Hi,
For your information G3 and SecureStack C3 are identical regarding ASICs and
software.
Probable cause of high CPU :
- after bootup, ssh key generation take at least 2 minutes to be generated, so
you will see high CPU utilization
- you are using ip secondary under many of your interfaces vlan. High CPU
utilization is seen when the routing is done between primary and secondary ip
address of the same interface.
You have disable icmp redirect in the global configuration, but not under
interface vlan, if it is not necessary for you disable it under interface
config. Minimum firmware version is 1.02.00.0043 this will make your ip
secondary route by hardware
In your case :
conf
no ip icmp redirect enable
interface vlan 10
no ip icmp redirect enable
interface vlan 11
no ip icmp redirect enable
interface vlan 12
no ip icmp redirect enable
interface vlan 13
no ip icmp redirect enable
interface vlan 14
no ip icmp redirect enable
interface vlan 110
no ip icmp redirect enable
interface vlan 1039
no ip icmp redirect enable
interface vlan 1040
no ip icmp redirect enable
interface vlan 1041
no ip icmp redirect enable
interface vlan 1252
no ip icmp redirect enable
interface vlan 3193
no ip icmp redirect enable
exit
exit
Suggestions :
- update to the last code if necessary
- try to avoid secondary ip address as possible
- try not to use broadcast or multicast, ghost unicast should be more efficient
with these products (G-Series/Securestack). Multicast is the best way but
actually the implementation is poor, Enterasys Roadmap indicates a complete
rewrite of this feature in a near future.
DFE, Platinum is the best choice for you for network routing, SecureStack
should be place at the distribution (without multicast routing) or edge level.
Cordialement,
Sylvain CONTI
Pilote Support Agence
+33 1 64 53 14 12 +33 6 78 78 07 47
INTEGRATEUR RESEAUX et SECURITE
Agence Ile de France, Parc Gutenberg - 11 voie La Cardon 91120 Palaiseau T
: +33 1 64 53 14 14 F : +33 1 64 53 14 02
Siège social, Espace Jacques Cartier BP 96031 35360 Montauban de Bretagne
T : +33 2 99 06 61 61 F : +33 2 99 06 36 36
[email protected] www.retis.fr
-----Message d'origine-----
De : Hugo Veiga [mailto:[email protected]]
Envoyé : samedi 14 février 2009 20:45
À : Enterasys Customer Mailing List
Objet : Re: AW: [enterasys] G3G124-24
Hi,
Ok,
Here goes the active config. I have the directed broadcast in 2 interfaces for
ghost purposes (witch by the way had a performance of 3,06Mb/s ).
I have installed the advanced Routing license and the IPV6-Routing license.
This is a work in progress config. Tomorow I'm going to activate multicast
(DVRMP and IGMP).
Regards,
Hugo Veiga
--------------
Stuff that has already tried and didn't fixed the problem:
clear config
no ip icmp redirect enable
--------------
---------------------------------------------
G3(su)->show config
This command shows non-default configurations only.
Use 'show config all' to show both default and non-default configurations.
begin
!
#***** NON-DEFAULT CONFIGURATION *****
!
!
#Router Configuration
router
enable
configure
ip route 0.0.0.0 0.0.0.0 192.168.79.254
ip route 192.168.208.0 255.255.255.0 10.10.254.180 no ip icmp redirect enable
interface vlan 10 no shutdown ip address 192.168.73.254 255.255.255.0 ip
address 192.168.52.254 255.255.255.0 secondary ip helper-address 192.168.72.1
ip directed-broadcast exit interface vlan 11 no shutdown ip address
192.168.74.254 255.255.255.0 ip address 10.4.4.254 255.255.255.0 secondary ip
helper-address 192.168.72.1 exit interface vlan 12 no shutdown ip address
192.168.75.254 255.255.255.0 ip helper-address 192.168.72.1 exit interface vlan
13 no shutdown ip address 192.168.76.254 255.255.255.0 ip helper-address
192.168.72.1 exit interface vlan 14 no shutdown ip address 192.168.77.254
255.255.255.0 ip helper-address 192.168.72.1 exit interface vlan 110 no
shutdown ip address 192.168.72.254 255.255.255.0 ip address 193.xxx.xxx.6
255.255.255.248 secondary ip directed-broadcast exit interface vlan 1039 no
shutdown ip address 192.168.79.253 255.255.255.248 exit interface vlan 1040 no
shutdown ip address 10.10.254.179 255.255.255.248 exit interface vlan 1041 no
shutdown ip address 10.10.254.188 255.255.255.248 exit interface vlan 1252 no
shutdown ip address 192.168.252.254 255.255.255.0 ip address 193.xxx.xxx.190
255.255.255.192 secondary ip helper-address 10.253.1.253 exit interface vlan
3193 no shutdown ip address 10.30.193.254 255.255.255.0 exit exit exit exit
#arp
!
#arpinspection
!
#banner
!
#cdp
!
#ciscodp
!
#console
!
#dhcps
!
#dhcpsnooping
!
#eapol
!
#flowcontrol
!
#garp
!
#gvrp
set gvrp disable
!
#history
!
#igmp
!
#inlinepower
!
#ip
set ip address 10.254.252.0 mask 255.255.0.0 gateway 10.254.254.254 !
#ipv6
!
#lacp
!
#length
!
#lldp
!
#linkflap
!
#logging
!
#logout
!
#mac
!
#macauthentication
!
#maclock
!
#mtu
!
#multiauth
!
#newaddrtrap
!
#nodealias
!
#cos setting
!
#cos state
!
#cos port-config
!
#cos port-resource
!
#cos reference
!
#policy
!
#port
!
#prompt
!
#pwa
!
#radius
!
#rmon alarm
!
#rmon capture
!
#rmon channel
!
#rmon event
!
#rmon filter
!
#rmon history
!
#rmon stats
!
#snmp
set snmp access ro security-model v1 exact read All notify All nonvolatile set
snmp access ro security-model v2c exact read All notify All nonvolatile set
snmp access public security-model v1 exact read All write All notify All
nonvolatile set snmp access public security-model v2c exact read All write All
notify All nonvolatile set snmp access public security-model usm exact read All
write All notify All nonvolatile set snmp community
:3fb03022e4966512343b511c263dcf1240739359ec6cad7d8c6277007e7e0657521e0641967b150156:
set snmp group ro user ro security-model v1 set snmp group public user public
security-model v1 set snmp group ro user ro security-model v2c set snmp group
public user public security-model v2c set snmp group public user public
security-model usm set snmp user public authentication md5
:597f77d61b03c8a3b9c35fbba83651fb: privacy
:597f77d61b03c8a3b9c35fbba83651fb:
set snmp view viewname All subtree 1
!
#sntp
!
#spantree
!
#ssh
!
#ssl
!
#summertime
!
#system
set system login admin super-user enable password
:5d2a51c578ae9719b864ea446a403a58093d83c912a3a611513aac3f3f317f26095e45101d39021e5d:
set system login ro read-only enable password
:5d2a51c578ae9719b864ea446a403a58093d83c912a3a611513aac3f3f317f26095e45101d39021e5d:
set system login rw read-write enable password
:5d2a51c578ae9719b864ea446a403a58093d83c912a3a611513aac3f3f317f26095e45101d39021e5d:
set system login LOCALusr super-user enable password
:19a940d3a6e6cbdf1c54395411027252ee477bd8b7a37276d84bf423d236674ff977a82aee08bb1e03:
!
#telnet
!
#tftp
!
#timezone
!
#vlan
set vlan create 10
set vlan create 11
set vlan create 12
set vlan create 13
set vlan create 14
set vlan create 110
set vlan create 1039
set vlan create 1040
set vlan create 1041
set vlan create 1252
set vlan create 2047
set vlan create 3193
set vlan name 10 "alunos"
set vlan name 11 "docentes"
set vlan name 12 "centro_multimedia"
set vlan name 13 "bib_alunos"
set vlan name 14 "funcionarios"
set vlan name 110 "servidores"
set vlan name 1039 "routing_Cisco-E1"
set vlan name 1040 "routing_RPAC"
set vlan name 1041 "ROUTING_PIVAPS"
set vlan name 1252 "VLAN-eU"
set vlan name 2047 "VLANmngt"
set vlan name 3193 "VOIP-Equipamentos"
clear vlan egress 1 ge.1.1-24;ge.2.1-24;lag.0.1-6 set vlan egress 10
ge.1.24;ge.2.1-8;ge.2.12-13 tagged set vlan egress 11
ge.1.24;ge.2.1-3;ge.2.12-13 tagged set vlan egress 12 ge.1.24;ge.2.2-3;ge.2.13
tagged set vlan egress 13 ge.1.24;ge.2.2-3;ge.2.13 tagged set vlan egress 14
ge.1.24;ge.2.2-3;ge.2.13 tagged set vlan egress 110 ge.1.24;ge.2.1-3 tagged set
vlan egress 1039 ge.1.24;ge.2.2-3 tagged set vlan egress 1040
ge.1.24;ge.2.2-3;ge.2.13 tagged set vlan egress 1041 ge.1.24;ge.2.2-3 tagged
set vlan egress 1252 ge.1.24;ge.2.1-3;ge.2.7;ge.2.12 tagged set vlan egress
2047 ge.1.24;ge.2.1-8;ge.2.12-13 tagged set vlan egress 3193 ge.1.24;ge.2.1-3
tagged set host vlan 2047 !
#vlanauthorization
!
#webview
!
#width
!
end
----------------------------------------------
----------------------------------------------
G3(su)->show port status
Alias Oper Admin Speed
Port (truncated) Status Status (bps) Duplex Type
--------- ------------ ------- ------- --------- ------- ------------
ge.1.1 Down Up N/A N/A BaseT RJ45
ge.1.2 Down Up N/A N/A BaseT RJ45
ge.1.3 Down Up N/A N/A BaseT RJ45
ge.1.4 Down Up N/A N/A BaseT RJ45
ge.1.5 Down Up N/A N/A BaseT RJ45
ge.1.6 Down Up N/A N/A BaseT RJ45
ge.1.7 Down Up N/A N/A BaseT RJ45
ge.1.8 Down Up N/A N/A BaseT RJ45
ge.1.9 Down Up N/A N/A BaseT RJ45
ge.1.10 Down Up N/A N/A BaseT RJ45
ge.1.11 Down Up N/A N/A BaseT RJ45
ge.1.12 Down Up N/A N/A BaseT RJ45
ge.1.13 Down Up N/A N/A BaseT RJ45
ge.1.14 Down Up N/A N/A BaseT RJ45
ge.1.15 Down Up N/A N/A BaseT RJ45
ge.1.16 Down Up N/A N/A BaseT RJ45
ge.1.17 Down Up N/A N/A BaseT RJ45
ge.1.18 Down Up N/A N/A BaseT RJ45
ge.1.19 Down Up N/A N/A BaseT RJ45
ge.1.20 Down Up N/A N/A BaseT RJ45
ge.1.21 Down Up N/A N/A BaseT RJ45
ge.1.22 Down Up N/A N/A BaseT RJ45
ge.1.23 Down Up N/A N/A Combo RJ45/SFP
ge.1.24 Down Up N/A N/A Combo RJ45/SFP
ge.2.1 Up Up 1.0G full 1000BASE-SX
ge.2.2 Up Up 1.0G full 1000BASE-SX
ge.2.3 Up Up 1.0G full 1000BASE-SX
ge.2.4 Up Up 1.0G full 1000BASE-SX
ge.2.5 Up Up 1.0G full 1000BASE-SX
ge.2.6 Up Up 1.0G full 1000BASE-SX
ge.2.7 Up Up 1.0G full 1000BASE-SX
ge.2.8 Up Up 1.0G full 1000BASE-SX
ge.2.9 Down Up N/A N/A SFP
ge.2.10 Down Up N/A N/A SFP
ge.2.11 Down Up N/A N/A SFP
ge.2.12 Up Up 1.0G full 1000BASE-SX
ge.2.13 Up Up 1.0G full SFP
ge.2.14 Down Up N/A N/A SFP
ge.2.15 Down Up N/A N/A SFP
ge.2.16 Down Up N/A N/A SFP
ge.2.17 Down Up N/A N/A SFP
ge.2.18 Down Up N/A N/A SFP
ge.2.19 Down Up N/A N/A SFP
ge.2.20 Down Up N/A N/A SFP
ge.2.21 Down Up N/A N/A SFP
ge.2.22 Down Up N/A N/A SFP
ge.2.23 Down Up N/A N/A SFP
ge.2.24 Down Up N/A N/A SFP
lag.0.1 Down Up lag
lag.0.2 Down Up lag
lag.0.3 Down Up lag
lag.0.4 Down Up lag
lag.0.5 Down Up lag
lag.0.6 Down Up lag
-----------------------------------------------
> Hello hugo !
>
> Please send me the configuration of the G3. I would like to see the routing
> config.
> It seems to be a routing issue like the problems we had with C3 switches.
>
> Volker
> Volker Kull
>
> BELL Computer-Netzwerke GmbH
> Ohmstr. 6 - 76229 Karlsruhe (Germany)
> Tel: +49 721/6624993-0 Fax: +49 721/6624993-30
> Email: [email protected]
>
> ----- Originalnachricht -----
> Von: Hugo Veiga <[email protected]>
> An: Enterasys Customer Mailing List <[email protected]>
> Gesendet: Sat Feb 14 00:29:38 2009
> Betreff: [enterasys] G3G124-24
>
> Hi,
>
>
> We are testing G3G124-24 and the cpu values are incredibly high (68%
> and higher).
>
> The equipment as almost no traffic and only a few ports connected.
>
> We tested with no ports connected (only the console) and there were
> cpu values of 20% and more.
>
> Has any one found the same problem?
>
> I really need feedback otherwise we will not buy it.
>
>
> Regards,
> Hugo Veiga
>
>
>
> --------------------
> G3(su)->show system utilization cpu
>
> CPU Utilization Threshold Traps enable: Threshold = 80.0%
>
> Total CPU Utilization:
>
> Switch CPU 5 sec 1 min 5 min
> -------------------------------------------------
> 1 1 68% 68% 68%
>
> G3(su)->show system utilization cpu
>
> CPU Utilization Threshold Traps enable: Threshold = 80.0%
>
> Total CPU Utilization:
>
> Switch CPU 5 sec 1 min 5 min
> -------------------------------------------------
> 1 1 66% 67% 67%
>
> G3(su)->show system utilization cpu
>
> CPU Utilization Threshold Traps enable: Threshold = 80.0%
>
> Total CPU Utilization:
>
> Switch CPU 5 sec 1 min 5 min
> -------------------------------------------------
> 1 1 70% 67% 67%
>
> G3(su)->show system utilization
>
> CPU Utilization Threshold Traps enable: Threshold = 80.0%
>
> Total CPU Utilization:
>
> Switch CPU 5 sec 1 min 5 min
> -------------------------------------------------
> 1 1 74% 69% 69%
>
>
> Switch:1 CPU:1
>
> TID Name 5Sec 1Min 5Min
> ----------------------------------------------------------
> 99ddc40 tcdpSendTask 0.00% 0.02% 0.02%
> a716818 ARP Timer 0.00% 0.12% 0.04%
> a81dd00 tArpCallback 0.00% 0.19% 0.12%
> a9dcfa8 ipMapForwardingTask 46.80% 46.10% 47.36%
> aaeb400 dot3ad_lac_task 0.00% 0.00% 0.00%
> b0fab48 dot1s_task 0.00% 0.00% 0.01%
> b10ad58 dot1s_timer_task 0.40% 0.06% 0.02%
> bba4dc8 RMONTask 1.60% 0.39% 0.28%
> bbe5928 SNMPTask 2.80% 0.83% 0.33%
> bcb3ed0 EDB BXS Resp 0.00% 0.02% 0.04%
> c745048 hapiRxTask 4.00% 3.80% 3.00%
> d3312e0 lvl7TaskUtilMonitorTas 0.40% 0.40% 0.40%
> df2cd88 bcmLINK.2 0.80% 0.26% 0.34%
> df31060 bcmLINK.1 0.00% 0.10% 0.17%
> df35338 bcmLINK.0 0.00% 0.01% 0.02%
> e6f5eb0 MAC Age Task 0.40% 0.17% 0.14%
> e9c72c8 bcmRX 5.60% 5.35% 5.84%
> ea689b0 bcmCNTR.2 0.40% 0.31% 0.22%
> eadd130 bcmL2X.2 0.00% 1.63% 2.54%
> f33a610 bcmCNTR.1 0.00% 0.19% 0.15%
> f3a2d70 bcmL2X.1 5.20% 4.26% 2.76%
> f3f43e8 bcmTX 5.20% 4.91% 5.19%
> f409230 bcmCNTR.0 0.40% 0.25% 0.18%
> f449d60 bcmL2X.0 0.00% 0.04% 0.01%
>
> Storage Utilization:
> Type Description Size(Kb) Available (Kb)
> ---------------------------------------------------------------
> RAM RAM device 262140 107848
> Flash Images, Config, Other 31484 13748
>
>
>
>
> G3(su)->show system hardware
> SLOT 1 HARDWARE INFORMATION
> ---------------------------
> Model: G3G124-24
> Serial Number: 08461082905C
> Vendor ID: 0xbc00
> Base MAC Address: 00:1F:45:1A:05:2E
> Hardware Version: BCM56514 REV 1
> FirmWare Version: 01.02.03.0010
> Boot Code Version: 01.00.46
>
> SLOT 2 HARDWARE INFORMATION
> ---------------------------
> Model: G3G-24SFP
> Serial Number: 08260122905B
> Vendor ID: 0xbc00
> Base MAC Address: 00:1F:45:1A:05:2E
> Hardware Version: BCM56512 REV 1
> FirmWare Version: 01.02.03.0010
> Boot Code Version: 01.00.46
>
> SLOT 3 HARDWARE INFORMATION
> ---------------------------
> Slot is not present.
>
> SLOT 4 HARDWARE INFORMATION
> ---------------------------
> Slot is not present.
>
> POWER SUPPLY 2 HARDWARE INFORMATION
> -----------------------------------
> Model: 1498
> Serial Number: 002808
> Wattage: 400
> Software Version: A109
> Revision: A1
>
>
>
>
>
>
> UBI amiga do ambiente: Antes de imprimir este e-mail pense bem se tem mesmo
> que o fazer. As árvores são um bem imprescindível.
>
> ---
> To unsubscribe from enterasys, send email to [email protected] with the
> body: unsubscribe enterasys [email protected]
>
> ---
> To unsubscribe from enterasys, send email to [email protected] with the
> body: unsubscribe enterasys [email protected]
UBI amiga do ambiente: Antes de imprimir este e-mail pense bem se tem mesmo que
o fazer. As árvores são um bem imprescindível.
---
To unsubscribe from enterasys, send email to [email protected] with the body:
unsubscribe enterasys [email protected]
---
To unsubscribe from enterasys, send email to [email protected] with the body:
unsubscribe enterasys [email protected]
