Solved

Cisco IOU High CPU Usuage

Posted on 2016-08-12
6
153 Views
Last Modified: 2016-08-13
Hello Experts,

I use Cisco IOU provided by flyxy.cn at http://91sec.blogspot.co.uk/2014/03/my-cisco-iou-racks-from-flyxj-iouv3.html

The Cisco L2 IOU 12 causes a lot of CPU usage causes high CPU usage. The high CPU usage is System not Users: more debugging shows that L2 IOU causes a lot of loopback traffic. It was suggested to use the following commands:

class-map match-all ARP
  match protocol arp

policy-map ARP-limit
  class ARP
   police rate 2 pps burst 20 packets peak-rate 7 pps
     conform-action transmit
     exceed-action drop
     violate-action drop

http://www.routereflector.com/2012/09/l2-iou-high-cpu-usage/

However, I don't see where to apply to policy. Can someone shed some light

Cheers

cpatte7372
0
Comment
Question by:Member_2_7966113
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 29

Accepted Solution

by:
Predrag Jovic earned 500 total points
ID: 41754239
Most likely you should apply it on loopback interface (since it is loopback traffic)  :)

interface loopback0
service-policy output ARP-limit

Most likely you need to restrict traffic from loopback in out direction,.
0
 
LVL 4

Expert Comment

by:Steven Roman
ID: 41754435
Hello

This is still going to use processing to try to limited the traffic

Try to determine why this is going on.  ARP could be MAC address flooding on your IOU Lab.

If that does not show any thing try GNS3 or Cisoc VIRL

Hope this helps.

Thanks
0
 

Author Comment

by:Member_2_7966113
ID: 41754627
Hello Steven

Does Cisco VIRL do switching?

Regards
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 29

Expert Comment

by:Predrag Jovic
ID: 41754631
Yes, but you need to pay for it. Check prices on Virl page.
0
 

Author Comment

by:Member_2_7966113
ID: 41754635
Hi Steven,

I've just checked out Cisco VIRL, its not for me.

Cheers
0
 

Author Closing Comment

by:Member_2_7966113
ID: 41754637
Thanks for responding. That solved the problem
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question