[c-nsp] RP PAS iEdge output drops

Renato Ornelas renato at openx.com.br
Wed Jul 10 21:14:18 EDT 2013


Hello!

I have a Cisco 7206-NPE-G1 (Version 15.2(4)M3) used as PPPOE access server.

With about 180Mbit/s (input traffic on G0/1) i have about 65% of CPU usage
(1.8k users, 75% CPU). Right now there's about 1450 PPPoE sessions up on 26
VLANs (all on G0/2).

CPU usage is very high due to interrupts:

CPU utilization for five seconds: 62%/53%; one minute: 63%; five minutes:
64%

On my debugging I saw the *RP PAS iEdge output* increasing very much, but
didn't find any docs about iEdge.


PPPOE-BOX#sh ip cef switching statistics feature
IPv4 CEF input features:
Path   Feature                Drop    Consume       Punt  Punt2Host Gave
route
RP PAS iEdge                891047          0          0          0
 0
Total                       891047          0          0          0
 0

IPv4 CEF output features:
Path   Feature                Drop    Consume       Punt  Punt2Host    New
i/f
RP PAS iEdge               7345601          0          0          0
 0
Total                      7345601          0          0          0
 0


Some of the traffic I got on the debuggin ip cef drops (the source IP
normally is from google or akamai servers):

*Jul 10 14:23:21.444: CEF-Drop: Packet from 208.117.252.52 (Gi0/1)
to xx.xx.xx.185 (Vi2.1174), Output feature iEdge
*Jul 10 14:23:21.444:   ihl=20, length=1492, tos=0, ttl=58, checksum=65421,
offset=0 DF
*Jul 10 14:23:21.444:     TCP src=80, dst=20172, seq=2348994103,
ack=2111570742, win=320 ACK
*Jul 10 14:23:21.444: CEF-Drop: Packet from 74.125.234.196 (Gi0/1)
to xx.xx.xx.40 (Vi2.42), Output feature iEdge
*Jul 10 14:23:21.444:   ihl=20, length=1470, tos=0, ttl=58, checksum=14648,
offset=0
*Jul 10 14:23:21.444:     TCP src=443, dst=49451, seq=3087091975,
ack=922028286, win=1002 ACK
*Jul 10 14:23:21.444: CEF-Drop: Packet from 74.125.234.34 (Gi0/1)
to xx.xx.xx.90 (Vi2.1366), Output feature iEdge
*Jul 10 14:23:21.444:   ihl=20, length=1470, tos=0, ttl=59, checksum=28825,
offset=0
*Jul 10 14:23:21.444:     TCP src=80, dst=2855, seq=1014058092,
ack=1851824944, win=63784 ACK
*Jul 10 14:23:21.448: CEF-Drop: Packet from 74.125.234.34 (Gi0/1)
to xx.xx.xx.90 (Vi2.1366), Output feature iEdge
*Jul 10 14:23:21.448:   ihl=20, length=1470, tos=0, ttl=59, checksum=28824,
offset=0
*Jul 10 14:23:21.448:     TCP src=80, dst=2855, seq=1014059522,
ack=1851824944, win=63784 ACK

Thanks for your attention!

-- 

*Renato Ornelas | **Open X *- Soluções para ISPs
(31) 9145.0190
renato at openx.com.br
http://www.openx.com.br


More information about the cisco-nsp mailing list