07-30-2012 05:50 AM - edited 03-04-2019 05:06 PM
hi ,
recently i was uisng router 7206 as router gateway and the cache working fine and the max cpu was 50 %
now , i copied the config and pasted it in another router cisco 7600
every thing is fine , but i note the cpu is increasing and reached up to 85 %% !!!!!!!!!!!!!!
i just shutdown the cache server and the cpu became 3 % !!!!!!!!!!!!
which mean that the cache server is utilizng all of my cpu .!!!!!!
actually , there are some config wasnt accepted in 7600 which is under interface command
duplex full
speed auto
media-type rj45
negotiation auto
but i think that these lines has no affect in cache server cpu .
i will pase my config of cache with config of interfaces , whch is currently in 7600
my question is how to start troubleshooting the cpu utilization because of cache ?
my issue is when i was using 7206 the cpu biggest value was 50 % when cache is full loaded . but in 7600 the utilization reached 85 % and still increasing !!
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
ip wccp 80 redirect-list CACHE80
ip wccp 90 redirect-list CACHE90
!
interface GigabitEthernet1/1
description zzz
bandwidth 230000
ip address 10.160.150.2 255.255.255.0
ip wccp 80 redirect in
ip policy route-map CACHE-REDIRECT
load-interval 30
!
interface GigabitEthernet1/2
description Cache
bandwidth 150000
ip address xxxxxxxx 255.255.255.248
ip wccp redirect exclude in
load-interval 30
!
interface GigabitEthernet1/3
description Internet from uuuuuuu
bandwidth 230000
ip address xxxxxxxxx 255.255.255.252
ip wccp 90 redirect in
load-interval 30
!
interface GigabitEthernet1/3.11
description Internet From rrrr
encapsulation dot1Q 11
ip address xxxxx
ip wccp 90 redirect in
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
07-30-2012 05:51 AM
i think that 7600 router has a default config of startup config .
could this affect and make any issue ??
regards
07-30-2012 06:06 AM
The 7600 has dedicated ASICs for WCCP thus the impact to the CPU is minimal.
The 7200 processes all packets on the CPU but you can alleviate this impact by using the following command under each of the interfaces where WCCP is enabled:
ip route-cache same-interface.
This will enable fast switching on packets which are switch out of the same interface they arrived.
http://www.cisco.com/en/US/docs/ios/ipswitch/command/reference/isw_i1.html#wp1085449
Regards,
Edison
07-30-2012 06:09 AM
hi , Edison
im asking about 7600 and the problem is in 7600 not in 7206 ,
do you mean configuring the command
ip route-cache same-interface.
on router 7600 ???
regards
07-30-2012 06:44 AM
Sorry, I misread your question. I originally read you were moving from a 7600 to a 7200. My apologies.
Can you post your redirect-list (CACHE80 and CACHE90)?
There are some caveats when building redirect-list on hardware-assisted platforms such as the 7600.
No, you don't enter the 'ip route-cache same-interface' on the 7600 box.
Regards,
Edison
07-30-2012 07:07 AM
hi ,
Edison
its okay
im versy sorry for hiding ips for privacy.
here is config :
Gateway7600#sh ip access-lists CACHE80
Extended IP access list CACHE80
10 deny tcp any hostzz.zz.4.69 eq www
20 deny tcp host xx.xx.67.253 any eq www
30 deny tcp any host zz.zz.92.59 eq www (316 matches)
40 permit tcp xxxx.68.0 0.0.3.255 any eq www (115010480 matches)
50 permit tcp xx.xx.72.0 0.0.3.255 any eq www (88556023 matches)
60 permit tcp xx.xx.76.0 0.0.3.255 any eq www (59342978 matches)
70 permit tcp xx.xx.67.0 0.0.0.255 any eq www (15182404 matches)
%%%%%%%%%%%%%%%%%%%%%%
Gateway7600#sh ip access-lists CACHE90
Extended IP access list CACHE90
10 permit tcp any xx.xx.67.0 0.0.0.255 (417403 matches)
20 permit tcp any xx.xx.68.0 0.0.3.255 (3551977 matches)
30 permit tcp any xx.xx.72.0 0.0.3.255 (2701614 matches)
40 permit tcp any xx.xx.76.0 0.0.3.255 (1671664 matches)
07-30-2012 07:21 AM
Your ACL looks fine.
Please post the output from the following commands:
show ip cef switching stat
show ip cef switch stat fea
show process cpu | exclude 0.00
show ip wccp
show ip wccp interface detail
show ip wccp web-cache service
show ip wccp web-cache detail
show tcam counts
show mls netflow table-contention aggregate
show mls netflow table-contention detail
show mls netflow ip counts
show mls netflow ip sw-installed
show mls statistics
07-30-2012 07:47 AM
sorry again for hiding ips ,note that xxx is the same as xx in the redirect-list
please dont put me down , i want to install 7600 with cahe and wish doing that without problems
%%%%%%%%%%%%%%%%%%%%%%%
Gateway7600#show ip cef switching stat
Reason Drop Punt Punt2Host
RP LES No route 0 0 12
RP LES Packet destined for us 0 79518 0
RP LES Incomplete adjacency 122556 0 0
RP LES TTL expired 0 0 1045
RP LES IP redirects 0 0 46
RP LES Neighbor resolution req 69 7 0
RP LES Total 122625 79525 1103
All Total 122625 79525 1103
Gateway7600#show ip cef switch stat fea
IPv4 CEF input features:
Feature Drop Consume Punt Punt2Host Gave route
Policy Routing 0 0 0 0 284112859
Total 0 0 0 0 284112859
IPv4 CEF output features:
Feature Drop Consume Punt Punt2Host New i/f
Total 0 0 0 0 0
IPv4 CEF post-encap features:
Feature Drop Consume Punt Punt2Host New i/f
Total 0 0 0 0 0
IPv4 CEF for us features:
Feature Drop Consume Punt Punt2Host New i/f
Total 0 0 0 0 0
IPv4 CEF punt features:
Feature Drop Consume Punt Punt2Host New i/f
Total 0 0 0 0 0
IPv4 CEF local features:
Feature Drop Consume Punt Punt2Host Gave route
Total 0 0 0 0 0
Gateway7600#show process cpu | exclude 0.00
CPU utilization for five seconds: 69%/69%; one minute: 75%; five minutes: 58%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
2 41592 36229 1148 0.08% 0.05% 0.05% 0 Load Meter
13 92628 390753 237 0.08% 0.16% 0.15% 0 ARP Input
232 184824 380647 485 0.08% 0.22% 0.23% 0 IP Input
270 19756 22897940 0 0.08% 0.03% 0.04% 0 Ethernet Msec Ti
339 11100 59525 186 0.16% 0.10% 0.11% 5 Virtual Exec
541 113176 427936 264 0.08% 0.02% 0.01% 0 Port manager pe
Gateway7600#show ip wccp
Global WCCP information:
Router information:
Router Identifier: hh.hh.66.78
Protocol Version: 2.0
Service Identifier: 80
Number of Service Group Clients: 1
Number of Service Group Routers: 1
Total Packets Redirected: 2055832
Process: 0
CEF: 2055832
Service mode: Open
Service Access-list: -none-
Total Packets Dropped Closed: 0
Redirect access-list: CACHE80
Total Packets Denied Redirect: 615
Total Packets Unassigned: 199019
Group access-list: -none-
Total Messages Denied to Group: 0
Total Authentication failures: 0
Total GRE Bypassed Packets Received: 0
Process: 0
CEF: 0
Service Identifier: 90
Number of Service Group Clients: 1
Number of Service Group Routers: 1
Total Packets Redirected: 99681
Process: 0
CEF: 99681
Service mode: Open
Service Access-list: -none-
Total Packets Dropped Closed: 0
Redirect access-list: CACHE90
Total Packets Denied Redirect: 1
Total Packets Unassigned: 254204
Group access-list: -none-
Total Messages Denied to Group: 0
Total Authentication failures: 0
Total GRE Bypassed Packets Received: 0
Process: 0
CEF: 0
Gateway7600#
Gateway7600#
Gateway7600#show ip wccp interface detail
WCCP interface configuration details:
GigabitEthernet1/1
Output services: 0
Input services: 1
Dynamic: 80
Mcast services: 0
Exclude In: FALSE
GigabitEthernet1/2
Output services: 0
Input services: 0
Mcast services: 0
Exclude In: TRUE
GigabitEthernet1/3
Output services: 0
Input services: 1
Dynamic: 90
Mcast services: 0
Exclude In: FALSE
GigabitEthernet1/3.11
Output services: 0
Input services: 1
Dynamic: 90
Mcast services: 0
Exclude In: FALSE
Gateway7600#
Gateway7600#
Gateway7600#show ip wccp web-cache service
The WCCP service specified does not exist.
Gateway7600#show ip wccp web-cache detail
The WCCP service specified does not exist.
Gateway7600#show tcam counts
Used Free Percent Used Reserved
---- ---- ------------ --------
Labels:(in) 6 4090 0
Labels:(eg) 2 4094 0
ACL_TCAM
--------
Masks: 43 4053 1 72
Entries: 102 32666 0 576
QOS_TCAM
--------
Masks: 4 4092 0 18
Entries: 22 32746 0 144
LOU: 0 128 0
ANDOR: 0 16 0
ORAND: 0 16 0
ADJ: 5 2043 0
Gateway7600#show mls netflow table-contention aggregate
Earl in Module 1
Aggregate Netflow CAM Contention Information
=============================================
Netflow Creation Failures : 10604563
Netflow Hash Aliases : 0
Gateway7600#show mls netflow table-contention detail
Earl in Module 1
Detailed Netflow CAM (TCAM and ICAM) Utilization
================================================
TCAM Utilization : 100%
ICAM Utilization : 4%
Netflow TCAM count : 130950
Netflow ICAM count : 6
Netflow Creation Failures : 49585
Netflow CAM aliases : 0
Gateway7600#show mls netflow ip counts
^
% Invalid input detected at '^' marker.
Gateway7600#show mls netflow ip coun
Gateway7600#show mls netflow ip count
Displaying Netflow entries in Supervisor Earl
Number of shortcuts = 130948
Gateway7600#show mls netflow ip sw-installed
Displaying Netflow entries in Supervisor Earl
DstIP SrcIP Prot:SrcPort:DstPort Src i/f :AdjPtr
-----------------------------------------------------------------------------
Pkts Bytes Age LastSeen Attributes
---------------------------------------------------
xx.xx.68.205 zzz.zzz.66.24 tcp :www :50874 Gi1/3.11 :0x80002
11 15862 236 13:49:13 L3 - SwInstalled
xx.xx.77.76 zzz.zzz.66.23 tcp :www :50687 Gi1/3.11 :0x80002
11 15972 236 13:49:14 L3 - SwInstalled
xx.xx.69.187 zzz.zzz.66.23 tcp :www :50922 Gi1/3.11 :0x80002
13 18876 236 13:49:11 L3 - SwInstalled
xx.xx.70.95 207.241.236.224 tcp :www :51811 Gi1/3.11 :0x80002
3 4356 236 13:48:25 L3 - SwInstalled
xx.xx.72.24 173.194.67.104 tcp :www :12777 Gi1/3.11 :0x80002
10 14400 236 13:49:14 L3 - SwInstalled
xx.xx.73.34 173.194.5.38 tcp :www :20333 Gi1/3.11 :0x80002
4 5760 236 13:49:35 L3 - SwInstalled
xx.xx.74.20 178.79.198.147 tcp :www :65270 Gi1/3.11 :0x80002
9 10256 236 13:50:23 L3 - SwInstalled
xx.xx.74.201 zzz.zzz.66.24 tcp :www :18370 Gi1/3.11 :0x80002
12 17280 236 13:49:12 L3 - SwInstalled
xx.xx.76.86 79.140.80.17 tcp :www :57835 Gi1/3.11 :0x80002
6 8712 236 13:50:49 L3 - SwInstalled
xx.xx.73.61 zzz.zzz.66.17 tcp :www :11351 Gi1/3.11 :0x80002
11 15840 236 13:49:14 L3 - SwInstalled
xx.xx.74.198 zzz.zzz.66.19 tcp :www :61514 Gi1/3.11 :0x80002
11 15972 236 13:49:02 L3 - SwInstalled
xx.xx.76.9 87.98.209.3 tcp :www :11001 Gi1/3.11 :0x80002
5 7200 236 13:49:27 L3 - SwInstalled
xx.xx.77.79 66.220.152.32 tcp :www :12945 Gi1/3.11 :0x80002
2 2880 236 13:48:28 L3 - SwInstalled
xx.xx.70.131 173.194.5.141 tcp :www :10370 Gi1/3.11 :0x80002
5 7200 236 13:49:24 L3 - SwInstalled
xx.xx.78.3 zzz.zzz.66.20 tcp :www :10270 Gi1/3.11 :0x80002
11 15840 236 13:49:06 L3 - SwInstalled
xx.xx.70.136 zzz.zzz.66.22 tcp :www :3911 Gi1/3.11 :0x80002
12 16800 236 13:49:13 L3 - SwInstalled
xx.xx.72.67 zzz.zzz.66.23 tcp :www :21061 Gi1/3.11 :0x80002
13 18720 236 13:49:11 L3 - SwInstalled
xx.xx.73.185 zzz.zzz.66.22 tcp :www :16748 Gi1/3.11 :0x80002
14 20160 236 13:49:14 L3 - SwInstalled
xx.xx.69.192 173.194.5.8 tcp :www :16808 Gi1/3.11 :0x80002
3 4320 236 13:50:06 L3 - SwInstalled
xx.xx.78.25 zzz.zzz.66.23 tcp :www :49356 Gi1/3.11 :0x80002
11 15972 236 13:49:12 L3 - SwInstalled
xx.xx.74.205 zzz.zzz.66.17 tcp :www :11693 Gi1/3.11 :0x80002
13 18720 236 13:49:15 L3 - SwInstalled
xx.xx.75.212 69.171.224.53 tcp :www :14515 Gi1/3.11 :0x80002
6 8640 236 13:49:13 L3 - SwInstalled
xx.xx.67.26 199.91.153.58 tcp :www :16488 Gi1/3.11 :0x80002
2 2904 236 13:49:18 L3 - SwInstalled
xx.xx.72.237 198.78.208.254 tcp :www :53604 Gi1/3.11 :0x80002
5 7260 236 13:49:31 L3 - SwInstalled
xx.xx.75.9 zzz.zzz.66.19 tcp :www :49459 Gi1/3.11 :0x80002
12 17424 236 13:49:13 L3 - SwInstalled
xx.xx.74.79 zzz.zzz.66.18 tcp :www :12560 Gi1/3.11 :0x80002
13 18720 236 13:49:10 L3 - SwInstalled
xx.xx.72.155 178.79.198.135 tcp :www :21817 Gi1/3.11 :0x80002
11 13052 236 13:50:04 L3 - SwInstalled
xx.xx.72.185 212.150.101.6 tcp :www :11604 Gi1/3.11 :0x80002
25 36000 236 13:48:58 L3 - SwInstalled
xx.xx.78.49 zzz.zzz.66.21 tcp :www :56324 Gi1/3.11 :0x80002
10 14520 236 13:49:10 L3 - SwInstalled
xx.xx.70.175 178.79.198.146 tcp :www :11769 Gi1/3.11 :0x80002
9 10172 236 13:50:19 L3 - SwInstalled
xx.xx.74.70 173.194.5.145 tcp :www :3593 Gi1/3.11 :0x80002
5 7260 236 13:50:53 L3 - SwInstalled
xx.xx.73.253 zzz.zzz.66.17 tcp :www :10482 Gi1/3.11 :0x80002
11 15840 236 13:49:12 L3 - SwInstalled
xx.xx.70.55 78.140.176.225 tcp :www :3224 Gi1/3.11 :0x80002
5 7260 236 13:48:20 L3 - SwInstalled
xx.xx.70.246 95.211.138.16 tcp :www :14537 Gi1/3.11 :0x80002
6 8640 236 13:49:15 L3 - SwInstalled
xx.xx.70.78 zzz.zzz.66.21 tcp :www :24618 Gi1/3.11 :0x80002
9 12960 236 13:49:04 L3 - SwInstalled
xx.xx.76.99 15.192.45.138 tcp :www :15200 Gi1/3.11 :0x80002
7 9940 236 13:50:28 L3 - SwInstalled
xx.xx.74.29 69.171.224.53 tcp :www :49438 Gi1/3.11 :0x80002
2 2904 236 13:48:31 L3 - SwInstalled
xx.xx.70.47 zzz.zzz.66.24 tcp :www :12475 Gi1/3.11 :0x80002
12 17280 236 13:49:00 L3 - SwInstalled
xx.xx.68.190 zzz.zzz.83.194 tcp :www :50422 Gi1/3.11 :0x80002
3 4356 236 13:47:42 L3 - SwInstalled
xx.xx.74.158 69.171.224.37 tcp :www :10547 Gi1/3.11 :0x80002
3 4356 236 13:48:33 L3 - SwInstalled
xx.xx.72.125 199.91.154.147 tcp :www :22782 Gi1/3.11 :0x80002
5 7200 236 13:48:57 L3 - SwInstalled
xx.xx.76.102 23.62.236.17 tcp :www :10273 Gi1/3.11 :0x80002
7 10080 236 13:50:10 L3 - SwInstalled
xx.xx.67.150 95.211.105.156 tcp :www :58103 Gi1/3.11 :0x80002
6 8712 236 13:49:42 L3 - SwInstalled
xx.xx.73.6 173.194.5.244 tcp :www :28819 Gi1/3.11 :0x80002
5 7260 236 13:49:39 L3 - SwInstalled
xx.xx.74.201 zzz.zzz.66.24 tcp :www :18368 Gi1/3.11 :0x80002
9 12960 236 13:49:13 L3 - SwInstalled
xx.xx.75.163 184.172.142.179 tcp :www :14320 Gi1/3.11 :0x80002
6 8640 236 13:49:05 L3 - SwInstalled
xx.xx.74.167 zzz.zzz.66.18 tcp :www :13520 Gi1/3.11 :0x80002
13 18720 236 13:49:13 L3 - SwInstalled
xx.xx.78.3 zzz.zzz.66.20 tcp :www :11011 Gi1/3.11 :0x80002
14 20160 236 13:49:14 L3 - SwInstalled
xx.xx.71.153 zzz.zzz.66.23 tcp :www :11198 Gi1/3.11 :0x80002
8 11520 236 13:48:45 L3 - SwInstalled
xx.xx.75.240 85.17.127.65 tcp :www :1983 Gi1/3.11 :0x80002
3 4356 236 13:49:18 L3 - SwInstalled
xx.xx.70.117 173.194.78.154 tcp :www :42359 Gi1/3.11 :0x80002
4 2728 134 13:50:11 L3 - SwInstalled
xx.xx.67.159 208.111.185.156 tcp :www :20828 Gi1/3.11 :0x80002
8 8732 236 13:50:06 L3 - SwInstalled
xx.xx.68.205 zzz.zzz.66.24 tcp :www :50878 Gi1/3.11 :0x80002
13 18746 236 13:49:14 L3 - SwInstalled
xx.xx.71.216 zzz.zzz.66.19 tcp :www :10393 Gi1/3.11 :0x80002
8 11520 236 13:49:02 L3 - SwInstalled
xx.xx.77.37 173.194.78.99 tcp :www :18942 Gi1/3.11 :0x80002
3 3266 102 13:49:23 L3 - SwInstalled
xx.xx.71.153 zzz.zzz.66.23 tcp :www :11294 Gi1/3.11 :0x80002
10 14400 236 13:49:05 L3 - SwInstalled
xx.xx.75.229 zzz.zzz.66.17 tcp :www :12422 Gi1/3.11 :0x80002
12 17280 236 13:49:10 L3 - SwInstalled
xx.xx.69.237 178.79.198.154 tcp :www :13615 Gi1/3.11 :0x80002
9 8778 236 13:51:03 L3 - SwInstalled
xx.xx.68.94 zzz.zzz.66.23 tcp :www :17127 Gi1/3.11 :0x80002
11 15840 236 13:49:11 L3 - SwInstalled
xx.xx.77.247 zzz.zzz.66.16 tcp :www :13084 Gi1/3.11 :0x80002
13 18720 236 13:49:14 L3 - SwInstalled
xx.xx.70.95 207.241.236.224 tcp :www :51838 Gi1/3.11 :0x80002
3 4356 236 13:48:05 L3 - SwInstalled
xx.xx.72.5 69.171.237.16 tcp :www :16458 Gi1/3.11 :0x80002
0 0 236 13:48:00 L3 - SwInstalled
xx.xx.71.19 79.140.95.115 tcp :www :13119 Gi1/3.11 :0x80002
3 4320 236 13:50:10 L3 - SwInstalled
xx.xx.69.176 79.140.80.72 tcp :www :2493 Gi1/3.11 :0x80002
7 10164 236 13:50:05 L3 - SwInstalled
xx.xx.69.192 173.194.5.8 tcp :www :16703 Gi1/3.11 :0x80002
5 7200 236 13:49:26 L3 - SwInstalled
xx.xx.67.214 79.140.95.144 tcp :www :52625 Gi1/3.11 :0x80002
14 20328 236 13:50:53 L3 - SwInstalled
xx.xx.71.30 93.184.220.124 tcp :www :2022 Gi1/3.11 :0x80002
4 5808 236 13:50:32 L3 - SwInstalled
xx.xx.77.252 zzz.zzz.66.16 tcp :www :18070 Gi1/3.11 :0x80002
11 15840 236 13:49:07 L3 - SwInstalled
xx.xx.75.169 zzz.zzz.66.20 tcp :www :10100 Gi1/3.11 :0x80002
12 17280 236 13:49:14 L3 - SwInstalled
xx.xx.67.169 38.104.58.182 tcp :www :26813 Gi1/3.11 :0x80002
13 18720 236 13:48:42 L3 - SwInstalled
xx.xx.71.239 178.236.7.33 tcp :www :13601 Gi1/3.11 :0x80002
5 5646 236 13:50:59 L3 - SwInstalled
xx.xx.73.85 80.239.152.11 tcp :www :59291 Gi1/3.11 :0x80002
3 4356 236 13:47:51 L3 - SwInstalled
xx.xx.76.214 173.194.5.116 tcp :www :18703 Gi1/3.11 :0x80002
6 8640 236 13:49:26 L3 - SwInstalled
xx.xx.77.39 69.171.234.41 tcp :www :16837 Gi1/3.11 :0x80002
6 1572 236 13:49:16 L3 - SwInstalled
xx.xx.77.213 zzz.zzz.66.17 tcp :www :4002 Gi1/3.11 :0x80002
14 20328 236 13:49:13 L3 - SwInstalled
xx.xx.73.145 95.211.105.156 tcp :www :4206 Gi1/3.11 :0x80002
8 11616 236 13:50:41 L3 - SwInstalled
xx.xx.69.176 79.140.80.72 tcp :www :2492 Gi1/3.11 :0x80002
7 10164 236 13:50:40 L3 - SwInstalled
xx.xx.77.186 69.171.229.74 tcp :www :2174 Gi1/3.11 :0x80002
12 17424 236 13:48:33 L3 - SwInstalled
xx.xx.77.252 zzz.zzz.66.16 tcp :www :17921 Gi1/3.11 :0x80002
11 15840 236 13:49:17 L3 - SwInstalled
xx.xx.69.90 zzz.zzz.66.16 tcp :www :2706 Gi1/3.11 :0x80002
10 14520 236 13:49:13 L3 - SwInstalled
xx.xx.77.207 213.131.66.55 tcp :www :12006 Gi1/3.11 :0x80002
4 5760 236 13:48:06 L3 - SwInstalled
xx.xx.77.24 zzz.zzz.66.21 tcp :www :11064 Gi1/3.11 :0x80002
13 18720 236 13:49:12 L3 - SwInstalled
xx.xx.72.238 69.171.237.32 tcp :www :55696 Gi1/3.11 :0x80002
2 2904 236 13:49:03 L3 - SwInstalled
xx.xx.73.162 zzz.zzz.66.18 tcp :www :13174 Gi1/3.11 :0x80002
13 18720 236 13:49:15 L3 - SwInstalled
xx.xx.76.47 87.240.161.76 tcp :www :52801 Gi1/3.11 :0x80002
4 5808 236 13:48:17 L3 - SwInstalled
xx.xx.71.216 zzz.zzz.66.19 tcp :www :10353 Gi1/3.11 :0x80002
11 15840 236 13:49:15 L3 - SwInstalled
xx.xx.68.128 zzz.zzz.66.22 tcp :www :10645 Gi1/3.11 :0x80002
12 17280 236 13:49:15 L3 - SwInstalled
xx.xx.70.50 zzz.zzz.66.17 tcp :www :26288 Gi1/3.11 :0x80002
13 18720 236 13:49:12 L3 - SwInstalled
xx.xx.72.13 85.17.124.121 tcp :www :11761 Gi1/3.11 :0x80002
7 10080 236 13:49:20 L3 - SwInstalled
xx.xx.73.145 85.17.78.129 tcp :www :4196 Gi1/3.11 :0x80002
5 7260 236 13:50:07 L3 - SwInstalled
xx.xx.71.216 zzz.zzz.66.19 tcp :www :10359 Gi1/3.11 :0x80002
13 18720 236 13:49:10 L3 - SwInstalled
xx.xx.67.227 216.59.3.148 tcp :www :50187 Gi1/3.11 :0x80002
5 7260 236 13:49:28 L3 - SwInstalled
xx.xx.69.198 zzz.zzz.66.22 tcp :www :18279 Gi1/3.11 :0x80002
13 18720 236 13:49:12 L3 - SwInstalled
xx.xx.77.76 zzz.zzz.66.23 tcp :www :50652 Gi1/3.11 :0x80002
12 17424 236 13:49:09 L3 - SwInstalled
xx.xx.75.180 zzz.zzz.66.16 tcp :www :24071 Gi1/3.11 :0x80002
11 15840 236 13:49:13 L3 - SwInstalled
xx.xx.78.82 zzz.zzz.66.21 tcp :www :10424 Gi1/3.11 :0x80002
14 20160 236 13:49:13 L3 - SwInstalled
xx.xx.68.110 95.211.105.155 tcp :www :50789 Gi1/3.11 :0x80002
6 8712 236 13:49:57 L3 - SwInstalled
xx.xx.74.20 178.79.198.148 tcp :www :65271 Gi1/3.11 :0x80002
9 10256 236 13:50:40 L3 - SwInstalled
xx.xx.69.176 79.140.80.72 tcp :www :2494 Gi1/3.11 :0x80002
6 8712 236 13:50:26 L3 - SwInstalled
xx.xx.77.218 zzz.zzz.66.21 tcp :www :1352 Gi1/3.11 :0x80002
11 15972 236 13:49:15 L3 - SwInstalled
xx.xx.76.105 85.17.25.11 tcp :www :49779 Gi1/3.11 :0x80002
4 5808 236 13:51:03 L3 - SwInstalled
xx.xx.72.84 zzz.zzz.66.17 tcp :www :15418 Gi1/3.11 :0x80002
11 15840 236 13:49:08 L3 - SwInstalled
xx.xx.74.136 208.117.240.77 tcp :www :15932 Gi1/3.11 :0x80002
6 8640 236 13:49:38 L3 - SwInstalled
xx.xx.69.2 208.43.71.145 tcp :www :50422 Gi1/3.11 :0x80002
6 8712 236 13:48:55 L3 - SwInstalled
xx.xx.71.154 zzz.zzz.66.19 tcp :www :15128 Gi1/3.11 :0x80002
12 17280 236 13:49:11 L3 - SwInstalled
xx.xx.69.3 zzz.zzz.66.24 tcp :www :13571 Gi1/3.11 :0x80002
13 18720 236 13:49:14 L3 - SwInstalled
Gateway7600#
Gateway7600#show mls statistics
Statistics for Earl in Module 1
L2 Forwarding Engine
Total packets Switched : 2613104173
L3 Forwarding Engine
Total packets Processed : 2612898195 @ 113279 pps
Total packets L3 Switched : 1961063719 @ 73721 pps
Total Packets Bridged : 585946922
Total Packets FIB Switched : 1223374926
Total Packets ACL Routed : 491568212
Total Packets Netflow Switched : 246120581
Total Mcast Packets Switched/Routed : 436835
Total ip packets with TOS changed : 2
Total ip packets with COS changed : 2
Total non ip packets COS changed : 0
Total packets dropped by ACL : 241
Total packets dropped by Policing : 0
Total packets exceeding CIR : 0
Total packets exceeding PIR : 0
Errors
MAC/IP length inconsistencies : 0
Short IP packets received : 0
IP header checksum errors : 0
No-route packet drops : 12
TTL failures : 270124
MTU failures : 0
Total packets L3 Processed by all Modules: 2612898195 @ 113279 pps
07-30-2012 08:05 AM
On
interface GigabitEthernet1/1
description zzz
bandwidth 230000
ip address 10.160.150.2 255.255.255.0
ip wccp 80 redirect in
ip policy route-map CACHE-REDIRECT
load-interval 30
can you remove the policy route-map and see if the CPU drops?
I noticed from the output, lots of packets punted to the CPU from the PBR.
What's the reason for this PBR?
Can you add the pertinent configuration for this PBR? route-map and ACL?
Based on the show proc cpu, your issue is interrupt traffic.
Regards,
Edison
07-30-2012 08:17 AM
hi , mr Edison ,
the ip ploicy is just becuse i have two internet sources , and this direct my useres to the internet .
you are right , im noting that the internet traffic is not natural and thgouht that there is a drop , here is a screenshot of internet graph after shutting down cache server .
http://www7.0zz0.com/2012/07/30/15/691686492.png
as you see, the traffic is getting breaking down and up . but this breaking wasnt when i was using 7206
%%%%%%%%%%%%%%%%%
any way , do you think that ip policy may be the reason of the interrupting and cache problems?? if yes , how to start troubleshoot it ??
here is the config
Gateway7600#sh route-map CACHE-REDIRECT
route-map CACHE-REDIRECT, permit, sequence 5
Match clauses:
ip address (access-lists): TO_DMZ
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map CACHE-REDIRECT, permit, sequence 10
Match clauses:
ip address (access-lists): 100
Set clauses:
ip next-hop ttt.ttt.66.77
Policy routing matches: 0 packets, 0 bytes
route-map CACHE-REDIRECT, permit, sequence 20
Match clauses:
ip address (access-lists): isp1
Set clauses:
ip next-hop vv.vv.56.165
Policy routing matches: 21040 packets, 1647130 bytes
route-map CACHE-REDIRECT, permit, sequence 30
Match clauses:
ip address (access-lists): isp2
Set clauses:
ip next-hop bbb.bbb.66.77
Policy routing matches: 285732280 packets, 31199066079 bytes
route-map CACHE-REDIRECT, permit, sequence 100
Match clauses:
Set clauses:
Policy routing matches: 389354 packets, 45835914 bytes
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
im also noting that alot of matching in this ip policy.
Policy routing matches: 285732280 packets, 31199066079 bytes
regards
07-30-2012 08:27 AM
Let's start by removing PBR from G1/1 and observe if the CPU drops.
I understand you need the PBR to distribute your user traffic but you may be having conflicting features enabled on the same interface.
Can you post the ACLs referred within the route-map?
Are you redirecting with WCCP and PBR the same src/dst ?
Engineering your network with hardware assisted platforms is quite different than with a regular IOS router.
07-30-2012 08:38 AM
ok , i will test it later and give u a reply
i cant stop it now
thanks very much
regards
07-30-2012 08:54 AM
Looking at your output one more time, PBR isn't punting the traffic.
The output provided in the forum didn't line up correctly and I thought Punt2Host numbers were
284112859 but in reality is assigned to the GaveRoute column. Can you confirm this for me?
What version of IOS are you running on this box? Please provide the 'show ver' output.
Also, is the Cache Engine directly connected to this box?
07-30-2012 09:28 AM
hi , hereis the sh again , but remember , i did itwhile the cache is not working .
again , i will try to remove pbr and give u a reply when i have the chance to do it .
and here is the output
Gateway7600#show ip cef switch stat fea
IPv4 CEF input features:
Feature Drop Consume Punt Punt2Host Gave route
Policy Routing 0 0 0 0 285533522
Total 0 0 0 0 285533522
IPv4 CEF output features:
Feature Drop Consume Punt Punt2Host New i/f
Total 0 0 0 0 0
IPv4 CEF post-encap features:
Feature Drop Consume Punt Punt2Host New i/f
Total 0 0 0 0 0
IPv4 CEF for us features:
Feature Drop Consume Punt Punt2Host New i/f
Total 0 0 0 0 0
IPv4 CEF punt features:
Feature Drop Consume Punt Punt2Host New i/f
Total 0 0 0 0 0
IPv4 CEF local features:
Feature Drop Consume Punt Punt2Host Gave route
Total 0 0 0 0 0
Gateway7600#
here is sh ver
Gateway7600#
Gateway7600#sh ve
Gateway7600#sh version
Cisco IOS Software, c7600s3223_rp Software (c7600s3223_rp-ADVENTERPRISEK9-M), Version 15.2(1)S, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Sun 27-Nov-11 15:27 by prod_rel_team
ROM: System Bootstrap, Version 12.2(17r)SX3, RELEASE SOFTWARE (fc1)
BOOTLDR: Cisco IOS Software, c7600s3223_rp Software (c7600s3223_rp-ADVENTERPRISEK9-M), Version 15.2(1)S, RELEASE SOFTWARE (fc1)
Gateway7600 uptime is 2 days, 4 hours, 11 minutes
Uptime for this control processor is 2 days, 4 hours, 11 minutes
System returned to ROM by power-on (SP by power-on)
System image file is "sup-bootdisk:c7600s3223-adventerprisek9-mz.152-1.S.bin"
Last reload type: Normal Reload
Last reload reason: power-on
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
cisco CISCO7604 (R7000) processor (revision 2.0) with 458752K/65536K bytes of memory.
Processor board ID FOX1509G2DK
R7000 CPU at 300MHz, Implementation 39, Rev 3.3, 256KB L2, 1024KB L3 Cache
Last reset from power-on
1 Virtual Ethernet interface
9 Gigabit Ethernet interfaces
1915K bytes of non-volatile configuration memory.
65536K bytes of Flash internal SIMM (Sector size 512K).
Configuration register is 0x2102
Gateway7600#
Gateway7600#
about the cache connection .
the cache server is connected to switch and the router is conneted to the same switch .
regards
07-30-2012 09:08 AM
hi , i just want to mention that this policy was okay when i was using 7206 , do you think a conflic may occur in 7600 ??
Are you redirecting with WCCP and PBR the same src/dst ?
im sorry, i didnt understand this question .
here is the config of ACL
Extended IP access list isp1
10 permit ip xx.xx.64.0 0.0.1.255 any (41830 matches)
Extended IP access list isp2
10 permit ip xx.xx.66.0 0.0.1.255 any (15673605 matches)
20 permit ip xx.xx.68.0 0.0.3.255 any (117877748 matches)
30 permit ip xx.xx.72.0 0.0.3.255 any (91318175 matches)
40 permit ip xx.xx.76.0 0.0.3.255 any (61154622 matches)
regards
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide