Hello! I have a Cisco 7206-NPE-G1 (Version 15.2(4)M3) used as PPPOE access server.
With about 180Mbit/s (input traffic on G0/1) i have about 65% of CPU usage (1.8k users, 75% CPU). Right now there's about 1450 PPPoE sessions up on 26 VLANs (all on G0/2). CPU usage is very high due to interrupts: CPU utilization for five seconds: 62%/53%; one minute: 63%; five minutes: 64% On my debugging I saw the *RP PAS iEdge output* increasing very much, but didn't find any docs about iEdge. PPPOE-BOX#sh ip cef switching statistics feature IPv4 CEF input features: Path Feature Drop Consume Punt Punt2Host Gave route RP PAS iEdge 891047 0 0 0 0 Total 891047 0 0 0 0 IPv4 CEF output features: Path Feature Drop Consume Punt Punt2Host New i/f RP PAS iEdge 7345601 0 0 0 0 Total 7345601 0 0 0 0 Some of the traffic I got on the debuggin ip cef drops (the source IP normally is from google or akamai servers): *Jul 10 14:23:21.444: CEF-Drop: Packet from 208.117.252.52 (Gi0/1) to xx.xx.xx.185 (Vi2.1174), Output feature iEdge *Jul 10 14:23:21.444: ihl=20, length=1492, tos=0, ttl=58, checksum=65421, offset=0 DF *Jul 10 14:23:21.444: TCP src=80, dst=20172, seq=2348994103, ack=2111570742, win=320 ACK *Jul 10 14:23:21.444: CEF-Drop: Packet from 74.125.234.196 (Gi0/1) to xx.xx.xx.40 (Vi2.42), Output feature iEdge *Jul 10 14:23:21.444: ihl=20, length=1470, tos=0, ttl=58, checksum=14648, offset=0 *Jul 10 14:23:21.444: TCP src=443, dst=49451, seq=3087091975, ack=922028286, win=1002 ACK *Jul 10 14:23:21.444: CEF-Drop: Packet from 74.125.234.34 (Gi0/1) to xx.xx.xx.90 (Vi2.1366), Output feature iEdge *Jul 10 14:23:21.444: ihl=20, length=1470, tos=0, ttl=59, checksum=28825, offset=0 *Jul 10 14:23:21.444: TCP src=80, dst=2855, seq=1014058092, ack=1851824944, win=63784 ACK *Jul 10 14:23:21.448: CEF-Drop: Packet from 74.125.234.34 (Gi0/1) to xx.xx.xx.90 (Vi2.1366), Output feature iEdge *Jul 10 14:23:21.448: ihl=20, length=1470, tos=0, ttl=59, checksum=28824, offset=0 *Jul 10 14:23:21.448: TCP src=80, dst=2855, seq=1014059522, ack=1851824944, win=63784 ACK Thanks for your attention! -- *Renato Ornelas | **Open X *- Soluções para ISPs (31) 9145.0190 [email protected] http://www.openx.com.br _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
