High CPU Utilization in 4507R

Unanswered Question
Mar 16th, 2009
User Badges:

I see very high CPU Utilization in my 4507R (98-99 %) while the BW usage shows 1% and memory 58%.

No dynamic routing is running only static routing with 5 VLANs.


I dont see any alert as well.

Please suggest.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Giuseppe Larosa Mon, 03/16/2009 - 00:14
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Ghanshyam,


you can use


sh proc cpu sorted 1min


to find out what processes are using most resources


to see cpu usage over time use


sh proc cpu history


if supported use also


sh proc mem sorted


if you like you can post the shows in the forum as an attachment text file.


Hope to help

Giuseppe


ghanshyam.saini Mon, 03/16/2009 - 03:30
User Badges:

The high CPU usage is because of :



K2CpuMan Review

K2L2 Address Table R


I am trying to fix this.

Giuseppe Larosa Mon, 03/16/2009 - 04:19
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Ghanshyam,

verify with


sh mac-address-table count if the CAM table is full.


example:


sh mac-address-table count

MAC Entries for all vlans:

Dynamic Unicast Address Count: 624

Static Unicast Address (User-defined) Count: 0

Static Unicast Address (System-defined) Count: 1

Total Unicast MAC Addresses In Use: 625

Total Unicast MAC Addresses Available: 32768

Multicast MAC Address Count: 89

Total Multicast MAC Addresses Available: 16384


Hope to help

Giuseppe



ghanshyam.saini Mon, 03/16/2009 - 05:05
User Badges:

This is the output:

CORE_SW01#sh mac-address-table count

MAC Entries for all vlans:

Dynamic Unicast Address Count: 244

Static Unicast Address (User-defined) Count: 0

Static Unicast Address (System-defined) Count: 6

Total Unicast MAC Addresses In Use: 250

Total Unicast MAC Addresses Available: 32768

Multicast MAC Address Count: 6

Total Multicast MAC Addresses Available: 16384

Giuseppe Larosa Tue, 03/31/2009 - 05:07
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Ghansyam,

nice news you have solved.

you have been kind to provide feedback this provides value to the forums.


Best Regards

Giuseppe


ghanshyam.saini Fri, 06/05/2009 - 20:16
User Badges:

Sorry, writing in this topic, bit urgent:

Hi,


I have two site having 4507 both sides and connected to with a Metro Ethernet point to point, I am running eigrp to get access to local subnets of each location from other.


There are ASAs connected to each 4507 for outside access with default routes to them.

Now i can access DMZ subnet locally but not from other site i tried few thing that could not work.

Please let me know what is the best way to do this in terms of security and routing.


Thanks in advance.


ASA Ver 8.0(4)

Giuseppe Larosa Sat, 06/06/2009 - 06:49
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Ghanshyam,

your ASA supports EIGRP.


see


http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/ip.html#wp1092871


It might be a good idea to use this to make the ASA aware of all EIGRP routes.


The ASA needs to know how to send back traffic coming from the second site.


A change on ACL can be needed too.


Hope to help

Giuseppe


ghanshyam.saini Sat, 06/06/2009 - 07:05
User Badges:

Hi, Thanks for your quick reply.


So you mean to say;

1. I ll run the eigrp between a site and ASA.


2. Rest access list config will be same as any local subent for that 4507.


let le know if any change needed.

Actions

This Discussion