Here's the Virtual-Template1 config: interface Virtual-Template1 ip unnumbered GigabitEthernet0/1 no ip redirects no ip unreachables peer default ip address pool POOL0 ppp authentication pap grp_rad ppp authorization grp_rad ppp accounting grp_rad ppp ipcp dns xx.xx.xx.2 xx.xx.xx.2 end
How can i disable iedge? The only policies i have are policy-map to rate-limit the traffic. policy-map 50k class class-default police 50000 conform-action transmit exceed-action drop 2013/7/11 Brian Turnbow <[email protected]> > Hi, > > > Hello! > > > > I have a Cisco 7206-NPE-G1 (Version 15.2(4)M3) used as PPPOE access > server. > > > > With about 180Mbit/s (input traffic on G0/1) i have about 65% of CPU > usage > > (1.8k users, 75% CPU). Right now there's about 1450 PPPoE sessions up on > 26 > > VLANs (all on G0/2). > > > > CPU usage is very high due to interrupts: > > > > CPU utilization for five seconds: 62%/53%; one minute: 63%; five minutes: > > 64% > > > > On my debugging I saw the *RP PAS iEdge output* increasing very much, but > > didn't find any docs about iEdge. > > > > Iedge is intelligent services gateway search for ISG. > The traffic below may be hitting a configured policy. > > > > Regards > > Brian > > > > > > > PPPOE-BOX#sh ip cef switching statistics feature > > IPv4 CEF input features: > > Path Feature Drop Consume Punt Punt2Host Gave > > route > > RP PAS iEdge 891047 0 0 0 > > 0 > > Total 891047 0 0 0 > > 0 > > > > IPv4 CEF output features: > > Path Feature Drop Consume Punt Punt2Host > New > > i/f > > RP PAS iEdge 7345601 0 0 0 > > 0 > > Total 7345601 0 0 0 > > 0 > > > > > > Some of the traffic I got on the debuggin ip cef drops (the source IP > normally > > is from google or akamai servers): > > > > *Jul 10 14:23:21.444: CEF-Drop: Packet from 208.117.252.52 (Gi0/1) to > > xx.xx.xx.185 (Vi2.1174), Output feature iEdge > > *Jul 10 14:23:21.444: ihl=20, length=1492, tos=0, ttl=58, > checksum=65421, > > offset=0 DF > > *Jul 10 14:23:21.444: TCP src=80, dst=20172, seq=2348994103, > > ack=2111570742, win=320 ACK > > *Jul 10 14:23:21.444: CEF-Drop: Packet from 74.125.234.196 (Gi0/1) to > > xx.xx.xx.40 (Vi2.42), Output feature iEdge > > *Jul 10 14:23:21.444: ihl=20, length=1470, tos=0, ttl=58, > checksum=14648, > > offset=0 > > *Jul 10 14:23:21.444: TCP src=443, dst=49451, seq=3087091975, > > ack=922028286, win=1002 ACK > > *Jul 10 14:23:21.444: CEF-Drop: Packet from 74.125.234.34 (Gi0/1) to > > xx.xx.xx.90 (Vi2.1366), Output feature iEdge > > *Jul 10 14:23:21.444: ihl=20, length=1470, tos=0, ttl=59, > checksum=28825, > > offset=0 > > *Jul 10 14:23:21.444: TCP src=80, dst=2855, seq=1014058092, > > ack=1851824944, win=63784 ACK > > *Jul 10 14:23:21.448: CEF-Drop: Packet from 74.125.234.34 (Gi0/1) to > > xx.xx.xx.90 (Vi2.1366), Output feature iEdge > > *Jul 10 14:23:21.448: ihl=20, length=1470, tos=0, ttl=59, > checksum=28824, > > offset=0 > > *Jul 10 14:23:21.448: TCP src=80, dst=2855, seq=1014059522, > > ack=1851824944, win=63784 ACK > > > > Thanks for your attention! > > > > -- > > > > *Renato Ornelas | **Open X *- Soluções para ISPs > > (31) 9145.0190 > > [email protected] > > http://www.openx.com.br > > _______________________________________________ > > cisco-nsp mailing list [email protected] > > https://puck.nether.net/mailman/listinfo/cisco-nsp > > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > > --- > This e-mail is intended only for the addressee named above. > As this e-mail may contain confidential or privileged information, > if you are not the named addressee, you are not authorized to retain, read, > copy or disseminate this message or any part of it. > > Please consider your environmental responsibility before printing this > e-mail. > > > -- *Renato Ornelas | **Open X *- Soluções para ISPs (31) 9145.0190 [email protected] http://www.openx.com.br -- *Renato Ornelas | **Open X *- Soluções para ISPs (31) 9145.0190 [email protected] http://www.openx.com.br _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
