Control-plane policing on ML Card

Unanswered Question
Apr 23rd, 2008
User Badges:

Hi All,

We are experiencing high CPU utilization on one of our ML Card in the ONS 15454. The "IP Input" has relatively higher CPU utilization consumed irrespective of the proper fast/CEF switching enabled on the interfaces. We are trying to figure out,whether there is an attack to the control-plane or even any IP Packets destined local to the ML Card,which is causing those packet to process switched.

In order to figure that,we thought we may try to use Control plance policing on the control-plane but it seems not taking the service-policy associated with that. Is this feature supported in the ML card or any other suggestion would be really appreciated.



Anantha Subramanian Natarajan

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
smahbub Tue, 04/29/2008 - 11:08
User Badges:
  • Silver, 250 points or more

Try the "clear ip mroute" command on the ML card with high cpu usage and check for the issue. Ml card having a large number of mac address traffic can also cause high cpu usage.In very large bridged networks, which may connect directly to 1000s of layer-3 devices, it may also be wise to increase the MAC table limit above the default of 1000 MAC addresses. This is done with the configuration command:

bridge X limit dynamic entries 10000

anasubra_2 Tue, 04/29/2008 - 13:33
User Badges:

Hi Smahbub,

Thank you very much for the information. Will try to deploy the dynamic entry command,but we thought it has been fixed after 5.x and currently we are running 7.2.3.

Once again thank you very much for the same and meanwhile if you have some suggestions,kindly let me know.



Anantha Subramanian Natarajan


This Discussion