[c-nsp] L2TP problem with 7301

[Aleksey V Fedorov]

12.2(31)SB2 now available on CCO.
Gigaword counters in present in this image.

But performance is bad. :(

c7301-2-a77#sh processes cpu sorted | ex 0.00
CPU utilization for five seconds: 96%/45%; one minute: 95%; five minutes: 93%
  PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
  132   103270572 277733245        371 20.31% 19.91% 19.62%   0 LFDp Input Proc
   67    97031784 278648401        348 14.95% 14.92% 14.75%   0 IP Input
  139    99406368 461766919        215 14.47% 14.11% 13.69%   0 L2X Data Daemon
   64      659748  12634684         52  0.31%  0.25%  0.24%   0 ACCT Periodic Pr
  133      567452  88058840          6  0.31%  0.25%  0.24%   0 HQF Shaper Backg
  194     1683924  16631051        101  0.23%  0.25%  0.23%   0 RADIUS
   36     1052180   8179353        128  0.07%  0.15%  0.14%   0 Net Background
  198      236328  13001762         18  0.07%  0.07%  0.07%   0 PPP Events
   63      519288   1509323        344  0.07%  0.09%  0.08%   0 AAA ACCT Proc
  214         176       236        745  0.07%  0.07%  0.02%   2 Virtual Exec
  210      172212    324902        530  0.07%  0.02%  0.02%   0 BGP Router
  170       63152   4112604         15  0.07%  0.03%  0.02%   0 CCPROXY_CT
  202      526080   1607255        327  0.07%  0.08%  0.08%   0 RADIUS EXTENDED
c7301-2-a77#sh subscriber statistics

Current Subscriber Statistics:

Number of sessions currently up: 81
Number of sessions currently pending: 0
Number of sessions currently authenticated: 81
Number of sessions currently unauthenticated: 0
Highest number of sessions ever up at one time: 118
Mean up-time duration of sessions: 01:18:33
Total number of sessions up so far: 7004
Mean call rate per minute: 1, per hour: 60
Number of sessions failed to come up: 577
Access type based session count:
VPDN sessions = 81
Traffic-Class sessions = 235

c7301-2-a77#sh interfaces gi0/0
GigabitEthernet0/0 is up, line protocol is up
   Hardware is BCM1250 Internal MAC, address is 0015.c73e.381b (bia 0015.c73e.381b)
   Description: S8508-A77 MPLS
   Internet address is 88.83.197.156/29
   MTU 2000 bytes, BW 1000000 Kbit, DLY 10 usec,
      reliability 255/255, txload 14/255, rxload 14/255
   Encapsulation ARPA, loopback not set
   Keepalive set (10 sec)
   Full Duplex, 1000Mbps, RJ45, media type is RJ45
   output flow-control is XON, input flow-control is XON
   ARP type: ARPA, ARP Timeout 04:00:00
   Last input 00:00:00, output 00:00:00, output hang never
   Last clearing of "show interface" counters never
   Input queue: 48/75/75137204/0 (size/max/drops/flushes); Total output drops: 3
   Queueing strategy: fifo
   Output queue: 0/40 (size/max)
   5 minute input rate 58483000 bits/sec, 9737 packets/sec
   5 minute output rate 58738000 bits/sec, 9718 packets/sec
      3709753190 packets input, 3265748935 bytes, 244 no buffer
      Received 460248 broadcasts (0 IP multicasts)
      0 runts, 0 giants, 8140458 throttles
      15 input errors, 1 CRC, 0 frame, 14 overrun, 0 ignored
      0 watchdog, 492984 multicast, 0 pause input
      3705447704 packets output, 3047343942 bytes, 0 underruns
      1 output errors, 0 collisions, 1 interface resets
      0 babbles, 0 late collision, 0 deferred
      1 lost carrier, 0 no carrier, 0 PAUSE output
      0 output buffer failures, 0 output buffers swapped out


> I looked up this IOS version on feature navigator (12.2(28)SB5) but it seems
> that there are some critical features missing, like Radius attribute 52 and
> 53 (GigaWord) and NTP. How is it possible? We need to account user traffic
> and in these days giga traffic is normal. Is there any ios version in 12.3
> or 12.4 or perhaps technology that you would suggest using for large VPDN
> LNS usage. We will terminate around 5000 to 6000 VPDN session per 7301?
>
> Does anybody know if there is a limit to the number of sessions? I read that
> there is a limit of 16000 session, but does this require special licenses?

--
Aleksey V. Fedorov <alexf at vsi.ru>  AVF12-RIPE
Phone: +7(4732)531789
Fax:   +7(4732)531415         http://www.vsi.ru
CenterTelecom Voronezh ISP    http://isp.vsi.ru