oret Posted January 26, 2010 · Report post Доброе время суток. Есть cisco 7206, на ней поднят PPPoE, обрабатывает примерно 140Мб(в час пик чуть более 1000 абонентов) трафика. При этом наблюдается довольно высокая загрузка CPU: CPU utilization for five seconds: 47%/41%; one minute: 45%; five minutes: 46% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 44 27957584 1637899 17069 2.39% 1.29% 1.27% 0 Per-Second Jobs 267 1179532 51393612 22 0.87% 0.87% 0.86% 0 PPP Events 5 2249036 208526 10785 0.87% 0.14% 0.09% 0 Check heaps 87 10696704 53866996 198 0.39% 0.47% 0.61% 0 IP Input 19 5084240 94833484 53 0.31% 0.26% 0.25% 0 ARP Input 264 1235016 4160186 296 0.23% 0.16% 0.16% 0 PPPoE Discovery 97 780720 1426639 547 0.15% 0.10% 0.08% 0 SSS Manager 142 29432 381901590 0 0.15% 0.20% 0.21% 0 HQF Shaper Backg 112 172660 2438754 70 0.15% 0.15% 0.15% 0 CEF: IPv4 proces 6 55960 191513 292 0.07% 0.00% 0.00% 0 Pool Manager 257 1140108 6339086 179 0.07% 0.09% 0.08% 0 RADIUS 110 89924 253806 354 0.07% 0.00% 0.00% 0 IP RIB Update 109 72284 711808 101 0.07% 0.00% 0.00% 0 IP Background 40 104980 917502 114 0.07% 0.03% 0.02% 0 Net Background 266 23496 48266110 0 0.07% 0.07% 0.07% 0 PPP manager 16 27152 28050742 0 0.00% 0.01% 0.00% 0 EnvMon Плюс к этому наблюдается большое количество ошибок на интерфейсе: GigabitEthernet0/1 is up, line protocol is up Hardware is MV64460 Internal MAC, address is 000d.bcfd.771b (bia 000d.bcfd.771b) Description: MANAGMENT Internet address is 192.168.16.2/24 MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 6/255, rxload 105/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set Keepalive set (10 sec) Full-duplex, 1000Mb/s, media type is RJ45 output flow-control is XON, input flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters never Input queue: 3/75/1315303/16 (size/max/drops/flushes); Total output drops: 35 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 41444000 bits/sec, 16683 packets/sec 5 minute output rate 104395000 bits/sec, 16115 packets/sec 4039847522 packets input, 1488246833 bytes, 41 no buffer Received 202067301 broadcasts, 0 runts, 0 giants, 0 throttles 530179 input errors, 0 CRC, 0 frame, 0 overrun, 530179 ignored 0 watchdog, 46836686 multicast, 0 pause input 0 input packets with dribble condition detected 4030099125 packets output, 434300790 bytes, 0 underruns 8 output errors, 0 collisions, 2 interface resets 2355702 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 8 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out GigabitEthernet0/1.5 is up, line protocol is up Hardware is MV64460 Internal MAC, address is 000d.bcfd.771b (bia 000d.bcfd.771b) Description: WAN Vlan5 Internet address is ХХ.ХХ.ХХ.2/23 MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 6/255, rxload 105/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 5. ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters never GigabitEthernet0/1.24 is up, line protocol is up Hardware is MV64460 Internal MAC, address is 000d.bcfd.771b (bia 000d.bcfd.771b) Description: LAN PPPoE Clients Internet address is 192.168.24.1/24 MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 6/255, rxload 105/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 24. ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters never В чем может быть причина такой загрузки и большого количества ошибок? Share this post Link to post Share on other sites
UglyAdmin Posted January 26, 2010 · Report post ignored - это не ошибки, это отброшенные пакеты. Вилан не тот, пакет какой-нибудь IPX/IPv6. Короче всё, что не попало в обработку - ignored. А загрузка для NPE-G1 нормальная, он 300 мегабит с трудом проедает в качестве БРАСа. Вот бордером - другое дело... Share this post Link to post Share on other sites
oret Posted January 26, 2010 · Report post У нас NPE-G2....IOS12.4(24)T2 Share this post Link to post Share on other sites
UglyAdmin Posted January 26, 2010 · Report post NPE-G2 тоже не слишком крут, 300 мегабит и для него неплохо. Кстати, на новых IOS'ах (как раз 12.4Т) NPE-G1 слабее NPE-G2 чуть не в два раза... TurboACL включены? Они неплохо могут уменьшить загрузку. Share this post Link to post Share on other sites
oret Posted January 26, 2010 · Report post Есть только обычные ACL.... А можно ли перевести имеющиеся ACL в "турбо" режим? Share this post Link to post Share on other sites
UglyAdmin Posted January 27, 2010 · Report post Можно access-list compiled Share this post Link to post Share on other sites
pliskinsad Posted January 27, 2010 · Report post show interface switching можно? а почему такой разброс txload 6/255, rxload 105/255 ? ну судя по последнему как раз мегабит 400 ;) а не 140. Проверьте может быть кто-то флудит. Share this post Link to post Share on other sites
oret Posted January 27, 2010 · Report post sh int switching GigabitEthernet0/1 MANAGMENT Throttle count 0 Drops RP 1371341 SP 0 SPD Flushes Fast 16 SSE 0 SPD Aggress Fast 0 SPD Priority Inputs 167622509 Drops 1370394 Protocol IP Switching path Pkts In Chars In Pkts Out Chars Out Process 4001345 414840273 4423880 2520373297 Cache misses 0 - - - Fast 52082737 3291768004 105058688 707183325 Auton/SSE 0 0 0 0 Protocol ARP Switching path Pkts In Chars In Pkts Out Chars Out Process 159487961 979102470 734700 46325820 Cache misses 0 - - - Fast 0 0 0 0 Auton/SSE 0 0 0 0 Protocol CDP Switching path Pkts In Chars In Pkts Out Chars Out Process 27335 11890341 27353 10202708 Cache misses 0 - - - Fast 0 0 0 0 Auton/SSE 0 0 0 0 Protocol PPPoE Switching path Pkts In Chars In Pkts Out Chars Out Process 41639161 4135582662 163263480 1745385687 Cache misses 0 - - - Fast 458255498 212266502 406646787 1130019021 Auton/SSE 0 0 0 0 Protocol Other Switching path Pkts In Chars In Pkts Out Chars Out Process 2485159 175226374 1005745 63854658 Cache misses 0 - - - Fast 0 0 0 0 Auton/SSE 0 0 0 0 NOTE: all counts are cumulative and reset only after a reload. Interface FastEthernet0/2 is disabled GigabitEthernet0/2 OUTSIDE Throttle count 0 Drops RP 0 SP 0 SPD Flushes Fast 0 SSE 0 SPD Aggress Fast 0 SPD Priority Inputs 729464 Drops 0 Protocol IP Switching path Pkts In Chars In Pkts Out Chars Out Process 34783748 571663775 4017342 291729086 Cache misses 0 - - - Fast 1815621740 2648370427 2174777350 1233012041 Auton/SSE 0 0 0 0 Protocol ARP Switching path Pkts In Chars In Pkts Out Chars Out Process 13748 824880 125935 7556100 Cache misses 0 - - - Fast 0 0 0 0 Auton/SSE 0 0 0 0 Protocol CDP Switching path Pkts In Chars In Pkts Out Chars Out Process 27342 11893770 27347 10200431 Cache misses 0 - - - Fast 0 0 0 0 Auton/SSE 0 0 0 0 Protocol Other Switching path Pkts In Chars In Pkts Out Chars Out Process 0 0 164035 9842100 Cache misses 0 - - - Fast 0 0 0 0 Auton/SSE 0 0 0 0 NOTE: all counts are cumulative and reset only after a reload. Interface GigabitEthernet0/3 is disabled Loopback0 Source LoopBack All statistics for this interface are zero. NVI0 All statistics for this interface are zero. Virtual-Access1 All statistics for this interface are zero. Virtual-Access2 Throttle count 0 Drops RP 0 SP 0 SPD Flushes Fast 0 SSE 0 SPD Aggress Fast 0 SPD Priority Inputs 26493457 Drops 0 Protocol IP Switching path Pkts In Chars In Pkts Out Chars Out Process 39199782 3073989203 62165378 3829812575 Cache misses 0 - - - Fast 353068099 514203385 406513130 4039823503 Auton/SSE 0 0 0 0 Protocol PPPoE Switching path Pkts In Chars In Pkts Out Chars Out Process 0 0 8519 187326 Cache misses 0 - - - Fast 0 0 133685 1503590 Auton/SSE 0 0 0 0 Protocol Other Switching path Pkts In Chars In Pkts Out Chars Out Process 1004 115810 99803568 1395976849 Cache misses 0 - - - Fast 0 0 0 0 Auton/SSE 0 0 0 0 NOTE: all counts are cumulative and reset only after a reload. Virtual-Template1 All statistics for this interface are zero. Virtual-Template2 PPTP All statistics for this interface are zero. По какому принципу считается что rxload105/255 это 400Мб? Share this post Link to post Share on other sites
voron Posted January 27, 2010 · Report post По какому принципу считается что rxload105/255 это 400Мб? по принципу 255~скорость интерфейса. 1000/255*104=~407 Share this post Link to post Share on other sites
oret Posted February 8, 2010 · Report post спасибо за инфу... перенес управление на другой интерфейс, нагрузка немного упала... Share this post Link to post Share on other sites
