Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Control-plane policing on ML Card

Hi All,

We are experiencing high CPU utilization on one of our ML Card in the ONS 15454. The "IP Input" has relatively higher CPU utilization consumed irrespective of the proper fast/CEF switching enabled on the interfaces. We are trying to figure out,whether there is an attack to the control-plane or even any IP Packets destined local to the ML Card,which is causing those packet to process switched.

In order to figure that,we thought we may try to use Control plance policing on the control-plane but it seems not taking the service-policy associated with that. Is this feature supported in the ML card or any other suggestion would be really appreciated.

Thanks

Regards

Anantha Subramanian Natarajan

2 REPLIES
Silver

Re: Control-plane policing on ML Card

Try the "clear ip mroute" command on the ML card with high cpu usage and check for the issue. Ml card having a large number of mac address traffic can also cause high cpu usage.In very large bridged networks, which may connect directly to 1000s of layer-3 devices, it may also be wise to increase the MAC table limit above the default of 1000 MAC addresses. This is done with the configuration command:

bridge X limit dynamic entries 10000

Community Member

Re: Control-plane policing on ML Card

Hi Smahbub,

Thank you very much for the information. Will try to deploy the dynamic entry command,but we thought it has been fixed after 5.x and currently we are running 7.2.3.

Once again thank you very much for the same and meanwhile if you have some suggestions,kindly let me know.

Thanks

Regards

Anantha Subramanian Natarajan

170
Views
4
Helpful
2
Replies
CreatePlease to create content