URL: https://www.opennet.me/cgi-bin/openforum/vsluhboard.cgi
Форум: vsluhforumID6
Нить номер: 13476
[ Назад ]

Исходное сообщение
"cat6500-sup720 route-map"

Отправлено evb , 04-Май-07 11:12 
Hепонятная ситуация с cat6500-sup720.

Обычно load cpu порядка 10-15%. Вешаем на интерфейс "vlan 2" route-map, в
котором указан next-hop для группы адресов - загрузка cpu резко возрастает до
~50%:

copter#sh proc cpu so | e 0.0
CPU utilization for five seconds: 52%/46%; one minute: 51%; five minutes: 50%
PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
122     5992932  52331490        114  4.87%  4.05%  4.11%   0 IP Input

Конфиг выглядит так:

interface Vlan2
ip address xx.xx.1.130 255.255.255.192
ip policy route-map PASSUS
ip ospf message-digest-key 1 md5 7 xxxxxxxxxxxxxx
ip ospf priority 10
end

route-map PASSUS permit 5
match ip address 91
set ip next-hop xx.xx.0.15

access-list 91 permit xx.xx.100.0 0.0.0.255

С этим можно как-то бороться?


Содержание

Сообщения в этом обсуждении
"cat6500-sup720 route-map"
Отправлено Vitek. , 06-Май-07 19:06 
>Hепонятная ситуация с cat6500-sup720.
>
>Обычно load cpu порядка 10-15%. Вешаем на интерфейс "vlan 2" route-map, в
>
>котором указан next-hop для группы адресов - загрузка cpu резко возрастает до
>
>~50%:
>
>copter#sh proc cpu so | e 0.0
>CPU utilization for five seconds: 52%/46%; one minute: 51%; five minutes: 50%
>
> PID Runtime(ms)   Invoked      uSecs
>  5Sec   1Min   5Min TTY Process
>
> 122     5992932  52331490    
>    114  4.87%  4.05%  4.11%
>  0 IP Input
>
>Конфиг выглядит так:
>
>interface Vlan2
> ip address xx.xx.1.130 255.255.255.192
> ip policy route-map PASSUS
> ip ospf message-digest-key 1 md5 7 xxxxxxxxxxxxxx
> ip ospf priority 10
>end
>
>route-map PASSUS permit 5
> match ip address 91
> set ip next-hop xx.xx.0.15
>
>access-list 91 permit xx.xx.100.0 0.0.0.255
>
>С этим можно как-то бороться?

а посмотрите sh ip int vl 2, sh int vl 2 switching, sh int vl 2 stats? может всё сразу ясно станет.


"cat6500-sup720 route-map"
Отправлено evb , 08-Май-07 11:09 
>>Hепонятная ситуация с cat6500-sup720.
>>
>>Обычно load cpu порядка 10-15%. Вешаем на интерфейс "vlan 2" route-map, в
>>
>>котором указан next-hop для группы адресов - загрузка cpu резко возрастает до
>>
>>~50%:
>>
>>copter#sh proc cpu so | e 0.0
>>CPU utilization for five seconds: 52%/46%; one minute: 51%; five minutes: 50%
>>
>> PID Runtime(ms)   Invoked      uSecs
>>  5Sec   1Min   5Min TTY Process
>>
>> 122     5992932  52331490    
>>    114  4.87%  4.05%  4.11%
>>  0 IP Input
>>
>>Конфиг выглядит так:
>>
>>interface Vlan2
>> ip address xx.xx.1.130 255.255.255.192
>> ip policy route-map PASSUS
>> ip ospf message-digest-key 1 md5 7 xxxxxxxxxxxxxx
>> ip ospf priority 10
>>end
>>
>>route-map PASSUS permit 5
>> match ip address 91
>> set ip next-hop xx.xx.0.15
>>
>>access-list 91 permit xx.xx.100.0 0.0.0.255
>>
>>С этим можно как-то бороться?
>
>а посмотрите sh ip int vl 2, sh int vl 2 switching,
>sh int vl 2 stats? может всё сразу ясно станет.

#sh ip int vl 2
Vlan2 is up, line protocol is up
  Internet address is xx.xx.xx.130/26
  Broadcast address is 255.255.255.255
  Address determined by setup command
  MTU is 1500 bytes
  Helper address is not set
  Directed broadcast forwarding is disabled
  Multicast reserved groups joined: 224.0.0.5
  Outgoing access list is not set
  Inbound  access list is not set
  Proxy ARP is enabled
  Local Proxy ARP is disabled
  Security level is default
  Split horizon is enabled
  ICMP redirects are always sent
  ICMP unreachables are always sent
  ICMP mask replies are never sent
  IP fast switching is enabled
  IP fast switching on the same interface is disabled
  IP Flow switching is disabled
  IP CEF switching is enabled
  IP Feature Fast switching turbo vector
  IP Feature CEF switching turbo vector
  IP multicast fast switching is enabled
  IP multicast distributed fast switching is disabled
  IP route-cache flags are Fast, CEF
  Router Discovery is disabled
  IP output packet accounting is disabled
  IP access violation accounting is disabled
  TCP/IP header compression is disabled
  RTP/IP header compression is disabled
  Probe proxy name replies are disabled
  Policy routing is enabled, using route map PASSUS
  Network address translation is disabled
  WCCP Redirect outbound is disabled
  WCCP Redirect inbound is disabled
  WCCP Redirect exclude is disabled
  BGP Policy Mapping is disabled
  Sampled Netflow is disabled
  IP multicast multilayer switching is enabled

#sh int vl 2 sw
% Vl2 is not a switchable port

#sh int vl 2 sta
Vlan2
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor      21384   14165295     166747   14425717
             Route cache   84373739 34688627356          1         64
       Distributed cache     104535  110456425   99079450 106528775631
                   Total   84499658 34813249076   99246198 106543201412


"cat6500-sup720 route-map"
Отправлено Vitek. , 15-Май-07 21:17 
>>>Hепонятная ситуация с cat6500-sup720.
>>>
>>>Обычно load cpu порядка 10-15%. Вешаем на интерфейс "vlan 2" route-map, в
>>>
>>>котором указан next-hop для группы адресов - загрузка cpu резко возрастает до
>>>
>>>~50%:
>>>
>>>copter#sh proc cpu so | e 0.0
>>>CPU utilization for five seconds: 52%/46%; one minute: 51%; five minutes: 50%
>>>
>>> PID Runtime(ms)   Invoked      uSecs
>>>  5Sec   1Min   5Min TTY Process
>>>
>>> 122     5992932  52331490    
>>>    114  4.87%  4.05%  4.11%
>>>  0 IP Input
>>>
>>>Конфиг выглядит так:
>>>
>>>interface Vlan2
>>> ip address xx.xx.1.130 255.255.255.192
>>> ip policy route-map PASSUS
>>> ip ospf message-digest-key 1 md5 7 xxxxxxxxxxxxxx
>>> ip ospf priority 10
>>>end
>>>
>>>route-map PASSUS permit 5
>>> match ip address 91
>>> set ip next-hop xx.xx.0.15
>>>
>>>access-list 91 permit xx.xx.100.0 0.0.0.255
>>>
>>>С этим можно как-то бороться?
>>
>>а посмотрите sh ip int vl 2, sh int vl 2 switching,
>>sh int vl 2 stats? может всё сразу ясно станет.
>
>#sh ip int vl 2
>Vlan2 is up, line protocol is up
>  Internet address is xx.xx.xx.130/26
>  Broadcast address is 255.255.255.255
>  Address determined by setup command
>  MTU is 1500 bytes
>  Helper address is not set
>  Directed broadcast forwarding is disabled
>  Multicast reserved groups joined: 224.0.0.5
>  Outgoing access list is not set
>  Inbound  access list is not set
>  Proxy ARP is enabled
>  Local Proxy ARP is disabled
>  Security level is default
>  Split horizon is enabled
>  ICMP redirects are always sent
>  ICMP unreachables are always sent
>  ICMP mask replies are never sent
>  IP fast switching is enabled
>  IP fast switching on the same interface is disabled
>  IP Flow switching is disabled
>  IP CEF switching is enabled
>  IP Feature Fast switching turbo vector
>  IP Feature CEF switching turbo vector
>  IP multicast fast switching is enabled
>  IP multicast distributed fast switching is disabled
>  IP route-cache flags are Fast, CEF
>  Router Discovery is disabled
>  IP output packet accounting is disabled
>  IP access violation accounting is disabled
>  TCP/IP header compression is disabled
>  RTP/IP header compression is disabled
>  Probe proxy name replies are disabled
>  Policy routing is enabled, using route map PASSUS
>  Network address translation is disabled
>  WCCP Redirect outbound is disabled
>  WCCP Redirect inbound is disabled
>  WCCP Redirect exclude is disabled
>  BGP Policy Mapping is disabled
>  Sampled Netflow is disabled
>  IP multicast multilayer switching is enabled
>
>#sh int vl 2 sw
>% Vl2 is not a switchable port
>
>#sh int vl 2 sta
>Vlan2
>          Switching path
>   Pkts In   Chars In  
>Pkts Out  Chars Out
>            
>   Processor      21384  
> 14165295     166747   14425717
>            
> Route cache   84373739 34688627356    
>     1      
>   64
>       Distributed cache    
> 104535  110456425   99079450 106528775631
>            
>       Total   84499658
>34813249076   99246198 106543201412

ip route-cache policy на интерфейсе,вроде как, должно решить проблему.