11-20-2013 11:39 PM
Hello!
On C3825 with IOS 15.1(4)M5, I faced with issue:
I see high cpu load by Crypto IKMP proccess:
CPU utilization for five seconds: 92%/11%; one minute: 87%; five minutes: 86%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
295 96696680 625524 154590 76.42% 70.87% 71.46% 0 Crypto IKMP
65 7719140 608642 12682 1.08% 1.32% 1.33% 0 Per-Second Jobs
6 838308 93487 8967 1.00% 0.16% 0.12% 0 Check heaps
139 1534084 6029064 254 0.75% 0.69% 0.62% 0 IP Input
But we haven`t a lot of traffic ~10 Mbit/s.
We have 1 GRE tunnel to branch, and crypto map for remote clients and some ASA`s
I didn`t find any information how I can tshoot this situation.
How I can deal with this? Why CPU load so high?
Router1#show crypto engine accelerator statistic
Device: Onboard VPN
Location: Onboard: 0
:Statistics for encryption device since the last clear
of counters 1325 seconds ago
370618 packets in 370618 packets out
78673429 bytes in 77224979 bytes out
279 paks/sec in 279 paks/sec out
474 Kbits/sec in 466 Kbits/sec out
171515 packets decrypted 199103 packets encrypted
24579216 bytes before decrypt 52645763 bytes encrypted
15116445 bytes decrypted 63556984 bytes after encrypt
0 packets decompressed 0 packets compressed
0 bytes before decomp 0 bytes before comp
0 bytes after decomp 0 bytes after comp
0 packets bypass decompr 0 packets bypass compres
0 bytes bypass decompres 0 bytes bypass compressi
0 packets not decompress 0 packets not compressed
0 bytes not decompressed 0 bytes not compressed
1.0:1 compression ratio 1.0:1 overall
Last 5 minutes:
69175 packets in 69175 packets out
230 paks/sec in 230 paks/sec out
380964 bits/sec in 376846 bits/sec out
2652816 bytes decrypted 9459770 bytes encrypted
71697 Kbits/sec decrypted 255669 Kbits/sec encrypted
1.0:1 compression ratio 1.0:1 overall
Errors:
0 pkts dropped 0 ppq full
0 tx parts overflow 0 rx parts overflow
0 replenishment failure 0 zero len
0 flow inputs bad 0 cmd invalid
0 IPV4 len 0 IPV6 len
0 algor invalid
0 bad shadow particle 0 algor disabled
0 pre tx fail 0 dma error
0 dbit miss 0 pipeline abort
0 failsafe timeout 0 reserv
0 bad sz count 0 bad shdw
0 bad flow tx 0 spi mismatch
0 bad flow rx 0 auth fail
0 udm fs fail 0 pad fail
0 addr limit fixup fail 0 seq fail
0 quad fix sp 0 quad fix mp
0 quad fix cont
Thanks!