High CPU utilization w/VRF NAT - Cat6500

Kenneth McRae kenneth.mcrae at dreamhost.com
Tue Nov 13 18:44:55 UTC 2012


I would recommend you do this on a firewall (fwsm or something external)..

On Tue, Nov 13, 2012 at 10:39 AM, Rodrick Brown <rodrick.brown at gmail.com>wrote:

> ~80 or so static NAT's configured, multiple versions of IOS tested.
> Most of the traffic is being punted to the CPU through the NAT interfaces
> causing high CPU utilization.
>
> Increasing fast aging timers had 0 benefit, TCAM utilization is less than
> 5%
> Does anyone have any thoughts on other configuration tweaks I should try? I
> think we're at the point where new hardware maybe FWSM or another platform
> for NAT should be explored.
>
> --RB
>



-- 
Best Regards,



Kenneth McRae
*Sr. Network Engineer*
kenneth.mcrae at dreamhost.com
Ph: 323-375-3814
www.dreamhost.com



More information about the NANOG mailing list