IOS IDS and Performance Impact

[adeelasher]

Dear All

I recently implement IOS IDS on CISO 7204,i have three 2 Mbps links terminated to my serials.

Problem i am facing is that when i implement IDS my router CPU load goes so high up 99% and then it stops working.

I implement the IDS on all serials in.

Following is the config of IDS.

ip audit name abc info action alarm

ip audit name abc attack action alarm

Is there any way to reduce CPU load??

[drolemc]

You should check if the high CPU utilization is seen only with IDS enabled or is that the case even when IDS is disabled. If the latter is true, bug CSCdx50230 might be the source. It talks about high CPU utilization on the 7200 with certain IOS versions. You might also want to refer to the document on troubleshooting high CPU utilization at http://www.cisco.com/warp/public/63/highcpu.html

[adeelasher]

Hi Folk

The cpu load witout IDS enabled is very low its between 30 to 40% which is the same as with my previous version of IOS. The CPU load is increased when i implement IDS.

Waiting for your kind reply.

[travis-dennis_2]

Try this IOS image. I think this will help you out.

http://www.cisco.com/cgi-bin/Software/Iosplanner/Planner-tool/iosplanner.cgi?get_crypto=&data_from=&hardware_name=7400&software_name=&release_name=&majorRel=12.3&state=:HW&type=