09-03-2008 08:19 AM - edited 02-21-2020 03:55 PM
Hello... Is there any known issue other than RC4-128 SSL encryption for WebVPN and data compression that would cause a VPN 3000 CPU to spike to 100%? Thanks.
09-03-2008 08:23 AM
Do you have the hardware encryption module installed?? If not - the high CPU could be because the encryption is done thru software and not hardware.
HTH>
09-03-2008 08:52 AM
Thanks! I'm not sure and have to check.
09-03-2008 09:12 AM
Sorry. How do I check that from the config manager or CLI? Thanks.
09-03-2008 09:22 AM
from the http page goto>> Monitoring>SystemStatus
And highlight any of the modules - point and click, it will tell you if any of the modeules a sep or sep-e modules.
HTH>
09-03-2008 09:58 AM
Thanks. There are two CryptIC encryption cards in slots 1 and 3. Both are in operational status but only one is encrypting and decrypting. However, the title bar is titled SEP not SEP-E.
09-03-2008 10:53 PM
There is your issue - no SEP-E modules. You shoul drop the level of encryption down on a profiles if possible.
Only onw will be doing the work - the other is a hot spare.
HTH>
09-04-2008 06:19 AM
Thanks Andrew. We'll look into adding the SEP-E module. Wouldn't that cause consistent high CPU utilization? We've only seen the CPU spike twice to 100% and stick. Normally it's around 2% so there's not much load on the concentrator. We thought there may be a known bug in the IOS.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: