10-20-2014 06:55 AM - edited 03-07-2019 09:10 PM
Good day,
We have a router (Cisco 2900 Series ) and we are terminating L2P VPNs (VPND) on it. We are getting the following processes when the CPU is high and they causing high CPU utilization
,
6 72013880 4251984 16936 7.83% 0.99% 0.75% 0 Check heaps
268 37765560 6420124 5882 2.95% 0.41% 0.35% 0 VTEMPLATE Backgr
May you please advise how can we resolve this problem.
Regards
Nel
Solved! Go to Solution.
10-24-2014 09:31 PM
That figures.
2911 is NOT rated for 100 Mbps. What you're seeing is to-be-expected when you're trying to push more traffic through your router's CPU is rated for.
If you want 100 Mbps link, then you should be looking at a 3925E or a 3945.
10-20-2014 02:32 PM
Post the following output:
1. sh version;
2. sh proc cpu sorted | ex 0.00
10-24-2014 12:19 AM
*************************************sh version***************************************
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M7, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Mon 16-Sep-13 01:11 by prod_rel_team
ROM: System Bootstrap, Version 15.0(1r)M15, RELEASE SOFTWARE (fc1)
VPNROUTERNS02 uptime is 23 weeks, 1 day, 6 hours, 7 minutes
System returned to ROM by reload at 03:12:46 SAST Thu May 15 2014
System restarted at 03:13:59 SAST Thu May 15 2014
System image file is "flash:c2900-universalk9-mz.SPA.151-4.M7.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco CISCO2911/K9 (revision 1.0) with 483328K/40960K bytes of memory.
Processor board ID FCZ1604704Y
3 Gigabit Ethernet interfaces
2 Serial(sync/async) interfaces
1 terminal line
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
250880K bytes of ATA System CompactFlash 0 (Read/Write)
License Info:
License UDI:
-------------------------------------------------
Device# PID SN
-------------------------------------------------
*0 CISCO2911/K9 FCZ1604704Y
Technology Package License Information for Module:'c2900'
-----------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------
ipbase ipbasek9 Permanent ipbasek9
security securityk9 Permanent securityk9
uc None None None
data None None None
Configuration register is 0x2102
***********************************sh proc cpu sorted | ex 0.00********************************
sh processes cpu sort | ex 0.00
CPU utilization for five seconds: 73%/29%; one minute: 69%; five minutes: 68%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
129 1761524224 564662083 3119 30.39% 30.28% 30.23% 0 IP Input
268 39723928 6601570 6017 6.79% 1.04% 0.71% 0 VTEMPLATE Backgr
303 168717824 372212068 453 1.27% 1.23% 1.21% 0 L2TP mgmt daemon
302 37251856 789483188 47 0.95% 1.04% 1.05% 0 L2X Data Daemon
326 61282972 435145344 140 0.55% 0.55% 0.57% 0 RADIUS
115 17016076 135792453 125 0.55% 0.58% 0.57% 0 ACCT Periodic Pr
3 552 387 1426 0.39% 0.17% 0.04% 388 SSH Process
320 45983760 171286016 268 0.31% 0.37% 0.36% 0 IP SNMP
317 20141956 462660050 43 0.31% 0.34% 0.32% 0 PPP Events
114 9963516 139895251 71 0.23% 0.26% 0.25% 0 AAA ACCT Proc
195 1864548 3106945023 0 0.23% 0.24% 0.23% 0 HQF Shaper Backg
153 2421744 20569783 117 0.15% 0.16% 0.15% 0 CEF: IPv4 proces
136 5740 1164 4931 0.15% 2.23% 1.16% 389 SSH Process
100 1689852 1605894648 1 0.15% 0.13% 0.15% 0 Ethernet Msec Ti
316 1764360 425462095 4 0.07% 0.06% 0.07% 0 PPP manager
137 12012444 25163738 477 0.07% 0.09% 0.07% 0 SSS Manager
322 24268536 85558321 283 0.07% 0.18% 0.18% 0 SNMP ENGINE
304 13071736 28233830 462 0.07% 0.09% 0.08% 0 L2TUN Applicatio
240 18890632 19936499 947 0.07% 0.10% 0.10% 0 Crypto IKMP
67 2102080 14040478 149 0.07% 0.07% 0.07% 0 Per-Second Jobs
sh processes cpu sort | ex 0.00
CPU utilization for five seconds: 71%/29%; one minute: 69%; five minutes: 68%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
129 1761527304 564662755 3119 27.48% 30.06% 30.18% 0 IP Input
268 39724492 6601576 6017 7.06% 1.52% 0.82% 0 VTEMPLATE Backgr
6 75220152 4426664 16992 1.27% 0.84% 0.75% 0 Check heaps
303 168717920 372212222 453 1.19% 1.22% 1.21% 0 L2TP mgmt daemon
302 37251900 789483464 47 0.95% 1.03% 1.05% 0 L2X Data Daemon
115 17016124 135792507 125 0.63% 0.58% 0.57% 0 ACCT Periodic Pr
326 61283008 435145462 140 0.39% 0.54% 0.57% 0 RADIUS
136 5764 1191 4839 0.39% 2.08% 1.15% 389 SSH Process
317 20141968 462660225 43 0.31% 0.33% 0.32% 0 PPP Events
114 9963516 139895309 71 0.23% 0.26% 0.25% 0 AAA ACCT Proc
153 2421748 20569793 117 0.15% 0.16% 0.15% 0 CEF: IPv4 proces
137 12012456 25163758 477 0.15% 0.09% 0.08% 0 SSS Manager
304 13071752 28233850 462 0.15% 0.10% 0.08% 0 L2TUN Applicatio
195 1864552 3106945766 0 0.15% 0.23% 0.23% 0 HQF Shaper Backg
320 45983840 171286751 268 0.15% 0.35% 0.36% 0 IP SNMP
316 1764360 425462245 4 0.07% 0.06% 0.07% 0 PPP manager
142 3622212 40704663 88 0.07% 0.02% 0.01% 0 SSM connection m
165 4933920 9924475 497 0.07% 0.04% 0.02% 0 IP Background
67 2102084 14040484 149 0.07% 0.07% 0.07% 0 Per-Second Jobs
240 18890640 19936512 947 0.07% 0.10% 0.10% 0 Crypto IKMP
100 1689856 1605895081 1 0.07% 0.13% 0.15% 0 Ethernet Msec Ti
322 24268640 85558689 283 0.07% 0.17% 0.18% 0 SNMP ENGINE
sh processes cpu sort | ex 0.00
CPU utilization for five seconds: 70%/29%; one minute: 69%; five minutes: 68%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
129 1761543728 564664923 3119 32.31% 30.29% 30.24% 0 IP Input
13 19378600 233310 83061 1.44% 0.18% 0.12% 0 Licensing Auto U
303 168718432 372212931 453 1.36% 1.17% 1.20% 0 L2TP mgmt daemon
302 37252212 789484865 47 0.96% 1.03% 1.05% 0 L2X Data Daemon
326 61283184 435146162 140 0.64% 0.56% 0.57% 0 RADIUS
115 17016300 135792798 125 0.64% 0.58% 0.57% 0 ACCT Periodic Pr
268 39724928 6601602 6017 0.40% 1.24% 0.81% 0 VTEMPLATE Backgr
317 20142052 462661089 43 0.32% 0.33% 0.32% 0 PPP Events
114 9963580 139895613 71 0.32% 0.26% 0.25% 0 AAA ACCT Proc
320 45984032 171287790 268 0.24% 0.43% 0.38% 0 IP SNMP
195 1864568 3106949982 0 0.24% 0.25% 0.24% 0 HQF Shaper Backg
137 12012500 25163827 477 0.16% 0.09% 0.08% 0 SSS Manager
153 2421752 20569843 117 0.16% 0.16% 0.16% 0 CEF: IPv4 proces
322 24268768 85559208 283 0.16% 0.24% 0.20% 0 SNMP ENGINE
304 13071784 28233927 462 0.16% 0.10% 0.08% 0 L2TUN Applicatio
316 1764372 425463025 4 0.08% 0.06% 0.08% 0 PPP manager
165 4933940 9924506 497 0.08% 0.03% 0.02% 0 IP Background
135 2782944 4311307 645 0.08% 0.05% 0.05% 0 PPP IP Route
67 2102088 14040516 149 0.08% 0.08% 0.08% 0 Per-Second Jobs
142 3622212 40704772 88 0.08% 0.02% 0.01% 0 SSM connection m
100 1689868 1605897460 1 0.08% 0.13% 0.15% 0 Ethernet Msec Ti
10-24-2014 01:07 AM
10-24-2014 03:41 AM
it's 100Mbps
10-24-2014 09:31 PM
That figures.
2911 is NOT rated for 100 Mbps. What you're seeing is to-be-expected when you're trying to push more traffic through your router's CPU is rated for.
If you want 100 Mbps link, then you should be looking at a 3925E or a 3945.
10-27-2014 12:18 AM
10 Gbps is confirmed as supposed to the value I sent. So this is still the case as per your advice.
10-28-2014 02:36 AM
So 2911 is still NOT rated for 10Gbps?
10-28-2014 04:58 AM
Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Nope. Cisco recommends a 2911 for up to 35 Mbps (duplex). Although Cisco also documents the 2911 can forward up to 3.371 Gbps, the 35 Mbps is for real world usage.
For routers, for 10G, you would need to look at the ASR 1K series.
10-29-2014 07:43 AM
Thanks a lot Leo and Joseph for your assistance!
10-29-2014 02:51 PM
So 2911 is still NOT rated for 10Gbps?
I agree with Joseph. If you want 10 Gbps bandwidth then you are potentially looking at an ASR 1002-X.
10-31-2014 05:54 AM
Thanks a lot!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide