[c-nsp] SUP720-3B and NAT performance

[Elmar K. Bins]

Hi Tim,

tstevens at cisco.com (Tim Stevenson) wrote:

> If it's just one session, then you're hitting some other problem (ie, 
> for some reason the h/w NF entry is not getting installed).
> 
> The IPSEC tunnel is terminated on the 6500 or...?

Not at all, it's terminated on the "VPN" boxes in my picture (ISG 1000's),
so it passes right through the routers.

Is there any way to determine whether a hardware NF entry has been
installed or not?

Funny also that the CPU load on the router should grow with traffic inside
that one session (aka flow)...

Yours,
	Elmar.