Routing Issue Cisco 3640/PIX 520/Cisco 2924

[TekRyan]

I have a Quark!!!

We have a 6Mbit ATM/IMA on a Cisco 3640 ISO 12.2(19),(R4700 CPU at 100Mhz and 128Megs ram). Connected to a Cisco 2924 switch then to the Cisco PIX 520(P2-350 384Meg).

Here is my issue. Internet speeds in the network slow down during business hours(I know, what Im I thinking this is normal) but nothing is out of memory or running high CPU. Internet bandwidth is about 60% max in and 20% max out.

One issue Im not sure on is that I use SNMP to get my info stats. When I can use "show processes cpu history" on the 3640 command and it looks to hit 100% CPU for a MAX sometimes and SNMP doesnt show that.

What are some things that I should look for in trouble shooting this quark? Im I Maxing connections or something? Should I move to another router 7206?


Here is my config for the Cisco 3640.

Building configuration...

Current configuration : 3751 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname SBC-ATM
!
boot system flash c3640-is-mz.121-19.bin
boot system flash
enable secret 5 password
!
ip subnet-zero
!
!
!
no call rsvp-sync
!
!
!
!
!
!
!
!
interface FastEthernet0/0
ip address xxx.xxx.228.1 255.255.252.0 secondary
ip address xxx.xxx.91.1 255.255.255.0 secondary
ip address xxx.xxx.91.201 255.255.255.0 secondary
ip address xxx.xx.95.129 255.255.255.224 secondary
ip address xxx.xx.244.1 255.255.252.0
ip access-group 1 in
rate-limit input access-group 101 2048000 8000 8000 conform-action transmit exceed-action drop
rate-limit output access-group 101 2048000 8000 8000 conform-action transmit exceed-action drop
no ip mroute-cache
speed 100
full-duplex
!
interface ATM1/0
no ip address
no ip mroute-cache
no atm auto-configuration
no atm ilmi-keepalive
no atm address-registration
no atm ilmi-enable
ima-group 1
clock source internal
no scrambling-payload
cablelength short 133
!
interface ATM1/1
no ip address
no ip mroute-cache
no atm auto-configuration
no atm ilmi-keepalive
no atm address-registration
no atm ilmi-enable
ima-group 1
clock source internal
no scrambling-payload
cablelength short 133
!
interface ATM1/2
no ip address
no ip mroute-cache
no atm auto-configuration
no atm ilmi-keepalive
no atm address-registration
no atm ilmi-enable
ima-group 1
clock source internal
no scrambling-payload
cablelength short 133
!
interface ATM1/3
no ip address
no ip mroute-cache
no atm auto-configuration
no atm ilmi-keepalive
no atm address-registration
no atm ilmi-enable
ima-group 1
clock source internal
no scrambling-payload
cablelength short 133
!
interface ATM1/4
no ip address
no ip mroute-cache
no atm auto-configuration
no atm ilmi-keepalive
no atm address-registration
no atm ilmi-enable
ima-group 1
clock source internal
no scrambling-payload
cablelength short 133
!
interface ATM1/5
no ip address
no ip mroute-cache
no atm auto-configuration
no atm ilmi-keepalive
no atm address-registration
no atm ilmi-enable
ima-group 1
clock source internal
no scrambling-payload
cablelength short 133
!
interface ATM1/6
no ip address
no ip mroute-cache
shutdown
no atm ilmi-keepalive
no scrambling-payload
!
interface ATM1/7
no ip address
no ip mroute-cache
shutdown
no atm ilmi-keepalive
no scrambling-payload
!
interface ATM1/IMA1
ip address xx.xxx.38.194 255.255.255.252
no atm auto-configuration
no atm ilmi-keepalive
no atm address-registration
no atm ilmi-enable
pvc sbcis 2/34
protocol ip xx.xxx.38.193 broadcast
vbr-nrt 6000 6000 1
encapsulation aal5snap
!
ima clock-mode common 0
!
ip classless
ip route 0.0.0.0 0.0.0.0 xx.xxx.38.193 name SBCIS
no ip http server
!
access-list 1 permit xxx.xx.244.0 0.0.3.255
access-list 1 permit xxx.xxx.91.0 0.0.0.255
access-list 1 permit xxx.xxx.228.0 0.0.3.255
access-list 1 permit xxx.xx.95.128 0.0.0.32
access-list 2 deny any
access-list 101 permit ip any xxx.xxx.91.0 0.0.0.255
access-list 101 permit icmp any xxx.xxx.91.0 0.0.0.255
snmp-server community xxxxxxxxxxxxxxxxxxxxxxx RO
snmp-server enable traps tty
!
dial-peer cor custom
!
!
!
!
line con 0
line aux 0
line vty 0 4
access-class 1 in
password
login
!
end

SBC-ATM#

 

[baddos]

Try adding ip cef to your global config, and adding "no ip unreachables" to your interface Fa0/0 config.

 

[TekRyan]

Thanks Man, I just added that to my config. I will see if there is any change.

 

[baddos]

You also might want to check "show interface fa0/0" to see if there are any errors.

 

[TekRyan]

Well the interface FA0/0 is not having any error's. I looks like the IP CEF and NO IP UNREACHABLES commands worked well. My SHOW PROCESSES CPU HISTORY is showing lower CPU on the router. It doesnt hit 100% at all, max now is 40%. Thanks alot for that info.