High CPU utilization w/VRF NAT - Cat6500
~80 or so static NAT's configured, multiple versions of IOS tested. Most of the traffic is being punted to the CPU through the NAT interfaces causing high CPU utilization. Increasing fast aging timers had 0 benefit, TCAM utilization is less than 5% Does anyone have any thoughts on other configuration tweaks I should try? I think we're at the point where new hardware maybe FWSM or another platform for NAT should be explored. --RB
I would recommend you do this on a firewall (fwsm or something external).. On Tue, Nov 13, 2012 at 10:39 AM, Rodrick Brown <rodrick.brown@gmail.com>wrote:
~80 or so static NAT's configured, multiple versions of IOS tested. Most of the traffic is being punted to the CPU through the NAT interfaces causing high CPU utilization.
Increasing fast aging timers had 0 benefit, TCAM utilization is less than 5% Does anyone have any thoughts on other configuration tweaks I should try? I think we're at the point where new hardware maybe FWSM or another platform for NAT should be explored.
--RB
-- Best Regards, Kenneth McRae *Sr. Network Engineer* kenneth.mcrae@dreamhost.com Ph: 323-375-3814 www.dreamhost.com
What Supervisior do you have? If its an older SUP NAT may be done in software, which sounds like you are currently experiencing. Its not hard to max out a 6500 CPU. -Mike On Tue, Nov 13, 2012 at 1:44 PM, Kenneth McRae <kenneth.mcrae@dreamhost.com>wrote:
I would recommend you do this on a firewall (fwsm or something external)..
On Tue, Nov 13, 2012 at 10:39 AM, Rodrick Brown <rodrick.brown@gmail.com
wrote:
~80 or so static NAT's configured, multiple versions of IOS tested. Most of the traffic is being punted to the CPU through the NAT interfaces causing high CPU utilization.
Increasing fast aging timers had 0 benefit, TCAM utilization is less than 5% Does anyone have any thoughts on other configuration tweaks I should try? I think we're at the point where new hardware maybe FWSM or another platform for NAT should be explored.
--RB
-- Best Regards,
Kenneth McRae *Sr. Network Engineer* kenneth.mcrae@dreamhost.com Ph: 323-375-3814 www.dreamhost.com
participants (3)
-
harbor235 -
Kenneth McRae -
Rodrick Brown