cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
408
Views
4
Helpful
2
Replies

Control-plane policing on ML Card

anasubra_2
Level 1
Level 1

Hi All,

We are experiencing high CPU utilization on one of our ML Card in the ONS 15454. The "IP Input" has relatively higher CPU utilization consumed irrespective of the proper fast/CEF switching enabled on the interfaces. We are trying to figure out,whether there is an attack to the control-plane or even any IP Packets destined local to the ML Card,which is causing those packet to process switched.

In order to figure that,we thought we may try to use Control plance policing on the control-plane but it seems not taking the service-policy associated with that. Is this feature supported in the ML card or any other suggestion would be really appreciated.

Thanks

Regards

Anantha Subramanian Natarajan

2 Replies 2

smahbub
Level 6
Level 6

Try the "clear ip mroute" command on the ML card with high cpu usage and check for the issue. Ml card having a large number of mac address traffic can also cause high cpu usage.In very large bridged networks, which may connect directly to 1000s of layer-3 devices, it may also be wise to increase the MAC table limit above the default of 1000 MAC addresses. This is done with the configuration command:

bridge X limit dynamic entries 10000

Hi Smahbub,

Thank you very much for the information. Will try to deploy the dynamic entry command,but we thought it has been fixed after 5.x and currently we are running 7.2.3.

Once again thank you very much for the same and meanwhile if you have some suggestions,kindly let me know.

Thanks

Regards

Anantha Subramanian Natarajan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco