We are having 3 7613 Router and facing problem of high CPU .We are having 700 P2P GRE Tunnels in each Router. All of them are in OSPF.Most of the time the router CPU remains 80 to 90 %.In "Show Process Sorted " it shows that 40% of utilization is due to interrupt.Show run also makes the CPU to 100% and takes 20 to 30 second to get the output. Can anybody help me?
WE are using SUP 720. Earlier we were running with two 3845 box.But those box were not able to handle more. Cisco has did an audit lst year and recommended for this box in this environment and suggested for implementing MGre-DMVPN instead of P2P GRE.but the situation is very critical where we are not being able to terminate more than one TSP Backhaul VPN link in this box.If we put second VPN Backhaul link it remains 100 % constantly and the box stops traffic transmission. We are having Four TSP Bachaul VPN link where in each VPN, having approax 150 to 180 P2P GRE Tunnels.WE are worried that if the box is capable to handle those many GRE and OSPF or not?Secondly why Interrupt is taking so high CPU ?In One VPN Link with 180 GRE , the process is 70 to 80% Average , where as in a 3845 with same no of GRE and OSPF it is running with CPU 20 to 30 %.Last three months we are suffering for this and tried a lot to fix it but nothing worked.Can anybody tell me if there is any way forward.Another information -We have taken IPSec VPN SPA also .GRE's are acselerated by the VPN SPA without cryto or IPsec.Still it is the behaviour of the box.
Yah, You are right.We are trying to involve Cisco for RCA. But one thing is not understandable to me,is that- Why 3845 running with 20 to 30 % ,in the same senario 7613 is going 70 to 80 %?What is the difference between 3845 and 7613 in-respect of handling OSPF & GRE ?Can anybody tell me that if we migrate it to Single AS iBGP instead of OSPF and eliminate GRE's by creating iBGP neighbors through WAN interfaces.Then it will work fine or not ? What is the maximum number of iBGP peers tested or recomended?
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...