cisco asa control point 100%

[secureIT]

Hi All,

What does the 100% below means. Does it indicate that the system is currently under huge cpu intensive load ?

Current control point elapsed versus the maximum control point elapsed for:

      5 seconds = 100.0%; 1 minute: 100.0%; 5 minutes: 100.0% Current control point elapsed versus the maximum control point elapsed for:
      5 seconds = 100.0%; 1 minute: 100.0%; 5 minutes: 100.0%

[Maykol Rojas]

Hello,

Yes. It may be. However, you can check the output of Show CPU usage. Normally if the control Point is under 100% the ASA mostlikely would be too.

Have in consideration the following bug:

https://tools.cisco.com/bugsearch/bug/CSCtl91471

If you need further assistance, use the show process CPU usage sorted and paste it here, or open a TAC case.

Mike

[secureIT]

Hi Mike,

Can you please copy and paste the above bug symptom, condition and etc.. i am unable to view this in bool toolkit. It gives Insufficient Permissions to View Bug.

[Maykol Rojas]

Well I am unable to provide details, however let me know what version are you running into. Along with the output:

ciscoasa(config)# show cpu usage detail

Mike

[secureIT]

firewall# show cpu detailed

Break down of per-core data path versus control point cpu usage:
Core         5 sec            1 min            5 min
Core 0       1.2 (0.0 + 1.2)  2.1 (0.0 + 2.1)  1.8 (0.0 + 1.8)

Current control point elapsed versus the maximum control point elapsed for:
      5 seconds = 100.0%; 1 minute: 100.0%; 5 minutes: 100.0%

Firewall Version 8.2(5)

[Yogesh Rajeshirke]

I faced a similar issue where I can see my ASA Firewall also showing "Current control point elapsed versus the maximum control point elapsed for" 100% and the meaning of this output is not clear, I took help of CIsco TAC to find what does it mean and as per Cisco TAC the 100% is the amount of CPU available to process which is good as per below output.

Break down of per-core data path versus control point cpu usage:
Core         5 sec              1 min              5 min
Core 0       47.8 (0.0 + 47.8)  49.2 (0.0 + 49.2)  50.1 (0.0 + 50.1)

Current control point elapsed versus the maximum control point elapsed for:
      5 seconds = 100.0%; 1 minute: 99.7%; 5 minutes: 100.0%

CPU utilization of external processes for:
      5 seconds = 0.0%; 1 minute: 0.0%; 5 minutes: 0.0%

Total CPU utilization for:
      5 seconds = 47.8%; 1 minute: 49.3%; 5 minutes: 50.1%

[secureIT]

Hi Yogesh, What did TAC say about this ?

[Yogesh Rajeshirke]

As per Cisco TAC under the output section of commadn "sh cpu detailed" the "Current control point elapsed versus the maximum control point elapsed for:" the <amount>% is the amount of CPU available.

for example in below output the 100% CPU is available for 5 seconds, 99.7% is available last 1 minute and 100% available for last 5 minutes

Current control point elapsed versus the maximum control point elapsed for:
      5 seconds = 100.0%; 1 minute: 99.7%; 5 minutes: 100.0%