<br><br><div class="gmail_quote">On Fri, May 21, 2010 at 4:36 AM, Jeroen Wunnink <span dir="ltr"><<a href="mailto:jeroen@easyhosting.nl">jeroen@easyhosting.nl</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Very familiar behaviour, cam runs out cpu kicks in to handle packets, something the Bigiron really isn't good at (read: sucks at) and connections start dropping, vlans flap on and off, sessions reset, etc..<br>
<br>
If I look at that output you attached (it shows plenty of info to debug this :-), L4 cam is low on several blades/slots (the number behind the 'free' is the magical number here you do not want to see at or near 0):<br>
<br>
L4 pool 0 index range:<br>
(sw) 48640 - 49151 (0x0be00 - 0x0bfff), free 4 (0x00004)<br>
(hw) 32256 - 32767 (0x07e00 - 0x07fff)<br>
<br>
Monitor if this is stable at 4 or hops up and down between 0 and whatever.., you have this on several slots/blades for the various L4 parts (there's even one at 0)<br>
<br>
L4 pool 3 index range:<br>
(sw) 40960 - 43519 (0x0a000 - 0x0a9ff), free 0 (0x00000)<br>
(hw) 24576 - 27135 (0x06000 - 0x069ff)<br>
<br>
<br>
So it seems you do a lot with ACL lists and these are using up a major part of your CAM, yet I see L2 and L3 CAM being happily in the 1000's free.., so I suggest you repartition your cam space to assign more L4 CAM and less L2+L3 CAM (this will require a reload of your Bigiron)<br>
<br>
Currently 25% of you CAM is designated for L4 purposes (Layer4 = 8192 (0.5Mbits) (25%)), so you need to increase this<br>
<br>
You can do this globally on your device when in config mode with:<br>
cam-partition l2 5 l3 20 l4 75<br>
<br>
This will assign 5% to L2, 20% to L3 and 75% to L4, see if this resolves your problems (make sure the L2 and L3 don't get too low either, you need to balance some magic between these numbers)<div class="im"><br>
<br>
<br>
On 5/20/10 9:04 PM, Fabio Mendes wrote:<br>
</div><div class="im"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hello Guys,<br>
<br>
We are facing a strange situation on a customer.<br>
<br>
During random periods, BigIron syslogs this kind of message:<br>
<br>
May 20 15:24:13:I:System: CPU protection action2 deactivated at 000b7e00<br>
May 20 15:23:48:I:System: CPU protection action2 activated at 000b7d00<br>
May 20 15:23:22:I:System: CPU protection action2 deactivated at 000b7c00<br>
May 20 15:22:57:I:System: CPU protection action2 activated at 000b7b00<br>
May 20 15:22:31:I:System: CPU protection action2 deactivated at 000b7a00<br>
May 20 15:22:05:I:System: CPU protection action2 activated at 000b7900<br>
May 20 15:21:40:I:System: CPU protection action2 deactivated at 000b7800<br>
May 20 15:21:14:I:System: CPU protection action2 activated at 000b7700<br>
</blockquote>
<br></div>
-- <br>
<br>
Met vriendelijke groet,<br>
<br>
Jeroen Wunnink,<br>
EasyHosting B.V. Systeembeheerder<br>
<a href="mailto:systeembeheer@easyhosting.nl" target="_blank">systeembeheer@easyhosting.nl</a><br>
<br>
telefoon:+31 (035) 6285455 Postbus 48<br>
fax: +31 (035) 6838242 3755 ZG Eemnes<br>
<br>
<a href="http://www.easyhosting.nl" target="_blank">http://www.easyhosting.nl</a><br>
<a href="http://www.easycolocate.nl" target="_blank">http://www.easycolocate.nl</a><br>
<br>
<br>
</blockquote></div><div><br></div><div>Thanks for confirming I'm not crazy !</div><div><br></div><div>This is exactly what I've been saying to this customer: You're using to much L4 entries, resize the CAM so L4 entries will be plenty. </div>
<div><br></div><div>But this customer (a VERY stubborn one, BTW) claims something like "but this never happened before, how come this happens now ?" </div><div><br></div><div>I'll back there and try to take a more "psychological" than a technical approach this time.</div>
<div><br clear="all">BTW, why the output does not show how much L4 entries in hardware are being used ?</div><div><br></div><div>When it displays:</div><div><br></div><div><span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 13px; border-collapse: collapse; ">L4 pool 3 index range:<br>
(sw) 40960 - 43519 (0x0a000 - 0x0a9ff), free 0 (0x00000)<br> (hw) 24576 - 27135 (0x06000 - 0x069ff)<br></span></div><div><br></div><div>sw means software and hw means hardware (duh!), but what is their practical meaning anyway ?</div>
<div><br></div><div><br>-- <br><br>CCNA - Cisco Certified Network Associate<br>CCNP - Cisco Certified Network Professional<br><br>"A bird that you set free may be caught again, but a word that escapes your lips will not return." Jewish Proverb<br>
</div>