Asa 5540 CPU Usage

SpeedCisco · ‎03-18-2008

Hello, I've got a 5540 that firewalls my production lan enviroment. I monitor the asa with asdm and i am constantly watching that the cpu usage is over 80% even though there are not a lot of active vpn's. Does anyone have some tips on how to make workaround?

allanc_16 · ‎03-18-2008

can you post a show tech for review?

SpeedCisco · ‎03-18-2008

Allright..

SpeedCisco · ‎03-20-2008

Hi! Has anyone reviewed the show tech output?

allanc_16 · ‎03-24-2008

From the show process I can see that the process called "telnet/ci" its taking a lot of the resources of the firewall.

From the following link it says that this process is used for:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009456c.shtml

telnet/ciL: Telnet command interface. One per Telnet session (max 5).

Can you try and completly disable telnet and see if the CPU # goes down?

SpeedLottery · ‎03-25-2008

Ok, so i entered the cli and removed both of the lines that contain telnet, and realized i dont have access through telnet , i did wr then loaded the asdm did a refresh on the configuration and still the same. 81%

jbadernxo · ‎04-25-2008

Hi,

Have u already found the problem?

I am having the same problem on one of my ASA's 5510 on 8.0.2/ASDM 6.0.2. CPU load is on 76% all the time. The processes telnet/ci is causing that.

SpeedLottery · ‎04-27-2008

Not really, I just reported the problem to my internall tech-support, and what they did was reload (reboot) the firewall.

That will bring the firewall to the normal cpu usage, about 7% or 8%, but i think we still need to do some in depth analysis.