[HELP] CPU Load Router gets 99%

[o2flamers]

I worked in a company's online gaming service. The condition of the network from my office right now is comprised of one core router and one core switches. When no maintanance, cpu load the router to run normally, but when it happens maintanance like patching the game, router cpu load to 99%

I use cisco 7606-S in which each interface is installed access lists. When going to want to patch it I changed the access list so that traffic from outside is blocked. But when I turn on its access lists, router cpu load rises to 99%.

My friend said there are 2 things that make her a high cpu load.
202 360640572 657523416 548 25.71% 25.64% 24.07% 0 IP Input
491 167781572 819415365 204 11.03% 10.77% 11:44% 0 IP RACL Ager  (takes from show process cpu)

Is this really the problem?
Is there something wrong with her ​​access list?
Do I have to do a kind of tuning?
please help..


Sincerely,
Jeffri

[Uday Chennupati]

It looks like there is high CPU at interrupt level. IP Input process means IP pakcets punting to CPU. We might need to get NetDr (NetDriver) capture to identify what packets are hitting CPU.

Please follow below steps to do NetDr capture:

7606# debug netdr cap rx

7606# show netdr cap

Once we take output do following:

7606# undebug all

7606# debug netdr clear-capture

In "show netdr cap" output, we can find source & destination info and protocol type.

Uday

TAC Team

[csawest.dc]

Dear Uday & Jeffri,

We are facing same issue CPU gets 85 to 90% load because ip input when apply PBR on LAN interface (subinterface).

outbound traffic via bgp not working i dont know what is wrong but when i apply PBR on LAN interface then it will work but not work via bgp and i must manage outbout traffic  via BGP because very high utilization CPU proc when i apply PBR on LAN interfae please see

CPU utilization for five seconds: 80%/30%; one minute: 76%; five minutes: 76%
PID Runtime(ms)     Invoked      uSecs   5Sec   1Min   5Min TTY Process

  90   832274980   374811401       2220 30.88% 37.57% 38.63%   0 IP Input  

Please see my config for outbound traffic manage via bgp with local pref.

ip access-list extended ISP-1
permit ip 101.205.65.128 0.0.0.127 any
permit ip 101.205.63.0 0.0.0.255 any
permit ip 101.205.64.0 0.0.0.255 any

ip access-list extended ISP-2
permit ip host 101.205.62.18 any
permit ip host 101.205.62.22 any
permit ip 101.205.62.64 0.0.0.63 any
permit ip 101.205.62.128 0.0.0.127 any
permit ip 101.205.65.64 0.0.0.63 any

route-map ISP-1permit 10
match ip address ISP-1
set local-preference 100
!
route-map ISP-1 permit 20
match ip address ISP-2
set local-preference 90

route-map ISP-2 permit 10
match ip address ISP-2
set local-preference 100
!
route-map ISP-2 permit 20
match ip address ISP-1
set local-preference 90

neighbour ISP-1 WAN IP remote-as asn(isp-1)
neighbour ISP-1 WAN IP route-map ISP-1 in

neighbour ISP-2 WAN IP remote-as asn(isp-2)
neighbour ISP-2 WAN IP route-map ISP-2 in

then clear ip bgp ISP-1 WAN soft in and out
        clear ip bgp ISP-2 WAN soft in and out

but it's not work my outbound traffic not increase but when i apply PBR on LAN interface then only it''s work.

So please give me some solution my outbound traffci manage via BGP and i need to remove PBR because my CPU proc very high when apply PBR on LAN interface that's why i must do it.

Thansk in ADV,