Hello all,
Whenever the clients behind the router and making traffic (downloading at max speed) the router's CPU goes to 99% all the time, note that behind the router is just one client. So far I ruled out the modem firmware and the IOS, also the IPS provides a bandwidth of 12mbps and due to the router's CPU issue more that 9mbps is not achieved.
IOS: c870-advipservicesk9-mz.150-1.M
Modem FW: 4.0
Any suggestions would be greatly appreciated.
Thanks
Here is a sample of the running config:
Current configuration : 5766 bytes
!
!
version 15.0
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service compress-config
!
hostname cisco
!
boot-start-marker
boot system flash
boot-end-marker
!
logging buffered 4096
logging console errors
!
no aaa new-model
!
!
!
!
crypto pki trustpoint TP-self-signed-3625298599
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3625298599
revocation-check none
rsakeypair TP-self-signed-3625298599
!
!
crypto pki certificate chain TP-self-signed-3625298599
certificate self-signed 01
quit
dot11 syslog
ip source-route
!
!
no ip dhcp use vrf connected
!
ip dhcp pool 172.18.130.0/24
network 172.18.130.0 255.255.255.0
default-router 172.18.130.254
dns-server 193.231.100.130 193.231.100.134
domain-name xxxxxxxxxx
lease 0 0 30
!
!
no ip cef
no ip domain lookup
ip domain name xxxxx
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
archive
log config
hidekeys
vtp version 2
username xxx privilege 15 xxxx
!
!
ip ssh maxstartups 2
ip ssh authentication-retries 1
ip ssh logging events
!
!
!
!
!
!
!
interface ATM0
mtu 1492
no ip address
ip flow ingress
no atm ilmi-keepalive
dsl sync mode itu
dsl operating-mode adsl2+
bridge-group 1
bridge-group 1 spanning-disabled
!
!
interface ATM0.1 point-to-point
ip flow ingress
snmp trap link-status
pvc 0/35
pppoe-client dial-pool-number 1
!
!
interface FastEthernet0
description Connection to miniSW
!
!
interface FastEthernet1
!
!
interface FastEthernet2
description Wireless AP
!
!
interface FastEthernet3
!
!
interface Vlan1
ip address 172.18.130.254 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
!
interface Dialer0
mtu 1492
ip address negotiated
ip accounting output-packets
ip nat outside
ip virtual-reassembly max-reassemblies 32
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp pap sent-username xxxx password 7 xxx
ppp multilink
no cdp enable
!
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list NAT_ADDRESES interface Dialer0 overload
ip nat inside source static tcp 172.18.130.1 65535 interface Dialer0 65535
ip nat inside source static tcp 172.18.130.1 49000 interface Dialer0 49000
ip nat inside source static tcp 172.18.130.1 80 interface Dialer0 80
ip nat inside source static tcp 172.18.130.1 443 interface Dialer0 443
ip nat inside source static tcp 172.18.130.1 26 interface Dialer0 26
ip nat inside source static tcp 172.18.130.1 55555 interface Dialer0 55555
ip nat inside source static tcp 172.18.130.1 55556 interface Dialer0 55556
ip nat inside source static tcp 172.18.130.1 110 interface Dialer0 110
ip nat inside source static tcp 172.18.130.1 55553 interface Dialer0 55553
ip nat inside source static tcp 172.18.130.1 25 interface Dialer0 25
ip nat inside source static tcp 172.18.130.1 143 interface Dialer0 143
ip nat inside source static tcp 172.18.130.1 465 interface Dialer0 465
ip nat inside source static tcp 172.18.130.1 585 interface Dialer0 585
ip nat inside source static tcp 172.18.130.1 993 interface Dialer0 993
ip nat inside source static tcp 172.18.130.1 995 interface Dialer0 995
ip nat inside source static tcp 172.18.130.1 4040 interface Dialer0 4040
ip nat inside source static tcp 172.18.130.1 587 interface Dialer0 587
ip nat inside source static tcp 172.18.130.1 636 interface Dialer0 636
ip nat inside source static tcp 172.18.130.1 389 interface Dialer0 389
ip nat inside source static tcp 172.18.130.1 563 interface Dialer0 563
ip nat inside source static tcp 172.18.130.1 119 interface Dialer0 119
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip access-list standard NAT_ADDRESES
permit 172.18.130.0 0.0.0.255
ip access-list standard s
!
dialer-list 1 protocol ip permit
!
!
!
!
snmp-server group admin v3 noauth
snmp-server group admin v3 auth
snmp-server community msdp725 RO
!
control-plane
!
!
!
line con 0
privilege level 15
no modem enable
line aux 0
line vty 0 4
exec-timeout 5 0
privilege level 15
logging synchronous
login local
transport input ssh
!
scheduler max-task-time 5000
end
Whenever the clients behind the router and making traffic (downloading at max speed) the router's CPU goes to 99% all the time, note that behind the router is just one client. So far I ruled out the modem firmware and the IOS, also the IPS provides a bandwidth of 12mbps and due to the router's CPU issue more that 9mbps is not achieved.
IOS: c870-advipservicesk9-mz.150-1.M
Modem FW: 4.0
Any suggestions would be greatly appreciated.
Thanks
Here is a sample of the running config:
Current configuration : 5766 bytes
!
!
version 15.0
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service compress-config
!
hostname cisco
!
boot-start-marker
boot system flash
boot-end-marker
!
logging buffered 4096
logging console errors
!
no aaa new-model
!
!
!
!
crypto pki trustpoint TP-self-signed-3625298599
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3625298599
revocation-check none
rsakeypair TP-self-signed-3625298599
!
!
crypto pki certificate chain TP-self-signed-3625298599
certificate self-signed 01
quit
dot11 syslog
ip source-route
!
!
no ip dhcp use vrf connected
!
ip dhcp pool 172.18.130.0/24
network 172.18.130.0 255.255.255.0
default-router 172.18.130.254
dns-server 193.231.100.130 193.231.100.134
domain-name xxxxxxxxxx
lease 0 0 30
!
!
no ip cef
no ip domain lookup
ip domain name xxxxx
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
archive
log config
hidekeys
vtp version 2
username xxx privilege 15 xxxx
!
!
ip ssh maxstartups 2
ip ssh authentication-retries 1
ip ssh logging events
!
!
!
!
!
!
!
interface ATM0
mtu 1492
no ip address
ip flow ingress
no atm ilmi-keepalive
dsl sync mode itu
dsl operating-mode adsl2+
bridge-group 1
bridge-group 1 spanning-disabled
!
!
interface ATM0.1 point-to-point
ip flow ingress
snmp trap link-status
pvc 0/35
pppoe-client dial-pool-number 1
!
!
interface FastEthernet0
description Connection to miniSW
!
!
interface FastEthernet1
!
!
interface FastEthernet2
description Wireless AP
!
!
interface FastEthernet3
!
!
interface Vlan1
ip address 172.18.130.254 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
!
interface Dialer0
mtu 1492
ip address negotiated
ip accounting output-packets
ip nat outside
ip virtual-reassembly max-reassemblies 32
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp pap sent-username xxxx password 7 xxx
ppp multilink
no cdp enable
!
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list NAT_ADDRESES interface Dialer0 overload
ip nat inside source static tcp 172.18.130.1 65535 interface Dialer0 65535
ip nat inside source static tcp 172.18.130.1 49000 interface Dialer0 49000
ip nat inside source static tcp 172.18.130.1 80 interface Dialer0 80
ip nat inside source static tcp 172.18.130.1 443 interface Dialer0 443
ip nat inside source static tcp 172.18.130.1 26 interface Dialer0 26
ip nat inside source static tcp 172.18.130.1 55555 interface Dialer0 55555
ip nat inside source static tcp 172.18.130.1 55556 interface Dialer0 55556
ip nat inside source static tcp 172.18.130.1 110 interface Dialer0 110
ip nat inside source static tcp 172.18.130.1 55553 interface Dialer0 55553
ip nat inside source static tcp 172.18.130.1 25 interface Dialer0 25
ip nat inside source static tcp 172.18.130.1 143 interface Dialer0 143
ip nat inside source static tcp 172.18.130.1 465 interface Dialer0 465
ip nat inside source static tcp 172.18.130.1 585 interface Dialer0 585
ip nat inside source static tcp 172.18.130.1 993 interface Dialer0 993
ip nat inside source static tcp 172.18.130.1 995 interface Dialer0 995
ip nat inside source static tcp 172.18.130.1 4040 interface Dialer0 4040
ip nat inside source static tcp 172.18.130.1 587 interface Dialer0 587
ip nat inside source static tcp 172.18.130.1 636 interface Dialer0 636
ip nat inside source static tcp 172.18.130.1 389 interface Dialer0 389
ip nat inside source static tcp 172.18.130.1 563 interface Dialer0 563
ip nat inside source static tcp 172.18.130.1 119 interface Dialer0 119
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip access-list standard NAT_ADDRESES
permit 172.18.130.0 0.0.0.255
ip access-list standard s
!
dialer-list 1 protocol ip permit
!
!
!
!
snmp-server group admin v3 noauth
snmp-server group admin v3 auth
snmp-server community msdp725 RO
!
control-plane
!
!
!
line con 0
privilege level 15
no modem enable
line aux 0
line vty 0 4
exec-timeout 5 0
privilege level 15
logging synchronous
login local
transport input ssh
!
scheduler max-task-time 5000
end