VPN 3000 high CPU

vpersaud001 · ‎09-03-2008

Hello... Is there any known issue other than RC4-128 SSL encryption for WebVPN and data compression that would cause a VPN 3000 CPU to spike to 100%? Thanks.

andrew.prince · ‎09-03-2008

Do you have the hardware encryption module installed?? If not - the high CPU could be because the encryption is done thru software and not hardware.

HTH>

vpersaud001 · ‎09-03-2008

Thanks! I'm not sure and have to check.

vpersaud001 · ‎09-03-2008

Sorry. How do I check that from the config manager or CLI? Thanks.

andrew.prince · ‎09-03-2008

from the http page goto>> Monitoring>SystemStatus

And highlight any of the modules - point and click, it will tell you if any of the modeules a sep or sep-e modules.

HTH>

vpersaud001 · ‎09-03-2008

Thanks. There are two CryptIC encryption cards in slots 1 and 3. Both are in operational status but only one is encrypting and decrypting. However, the title bar is titled SEP not SEP-E.

andrew.prince · ‎09-03-2008

There is your issue - no SEP-E modules. You shoul drop the level of encryption down on a profiles if possible.

Only onw will be doing the work - the other is a hot spare.

HTH>

vpersaud001 · ‎09-04-2008

Thanks Andrew. We'll look into adding the SEP-E module. Wouldn't that cause consistent high CPU utilization? We've only seen the CPU spike twice to 100% and stick. Normally it's around 2% so there's not much load on the concentrator. We thought there may be a known bug in the IOS.