CPU usage of ASA in context mode

[mahesh18]

Hi Everyone,

Need to confirm if we need to check the CPU utilization of whole ASA which is in context mode------- is command

sh cpu usage context all ---this command shows us cpu usage of all the contexts in the box.

As we know that in context mode all ASA resources are shared.

So in case if we need to know the CPU usage of ASA as whole box should we combine the CPU usage of all the contexts

say admin has 20%

      system has 30%

     x  has 10%

So current cpu usage of whole box is 60%?

Also just curious to know when cpu usage of any context is considered high like if its more than 60 %?

Regards

MAhesh

[Jouni Forss · Accepted solution]

Hi Mahesh,

To my understanding the command

show cpu usage

In the System Context should give you a picture of the whole devices CPU usage

Same command entered inside a specific Context should to my understanding produce the CPU usage of a single Context.

As you say the command

show cpu usage context all

Should give you an overal view of the CPU usage of all contexts. If for example the virtual ASA is expiriencing high cpu load I would imagine that this command would be the one to detect which context inside the ASA has something going on that causes higher than normal stress to the ASAs recourses.

Here is a link to a Command Reference explaining the different commands a bit clearer

http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/s2.html#wp1610971

The command "show cpu usage" in System Context should give the same value as the "show cpu usage context all" to my understanding.

With regards to the CPU usage of the unit, I have not seen high CPU usage % in the units we handle. Most of them are high end ASA5585-X units so they can handle a lot more users than the previous models.

Think the last time I have seen high % counter in the tens of %s was with FWSMs. (Where we are migrating from)

I would have to say though that if a devive is constantly on an avarage of 60% CPU usage then its quite high. Atleast compared to what I have seen even with the 5510 and 5520 models that are in use on some business customers networks.

I could have checked some production devices but to be honest since its a weekend, they are on very low usage anyways so they dont give accurate information about normal usage.

- Jouni

[mahesh18]

Hi jouni,

I tested that sh cpu usage and sh cpu usage context all gives you same value.

So seems this is good way to test the CPU utilization of whole box either we can use command

sh cpu usage   or we can use sh cou usage context all  and add the 5 min usage of all the context it gives us same value.

Many thanks again for replying me back.

Best regards

MAhesh