Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

the cpu reach 85 % when using cache server and return to 3% when shutdown it!!!

hi ,

recently i was uisng router 7206 as router gateway and the cache working fine and the max cpu was 50 %

now , i copied the config and pasted it in another router cisco 7600

every thing is fine , but i note the cpu is increasing and reached up to 85 %% !!!!!!!!!!!!!!

i just shutdown the cache server and the cpu became 3 % !!!!!!!!!!!!

which mean that the cache server is utilizng all of my cpu  .!!!!!!

actually , there are some config wasnt accepted  in 7600 which is under interface command

duplex full

speed auto

media-type rj45

negotiation auto

but i think that these lines has no affect in cache server cpu .

i will pase my config of cache with config of interfaces  ,  whch is currently in 7600

my question is how to start troubleshooting the cpu  utilization  because of cache ?

my issue  is when i was using 7206 the cpu biggest  value was 50 % when cache is full loaded . but in 7600 the utilization reached 85 % and still increasing !!

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

ip wccp 80 redirect-list CACHE80

ip wccp 90 redirect-list CACHE90

!

interface GigabitEthernet1/1

description zzz

bandwidth 230000

ip address 10.160.150.2 255.255.255.0

ip wccp 80 redirect in

ip policy route-map CACHE-REDIRECT

load-interval 30

!        

interface GigabitEthernet1/2

description Cache

bandwidth 150000

ip address xxxxxxxx 255.255.255.248

ip wccp redirect exclude in

load-interval 30

!        

interface GigabitEthernet1/3

description Internet from uuuuuuu

bandwidth 230000

ip address xxxxxxxxx 255.255.255.252

ip wccp 90 redirect in

load-interval 30

!        

interface GigabitEthernet1/3.11

description Internet From rrrr

encapsulation dot1Q 11

ip address xxxxx

ip wccp 90 redirect in

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

Everyone's tags (7)
21 REPLIES
New Member

the cpu reach 85 % when using cache server and return to 3% whe

i think that  7600 router has a default config of startup config .

could this affect and make any issue ??

regards

Hall of Fame Super Bronze

Re: the cpu reach 85 % when using cache server and return to 3%

The 7600 has dedicated ASICs for WCCP thus the impact to the CPU is minimal.

The 7200 processes all packets on the CPU but you can alleviate this impact by using the following command under each of the interfaces where WCCP is enabled:

ip route-cache same-interface.

This will enable fast switching on packets which are switch out of the same interface they arrived.

http://www.cisco.com/en/US/docs/ios/ipswitch/command/reference/isw_i1.html#wp1085449

Regards,

Edison

New Member

the cpu reach 85 % when using cache server and return to 3% whe

hi , Edison

im asking about 7600 and the problem is in 7600 not in 7206 ,

do you mean configuring the command

ip route-cache same-interface.


on router 7600 ???

regards

Hall of Fame Super Bronze

the cpu reach 85 % when using cache server and return to 3% whe

Sorry, I misread your question. I originally read you were moving from a 7600 to a 7200. My apologies.

Can you post your redirect-list (CACHE80 and CACHE90)?

There are some caveats when building redirect-list on hardware-assisted platforms such as the 7600.

No, you don't enter the 'ip route-cache same-interface' on the 7600 box.

Regards,

Edison

New Member

the cpu reach 85 % when using cache server and return to 3% whe

hi ,

Edison

its okay

im versy sorry for hiding ips  for privacy.

here is config :

Gateway7600#sh ip access-lists CACHE80

Extended IP access list CACHE80

    10 deny tcp any hostzz.zz.4.69 eq www

    20 deny tcp host xx.xx.67.253 any eq www

    30 deny tcp any host zz.zz.92.59 eq www (316 matches)

    40 permit tcp xxxx.68.0 0.0.3.255 any eq www (115010480 matches)

    50 permit tcp xx.xx.72.0 0.0.3.255 any eq www (88556023 matches)

    60 permit tcp xx.xx.76.0 0.0.3.255 any eq www (59342978 matches)

    70 permit tcp xx.xx.67.0 0.0.0.255 any eq www (15182404 matches)

%%%%%%%%%%%%%%%%%%%%%%

Gateway7600#sh ip access-lists CACHE90

Extended IP access list CACHE90

    10 permit tcp any xx.xx.67.0 0.0.0.255 (417403 matches)

    20 permit tcp any xx.xx.68.0 0.0.3.255 (3551977 matches)

    30 permit tcp any xx.xx.72.0 0.0.3.255 (2701614 matches)

    40 permit tcp any xx.xx.76.0 0.0.3.255 (1671664 matches)

Hall of Fame Super Bronze

the cpu reach 85 % when using cache server and return to 3% whe

Your ACL looks fine.

Please post the output from the following commands:

show ip cef switching stat

show ip cef switch stat fea

show process cpu | exclude 0.00

show ip wccp

show ip wccp interface detail

show ip wccp web-cache service

show ip wccp web-cache detail

show tcam counts

show mls netflow table-contention aggregate

show mls netflow table-contention detail

show mls netflow ip counts

show mls netflow ip sw-installed

show mls statistics

New Member

the cpu reach 85 % when using cache server and return to 3% whe

sorry again for hiding ips ,note that xxx is the same as xx in the redirect-list

please  dont put me down , i  want to install 7600 with cahe and wish doing  that without problems

%%%%%%%%%%%%%%%%%%%%%%%

Gateway7600#show ip cef switching stat

       Reason                          Drop       Punt  Punt2Host

RP LES No route                           0          0         12

RP LES Packet destined for us             0      79518          0

RP LES Incomplete adjacency          122556          0          0

RP LES TTL expired                        0          0       1045

RP LES IP redirects                       0          0         46

RP LES Neighbor resolution req           69          7          0

RP LES Total                         122625      79525       1103

All    Total                         122625      79525       1103

Gateway7600#show ip cef switch stat fea

IPv4 CEF input features:

       Feature                Drop    Consume       Punt  Punt2Host Gave route

       Policy Routing            0          0          0          0  284112859

Total                            0          0          0          0  284112859

IPv4 CEF output features:

       Feature                Drop    Consume       Punt  Punt2Host    New i/f

Total                            0          0          0          0          0

IPv4 CEF post-encap features:

       Feature                Drop    Consume       Punt  Punt2Host    New i/f

Total                            0          0          0          0          0

IPv4 CEF for us features:

       Feature                Drop    Consume       Punt  Punt2Host    New i/f

Total                            0          0          0          0          0

IPv4 CEF punt features:

       Feature                Drop    Consume       Punt  Punt2Host    New i/f

Total                            0          0          0          0          0

IPv4 CEF local features:

       Feature                Drop    Consume       Punt  Punt2Host Gave route

Total                            0          0          0          0          0

Gateway7600#show process cpu | exclude 0.00

CPU utilization for five seconds: 69%/69%; one minute: 75%; five minutes: 58%

PID Runtime(ms)     Invoked      uSecs   5Sec   1Min   5Min TTY Process

   2       41592       36229       1148  0.08%  0.05%  0.05%   0 Load Meter      

  13       92628      390753        237  0.08%  0.16%  0.15%   0 ARP Input       

232      184824      380647        485  0.08%  0.22%  0.23%   0 IP Input        

270       19756    22897940          0  0.08%  0.03%  0.04%   0 Ethernet Msec Ti

339       11100       59525        186  0.16%  0.10%  0.11%   5 Virtual Exec    

541      113176      427936        264  0.08%  0.02%  0.01%   0 Port manager pe

Gateway7600#show ip wccp

Global WCCP information:

    Router information:

        Router Identifier:                   hh.hh.66.78

        Protocol Version:                    2.0

    Service Identifier: 80

        Number of Service Group Clients:     1

        Number of Service Group Routers:     1

        Total Packets Redirected:            2055832

          Process:                           0

          CEF:                               2055832

        Service mode:                        Open

        Service Access-list:                 -none-

        Total Packets Dropped Closed:        0

        Redirect access-list:                CACHE80

        Total Packets Denied Redirect:       615

        Total Packets Unassigned:            199019

        Group access-list:                   -none-

        Total Messages Denied to Group:      0

        Total Authentication failures:       0

        Total GRE Bypassed Packets Received: 0

          Process:                           0

          CEF:                               0

    Service Identifier: 90

        Number of Service Group Clients:     1

        Number of Service Group Routers:     1

        Total Packets Redirected:            99681

          Process:                           0

          CEF:                               99681

        Service mode:                        Open

        Service Access-list:                 -none-

        Total Packets Dropped Closed:        0

        Redirect access-list:                CACHE90

        Total Packets Denied Redirect:       1

        Total Packets Unassigned:            254204

        Group access-list:                   -none-

        Total Messages Denied to Group:      0

        Total Authentication failures:       0

        Total GRE Bypassed Packets Received: 0

          Process:                           0

          CEF:                               0

Gateway7600#

Gateway7600#

Gateway7600#show ip wccp interface detail

WCCP interface configuration details:

    GigabitEthernet1/1

        Output services: 0

        Input services:  1

            Dynamic:     80

        Mcast services:  0

        Exclude In:      FALSE

    GigabitEthernet1/2

        Output services: 0

        Input services:  0

        Mcast services:  0

        Exclude In:      TRUE

    GigabitEthernet1/3

        Output services: 0

        Input services:  1

            Dynamic:     90

        Mcast services:  0

        Exclude In:      FALSE

    GigabitEthernet1/3.11

        Output services: 0

        Input services:  1

            Dynamic:     90

        Mcast services:  0

        Exclude In:      FALSE

Gateway7600#

Gateway7600#

Gateway7600#show ip wccp web-cache service

The WCCP service specified does not exist.

Gateway7600#show ip wccp web-cache detail

The WCCP service specified does not exist.

Gateway7600#show tcam counts

           Used        Free        Percent Used       Reserved

           ----        ----        ------------       --------

Labels:(in)  6        4090            0

Labels:(eg)  2        4094            0

ACL_TCAM

--------

  Masks:     43        4053            1                    72

Entries:    102       32666            0                   576

QOS_TCAM

--------

  Masks:      4        4092            0                    18

Entries:     22       32746            0                   144

    LOU:      0         128            0

  ANDOR:      0          16            0

  ORAND:      0          16            0

    ADJ:      5        2043            0

Gateway7600#show mls netflow table-contention aggregate

Earl in Module 1

Aggregate Netflow CAM Contention Information

=============================================

Netflow Creation Failures    :   10604563

Netflow Hash Aliases         :   0

Gateway7600#show mls netflow table-contention detail

Earl in Module 1

Detailed Netflow CAM (TCAM and ICAM) Utilization

================================================

TCAM Utilization             :   100%

ICAM Utilization             :   4%

Netflow TCAM count           :   130950

Netflow ICAM count           :   6

Netflow Creation Failures    :   49585

Netflow CAM aliases          :   0

Gateway7600#show mls netflow ip counts

                                     ^

% Invalid input detected at '^' marker.

Gateway7600#show mls netflow ip coun 

Gateway7600#show mls netflow ip count

Displaying Netflow entries in Supervisor Earl

Number of shortcuts = 130948

Gateway7600#show mls netflow ip sw-installed

Displaying Netflow entries in Supervisor Earl

DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f          :AdjPtr

-----------------------------------------------------------------------------

Pkts         Bytes         Age   LastSeen  Attributes

---------------------------------------------------

xx.xx.68.205   zzz.zzz.66.24   tcp :www    :50874    Gi1/3.11         :0x80002    

11           15862         236   13:49:13   L3 - SwInstalled

xx.xx.77.76    zzz.zzz.66.23   tcp :www    :50687    Gi1/3.11         :0x80002    

11           15972         236   13:49:14   L3 - SwInstalled

xx.xx.69.187   zzz.zzz.66.23   tcp :www    :50922    Gi1/3.11         :0x80002    

13           18876         236   13:49:11   L3 - SwInstalled

xx.xx.70.95    207.241.236.224 tcp :www    :51811    Gi1/3.11         :0x80002    

3            4356          236   13:48:25   L3 - SwInstalled

xx.xx.72.24    173.194.67.104  tcp :www    :12777    Gi1/3.11         :0x80002    

10           14400         236   13:49:14   L3 - SwInstalled

xx.xx.73.34    173.194.5.38    tcp :www    :20333    Gi1/3.11         :0x80002    

4            5760          236   13:49:35   L3 - SwInstalled

xx.xx.74.20    178.79.198.147  tcp :www    :65270    Gi1/3.11         :0x80002    

9            10256         236   13:50:23   L3 - SwInstalled

xx.xx.74.201   zzz.zzz.66.24   tcp :www    :18370    Gi1/3.11         :0x80002    

12           17280         236   13:49:12   L3 - SwInstalled

xx.xx.76.86    79.140.80.17    tcp :www    :57835    Gi1/3.11         :0x80002    

6            8712          236   13:50:49   L3 - SwInstalled

xx.xx.73.61    zzz.zzz.66.17   tcp :www    :11351    Gi1/3.11         :0x80002    

11           15840         236   13:49:14   L3 - SwInstalled

xx.xx.74.198   zzz.zzz.66.19   tcp :www    :61514    Gi1/3.11         :0x80002    

11           15972         236   13:49:02   L3 - SwInstalled

xx.xx.76.9     87.98.209.3     tcp :www    :11001    Gi1/3.11         :0x80002    

5            7200          236   13:49:27   L3 - SwInstalled

xx.xx.77.79    66.220.152.32   tcp :www    :12945    Gi1/3.11         :0x80002    

2            2880          236   13:48:28   L3 - SwInstalled

xx.xx.70.131   173.194.5.141   tcp :www    :10370    Gi1/3.11         :0x80002    

5            7200          236   13:49:24   L3 - SwInstalled

xx.xx.78.3     zzz.zzz.66.20   tcp :www    :10270    Gi1/3.11         :0x80002    

11           15840         236   13:49:06   L3 - SwInstalled

xx.xx.70.136   zzz.zzz.66.22   tcp :www    :3911     Gi1/3.11         :0x80002    

12           16800         236   13:49:13   L3 - SwInstalled

xx.xx.72.67    zzz.zzz.66.23   tcp :www    :21061    Gi1/3.11         :0x80002    

13           18720         236   13:49:11   L3 - SwInstalled

xx.xx.73.185   zzz.zzz.66.22   tcp :www    :16748    Gi1/3.11         :0x80002    

14           20160         236   13:49:14   L3 - SwInstalled

xx.xx.69.192   173.194.5.8     tcp :www    :16808    Gi1/3.11         :0x80002    

3            4320          236   13:50:06   L3 - SwInstalled

xx.xx.78.25    zzz.zzz.66.23   tcp :www    :49356    Gi1/3.11         :0x80002    

11           15972         236   13:49:12   L3 - SwInstalled

xx.xx.74.205   zzz.zzz.66.17   tcp :www    :11693    Gi1/3.11         :0x80002    

13           18720         236   13:49:15   L3 - SwInstalled

xx.xx.75.212   69.171.224.53   tcp :www    :14515    Gi1/3.11         :0x80002    

6            8640          236   13:49:13   L3 - SwInstalled

xx.xx.67.26    199.91.153.58   tcp :www    :16488    Gi1/3.11         :0x80002    

2            2904          236   13:49:18   L3 - SwInstalled

xx.xx.72.237   198.78.208.254  tcp :www    :53604    Gi1/3.11         :0x80002    

5            7260          236   13:49:31   L3 - SwInstalled

xx.xx.75.9     zzz.zzz.66.19   tcp :www    :49459    Gi1/3.11         :0x80002    

12           17424         236   13:49:13   L3 - SwInstalled

xx.xx.74.79    zzz.zzz.66.18   tcp :www    :12560    Gi1/3.11         :0x80002    

13           18720         236   13:49:10   L3 - SwInstalled

xx.xx.72.155   178.79.198.135  tcp :www    :21817    Gi1/3.11         :0x80002    

11           13052         236   13:50:04   L3 - SwInstalled

xx.xx.72.185   212.150.101.6   tcp :www    :11604    Gi1/3.11         :0x80002    

25           36000         236   13:48:58   L3 - SwInstalled

xx.xx.78.49    zzz.zzz.66.21   tcp :www    :56324    Gi1/3.11         :0x80002    

10           14520         236   13:49:10   L3 - SwInstalled

xx.xx.70.175   178.79.198.146  tcp :www    :11769    Gi1/3.11         :0x80002    

9            10172         236   13:50:19   L3 - SwInstalled

xx.xx.74.70    173.194.5.145   tcp :www    :3593     Gi1/3.11         :0x80002    

5            7260          236   13:50:53   L3 - SwInstalled

xx.xx.73.253   zzz.zzz.66.17   tcp :www    :10482    Gi1/3.11         :0x80002    

11           15840         236   13:49:12   L3 - SwInstalled

xx.xx.70.55    78.140.176.225  tcp :www    :3224     Gi1/3.11         :0x80002    

5            7260          236   13:48:20   L3 - SwInstalled

xx.xx.70.246   95.211.138.16   tcp :www    :14537    Gi1/3.11         :0x80002    

6            8640          236   13:49:15   L3 - SwInstalled

xx.xx.70.78    zzz.zzz.66.21   tcp :www    :24618    Gi1/3.11         :0x80002    

9            12960         236   13:49:04   L3 - SwInstalled

xx.xx.76.99    15.192.45.138   tcp :www    :15200    Gi1/3.11         :0x80002    

7            9940          236   13:50:28   L3 - SwInstalled

xx.xx.74.29    69.171.224.53   tcp :www    :49438    Gi1/3.11         :0x80002    

2            2904          236   13:48:31   L3 - SwInstalled

xx.xx.70.47    zzz.zzz.66.24   tcp :www    :12475    Gi1/3.11         :0x80002    

12           17280         236   13:49:00   L3 - SwInstalled

xx.xx.68.190   zzz.zzz.83.194  tcp :www    :50422    Gi1/3.11         :0x80002    

3            4356          236   13:47:42   L3 - SwInstalled

xx.xx.74.158   69.171.224.37   tcp :www    :10547    Gi1/3.11         :0x80002    

3            4356          236   13:48:33   L3 - SwInstalled

xx.xx.72.125   199.91.154.147  tcp :www    :22782    Gi1/3.11         :0x80002    

5            7200          236   13:48:57   L3 - SwInstalled

xx.xx.76.102   23.62.236.17    tcp :www    :10273    Gi1/3.11         :0x80002    

7            10080         236   13:50:10   L3 - SwInstalled

xx.xx.67.150   95.211.105.156  tcp :www    :58103    Gi1/3.11         :0x80002    

6            8712          236   13:49:42   L3 - SwInstalled

xx.xx.73.6     173.194.5.244   tcp :www    :28819    Gi1/3.11         :0x80002    

5            7260          236   13:49:39   L3 - SwInstalled

xx.xx.74.201   zzz.zzz.66.24   tcp :www    :18368    Gi1/3.11         :0x80002    

9            12960         236   13:49:13   L3 - SwInstalled

xx.xx.75.163   184.172.142.179 tcp :www    :14320    Gi1/3.11         :0x80002    

6            8640          236   13:49:05   L3 - SwInstalled

xx.xx.74.167   zzz.zzz.66.18   tcp :www    :13520    Gi1/3.11         :0x80002    

13           18720         236   13:49:13   L3 - SwInstalled

xx.xx.78.3     zzz.zzz.66.20   tcp :www    :11011    Gi1/3.11         :0x80002    

14           20160         236   13:49:14   L3 - SwInstalled

xx.xx.71.153   zzz.zzz.66.23   tcp :www    :11198    Gi1/3.11         :0x80002    

8            11520         236   13:48:45   L3 - SwInstalled

xx.xx.75.240   85.17.127.65    tcp :www    :1983     Gi1/3.11         :0x80002    

3            4356          236   13:49:18   L3 - SwInstalled

xx.xx.70.117   173.194.78.154  tcp :www    :42359    Gi1/3.11         :0x80002    

4            2728          134   13:50:11   L3 - SwInstalled

xx.xx.67.159   208.111.185.156 tcp :www    :20828    Gi1/3.11         :0x80002    

8            8732          236   13:50:06   L3 - SwInstalled

xx.xx.68.205   zzz.zzz.66.24   tcp :www    :50878    Gi1/3.11         :0x80002    

13           18746         236   13:49:14   L3 - SwInstalled

xx.xx.71.216   zzz.zzz.66.19   tcp :www    :10393    Gi1/3.11         :0x80002    

8            11520         236   13:49:02   L3 - SwInstalled

xx.xx.77.37    173.194.78.99   tcp :www    :18942    Gi1/3.11         :0x80002    

3            3266          102   13:49:23   L3 - SwInstalled

xx.xx.71.153   zzz.zzz.66.23   tcp :www    :11294    Gi1/3.11         :0x80002    

10           14400         236   13:49:05   L3 - SwInstalled

xx.xx.75.229   zzz.zzz.66.17   tcp :www    :12422    Gi1/3.11         :0x80002    

12           17280         236   13:49:10   L3 - SwInstalled

xx.xx.69.237   178.79.198.154  tcp :www    :13615    Gi1/3.11         :0x80002    

9            8778          236   13:51:03   L3 - SwInstalled

xx.xx.68.94    zzz.zzz.66.23   tcp :www    :17127    Gi1/3.11         :0x80002    

11           15840         236   13:49:11   L3 - SwInstalled

xx.xx.77.247   zzz.zzz.66.16   tcp :www    :13084    Gi1/3.11         :0x80002    

13           18720         236   13:49:14   L3 - SwInstalled

xx.xx.70.95    207.241.236.224 tcp :www    :51838    Gi1/3.11         :0x80002    

3            4356          236   13:48:05   L3 - SwInstalled

xx.xx.72.5     69.171.237.16   tcp :www    :16458    Gi1/3.11         :0x80002    

0            0             236   13:48:00   L3 - SwInstalled

xx.xx.71.19    79.140.95.115   tcp :www    :13119    Gi1/3.11         :0x80002    

3            4320          236   13:50:10   L3 - SwInstalled

xx.xx.69.176   79.140.80.72    tcp :www    :2493     Gi1/3.11         :0x80002    

7            10164         236   13:50:05   L3 - SwInstalled

xx.xx.69.192   173.194.5.8     tcp :www    :16703    Gi1/3.11         :0x80002    

5            7200          236   13:49:26   L3 - SwInstalled

xx.xx.67.214   79.140.95.144   tcp :www    :52625    Gi1/3.11         :0x80002    

14           20328         236   13:50:53   L3 - SwInstalled

xx.xx.71.30    93.184.220.124  tcp :www    :2022     Gi1/3.11         :0x80002    

4            5808          236   13:50:32   L3 - SwInstalled

xx.xx.77.252   zzz.zzz.66.16   tcp :www    :18070    Gi1/3.11         :0x80002    

11           15840         236   13:49:07   L3 - SwInstalled

xx.xx.75.169   zzz.zzz.66.20   tcp :www    :10100    Gi1/3.11         :0x80002    

12           17280         236   13:49:14   L3 - SwInstalled

xx.xx.67.169   38.104.58.182   tcp :www    :26813    Gi1/3.11         :0x80002    

13           18720         236   13:48:42   L3 - SwInstalled

xx.xx.71.239   178.236.7.33    tcp :www    :13601    Gi1/3.11         :0x80002    

5            5646          236   13:50:59   L3 - SwInstalled

xx.xx.73.85    80.239.152.11   tcp :www    :59291    Gi1/3.11         :0x80002    

3            4356          236   13:47:51   L3 - SwInstalled

xx.xx.76.214   173.194.5.116   tcp :www    :18703    Gi1/3.11         :0x80002    

6            8640          236   13:49:26   L3 - SwInstalled

xx.xx.77.39    69.171.234.41   tcp :www    :16837    Gi1/3.11         :0x80002    

6            1572          236   13:49:16   L3 - SwInstalled

xx.xx.77.213   zzz.zzz.66.17   tcp :www    :4002     Gi1/3.11         :0x80002    

14           20328         236   13:49:13   L3 - SwInstalled

xx.xx.73.145   95.211.105.156  tcp :www    :4206     Gi1/3.11         :0x80002    

8            11616         236   13:50:41   L3 - SwInstalled

xx.xx.69.176   79.140.80.72    tcp :www    :2492     Gi1/3.11         :0x80002    

7            10164         236   13:50:40   L3 - SwInstalled

xx.xx.77.186   69.171.229.74   tcp :www    :2174     Gi1/3.11         :0x80002    

12           17424         236   13:48:33   L3 - SwInstalled

xx.xx.77.252   zzz.zzz.66.16   tcp :www    :17921    Gi1/3.11         :0x80002    

11           15840         236   13:49:17   L3 - SwInstalled

xx.xx.69.90    zzz.zzz.66.16   tcp :www    :2706     Gi1/3.11         :0x80002    

10           14520         236   13:49:13   L3 - SwInstalled

xx.xx.77.207   213.131.66.55   tcp :www    :12006    Gi1/3.11         :0x80002    

4            5760          236   13:48:06   L3 - SwInstalled

xx.xx.77.24    zzz.zzz.66.21   tcp :www    :11064    Gi1/3.11         :0x80002    

13           18720         236   13:49:12   L3 - SwInstalled

xx.xx.72.238   69.171.237.32   tcp :www    :55696    Gi1/3.11         :0x80002    

2            2904          236   13:49:03   L3 - SwInstalled

xx.xx.73.162   zzz.zzz.66.18   tcp :www    :13174    Gi1/3.11         :0x80002    

13           18720         236   13:49:15   L3 - SwInstalled

xx.xx.76.47    87.240.161.76   tcp :www    :52801    Gi1/3.11         :0x80002    

4            5808          236   13:48:17   L3 - SwInstalled

xx.xx.71.216   zzz.zzz.66.19   tcp :www    :10353    Gi1/3.11         :0x80002    

11           15840         236   13:49:15   L3 - SwInstalled

xx.xx.68.128   zzz.zzz.66.22   tcp :www    :10645    Gi1/3.11         :0x80002    

12           17280         236   13:49:15   L3 - SwInstalled

xx.xx.70.50    zzz.zzz.66.17   tcp :www    :26288    Gi1/3.11         :0x80002    

13           18720         236   13:49:12   L3 - SwInstalled

xx.xx.72.13    85.17.124.121   tcp :www    :11761    Gi1/3.11         :0x80002    

7            10080         236   13:49:20   L3 - SwInstalled

xx.xx.73.145   85.17.78.129    tcp :www    :4196     Gi1/3.11         :0x80002    

5            7260          236   13:50:07   L3 - SwInstalled

xx.xx.71.216   zzz.zzz.66.19   tcp :www    :10359    Gi1/3.11         :0x80002    

13           18720         236   13:49:10   L3 - SwInstalled

xx.xx.67.227   216.59.3.148    tcp :www    :50187    Gi1/3.11         :0x80002    

5            7260          236   13:49:28   L3 - SwInstalled

xx.xx.69.198   zzz.zzz.66.22   tcp :www    :18279    Gi1/3.11         :0x80002    

13           18720         236   13:49:12   L3 - SwInstalled

xx.xx.77.76    zzz.zzz.66.23   tcp :www    :50652    Gi1/3.11         :0x80002    

12           17424         236   13:49:09   L3 - SwInstalled

xx.xx.75.180   zzz.zzz.66.16   tcp :www    :24071    Gi1/3.11         :0x80002    

11           15840         236   13:49:13   L3 - SwInstalled

xx.xx.78.82    zzz.zzz.66.21   tcp :www    :10424    Gi1/3.11         :0x80002    

14           20160         236   13:49:13   L3 - SwInstalled

xx.xx.68.110   95.211.105.155  tcp :www    :50789    Gi1/3.11         :0x80002    

6            8712          236   13:49:57   L3 - SwInstalled

xx.xx.74.20    178.79.198.148  tcp :www    :65271    Gi1/3.11         :0x80002    

9            10256         236   13:50:40   L3 - SwInstalled

xx.xx.69.176   79.140.80.72    tcp :www    :2494     Gi1/3.11         :0x80002    

6            8712          236   13:50:26   L3 - SwInstalled

xx.xx.77.218   zzz.zzz.66.21   tcp :www    :1352     Gi1/3.11         :0x80002    

11           15972         236   13:49:15   L3 - SwInstalled

xx.xx.76.105   85.17.25.11     tcp :www    :49779    Gi1/3.11         :0x80002    

4            5808          236   13:51:03   L3 - SwInstalled

xx.xx.72.84    zzz.zzz.66.17   tcp :www    :15418    Gi1/3.11         :0x80002    

11           15840         236   13:49:08   L3 - SwInstalled

xx.xx.74.136   208.117.240.77  tcp :www    :15932    Gi1/3.11         :0x80002    

6            8640          236   13:49:38   L3 - SwInstalled

xx.xx.69.2     208.43.71.145   tcp :www    :50422    Gi1/3.11         :0x80002    

6            8712          236   13:48:55   L3 - SwInstalled

xx.xx.71.154   zzz.zzz.66.19   tcp :www    :15128    Gi1/3.11         :0x80002    

12           17280         236   13:49:11   L3 - SwInstalled

xx.xx.69.3     zzz.zzz.66.24   tcp :www    :13571    Gi1/3.11         :0x80002    

13           18720         236   13:49:14   L3 - SwInstalled

Gateway7600#

Gateway7600#show mls statistics

Statistics for Earl in Module 1

L2 Forwarding Engine

  Total packets Switched                : 2613104173

L3 Forwarding Engine

  Total packets Processed               : 2612898195 @ 113279 pps

  Total packets L3 Switched             : 1961063719 @ 73721 pps

  Total Packets Bridged                 : 585946922

  Total Packets FIB Switched            : 1223374926

  Total Packets ACL Routed              : 491568212

  Total Packets Netflow Switched        : 246120581

  Total Mcast Packets Switched/Routed   : 436835

  Total ip packets with TOS changed     : 2

  Total ip packets with COS changed     : 2

  Total non ip packets COS changed      : 0

  Total packets dropped by ACL          : 241

  Total packets dropped by Policing     : 0

  Total packets exceeding CIR           : 0

  Total packets exceeding PIR           : 0

Errors

  MAC/IP length inconsistencies         : 0

  Short IP packets received             : 0

  IP header checksum errors             : 0

  No-route packet drops                 : 12

  TTL failures                          : 270124

  MTU failures                          : 0

Total packets L3 Processed by all Modules: 2612898195 @ 113279 pps

Hall of Fame Super Bronze

Re: the cpu reach 85 % when using cache server and return to 3%

On

interface GigabitEthernet1/1

description zzz

bandwidth 230000

ip address 10.160.150.2 255.255.255.0

ip wccp 80 redirect in

ip policy route-map CACHE-REDIRECT

load-interval 30

can you remove the policy route-map and see if the CPU drops?

I noticed from the output, lots of packets punted to the CPU from the PBR.

What's the reason for this PBR?

Can you add the pertinent configuration for this PBR? route-map and ACL?

Based on the show proc cpu, your issue is interrupt traffic.

Regards,

Edison

New Member

Re: the cpu reach 85 % when using cache server and return to 3%

hi , mr Edison ,

the ip ploicy is just becuse i have two internet sources , and this direct my useres to the internet .

you are right ,  im noting that the internet traffic is not natural and thgouht that there is a drop  , here is a screenshot of internet graph after shutting down  cache server .

http://www7.0zz0.com/2012/07/30/15/691686492.png

as you see, the traffic is getting breaking down and up .  but this breaking wasnt  when i was using 7206

%%%%%%%%%%%%%%%%%

any way , do you think that ip policy may be the reason of the interrupting and cache problems?? if yes , how to start troubleshoot it ??

here is the config

Gateway7600#sh route-map CACHE-REDIRECT

route-map CACHE-REDIRECT, permit, sequence 5

  Match clauses:

    ip address (access-lists): TO_DMZ

  Set clauses:

  Policy routing matches: 0 packets, 0 bytes

route-map CACHE-REDIRECT, permit, sequence 10

  Match clauses:

    ip address (access-lists): 100

  Set clauses:

    ip next-hop ttt.ttt.66.77

  Policy routing matches: 0 packets, 0 bytes

route-map CACHE-REDIRECT, permit, sequence 20

  Match clauses:

    ip address (access-lists): isp1

  Set clauses:

    ip next-hop vv.vv.56.165

  Policy routing matches: 21040 packets, 1647130 bytes

route-map CACHE-REDIRECT, permit, sequence 30

  Match clauses:

    ip address (access-lists): isp2

  Set clauses:

    ip next-hop bbb.bbb.66.77

  Policy routing matches: 285732280 packets, 31199066079 bytes

route-map CACHE-REDIRECT, permit, sequence 100

  Match clauses:

  Set clauses:

  Policy routing matches: 389354 packets, 45835914 bytes

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

im also noting that alot of matching in  this ip policy.

Policy routing matches: 285732280 packets, 31199066079 bytes

regards

Hall of Fame Super Bronze

Re: the cpu reach 85 % when using cache server and return to 3%

Let's start by removing PBR from G1/1 and observe if the CPU drops.

I understand you need the PBR to distribute your user traffic but you may be having conflicting features enabled on the same interface.

Can you post the ACLs referred within the route-map?

Are you redirecting with WCCP and PBR the same src/dst ?

Engineering your network with hardware assisted platforms is quite different than with a regular IOS router.

New Member

Re: the cpu reach 85 % when using cache server and return to 3%

ok , i will  test it later and give u a reply

i cant stop it now

thanks very much

regards

Hall of Fame Super Bronze

Re: the cpu reach 85 % when using cache server and return to 3%

Looking at your output one more time, PBR isn't punting the traffic.

The output provided in the forum didn't line up correctly and I thought Punt2Host numbers were

284112859 but in reality is assigned to the GaveRoute column. Can you confirm this for me?

What version of IOS are you running on this box? Please provide the 'show ver' output.

Also, is the Cache Engine directly connected to this box?

New Member

Re: the cpu reach 85 % when using cache server and return to 3%

hi , hereis the sh again , but remember , i did itwhile the cache is not working .

again , i will try to remove pbr and give u a reply when i have the chance to do it .

and here is the output

Gateway7600#show ip cef switch stat fea           

IPv4 CEF input features:

       Feature                Drop    Consume       Punt  Punt2Host Gave route

       Policy Routing            0          0          0          0  285533522

Total                            0          0          0          0  285533522

IPv4 CEF output features:

       Feature                Drop    Consume       Punt  Punt2Host    New i/f

Total                            0          0          0          0          0

IPv4 CEF post-encap features:

       Feature                Drop    Consume       Punt  Punt2Host    New i/f

Total                            0          0          0          0          0

IPv4 CEF for us features:

       Feature                Drop    Consume       Punt  Punt2Host    New i/f

Total                            0          0          0          0          0

IPv4 CEF punt features:

       Feature                Drop    Consume       Punt  Punt2Host    New i/f

Total                            0          0          0          0          0

IPv4 CEF local features:

       Feature                Drop    Consume       Punt  Punt2Host Gave route

Total                            0          0          0          0          0

Gateway7600#

here is sh ver

Gateway7600#

Gateway7600#sh ve

Gateway7600#sh version

Cisco IOS Software, c7600s3223_rp Software (c7600s3223_rp-ADVENTERPRISEK9-M), Version 15.2(1)S, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2011 by Cisco Systems, Inc.

Compiled Sun 27-Nov-11 15:27 by prod_rel_team

ROM: System Bootstrap, Version 12.2(17r)SX3, RELEASE SOFTWARE (fc1)

BOOTLDR: Cisco IOS Software, c7600s3223_rp Software (c7600s3223_rp-ADVENTERPRISEK9-M), Version 15.2(1)S, RELEASE SOFTWARE (fc1)

Gateway7600 uptime is 2 days, 4 hours, 11 minutes

Uptime for this control processor is 2 days, 4 hours, 11 minutes

System returned to ROM by power-on (SP by power-on)

System image file is "sup-bootdisk:c7600s3223-adventerprisek9-mz.152-1.S.bin"

Last reload type: Normal Reload

Last reload reason: power-on

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

cisco CISCO7604 (R7000) processor (revision 2.0) with 458752K/65536K bytes of memory.

Processor board ID FOX1509G2DK

R7000 CPU at 300MHz, Implementation 39, Rev 3.3, 256KB L2, 1024KB L3 Cache

Last reset from power-on

1 Virtual Ethernet interface

9 Gigabit Ethernet interfaces

1915K bytes of non-volatile configuration memory.

65536K bytes of Flash internal SIMM (Sector size 512K).

Configuration register is 0x2102

Gateway7600#

Gateway7600#

about the cache connection .

the cache server is connected to switch and the router is conneted to the same switch .

regards

New Member

Re: the cpu reach 85 % when using cache server and return to 3%

hi , i just want to mention that this policy was okay when i was using 7206 , do you think  a conflic may occur in 7600 ??

Are you redirecting with WCCP and PBR the same src/dst ?

im sorry,  i didnt understand  this question .

here is the config of ACL

Extended IP access list isp1

    10 permit ip xx.xx.64.0 0.0.1.255 any (41830 matches)

Extended IP access list isp2

    10 permit ip xx.xx.66.0 0.0.1.255 any (15673605 matches)

    20 permit ip xx.xx.68.0 0.0.3.255 any (117877748 matches)

    30 permit ip xx.xx.72.0 0.0.3.255 any (91318175 matches)

    40 permit ip xx.xx.76.0 0.0.3.255 any (61154622 matches)

regards

Super Bronze

the cpu reach 85 % when using cache server and return to 3% whe

Disclaimer

The   Author of this posting offers the information contained within this   posting without consideration and with the reader's understanding that   there's no implied or expressed suitability or fitness for any purpose.   Information provided is for informational purposes only and should not   be construed as rendering professional advice of any kind. Usage of  this  posting's information is solely at reader's own risk.

Liability Disclaimer

In   no event shall Author be liable for any damages whatsoever (including,   without limitation, damages for loss of use, data or profit) arising  out  of the use or inability to use the posting's information even if  Author  has been advised of the possibility of such damage.

Posting

Very likely your WCCP topology and configurations are not taking full advantage of the 7600's hardware.  As Edison notes "There are some caveats ..."

You might want to search Cisco's main site on information concerning 6500/7600 and WCCP configuration.

New Member

Re: the cpu reach 85 % when using cache server and return to 3%

hi,

i removed the policy and the cpu value decreased to 30 %

as you mentioned , the policy was  causing cpu trouble .

anyway , as you thought , removing the IP Policy fixed the cpu utilization .

but im looking forward a solutin ,

wt do you think i have to do ???

should i look for another solution and forget using the ip policy ?? or rearrange the policy ??

regards

Super Bronze

Re: the cpu reach 85 % when using cache server and return to 3%

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

I think I recall, not all PBR statements are handled by hardware.  If I remember that correctly, you would need to check Cisco documentation against your PBR.

The Achilles heel of 6500/7600s, is anything that causes the forwarding to be done by the main CPU rather than the  ASICs.

New Member

Re: the cpu reach 85 % when using cache server and return to 3%

hi , i read about that ,

i found that using set ip next hop and match ip  under  route map are all handeled by hardware .

here is reference :

The  Policy Feature Card (PFC) and any Distributed Feature Cards (DFCs)  provide hardware support for policy-based routing (PBR) for route-map  sequences that use the match ip address, set ip next-hop, and ip default next-hop PBR keywords.

i also found another command which enable fast switching

here is refernece:


sers that need PBR to occur at faster speeds can now implement PBR without slowing down the router.

Fast-switched PBR supports all of the match commands and most of the set commands, with the following restrictions:

Router(config-if)#

  ip route-cache policy


is this command may  play role to solve the cpu issue ???

------------------------------------------------------------------------------------------

wt caveats im facing ???

should i forget using ip policy or i can find a solution , ???

regards

Hall of Fame Super Bronze

the cpu reach 85 % when using cache server and return to 3% whe

You could have PBR and WCCP on the same interface but they can't handle the same traffic (same ACL).

Looking at your WCCP ACL:

Extended IP access list CACHE80

    10 deny tcp any hostzz.zz.4.69 eq www

    20 deny tcp host xx.xx.67.253 any eq www

    30 deny tcp any host zz.zz.92.59 eq www (316 matches)

    40 permit tcp xxxx.68.0 0.0.3.255 any eq www (115010480 matches)

    50 permit tcp xx.xx.72.0 0.0.3.255 any eq www (88556023 matches)

    60 permit tcp xx.xx.76.0 0.0.3.255 any eq www (59342978 matches)

    70 permit tcp xx.xx.67.0 0.0.0.255 any eq www (15182404 matches)

Extended IP access list CACHE90

    10 permit tcp any xx.xx.67.0 0.0.0.255 (417403 matches)

    20 permit tcp any xx.xx.68.0 0.0.3.255 (3551977 matches)

    30 permit tcp any xx.xx.72.0 0.0.3.255 (2701614 matches)

    40 permit tcp any xx.xx.76.0 0.0.3.255 (1671664 matches)

And your PBR ACL:

Extended IP access list isp1

    10 permit ip xx.xx.64.0 0.0.1.255 any (41830 matches)

Extended IP access list isp2

    10 permit ip xx.xx.66.0 0.0.1.255 any (15673605 matches)

    20 permit ip xx.xx.68.0 0.0.3.255 any (117877748 matches)

    30 permit ip xx.xx.72.0 0.0.3.255 any (91318175 matches)

    40 permit ip xx.xx.76.0 0.0.3.255 any (61154622 matches)

Clearly shows you  PBR and WCCP the same traffic.

We have plenty of internal reference documents indicating this is not a supported configuration.

The only external reference I've found so far is documented under the 6500 WCCP Best Practice at:

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11-629052.html

Policy-Based Routing - PBR and WCCP may be  configured on the same interface and can coexist with hardware support  provided the features are not applied to the same traffic. If the  features do overlap then the traffic will be switched in software.

Please note: 6500/7600 basically have the same caveats on these features.

Regards,

Edison

Please remember to rate helpful posts.

New Member

Re: the cpu reach 85 % when using cache server and return to 3%

hi ,

i could recognize that no way to use cache server with ip policy one the same interface , but another question

as you know , in cisco 7600  we have 8 interfaces Giga , im currently using 3 only,

if i used the cache server on another interface rather   than Gi1/1 , could i find a solution ??

another question ,

if i edited my router map with only  two permit statements with the same wanted work , could i enhance cpu utilization ?

i mean the new royte map will be as follow :

Gateway7600#sh route-map CACHE-REDIRECT

route-map CACHE-REDIRECT, permit, sequence 20

  Match clauses:

    ip address (access-lists): isp1

  Set clauses:

    ip next-hop vv.vv.56.165

  Policy routing matches: 21040 packets, 1647130 bytes



reagrds

route-map CACHE-REDIRECT, permit, sequence 100

  Match clauses:

  Set clauses:

Hall of Fame Super Bronze

Re: the cpu reach 85 % when using cache server and return to 3%

As long as the WCCP and PBR are not on the same interface, you should be fine.

If the WCCP and PBR are on the same interface, the ACL used by the WCCP and PBR can't overlap.

I see you've modified the route-map for the PBR but I don't see any modification for the ACL ISP1.

if ISP1 ACL has the same subnets as the ones used by WCCP, the issue will remain.

Regards,

Edison

1047
Views
5
Helpful
21
Replies
CreatePlease login to create content