how to know the load on router processor from ip policy and access lists ?

Dr.X · ‎07-30-2012

hi ,

today i installed new router 7600 , but im facing some thing .

the cpu is increasing and it reached 50 %

and still increasing as the bw dissipated is increasing .

im applying ip policy which set next hop for many internet source

my question is , how to know the cu percentage which is used by this ip policy ,

also , how to know the percentage by access-list ??

regards

nkarthikeyan · ‎07-30-2012

Hi Ahmed,

You can have these check for specific to you Access policy.

Rtr-a#sh processes cpu sorted | in IP

86 4 152 26 0.00% 0.00% 0.00% 0 IP ARP Adjacency

87 83548 304378801 0 0.00% 0.02% 0.00% 0 IP ARP Retry Age

88 2959632 17419746 169 0.00% 0.03% 0.02% 0 IP Input

104 0 2 0 0.00% 0.00% 0.00% 0 PPP IP Route

105 0 2 0 0.00% 0.00% 0.00% 0 PPP IPCP

106 1084 183893 5 0.00% 0.00% 0.00% 0 IP Background

107 136 163678 0 0.00% 0.00% 0.00% 0 IP RIB Update

108 0 1 0 0.00% 0.00% 0.00% 0 IP Traceroute

132 12 163666 0 0.00% 0.00% 0.00% 0 IP Cache Ager

177 0 1 0 0.00% 0.00% 0.00% 0 VoIP AAA

210 88 489967 0 0.00% 0.00% 0.00% 0 IP SLA MPLSLM Pr

Rtr-a#sh processes cpu sorted | in ACL

90 0 88 0 0.00% 0.00% 0.00% 0 TurboACL

91 0 2 0 0.00% 0.00% 0.00% 0 TurboACL chunk

Rtr-a#sh processes cpu sorted | in TCP

112 37240 7981643 4 0.00% 0.00% 0.00% 0 TCP Timer

113 37740 461302 81 0.00% 0.00% 0.00% 0 TCP Protocols

220 8 11 727 0.00% 0.00% 0.00% 0 TCP Listener

Rtr-a#sh processes cpu sorted | in UDP

127 420 9819889 0 0.00% 0.00% 0.00% 0 RUDPV1 Main Proc

Rtr-a#sh processes cpu sorted | in Policy

17 0 1 0 0.00% 0.00% 0.00% 0 Policy Manager

207 0 2 0 0.00% 0.00% 0.00% 0 EEM Policy Direc

Rtr-a#

Please do rate if the given information helps.

By

Karthik

Dr.X · ‎07-30-2012

hi ,

it seems that all process utilize 0 % !!!!!!!!!!!!!!!!!!!!

i did the following :

Gateway7600#sh processes cpu sorted | i tcp

Gateway7600#sh processes cpu sorted | i policy

217 4 10687 0 0.00% 0.00% 0.00% 0 ACE policy loade

Gateway7600#sh processes cpu sorted | i ACL

184 0 2 0 0.00% 0.00% 0.00% 0 CWAN Egress SACL

362 0 2 0 0.00% 0.00% 0.00% 0 IPv6 ACL RP Proc

477 0 1 0 0.00% 0.00% 0.00% 0 Crypto ACL

590 0 2 0 0.00% 0.00% 0.00% 0 QM Timer ACL Pro

596 0 2673 0 0.00% 0.00% 0.00% 0 VACL Logger

Gateway7600#

but where is the utilization ??? why all values are 0 % ???????

it seems 0 % , but actually i belive that the policy utilize at leat 10 % !!!!!!!

regards

Alessio Andreoli · ‎07-30-2012

Hi Ahmed,

you need to state ... | include IP to get all the statements about the ACL. Remember that a 7600 is a quite powerful machines and the show proc command has not a very precise approximation to the computational commitment (just 0.00%). Apart this, you need to generate some traffic that you are sure will hit the ACL to really create ssome statistics about your load and the ACL order it is important too. If you wrote the ACL statements in the proper order , the 7600 will filter the traffic in the very first lines of your acl without reading the rest. This is not going to impact the CPU so much to show in the proc statistics.

have a nice day

Alessio

Dr.X · ‎07-30-2012

hi , i couldnt understand well ,

my question is , could i know the utilization of policy as summary ???

i mean could i read a value like 15 % of utilization of ip policy ???

or i need more efforts ?