Hi guys
My cisco device is Router 2911.
When I apply an IPsec profile to the interface tunnel I have a problem in CPU usage being increased by Crypto IKEv2.
POL#show proc cpu sorted 1min | exclude 0.00%__0.00%__0.00%
CPU utilization for five seconds: 99%/2%; one minute: 99%; five minutes: 99%
And my configuration is:
crypto ikev2 proposal Proposal1
encryption aes-cbc-256
integrity sha512
group 16
!
crypto ikev2 policy policy1
proposal Proposal1
!
crypto ikev2 keyring Key1
peer Endpoint
address y.y.y.y m.m.m.m
pre-shared-key XXXXXXXXXXXXXXXXX
!
crypto ikev2 profile IKE-Profile
match identity remote address 0.0.0.0
authentication remote pre-share
authentication local pre-share
keyring local Key1
!
crypto ipsec transform-set TS1 esp-gcm 256
mode tunnel
!
crypto ipsec profile IPSEC-Profile
set transform-set TS1
set ikev2-profile IKE-Profile
!
what can I do to reduce CPU usage by Crypto IKEv2 or Crypto engine?
Thanks.
