We're in the process of moving to ISE and our supplier has asked us to add AAA commands to all of our Access switch interfaces to allow for profiling of the network to commence.   The issue I'm having is that so far out of 22 stacks I've added the commands to, so far 9 have exhibited high CPU between 80 - 100% while the commands are enabled on the interfaces and when I've removed the commands from these switch interfaces the CPU drops back to between 40 - 60% utilization. In some instances the CPU has gone straight up to 80%+ and in others its takes a few days.   Most of the stacks affected are between 2 and 4 switches in a stack, there's one with 6 in a stack. All the unaffected stacks have between 1 and 4 switches in a stack.   All our 2960X's are running either 15.2(2)E6 or 15.2(2)E7.   I've attached docs with show process CPU and Mem with the config enabled and with it removed.   The config we've been asked to add is below   switchport mode access ip access-group PERMIT-ALL in authentication open authentication control-direction in authentication event fail action next-method authentication event server dead action authorize voice authentication event server alive action reinitialize authentication host-mode multi-domain authentication order mab dot1x authentication priority dot1x mab authentication port-control auto authentication periodic authentication timer reauthenticate server authentication timer inactivity server dynamic authentication violation replace snmp trap mac-notification change added snmp trap mac-notification change removed mab dot1x pae authenticator dot1x timeout tx-period 10 cdp enable lldp transmit lldp receive authentication mac-move permit   Any help with this issue would be much appreciated.   Thanks   Jon     ... View more

We've just started to implement changes on our switches so we can use ISE for authentication and on a switch stack of 6 switches I logged on did int range gig1/0/1 - 48 and copied the below config to the switch.   Switch 1 was fine and took approximately 10 minutes to complete, Switch 2 took approximately 15 minutes but when I got to Switch 3 this took in the region of 85 minutes to complete and by the time it had completed CPU was at 100% and didn't drop.   Below is the processes and also the last 60 minute CPU history, unfortunately because we started seeing connectivty issues on the switch stack it had to be rebooted which cleared the issue.   I'm now very reluctant to carry on rolling out the config changes across the rest of our 2960X stacks just in case the same thing happens again.   Since we've had the 2960X's they've been a bit on the slow side when doing int range commands but never had this issue before.   The stack is running 15.2(2)E6.   Any help or advice would be much appreciated?   Thanks   Jon   CPU utilization for five seconds: 99%/0%; one minute: 99%; five minutes: 99% PID Runtime(ms)     Invoked      uSecs   5Sec   1Min   5Min TTY Process 178     2016913        8019     251516 57.85% 54.83% 53.11%   0 HRPC hrcli-event 255     2027659     2009154       1009 13.07% 19.28% 19.81%   0 Auth Manager 226     9270915    21965465        422  4.16%  1.87%  2.03%   0 HULC DAI Process 161  3496514514   945477148       3698  3.75%  3.20%  3.41%   0 Hulc LED Process 388   117720163   238809234        492  1.87%  0.44%  0.40%   0 LLDP Protocol 236     4540187    16489663        275  0.58%  0.51%  0.56%   0 IP Host Track Pr 131   289793132    37853037       7655  0.58%  0.43%  0.38%   0 hpm counter proc 233   106330513   383742152        277  0.23%  0.35%  0.34%   0 UDLD 120      238888     1029136        232  0.23%  0.28%  0.27%   0 HRPC hlfm reques 219   130242841   194137883        670  0.23%  0.15%  0.14%   0 Spanning Tree 397       16159       14165       1140  0.17%  0.14%  0.15%   0 SNMP Traps   15   167833895    70748693       2372  0.17%  0.24%  0.54%   0 ARP Input         111111111111111111111111111111111111111111111111111       000000000000000000000000000000000000000000000000000999889999       000000000000000000000000000000000000000000000000000992194944   100 ###################################################**    *    90 ####################################################** *#*    80 ######################################################*###    70 ##########################################################    60 ##########################################################    50 ##########################################################    40 ##########################################################    30 ##########################################################    20 ##########################################################    10 ##########################################################      0....5....1....1....2....2....3....3....4....4....5....5....6                0    5    0    5    0    5    0    5    0    5    0                CPU% per minute (last 60 minutes)               * = maximum CPU%   # = average CPU%       ip access-group PERMIT-ALL in authentication open authentication control-direction in authentication event fail action next-method authentication event server dead action authorize voice authentication event server alive action reinitialize authentication host-mode multi-domain authentication order mab dot1x authentication priority dot1x mab authentication port-control auto authentication periodic authentication timer reauthenticate server authentication timer inactivity server dynamic authentication violation replace mab dot1x pae authenticator dot1x timeout tx-period 10 cdp enable lldp transmit lldp receive ... View more

I'm very new to BGP and have been using GNS3 to help me understand how to configure BGP on Cisco IOS. See below what my test network looks like and I've attached the configs from the 3 devices.   I'm seeing the 3 VLAN's on the LAN Core in the Gateway and CPE01 routing tables. I can ping the 3 VLAN interfaces from the Gateway device but not on the CPE01, when I do a trace route from the CPE01 device to the VLAN interfaces first hop is Gateway VLAN 600 address and then it fails.   Any help would be much appreciated?     ... View more