High CPU utilization with OSPF

Unanswered Question
Dec 11th, 2009
User Badges:

Hello,

We have a Cisco 3845 router with OSPF running on GRE interface Tunnels (nb : 88).

There are also GRE/IPSEC interface tunnels (nb 88) with no routing protocol running on them. The pysical support is VSAT.

We encountered 3 times high CPU utilisation (above 90%) related to the OSPF process in a period of 3 weeks). Each time, it happened about 15 minutes after a large number of GRE/IPSEC tunnel interfaces went down in a small interval (a few-seconds).

IOS is 24-15.T3.

Here is the configuration of a GRE/IPSEC interface :


interface Tunnel247
description *** VTI VPN VSAT Secours Ag 47 ***
bandwidth 128
ip address 172.23.47.1 255.255.255.0
keepalive 5 3
tunnel source 192.168.231.2
tunnel destination 172.25.47.2
tunnel mode ipsec ipv4
tunnel protection ipsec profile VTI-PROFILE


Any idea what is going wrong ?

Thank you in advance.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
janbouma Fri, 12/11/2009 - 10:50
User Badges:

Hi,

Please collect the logs, they give us a clue what went wrong.


Make sure you do not have a recursive tunnel as described here:

The "%TUN-5-RECURDOWN" Error Message and Flapping EIGRP/OSPF/BGP Neighbors Over a GRE Tunnel

http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080094690.shtml


In that case the tunnel participates in the routing process and it learns the destination of the tunnel through the tunnel interface.


Regards,

Jan

Actions

This Discussion