Nat overload

stephtchoko · ‎11-23-2005

i set nat overload on router 2801, sometime cpu can reach 100%.How can i limit process nat and reduce cpu used ?

Best regards.

spremkumar · ‎11-23-2005

Hi

I would like to suggest to do some troubleshooting to find out the exact reason y the CPU is peaking up to 100%.

have you disabled ip cef coz it comes by default in all the equipments these days.

also would like to cehck the traffic pattern in ur network using netflow which can be enabled under ur ethernet interface using ip route-cache flow command.

this will give u the traffic transaactions with ip as well as port details with both source and destination columns along with it...

would also suggest to check out for hardening ur router using some of the very well known hardening procedures..

also check out for any virus or worms in ur lan and try to fix it up..

some of the links which mite help u out .

http://www.cisco.com/en/US/products/products_security_advisories_listing.html

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080120f48.shtml

regds

answanso · ‎11-25-2005

Could you post the following information from the router when the CPU is high?

1. show tech

2. show interface | i rate|line

3. show stack

4. show ip traffic

5. show interface switching

6. show align

7. show log

Thanks

Anthony

jackko · ‎11-25-2005

havn't been following the conversation.

just a quick comment.

providing the cpu is so high, how could one possibly to issue the command "sh tech", since the output may easiler go up to 50+ pages.