High CPU utilization w/VRF NAT - Cat6500
Kenneth McRae
kenneth.mcrae at dreamhost.com
Tue Nov 13 18:44:55 UTC 2012
I would recommend you do this on a firewall (fwsm or something external)..
On Tue, Nov 13, 2012 at 10:39 AM, Rodrick Brown <rodrick.brown at gmail.com>wrote:
> ~80 or so static NAT's configured, multiple versions of IOS tested.
> Most of the traffic is being punted to the CPU through the NAT interfaces
> causing high CPU utilization.
>
> Increasing fast aging timers had 0 benefit, TCAM utilization is less than
> 5%
> Does anyone have any thoughts on other configuration tweaks I should try? I
> think we're at the point where new hardware maybe FWSM or another platform
> for NAT should be explored.
>
> --RB
>
--
Best Regards,
Kenneth McRae
*Sr. Network Engineer*
kenneth.mcrae at dreamhost.com
Ph: 323-375-3814
www.dreamhost.com
More information about the NANOG
mailing list