C2800NM-ADVIPSERVICESK9-M), Version 12.4(15)T1. Why would this traffic not
I wouldn't recommend using that IOS as it was deferred a long time ago
for IPSEC/GETVPN issues to name just a few - as well as T2, T3, etc.
Try the latest 12.4(15)T13/T14 release, but I don't think it will help
the CPU
I have a 2811 w/ AIM module terminating two 10m ipsec tunnels that is
nearly always above 80% and often above 95% cpu util during the day.
Buffers show no significant number of misses. sh int switching shows
that 100% of the outbound encrypted packets are being process switched.
IOS
: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of James Graebner
[VPNtranet]
Sent: Thursday, October 07, 2010 10:32 AM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] High CPU util on a 2811 with two ipsec tunnels
I have a 2811 w/ AIM module terminating two 10m
: Thursday, October 07, 2010 10:32 AM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] High CPU util on a 2811 with two ipsec tunnels
I have a 2811 w/ AIM module terminating two 10m ipsec tunnels that is
nearly always above 80% and often above 95% cpu util during the day.
Buffers show no significant
CPU util on a 2811 with two ipsec tunnels
Message-ID:
c97f73e15f1f0d48a3ac0c423f8c221a02b9e...@rancor.ad.newedgenetworks.com
Content-Type: text/plain; charset=us-ascii
In my experience, two things hammer the CPU for IPSEC tunnels:
1. mGRE is not accelerated by the hardware
