Cisco 2620 low performance

[elointernet]

I'm having performance problems with a 2020 router. It's connect to the Internet backbone with only 2Mbps HDLC that is shared with many costomers.

The CPU is 99% busy even when the traffic is less than 2Mbps.

The fastethernet statistics says:

Output queue 0/40, 0 drops; input queue 76/75, 2152321 drops

5 minute input rate 934000 bits/sec, 1330 packets/sec

5 minute output rate 2250000 bits/sec, 1314 packets/sec

CPU utilization for five seconds: 99%/53%; one minute: 97%; five minutes: 95%

Is the input queue is very high ? (76/75) so it drop packets ?

What can I do, add memory ?

Thanks.

[rwiesmann]

Do you have any filtering (acl's) or policy routing in place?

Regards

Roger

[elointernet]

There is no policy routing. Some acl's is configured but applied only in serial interfaces.

I've already tried to remove all acls, but the problems continues.

...

Cisco Internetwork Operating System Software

IOS (tm) C2600 Software (C2600-I-M), Version 12.2(5d), RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2002 by cisco Systems, Inc.

Compiled Sat 02-Feb-02 03:36 by kellythw

Image text-base: 0x80008088, data-base: 0x80989870

ROM: System Bootstrap, Version 12.2(10r)1, RELEASE SOFTWARE (fc1)

rt2-26 uptime is 2 weeks, 2 hours, 35 minutes

System returned to ROM by power-on

System image file is "flash:c2600-i-mz.122-5d.bin"

cisco 2620 (MPC860) processor (revision 0x00) with 28672K/4096K bytes of memory.

Processor board ID JAD0643028C (2215344024)

M860 processor: part number 0, mask 49

Bridging software.

X.25 software, Version 3.0.0.

1 FastEthernet/IEEE 802.3 interface(s)

2 Serial(sync/async) network interface(s)

32K bytes of non-volatile configuration memory.

8192K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

[rwiesmann · Accepted solution]

Hard to tell.....what is your queuing strategy?

May be give a "sh ip int FastEthernet 0/1" along.

Ciao

Roger

[elointernet]

FastEthernet0/0 is up, line protocol is up

Internet address is 200.241.84.17/24

Broadcast address is 255.255.255.255

Address determined by non-volatile memory

MTU is 1500 bytes

Helper address is not set

Directed broadcast forwarding is disabled

Multicast reserved groups joined: 224.0.0.9

Outgoing access list is not set

Inbound access list is not set

Proxy ARP is enabled

Security level is default

Split horizon is enabled

ICMP redirects are always sent

ICMP unreachables are always sent

ICMP mask replies are never sent

IP fast switching is enabled

IP fast switching on the same interface is disabled

IP Flow switching is disabled

IP Feature Fast switching turbo vector

IP multicast fast switching is enabled

IP multicast distributed fast switching is disabled

IP route-cache flags are Fast

Router Discovery is disabled

IP output packet accounting is disabled

IP access violation accounting is disabled

TCP/IP header compression is disabled

RTP/IP header compression is disabled

Probe proxy name replies are disabled

Policy routing is disabled

Network address translation is disabled

WCCP Redirect outbound is disabled

WCCP Redirect inbound is disabled

WCCP Redirect exclude is disabled

BGP Policy Mapping is disabled

[elointernet]

I saw with that command that ip fast-switching on same interface was disabled. When I enabled it, the performance became so much better.

Now it is only 50% busy with 2200 packets/sec.

Thanks a lot.

[rwiesmann]

Hello again

Seams that you problem is partly solved....i still think 50 % ist quite busy.

I actually wanted to see the output of "sh int FastEthernet 0/1" to see the

queuing strategy. Somehow i wrote you the wrong command above.

So if like you can post also the output of this command.

Ciao

Roger

[elointernet]

No problems.

Thanks.

FastEthernet0/0 is up, line protocol is up

Internet address is xxx.xxx.xxx.xxx/24

Broadcast address is 255.255.255.255

Address determined by non-volatile memory

MTU is 1500 bytes

Helper address is not set

Directed broadcast forwarding is disabled

Multicast reserved groups joined: 224.0.0.9

Outgoing access list is not set

Inbound access list is not set

Proxy ARP is enabled

Security level is default

Split horizon is enabled

ICMP redirects are always sent

ICMP unreachables are always sent

ICMP mask replies are never sent

IP fast switching is enabled

IP fast switching on the same interface is enabled

IP Flow switching is disabled

IP Feature Fast switching turbo vector

IP multicast fast switching is enabled

IP multicast distributed fast switching is disabled

IP route-cache flags are Fast

Router Discovery is disabled

IP output packet accounting is disabled

IP access violation accounting is disabled

TCP/IP header compression is disabled

RTP/IP header compression is disabled

Probe proxy name replies are disabled

Policy routing is disabled

Network address translation is disabled

WCCP Redirect outbound is disabled

WCCP Redirect inbound is disabled

WCCP Redirect exclude is disabled

BGP Policy Mapping is disabled

[rwiesmann]

I meant the command without the ip ==> sh int FastEthernet0/1

You posted again the one with the ip ==> sh ip int FastEthenet0/1

Ciao

Roger

[elointernet]

Excuse me.

------------

FastEthernet0/0 is up, line protocol is up

Hardware is AmdFE, address is 000b.46d7.9100 (bia 000b.46d7.9100)

Internet address is xxx.xxx.xxx.xxx/24

MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

reliability 254/255, txload 5/255, rxload 3/255

Encapsulation ARPA, loopback not set

Keepalive set (10 sec)

Full-duplex, 100Mb/s, 100BaseTX/FX

ARP type: ARPA, ARP Timeout 04:00:00

Last input 00:00:00, output 00:00:00, output hang never

Last clearing of "show interface" counters never

Queueing strategy: fifo

Output queue 0/40, 0 drops; input queue 2/75, 2395567 drops

5 minute input rate 1441000 bits/sec, 2287 packets/sec

5 minute output rate 2312000 bits/sec, 2199 packets/sec

441036424 packets input, 331034859 bytes

Received 3945572 broadcasts, 0 runts, 0 giants, 0 throttles

749153 input errors, 749153 CRC, 376244 frame, 0 overrun, 0 ignored

0 watchdog

0 input packets with dribble condition detected

454137314 packets output, 1164475328 bytes, 0 underruns

0 output errors, 0 collisions, 4 interface resets

0 babbles, 0 late collision, 0 deferred

0 lost carrier, 0 no carrier

0 output buffer failures, 0 output buffers swapped out

[t.baranski]

Is CEF support on that device? My 2621's support it with IOS version 12.2(6r). Could lower the CPU usage even more...

[elointernet]

Is the command something like that ?

rt2-26(config-if)#ip cef accounting non-recursive ?

external Count input traffic in non-recursive external bin

internal Count input traffic in non-recursive internal bin

Thanks

[elointernet]

rt2-26(config-if)#ip route-cache cef

% Global CEF is not enabled

I think it is not supported :(

[rwiesmann]

Hi

Thanks for that output. You have a high counter of input errors and crc which provide a count of any errors that occured while trying to receive packets on this interface.

So i guess you still have a problem on the LAN Segment with other components.

The rest looks o.k for me. You probably could also get an optimisation if you

would enable cef.

Ciao

Roger

[elointernet]

Roger,

The input errors was due to force 100Mbps parameter that I set. I changed it to auto, and now there is no more input errors.

The ip cef command needs much more parameters. I dont know nothing about cef. Could you suggest what parameters should I use ?

Thanks a lot.