Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Hi CPU Utilization

Good day,

 

We have a router (Cisco 2900 Series ) and we are  terminating L2P VPNs  (VPND) on it. We are getting the following processes when the CPU is high and they causing high CPU utilization

,

6    72013880     4251984      16936  7.83%  0.99%  0.75%   0 Check heaps

268    37765560     6420124       5882  2.95%  0.41%  0.35%   0 VTEMPLATE Backgr

 

May you please advise how can we resolve this problem.

 

Regards

Nel

 

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Gold

That figures.   2911 is NOT

That figures.  

 

2911 is NOT rated for 100 Mbps.  What you're seeing is to-be-expected when you're trying to push more traffic through your router's CPU is rated for. 

 

If you want 100 Mbps link, then you should be looking at a 3925E or a 3945.

11 REPLIES
Hall of Fame Super Gold

Post the following output:  1

Post the following output: 

 

1.  sh version; 

2.  sh proc cpu sorted | ex 0.00

New Member

*****************************

*************************************sh version***************************************


Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M7, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Mon 16-Sep-13 01:11 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M15, RELEASE SOFTWARE (fc1)

VPNROUTERNS02 uptime is 23 weeks, 1 day, 6 hours, 7 minutes
System returned to ROM by reload at 03:12:46 SAST Thu May 15 2014
System restarted at 03:13:59 SAST Thu May 15 2014
System image file is "flash:c2900-universalk9-mz.SPA.151-4.M7.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command

 

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO2911/K9 (revision 1.0) with 483328K/40960K bytes of memory.
Processor board ID FCZ1604704Y
3 Gigabit Ethernet interfaces
2 Serial(sync/async) interfaces
1 terminal line
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
250880K bytes of ATA System CompactFlash 0 (Read/Write)


License Info:

License UDI:

-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*0        CISCO2911/K9          FCZ1604704Y

 

Technology Package License Information for Module:'c2900'

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot
------------------------------------------------------------------
ipbase        ipbasek9      Permanent      ipbasek9
security      securityk9    Permanent      securityk9
uc            None          None           None
data          None          None           None

Configuration register is 0x2102

***********************************sh proc cpu sorted | ex 0.00********************************

sh processes cpu sort | ex 0.00

 

CPU utilization for five seconds: 73%/29%; one minute: 69%; five minutes: 68%

PID Runtime(ms)     Invoked      uSecs   5Sec   1Min   5Min TTY Process

129  1761524224   564662083       3119 30.39% 30.28% 30.23%   0 IP Input

268    39723928     6601570       6017  6.79%  1.04%  0.71%   0 VTEMPLATE Backgr

303   168717824   372212068        453  1.27%  1.23%  1.21%   0 L2TP mgmt daemon

302    37251856   789483188         47  0.95%  1.04%  1.05%   0 L2X Data Daemon

326    61282972   435145344        140  0.55%  0.55%  0.57%   0 RADIUS

115    17016076   135792453        125  0.55%  0.58%  0.57%   0 ACCT Periodic Pr

   3         552         387       1426  0.39%  0.17%  0.04% 388 SSH Process

320    45983760   171286016        268  0.31%  0.37%  0.36%   0 IP SNMP

317    20141956   462660050         43  0.31%  0.34%  0.32%   0 PPP Events

114     9963516   139895251         71  0.23%  0.26%  0.25%   0 AAA ACCT Proc

195     1864548  3106945023          0  0.23%  0.24%  0.23%   0 HQF Shaper Backg

153     2421744    20569783        117  0.15%  0.16%  0.15%   0 CEF: IPv4 proces

136        5740        1164       4931  0.15%  2.23%  1.16% 389 SSH Process

100     1689852  1605894648          1  0.15%  0.13%  0.15%   0 Ethernet Msec Ti

316     1764360   425462095          4  0.07%  0.06%  0.07%   0 PPP manager

137    12012444    25163738        477  0.07%  0.09%  0.07%   0 SSS Manager

322    24268536    85558321        283  0.07%  0.18%  0.18%   0 SNMP ENGINE

304    13071736    28233830        462  0.07%  0.09%  0.08%   0 L2TUN Applicatio

240    18890632    19936499        947  0.07%  0.10%  0.10%   0 Crypto IKMP

  67     2102080    14040478        149  0.07%  0.07%  0.07%   0 Per-Second Jobs

 

sh processes cpu sort | ex 0.00

 

CPU utilization for five seconds: 71%/29%; one minute: 69%; five minutes: 68%

PID Runtime(ms)     Invoked      uSecs   5Sec   1Min   5Min TTY Process

129  1761527304   564662755       3119 27.48% 30.06% 30.18%   0 IP Input

268    39724492     6601576       6017  7.06%  1.52%  0.82%   0 VTEMPLATE Backgr

   6    75220152     4426664      16992  1.27%  0.84%  0.75%   0 Check heaps

303   168717920   372212222        453  1.19%  1.22%  1.21%   0 L2TP mgmt daemon

302    37251900   789483464         47  0.95%  1.03%  1.05%   0 L2X Data Daemon

115    17016124   135792507        125  0.63%  0.58%  0.57%   0 ACCT Periodic Pr

326    61283008   435145462        140  0.39%  0.54%  0.57%   0 RADIUS

136        5764        1191       4839  0.39%  2.08%  1.15% 389 SSH Process

317    20141968   462660225         43  0.31%  0.33%  0.32%   0 PPP Events

114     9963516   139895309         71  0.23%  0.26%  0.25%   0 AAA ACCT Proc

153     2421748    20569793        117  0.15%  0.16%  0.15%   0 CEF: IPv4 proces

137    12012456    25163758        477  0.15%  0.09%  0.08%   0 SSS Manager

304    13071752    28233850        462  0.15%  0.10%  0.08%   0 L2TUN Applicatio

195     1864552  3106945766          0  0.15%  0.23%  0.23%   0 HQF Shaper Backg

320    45983840   171286751        268  0.15%  0.35%  0.36%   0 IP SNMP

316     1764360   425462245          4  0.07%  0.06%  0.07%   0 PPP manager

142     3622212    40704663         88  0.07%  0.02%  0.01%   0 SSM connection m

165     4933920     9924475        497  0.07%  0.04%  0.02%   0 IP Background

  67     2102084    14040484        149  0.07%  0.07%  0.07%   0 Per-Second Jobs

240    18890640    19936512        947  0.07%  0.10%  0.10%   0 Crypto IKMP

100     1689856  1605895081          1  0.07%  0.13%  0.15%   0 Ethernet Msec Ti

322    24268640    85558689        283  0.07%  0.17%  0.18%   0 SNMP ENGINE

 

sh processes cpu sort | ex 0.00

 

CPU utilization for five seconds: 70%/29%; one minute: 69%; five minutes: 68%

PID Runtime(ms)     Invoked      uSecs   5Sec   1Min   5Min TTY Process

129  1761543728   564664923       3119 32.31% 30.29% 30.24%   0 IP Input

  13    19378600      233310      83061  1.44%  0.18%  0.12%   0 Licensing Auto U

303   168718432   372212931        453  1.36%  1.17%  1.20%   0 L2TP mgmt daemon

302    37252212   789484865         47  0.96%  1.03%  1.05%   0 L2X Data Daemon

326    61283184   435146162        140  0.64%  0.56%  0.57%   0 RADIUS

115    17016300   135792798        125  0.64%  0.58%  0.57%   0 ACCT Periodic Pr

268    39724928     6601602       6017  0.40%  1.24%  0.81%   0 VTEMPLATE Backgr

317    20142052   462661089         43  0.32%  0.33%  0.32%   0 PPP Events

114     9963580   139895613         71  0.32%  0.26%  0.25%   0 AAA ACCT Proc

320    45984032   171287790        268  0.24%  0.43%  0.38%   0 IP SNMP

195     1864568  3106949982          0  0.24%  0.25%  0.24%   0 HQF Shaper Backg

137    12012500    25163827        477  0.16%  0.09%  0.08%   0 SSS Manager

153     2421752    20569843        117  0.16%  0.16%  0.16%   0 CEF: IPv4 proces

322    24268768    85559208        283  0.16%  0.24%  0.20%   0 SNMP ENGINE

304    13071784    28233927        462  0.16%  0.10%  0.08%   0 L2TUN Applicatio

316     1764372   425463025          4  0.08%  0.06%  0.08%   0 PPP manager

165     4933940     9924506        497  0.08%  0.03%  0.02%   0 IP Background

135     2782944     4311307        645  0.08%  0.05%  0.05%   0 PPP IP Route

  67     2102088    14040516        149  0.08%  0.08%  0.08%   0 Per-Second Jobs

142     3622212    40704772         88  0.08%  0.02%  0.01%   0 SSM connection m

100     1689868  1605897460          1  0.08%  0.13%  0.15%   0 Ethernet Msec Ti

 

Hall of Fame Super Gold

What is your WAN speed? 

New Member

it's 100Mbps

it's 100Mbps

Hall of Fame Super Gold

That figures.   2911 is NOT

That figures.  

 

2911 is NOT rated for 100 Mbps.  What you're seeing is to-be-expected when you're trying to push more traffic through your router's CPU is rated for. 

 

If you want 100 Mbps link, then you should be looking at a 3925E or a 3945.

New Member

 10 Gbps is confirmed as

 

10 Gbps is confirmed as supposed to the value I sent. So this is still the case as per your advice.

New Member

So 2911 is still NOT rated

So 2911 is still NOT rated for 10Gbps?

Super Bronze

DisclaimerThe Author of this

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

Nope.  Cisco recommends a 2911 for up to 35 Mbps (duplex).  Although Cisco also documents the 2911 can forward up to 3.371 Gbps, the 35 Mbps is for real world usage.

For routers, for 10G, you would need to look at the ASR 1K series.

New Member

Thanks a lot Leo and Joseph

Thanks a lot Leo and Joseph for your assistance!

Hall of Fame Super Gold

So 2911 is still NOT rated

So 2911 is still NOT rated for 10Gbps?

I agree with Joseph.  If you want 10 Gbps bandwidth then you are potentially looking at an ASR 1002-X.

New Member

Thanks a lot!

Thanks a lot!

224
Views
0
Helpful
11
Replies
CreatePlease to create content