North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Catalyst 6500 High Switch Proc

  • From: Ross Vandegrift
  • Date: Mon Nov 17 14:11:15 2008

On Sat, Nov 15, 2008 at 04:35:28PM -0500, Philip L. wrote:
> One thing to note, is that our main ACL for ingress traffic is applied 
> here due to historical reasons.  It's roughly 5000 single host entries 
> at present.  We also use these devices for NDE.

On a SUP7203BXL, if your ACL TCAM utilization is fine, this shouldn't
impact performance unless you're logging too much.  Since you've been
over the CPU utilization doc, I'm guessing you know that.

"show platform hardware capacity acl" will give you a breakdown on
your ACL TCAM usage.

> I'm probably missing some other key details, but what could influence 
> the SP like this?  Any insight would be appreciated.

Cisco says that Netflow-based features always handle the first packet
of a flow in software, but I don't know if this is the RP or the SP.
It would make sense if a first-flow packet that didn't need punting
hit the SP and not the RP.  In that case, your traffic level with
netflow enabled could explain your high SP utilization.

Ross Vandegrift
[email protected]

"If the fight gets hot, the songs get hotter.  If the going gets tough,
the songs get tougher."
	--Woody Guthrie