Hi, > Hello! > > I have a Cisco 7206-NPE-G1 (Version 15.2(4)M3) used as PPPOE access server. > > With about 180Mbit/s (input traffic on G0/1) i have about 65% of CPU usage > (1.8k users, 75% CPU). Right now there's about 1450 PPPoE sessions up on 26 > VLANs (all on G0/2). > > CPU usage is very high due to interrupts: > > CPU utilization for five seconds: 62%/53%; one minute: 63%; five minutes: > 64% > > On my debugging I saw the *RP PAS iEdge output* increasing very much, but > didn't find any docs about iEdge. >
Iedge is intelligent services gateway search for ISG. The traffic below may be hitting a configured policy. Regards Brian > > PPPOE-BOX#sh ip cef switching statistics feature > IPv4 CEF input features: > Path Feature Drop Consume Punt Punt2Host Gave > route > RP PAS iEdge 891047 0 0 0 > 0 > Total 891047 0 0 0 > 0 > > IPv4 CEF output features: > Path Feature Drop Consume Punt Punt2Host New > i/f > RP PAS iEdge 7345601 0 0 0 > 0 > Total 7345601 0 0 0 > 0 > > > Some of the traffic I got on the debuggin ip cef drops (the source IP normally > is from google or akamai servers): > > *Jul 10 14:23:21.444: CEF-Drop: Packet from 208.117.252.52 (Gi0/1) to > xx.xx.xx.185 (Vi2.1174), Output feature iEdge > *Jul 10 14:23:21.444: ihl=20, length=1492, tos=0, ttl=58, checksum=65421, > offset=0 DF > *Jul 10 14:23:21.444: TCP src=80, dst=20172, seq=2348994103, > ack=2111570742, win=320 ACK > *Jul 10 14:23:21.444: CEF-Drop: Packet from 74.125.234.196 (Gi0/1) to > xx.xx.xx.40 (Vi2.42), Output feature iEdge > *Jul 10 14:23:21.444: ihl=20, length=1470, tos=0, ttl=58, checksum=14648, > offset=0 > *Jul 10 14:23:21.444: TCP src=443, dst=49451, seq=3087091975, > ack=922028286, win=1002 ACK > *Jul 10 14:23:21.444: CEF-Drop: Packet from 74.125.234.34 (Gi0/1) to > xx.xx.xx.90 (Vi2.1366), Output feature iEdge > *Jul 10 14:23:21.444: ihl=20, length=1470, tos=0, ttl=59, checksum=28825, > offset=0 > *Jul 10 14:23:21.444: TCP src=80, dst=2855, seq=1014058092, > ack=1851824944, win=63784 ACK > *Jul 10 14:23:21.448: CEF-Drop: Packet from 74.125.234.34 (Gi0/1) to > xx.xx.xx.90 (Vi2.1366), Output feature iEdge > *Jul 10 14:23:21.448: ihl=20, length=1470, tos=0, ttl=59, checksum=28824, > offset=0 > *Jul 10 14:23:21.448: TCP src=80, dst=2855, seq=1014059522, > ack=1851824944, win=63784 ACK > > Thanks for your attention! > > -- > > *Renato Ornelas | **Open X *- Soluções para ISPs > (31) 9145.0190 > [email protected] > http://www.openx.com.br > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ --- This e-mail is intended only for the addressee named above. As this e-mail may contain confidential or privileged information, if you are not the named addressee, you are not authorized to retain, read, copy or disseminate this message or any part of it. Please consider your environmental responsibility before printing this e-mail. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
