[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

Cisco IOU High CPU Usuage

Posted on 2016-08-12
6
Medium Priority
?
309 Views
Last Modified: 2016-08-13
Hello Experts,

I use Cisco IOU provided by flyxy.cn at http://91sec.blogspot.co.uk/2014/03/my-cisco-iou-racks-from-flyxj-iouv3.html

The Cisco L2 IOU 12 causes a lot of CPU usage causes high CPU usage. The high CPU usage is System not Users: more debugging shows that L2 IOU causes a lot of loopback traffic. It was suggested to use the following commands:

class-map match-all ARP
  match protocol arp

policy-map ARP-limit
  class ARP
   police rate 2 pps burst 20 packets peak-rate 7 pps
     conform-action transmit
     exceed-action drop
     violate-action drop

http://www.routereflector.com/2012/09/l2-iou-high-cpu-usage/

However, I don't see where to apply to policy. Can someone shed some light

Cheers

cpatte7372
0
Comment
Question by:Member_2_7966113
  • 3
  • 2
6 Comments
 
LVL 32

Accepted Solution

by:
Predrag Jovic earned 2000 total points
ID: 41754239
Most likely you should apply it on loopback interface (since it is loopback traffic)  :)

interface loopback0
service-policy output ARP-limit

Most likely you need to restrict traffic from loopback in out direction,.
0
 
LVL 4

Expert Comment

by:Steven Roman
ID: 41754435
Hello

This is still going to use processing to try to limited the traffic

Try to determine why this is going on.  ARP could be MAC address flooding on your IOU Lab.

If that does not show any thing try GNS3 or Cisoc VIRL

Hope this helps.

Thanks
0
 
LVL 1

Author Comment

by:Member_2_7966113
ID: 41754627
Hello Steven

Does Cisco VIRL do switching?

Regards
0
Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

 
LVL 32

Expert Comment

by:Predrag Jovic
ID: 41754631
Yes, but you need to pay for it. Check prices on Virl page.
0
 
LVL 1

Author Comment

by:Member_2_7966113
ID: 41754635
Hi Steven,

I've just checked out Cisco VIRL, its not for me.

Cheers
0
 
LVL 1

Author Closing Comment

by:Member_2_7966113
ID: 41754637
Thanks for responding. That solved the problem
0

Featured Post

Get Cisco Certified in IT Security

There’s a high demand for IT security experts and network administrators who can safeguard the data that individuals, corporations, and governments rely on every day. Pursue your B.S. in Network Operations and Security and gain the credentials you need for this high-growth field.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
This month, Experts Exchange’s free Course of the Month is focused on CompTIA IT Fundamentals.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

590 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question