Cisco 2921 high CPU Utilization

[Adnan Razi Khan]

Cisco 2921 is facing high cpu utilization. What is causing and how it can be fixed. Snap attached.

[Kasun Bandara]

@Adnan Razi Khan what is the OS version?

this can be due to bug. check OS version and make sure you are using fixed OS.

https://bst.cisco.com/bugsearch/bug/CSCua59544

[Flavio Miranda]

Hi

 The offender is Encrypt process. Do you have VPN on this router?

[Adnan Razi Khan]

We have DMVPN tunnels running.

Version 15.7(3)M8

[Flavio Miranda]

And it start out of nothing or did you added more tunnels recently?  How is your capacity x deployed tunnel?

Have you tried to reload the device in maintenance window ? 

The Cisco 2900 Series Module (ISM-VPN-29) can provide hardware-based IPSec encryption services of 145 and 550 Mbps in the Cisco 2901, 150 and 600 Mbps in the Cisco 2911, 220 and 700 Mbps in the Cisco 2921, and 385 and 900 Mbps in the Cisco 2951 (IPSec IMIX and 1400-byte packets).

[MHM Cisco World]

did you config any IPsec ?

[Adnan Razi Khan]

yes

I have attached output also for cpu 

[Adnan Razi Khan]

CPU utilization for five seconds: 94%/16%; one minute: 94%; five minutes: 94%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
339 6993308 9887191 707 51.47% 52.72% 53.77% 0 encrypt proc
181 3838608 10479250 366 23.58% 23.14% 22.00% 0 IP Input
510 22440 11266884 1 0.39% 0.33% 0.32% 0 IP SLAs Control
511 22624 11266784 2 0.39% 0.36% 0.33% 0 IP SLAs Responde
160 2520 1956 1288 0.39% 0.04% 0.09% 389 SSH Process

[Adnan Razi Khan]

Router also has subinterfaces for intervlan routing

[Adnan Razi Khan]

ANy solution to this issue. CPU is 95% and getting ping drop even to router subinterface from the directly connected switch.