HIGH CPU utilization Catalyst 4500

[Richard Lucht]

We are experiencing very high CPU utilization on one of our Catalyst 4500.  I ran the sh processes cpu and sh platform health.  Would like some help understanding what I am looking at.  I copied a couple of the results from both commands that were high.  I attached  a text document with the full results.  I have also uploaded our config file for the Catalyst 4500.

5240-CORE-4507-E#sh processes cpu

CPU utilization for five seconds: 99%/1%; one minute: 97%; five minutes: 73%

  42    77729536 208651745        372  6.95%  7.91%  9.85%   0 Cat4k Mgmt HiPri 
  43   282433216 263362303       1072 73.75% 72.98% 47.21%   0 Cat4k Mgmt LoPri

5240-CORE-4507-E#sh platform health

K2CpuMan Review       30.00  46.26     30     43  100  500   16  46   11  51:11

K2L2 Address Table R   2.00  13.07     12      5  100  500   10  13    1  1109:13

K2L2 Vlan Table Revi   2.00  11.87     12      8  100  500    4   5    0  11:07

[Jon Marshall]

Don't like just sending a link but it's a bit late where i am so perhaps you can use this as a start -

http://www.cisco.com/c/en/us/support/docs/switches/catalyst-4000-series-switches/65591-cat4500-high-cpu.html

using your full output attachment together with the above link points to STP being a potential problem.

PBR can also sometimes be an issue although i believe that affects a certain process that is currently fine in your output.

Have you changed anything recently ie. in terms of configuration on the switch itself or adding, changing configuration elsewhere in the network ?

Jon

[Richard Lucht]

We have 2 buildings the 5240 and the 4700.  Both buildings have a 4500 we use as a Core.  We added 6 switches in the 4700 building.  They are hanging off other switches and not part of our ring.  We added 1 switch in the 5240 building for temporary work.  That switch was added several days before we started seeing any issues.

We have 139 active VLANS, we went through our core and and switches directly connected to the core and are only allowing the needed VLANS in the 5240 building.  There are about 20 allowed VLANs going through the switches connected to the Core.  Also for now we took out all the port channels except one.