cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4047
Views
0
Helpful
4
Replies

Crypto IKMP High CPU Load

shkerimov
Level 1
Level 1

Hello!

On C3825 with IOS 15.1(4)M5, I faced with issue:

I see high cpu load by Crypto IKMP proccess:

CPU utilization for five seconds: 92%/11%; one minute: 87%; five minutes: 86%

PID Runtime(ms)     Invoked      uSecs   5Sec   1Min   5Min TTY Process

295    96696680      625524     154590 76.42% 70.87% 71.46%   0 Crypto IKMP

  65     7719140      608642      12682  1.08%  1.32%  1.33%   0 Per-Second Jobs

   6      838308       93487       8967  1.00%  0.16%  0.12%   0 Check heaps

139     1534084     6029064        254  0.75%  0.69%  0.62%   0 IP Input

But we haven`t a lot of traffic ~10 Mbit/s.

We have 1 GRE tunnel to branch, and crypto map for remote clients and some ASA`s

I didn`t find any information how I can tshoot this situation.

How I can deal with this? Why CPU load so high?

Router1#show crypto engine accelerator statistic

Device:   Onboard VPN

Location: Onboard: 0

        :Statistics for encryption device since the last clear

         of counters 1325 seconds ago

                 370618 packets in                      370618 packets out

               78673429 bytes in                      77224979 bytes out

                    279 paks/sec in                        279 paks/sec out

                    474 Kbits/sec in                       466 Kbits/sec out

                 171515 packets decrypted               199103 packets encrypted

               24579216 bytes before decrypt          52645763 bytes encrypted

               15116445 bytes decrypted               63556984 bytes after encrypt

                      0 packets decompressed                 0 packets compressed

                      0 bytes before decomp                  0 bytes before comp

                      0 bytes after decomp                   0 bytes after comp

                      0 packets bypass decompr               0 packets bypass compres

                      0 bytes bypass decompres               0 bytes bypass compressi

                      0 packets not decompress               0 packets not compressed

                      0 bytes not decompressed               0 bytes not compressed

                  1.0:1 compression ratio                1.0:1 overall

                Last 5 minutes:

                  69175 packets in                       69175 packets out

                    230 paks/sec in                        230 paks/sec out

                 380964 bits/sec in                     376846 bits/sec out

                2652816 bytes decrypted                9459770 bytes encrypted

                  71697 Kbits/sec decrypted             255669 Kbits/sec encrypted

                  1.0:1 compression ratio                1.0:1 overall

Errors:

                      0 pkts dropped                         0 ppq full

                      0 tx parts overflow                    0 rx parts overflow

                      0 replenishment failure                0 zero len

                      0 flow inputs bad                      0 cmd invalid

                      0 IPV4 len                             0 IPV6 len

                      0 algor invalid

                      0 bad shadow particle                  0 algor disabled

                      0 pre tx fail                          0 dma error

                      0 dbit miss                            0 pipeline abort

                      0 failsafe timeout                     0 reserv

                      0 bad sz count                         0 bad shdw

                      0 bad flow tx                          0 spi mismatch

                      0 bad flow rx                          0 auth fail

                      0 udm fs fail                          0 pad fail

                      0 addr limit fixup fail                0 seq fail

                      0 quad fix sp                          0 quad fix mp

                      0 quad fix cont

Thanks!

4 Replies 4

Marcin Latosiewicz
Cisco Employee
Cisco Employee