attaching

Hello Ghanshyam,

there was another thread about high cpu caused by this two processes

Glen Grant has provided there the following link

http://www.cisco.com/en/US/products/hw/switches/ps663/products_tech_note09186a00804cef15.shtml

see if you can find an explanation.

Hope to help

Giuseppe

The high CPU usage is because of :

K2CpuMan Review

K2L2 Address Table R

I am trying to fix this.

Hello Ghanshyam,

verify with

sh mac-address-table count if the CAM table is full.

example:

sh mac-address-table count

MAC Entries for all vlans:

Dynamic Unicast Address Count: 624

Static Unicast Address (User-defined) Count: 0

Static Unicast Address (System-defined) Count: 1

Total Unicast MAC Addresses In Use: 625

Total Unicast MAC Addresses Available: 32768

Multicast MAC Address Count: 89

Total Multicast MAC Addresses Available: 16384

Hope to help

Giuseppe

This is the output:

CORE_SW01#sh mac-address-table count

MAC Entries for all vlans:

Dynamic Unicast Address Count: 244

Static Unicast Address (User-defined) Count: 0

Static Unicast Address (System-defined) Count: 6

Total Unicast MAC Addresses In Use: 250

Total Unicast MAC Addresses Available: 32768

Multicast MAC Address Count: 6

Total Multicast MAC Addresses Available: 16384

Hi,

This issue resolved.It was because of two failed etherchannels.

Hello Ghansyam,

nice news you have solved.

you have been kind to provide feedback this provides value to the forums.

Best Regards

Giuseppe

Sorry, writing in this topic, bit urgent:

Hi,

I have two site having 4507 both sides and connected to with a Metro Ethernet point to point, I am running eigrp to get access to local subnets of each location from other.

There are ASAs connected to each 4507 for outside access with default routes to them.

Now i can access DMZ subnet locally but not from other site i tried few thing that could not work.

Please let me know what is the best way to do this in terms of security and routing.

Thanks in advance.

ASA Ver 8.0(4)

Hello Ghanshyam,

your ASA supports EIGRP.

see

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/ip.html#wp1092871

It might be a good idea to use this to make the ASA aware of all EIGRP routes.

The ASA needs to know how to send back traffic coming from the second site.

A change on ACL can be needed too.

Hope to help

Giuseppe

Hi, Thanks for your quick reply.

So you mean to say;

1. I ll run the eigrp between a site and ASA.

2. Rest access list config will be same as any local subent for that 4507.

let le know if any change needed.