Cisco Firewall :: 3015 - CPU Utilization
May 28, 2011
We have a VPN concentartor which is having few VPN and doing NAT (Static and PAT) as well. One of our customer has added huge number of serves so we have to do hundreds of static and PAT rules.we have really large number of customers which are growing and do so the NAT in VPN concentartor.
I am bit concern and want to know what will be the best way to check that how my VPN concentartor is doing .As we all know its a GUI i try to check few stuff but couldnt get any info.... the model number is 3015.
View 3 Replies
ADVERTISEMENT
Sep 27, 2011
We have configured 20 route in ASA 5520. The CPU usage goes to 100 % at the moment when we add a specific route.route inside 10.254.101.0 255. 255. 255.0 10.254.102.254 1.This is the same case when we add this route at the first cli or as the 10th cli or the 21 cli (errespective of the position of cli) There is an another route out of which 20 routes we have configured is route inside 10.254.103.0 255.255.255.0 10.254.102.254 1.The normal case if we dont add the problamatic route , then the CPU utilization is only 2 %.
View 1 Replies
View Related
Jul 6, 2011
I've deployed many Cisco PIX 501 v6.3.3 either as normal firewalling feature and/or with VPN features enabled. I noticed in all my deployments, regardless if it's during peak hours or after office hours, the memory utilization is always consistent 11MB utilized over the total of 16MB(memory default size).
View 3 Replies
View Related
Mar 10, 2013
I have Active Standby ASA5550 setup with VPN premium license. A few days back we had a requirement of SSL VPN connection for and we got a temporary from Cisco for same, this license expired and the ASA reverted to it's original license. 3 4 days after this we saw a sudden increase in CPU utilization (upto 90% + -5%) on the ASA during production hours but were not able to figure out the reason, in order to restore the services we failovered the firewall to secondary and everything worked fine. We were suspecting one of the following but there were no logs for any of this
1. The ASA hardware was haivng problem
2. Some client was doing a DoS attack to bring down the ASA (no logs for this as well).
We took a downtime to look further by failovering the ASA back to primary and it worked fine without any issues ruling out the 1st option. We also came across a licesing doc [URL]
Downgrading any license (for example, going from 10 contexts to 2 contexts).
# Note If a temporary license expires, and the permanent license is a downgrade, then you do not need to immediately reload the security appliance; the next time you reload, the permanent license is restored.
As per this doc, sooner or later a restart was required on the ASA. We restarted secondary ASA and everthing was fine but when we restarted the primary ASA by swtiching over to secondary some of the server (not all) in the DMZ stopped working (even ICMP unreachable) and only came back to normal when the primary ASA was restored and working fine (with failover).
The reboot was done by shuting down the physical link between the Core switch and ASA inside individually.
I am not sure what could be the issue that the servers in the DMZ wen unreachable.
View 0 Replies
View Related
May 11, 2008
I have a remote site customer with a Cisco ASA 5540 running SSLVPN (Anyconnect)(8.03). It currently only serves about 450 SSLVPN clients. Since last friday, they've seen the CPU utilization go up to high 90% while only serving 400+ remote users. I saw some high cpu utilization bugs, but none looked to be relevant. How I can find the root cause of the CPU high utilization?
View 2 Replies
View Related
Dec 22, 2012
we have ASA 5520 with IOS 8.0 , when i am trying to add more static routes on the inside interface the CPU utilization is going up. one faced the same issue. I am configuring through the cisco ASDM 6.1(3)f.
View 1 Replies
View Related
Aug 9, 2012
I am facing high CPU util on my pix 515 E which is in failover mode.During peak hours the util is see rising to 60% where as in off peak hours it is normally12%.
During normal operation the average utilisation was observed to be 30% but suddenly from 2/3 days it is constantly 60% doule the value as earlier. Have gone through the logs and traffic but not able to tarce anything particular
below is the o/p of some command taken for analysis
IOS version 8.0(4)
sh cpu usage
CPU utilization for 5 seconds = 51%; 1 minute: 61%; 5 minutes: 58%
sh cpu usage
[Code]......
View 1 Replies
View Related
May 2, 2013
I was looking at my CISCO ASA 5520 and i found something really strange
ciscoasa/VPN-context# sh mem detail
Used memory: 4259249568 bytes (793%)
------------- ----------------
Total memory: 536870912 bytes (100%)
but when I look at the system context this is what I see
ciscoasa# sh mem
Free memory: 170829000 bytes (32%)
Used memory: 366041912 bytes (68%)
------------- ----------------
Total memory: 536870912 bytes (100%)
As far as I know the ASA is working good.
Info of the device
Hardware: ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB
View 3 Replies
View Related
Nov 21, 2012
Just want to check with you about memory utilization on the Asa 5510 ..
Free memory: 19%
Used Memory: 81%
Is this normal? Because we hade a problem this morning and the memory was at 100%..
Device Manager version 6.1(5) 57
Hardware: ASA5510-K8, 256 MB RAM, CPU Pentium 4 Celeron 1600 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB
View 4 Replies
View Related
Sep 25, 2012
I am seeing high cpu utilization on 5520.
fw# sh processes cpu-usage sorted non-zero
PC Thread 5Sec 1Min 5Min Process
0x081e1e11 0x6ddc1528 70.6% 66.5% 66.0% Dispatch Unit
0x08ed170c 0x6ddb9b48 1.6% 1.7% 1.8% Logger
0x08dd5f2c 0x6ddafee0 1.5% 1.5% 1.5% SNMP Notify Thread
0x08e8d045 0x6dd99348 0.1% 0.1% 0.1% ssh
View 2 Replies
View Related
Mar 3, 2011
I want to run two syslogs, one to Loglogic for compliance and the other to Solarwinds for network administration. Currently the firewall is setup for just the one syslog device. If I add an additional device ie further IP in the config for the Loglogic box will there be any noticeable differences in the performance of the firewall, does affect the cpu utilisation, or memory in any way.
View 1 Replies
View Related
Feb 22, 2013
Would like to ask for everyones assistance with regards to the problems we are encountering on our PIX525 firewall. Our encountered problem is as follow."PIX 525 experience sudden high CPU utilization every time a Vulnerability System Scan (third part app) is conducted. Based on the previous experiences, the high CPU utilization where experience when a host on a particular VLAN (214) is being scanned. Whenever we removed the said VLAN (214) in the network the CPU utilization of PIX 525 comes back to normal and all connectivity were resumed."The problem just recently appeared, we are conducting vulnerability system scan before and it goes successfully.
View 5 Replies
View Related
Feb 15, 2012
We had two PIXes in our environment and working as a active-failover mode. Its noted in now a days the active PIX memory utilization is 98% and for standby PIX it is 96%. And also in some times we were experiencing packet loss to the ip of active PIX and which reflects in the inside servers access also. During that time the active pix was not accessible via ssh as well as ASDM. We have tried reloading the PIX and changing failover state of the PIX, but it results only a temporary solution. Current memory installed is 128 MB (maximum upgraded), so a upgrade is also not possible. Please see the show command outputs from the PIX. Current Software version is 7.2(4)
sh memory output (PIX 1 - active)
Free memory: 4850944 bytes ( 4%)
Used memory: 129366784 bytes (96%)
[code]....
1) How we can pin point the root cause of this high memory utilization?
2) What might be the reason for the high memory utilization for the standby pix (96%), still the PIX is in idle state?
3) Is it a hardware issue or a memory leak issue, then how can we find out?
4) Is a software upgrade to new version resolves the memory issue?
View 10 Replies
View Related
May 22, 2012
We have a 6509 core with the below modules running for a long time and the utilization used to be always 10 to 13 percent checking with the supplier it was told to us that due to the firewall modue we have and its normal Now 2 days back i noticed the utilzation had jumped to 90 % and now it happened again
I see that on runnung proc cpu
16407 56.1% 56.5% 55.9% ios-base
16430 35.3% 35.2% 33.9% iprouting.iosproc
the modules present
Mod Ports Card Type Model Serial No.--- ----- -------------------------------------- ------------------ ----------- 1 6 Firewall Module WS-SVC-FWM-1 SAD140901XA 3 16 16 port 1000mb GBIC ethernet
[Code].....
View 1 Replies
View Related
Sep 13, 2012
We recently added about 400 users to our network for a total of 1000. Looking at the ASDM we are holding very tight to 75% utilization and we have 256mbs. This is also running IOS 8.2(1). Our firewall recently crashed after a major download was forced through it. This was after only being booted up for about a week. We had reloaded it a week prior after having ran it for about a year without issue. We havent made any changes in the last month other than adding more users to our network.
View 3 Replies
View Related
Jan 13, 2013
The infrastructure has PIX515E as the Firewall and few Web Servers and Database Servers inside. Is it possible to retreieve information regarding the bandwidth available at the outside interface of PIX (Internet link utilization ) utilized by each of the nodes seperately? I could use SNMP to get the overall data transfer at the Outside interface of PIX but isit possible to get utilization details of individual nodes ? Is Netflow an option ?
View 10 Replies
View Related
Nov 7, 2011
We have an active-active pair of cisco ASA5580-20 with software version 8.4(1)9. There are 8 contexts on it (including admin and system). 1 context is active on Primary node and other 7 are active on Secondary node. User traffic is going through this 1 context (2 interfaces - inside to users, outside to internet) and there are peaks to 1.16M concurrent connections, max bandwidth is 1.25Gbps. CPU usage for this context in peak hours is 63%, but we noticed that when we run "show cpu usage context all" from system it shows that system context is using 25% of CPU and "Total CPU utilization" (form output of show cpu detailed - on system context) is 88% which is bad. In non peak hours - user context use 33.6% CPU, system use 14.5%, total CPU usage is 50.5% So, is it normal this cpu utilization on system context (system on Primary node)?
View 1 Replies
View Related
Mar 20, 2013
I have been assigned to find out the nature of the network's bandwidth utilazation. Is there a way to analyze traffic and breakdown the traffic on the ASA5510?
View 9 Replies
View Related
May 30, 2011
We have several ASA5540s and 5510s (v8.4.1) being managed by CSM (4.1) Every so often several of the ASAs will send SNMP messages to CSM stating very high CPU utilization reached, usually between 150% and 400% - sometimes as high as 4million %.Obviously you can't get greater than 100%.
View 1 Replies
View Related
Sep 7, 2011
I haven't covered this bit in my CCDA studies (yet) but I was thinking, what do people consider too much CPU utilization for:-
A) A switch during normal working hours? (Layer 2 Switch)
B) A Router during normal working hours?
I was thinking a normal level for a switch would be at max 10% and I would get worried at 50-60% if this lasted for several minutes at a time.For a Router I would expect higher utilization in general so I would think up to about 25% during normal usage and at worst case a prolonged period the same as the switch.This isn't something I see discussed very often, except maybe by me when a router goes mental and maxes out at 100%.
View 2 Replies
View Related
Dec 4, 2010
I have a Cisco 7506 end cpu utilization from my VIP 0 is going to 100%. The biggest traffic from my interface is aroud 100 Mbps and my bandwdth is 1000Mbps. Who know what could happend?
64556445650707820870990195455665559401024909987026556445558100 * 90 * 80 * * 70 * * 60 * * 50 * * 40 **** * 30 ******#* * 20 #######** * 10 * *** ******************* **********##########****** **** 0....5....1....1....2....2....3....3....4....4....5....5....6....6....7. 0 5 0 5 0 5 0 5 0 5 0 5 0 CPU% per hour (last 72 hours) * = maximum CPU% # = average CPU%
View 2 Replies
View Related
Jun 7, 2012
We have CPU reports set to run daily for some of our higher priority switches, and we've noticed that some of the data isn't meshing with what we see on the switch. We have one heavily utilized switch that reports near 100% CPU utilization sometimes. I can do a "show proc cpu history" on that switch and see that at least once an hour over 72 hours, we'll see a near 100% CPU utilization.
The problem is that these spikes never appeare on any of our reports. We'd like to see this info because even if the switch spikes for just a few seconds or a minute, it could still indicate that we may have issues. Without that in the report, we may never realize there could be a problem.
Is there a way for this info to show in the report? I'm under the impression that if LMS polls the switch and doesn't see a high utilization average, then maybe it doesnt' enter that in the report. I guess I'd just like to know how often it pulls this data, and how it decides wath the Min, Max, and Averages are.
View 1 Replies
View Related
Nov 28, 2011
how do i know someone is connected to my wireless
View 1 Replies
View Related
Mar 28, 2013
We are currently running ACS 5.4.0.46.0a in a VMWare environement. We have 1 Primary and 1 Secondary running on our ESXi 5.0 cluster at our HQ and 1 secondary running on a standalone ESXi 5.0 at our DR site. All three instances were created at the same time and configure identical. The only difference being the physical box they are running from and that the secondary running on the ESXi cluster is the log collector. We are in the process of migrating from ACS 4.2 and only have 3 systems that authenticate to the new ACS 5.4 servers. Those systems are hardly ever used so there may be only 1 or 2 authenticates a day.
My concern is that the primary is running at around 30% cpu utilization constantly, and the secondaries are running at around 1%. Why the primary would be running the cpu that high when it should be pretty much idle most of the time? Or, how can I find out what process is running the cpu that high ?
View 2 Replies
View Related
Apr 26, 2011
I have 3845 router where 200 branches are connect. Ho have database server where branch are synch interval period.some of days observation cpu load average 70 % and sometimes it reaches 100 %.yesterday when I give command clear arp then instant cpu load reduce and 20 % yesterday cpu load 12-20 %. Today morning when I give command Cpu proc history then I found cpu load 60 % and at night it was 3 times reaches 100 %. so my question is after clear arp command at least 10 hours cpu utilization 20 % but after that it increase.so for any LAN broadcast it happend ? how i understand cpu high for Broadcasting or anything else.
View 2 Replies
View Related
Oct 12, 2011
What causes LMS 4.1 to have high memory utilization?
View 4 Replies
View Related
Sep 28, 2012
Our Router 7606 is in a problem with high CPU Utilization. We are using one EBGP and one IBGP session. We are also running OSPF with area 0 between two IBGP router to exchange few local networks. When bandwidth cross 100 MB than only CPU use become 100%. when bandwidth consumption is 80MB CPU use become 80% end so on.
Out put is when bandwidth consumption is 34MB
CPU utilization for five seconds: 44%/43%; one minute: 42%; five minutes: 30%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
78 44 9625 4 0.39% 0.03% 0.00% 2 Virtual Exec
13 40 375 106 0.07% 0.00% 0.00% 0 ARP Input
30 116 1098 105 0.07% 0.01% 0.00% 0 IPC Seat Manager
[code]....
View 27 Replies
View Related
Aug 10, 2011
I have a hight CPU utilisation problem in my CISCO7609-S routers. the cpu utilisation can rise 99% et this is usually. In the moment of hight CPU the the process CPU give the following:
the show processe cpu history give: show version
View 1 Replies
View Related
Apr 29, 2013
I have a 2811 that is really hitting the CPU hard. Nothing shows on CPU processes. It has an IPsec VPN tunnel back to HQ which also has a 2811 that terminates the VPN. The HQ has 2-3 IPsec tunnels to other remote sites. The CPU at the HQ avg 50% utilization during business hrs, peaks at about 80%. The remote one is very high 95% peaks, avg 80%-95% during business hours with bandwidth utilization of only 10-20Mbps. I read somewhere that its possible that fragmentation could be causing this. My question is, if I set the MTU to 1450 on the remote, I am guessing I will need to do all the other routers as well, the HQ and other remote sites? Siince they use the same outside interface to my HQ, is that correct?
View 3 Replies
View Related
Jun 23, 2011
We have Cisco 2811 router and facing high CPU utilisation as 70%/67%;,IOS Runing :c2800nm-advsecurityk9-mz.124-3f.bin.
View 4 Replies
View Related
Dec 26, 2011
I am not sure if the issue I have is due to router's performance of my configuration. Currently I have 2621XM connected in my internal network where Fa0/1 is considered untrusted zone and Fa0/0 is considered trusted. It appears that traffic is limited to about 3.17MBps (Mega Bytes) between Fa0/0 and Fa0/1. There are ACLs on the Fa0/1 inbound and Fa0/0 inbound. I am also using ip inspect rules for the Fa0/1 outbound traffic. When I remove ip inspect policy from the Fa0/1 interface, the traffic speed bumps up to about 4.8MBps (which is about 38Mbps - Mega bits).
Each time the CPU utilization is: CPU utilization for five seconds: 99%/99%; one minute: 19%; five minutes: 4% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
Access to the router during that time is veerrrryyyyyy slow! Does this mean I am hitting the maximum limit this router can handle?
View 8 Replies
View Related
Jan 7, 2013
High cpu utilization on cisco 7206 vxr router.[code]
View 2 Replies
View Related
Jun 24, 2012
We are finally installing 5508 controllers at multiple sites. (Yaaaay) We have an existing SNMP mangement system (Zenoss) that will work fine with these 5508's if I can figure out which OIDs report things like CPU utilization, free mem, temp, number of clients etc. We already have modeler plugins that list the number of APs managed and will also show the wired interface stats. Attached are two files with the resutls of snmpwalk. One has the raw OIDs, the other has the OIDs with the symbolic prefixes.
Most of that I'm looking for seems to be missing. For example, in other Cisco forum posts, it was mentioned that CPU utilization was available via this OID:
agentCurrentCPUUtilization ......OID: 1.3.6.1.4.1.14179.1.1.5.1
[URL]
and, Free Mem was available here:
agentFreeMemory free RAM of in Kbytes ....OID: 1.3.6.1.4.1.14179.1.1.5.3
Problem is, none of those OIDs are returned when I walk the 5508. For example:
[ZenStatus]$ snmpwalk -Ofn -v2c -c M31eRt4 10.254.248.3 | grep -F "1.3.6.1.4.1.14179"
[ZenStatus]$
(nothing even close to the agentCurrentCPUUtilization OID is found)We are currently running 7.0.235.0 .
View 8 Replies
View Related
