and none of them are doing load balancing.  And that only
happened in the last year or so, previously I'd get random reboots
on them when it was enabled.

Ted

>-----Original Message-----
>From: Kevin Graham [mailto:mahargk at gmail.com]
>Sent: Wednesday, September 21, 2005 9:55 PM
>To: barney gumbo
>Cc: Ted Mittelstaedt; cisco-nsp at puck.nether.net
>Subject: Re: [c-nsp] 3640 and 3DES IPSec
>
>
>On 9/21/05, barney gumbo <barney.gumbo at gmail.com> wrote:
>> CEF is currently on, someone provided some past experience where
>> disabling CEF actually helped CPU utilization on a simple two 
>interface
>> router with IPSec/GRE.
>
>Assuming this was true and they were running a reasonably recent
>release, this would be bug behavior. Its a shame they didn't share
>their tuning experiences with the rest of the list.
>
>-- 
>Internal Virus Database is out-of-date.
>Checked by AVG Anti-Virus.
>Version: 7.0.344 / Virus Database: 267.10.18/86 - Release Date: 
>8/31/2005
>


More information about the cisco-nsp mailing list