VPN3030 High Cpu Load, at low throughput

Unanswered Question
Jan 15th, 2009
User Badges:

I have a VPN3030 set up strictly for remote access users only. (using preshared keys & running 3DES-MD5).

Problem is, that the vpn3030 hits 100% cpu load, at only ~ 6Mb thrughput ~150 sessions.

Is it possible to get detailed information on the CPU usage from the VPN3030?? - I would really like to know what's causing this problem. The only "monitoring" related to cpu usage i have knowledge of, is the "Awerage CPU utilization".... which is basically next to useless, regarding troubleshooting.

Regards /Ole

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
drolemc Thu, 01/22/2009 - 08:05
User Badges:
  • Silver, 250 points or more

It seems to be a data compression issues. Data compression increases the memory requirement and CPU utilization for each user session and consequently decreases the overall throughput of the VPN Concentrator. For this reason, Cisco recommends that you enable data compression only if every member of the group is a remote user that connects with a modem. If any member of the group connects through broadband, do not enable data compression for the group. Instead, divide the group into two groups, one for modem users and the other for broadband users. Enable data compression only for the group of modem users.

osoerensen Thu, 01/22/2009 - 08:23
User Badges:

The problem is now solved. - For some obscure reason, the SEP module was no longer active for my basegroup.. it was simply just "unchecked" in the selection menu! - I have no idea how this happened... im 100% sure I didn't uncheck the SEP module. The only changes made to the VPN3030 the last couple of months is firmware upgrades... no users added & removed, no changes etc...

Makes me wonder, if this could really be related to the final firmware upgrade we did prior to the incident... i'll probably never find out.

But to sum it all up... I enabled the SEP module in base group, and cpu load went from 100% to around 5-10% right away.

Jesusvallina Wed, 02/25/2009 - 07:26
User Badges:

How do I disable data compression? I want to make sure it's not enabled. I'm getting very little throughput on remote VPN users may be 1.5 on a 3060 concentrator with only 5 users.

david contreras Tue, 04/16/2013 - 15:58
User Badges:

i have a similar problem high CPU low throughput and low memory about 130 sessions.  Usually the CPU is at 1 bar on the utilization.  Not sure if its causing problems I will test it.

We have 2 3030 concentrators the other one has about the same number of sessions and the CPU is 1 bar to no bars of CPU utilization.  Where is this SEP setting?  I could not find one?

Any ideas?

jesusvallina_2 Wed, 04/17/2013 - 04:53
User Badges:

Expand Configuration then User management then go to Groups and then open the group you are working with. Now go to the General tab and at the bottom you will see SEP card Assignment. Make you you only check on the slot that has a SEP card in it. By the way you may be able to buy more sep cards to increass the performance of the concentrator. just be careful there are two type of card and you cannot mix them.

Good luck


This Discussion