I had a Cisco 3640 router which i was using as a VPN gateway for two branch to branch Ipsec VPNs. Since the CPU utilization on this router was peaking out at times affecting the perfomance , I added a VPN encryption moudule to this router.
Now when i check the CPU utilization i don't see much difference..The average utilization used to be around 50% out of which 35 % used to be because of the encrypt process. Now after adding the module the average utilization is around 40% where as encrypt process is contributing zero. No other process
contributes significantly to the load.
There is something which i noticed. The parameter after "/" which is the load due to interrut process is almost same as the total process load for 5 sec utilization !!..is there anything going wrong?? How do i bring down the CPU load.
Attached is the out put of show process cpu.
Thanks and regards,
CPU utilization for five seconds: 54%/53%; one minute: 39%; five minutes: 39%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
your CPU load is 99% due to interrupts, not to traffic (54%/53% means the CPU is 54% busy, and that 53% of it is due to interrupts). Installing the VPN card has reduced the CPU load due to the IPSec traffic, but your underlying problem is that the CPU is being interrupted all the time. You'll notice that there's no one process that seems to be using up all the CPU, that's because the load is not process related.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :