High CPU utilization w/VRF NAT - Cat6500

Tue Nov 13 20:43:40 UTC 2012

What Supervisior do you have? If its an older SUP NAT may be done in
software, which sounds
like you are currently experiencing. Its not hard to max out a 6500 CPU.

-Mike

On Tue, Nov 13, 2012 at 1:44 PM, Kenneth McRae
<kenneth.mcrae at dreamhost.com>wrote:

> I would recommend you do this on a firewall (fwsm or something external)..
>
> On Tue, Nov 13, 2012 at 10:39 AM, Rodrick Brown <rodrick.brown at gmail.com
> >wrote:
>
> > ~80 or so static NAT's configured, multiple versions of IOS tested.
> > Most of the traffic is being punted to the CPU through the NAT interfaces
> > causing high CPU utilization.
> >
> > Increasing fast aging timers had 0 benefit, TCAM utilization is less than
> > 5%
> > Does anyone have any thoughts on other configuration tweaks I should
> try? I
> > think we're at the point where new hardware maybe FWSM or another
> platform
> > for NAT should be explored.
> >
> > --RB
> >
>
>
>
> --
> Best Regards,
>
>
>
> Kenneth McRae
> *Sr. Network Engineer*
> kenneth.mcrae at dreamhost.com
> Ph: 323-375-3814
> www.dreamhost.com
>