SRX Services Gateway
SRX Services Gateway

SRX210H CPU exceedes, limitation of PPPoE tunnel bandwith

[ Edited ]
‎11-27-2017 09:05 AM

Hi all,

After long time troubleshooting, i come across that the SRX is limitating the bandwith of the PPPoE Tunnel.

 

Nov 27 17:52:42  SRX210 PERF_MON: RTPERF_CPU_THRESHOLD_EXCEEDED: 
FPC 0 PIC 0 CPU utilization exceeds threshold, current value=90 Nov 27 17:52:59 SRX210 PERF_MON: RTPERF_CPU_THRESHOLD_EXCEEDED:
FPC 0 PIC 0 CPU utilization exceeds threshold, current value=100

 

Every time I start the speedtest, im getting the same amount of logs. I can confirm that the speed is normal when using modem of ISP. 

How is this happening?

I included my config. Running JUNOS Software Release [12.1X46-D60.4].

Attachments

6 REPLIES 6
SRX Services Gateway

Re: SRX210H CPU exceedes, limitation of PPPoE tunnel bandwith

‎11-30-2017 12:47 AM

 

Check what is causing the CPU to spike!

 

set task accounting on
show task accounting

 

 

_
Regards
Malik
4xJNCIE, 3xJNCSP, 3xJNCDS, CCIE, HCIE, VCIX-DCV, VCIX-NV, CISSP, JNCIS-ENT-Cloud, JNCIS-DevOps, PCNSE7

[If it helped to solve your problem, Please mark it "Accept as solution"; Kudos are always Appreciated]
SRX Services Gateway

Re: SRX210H CPU exceedes, limitation of PPPoE tunnel bandwith

[ Edited ]
‎12-01-2017 04:41 PM

serdar@SRX210> show task accounting
Task accounting is enabled.

Task Started User Time System Time Longest Run
Scheduler 433 0.083 0.066 0.000
LMP Client 23 0.011 0.008 0.001
Memory 2 0.000 0 0.000
hakr 1 0.000 0.000 0.000
PIM I/O./var/run/ppmd_con 9 0.001 0.000 0.000
BFD I/O./var/run/bfdd_con 9 0.001 0.000 0.000
KRT 34 0.003 0.001 0.000
MGMT_Listen./var/run/rpd_ 85 0.046 0.053 0.001
SNMP Subagent./var/run/sn 15 0.006 0.003 0.001

 

 
serdar@SRX210> show chassis routing-engine
Routing Engine status:
Temperature 49 degrees C / 120 degrees F
Total memory 1024 MB Max 594 MB used ( 58 percent)
Control plane memory 544 MB Max 375 MB used ( 69 percent)
Data plane memory 480 MB Max 216 MB used ( 45 percent)
CPU utilization:
User 8 percent
Background 0 percent
Kernel 17 percent
Interrupt 0 percent
Idle 75 percent
Model RE-SRX210H
Serial ID AADL3396
Start time 2017-12-01 23:36:25 CET
Uptime 2 hours, 6 minutes, 44 seconds
Last reboot reason 0x1Smiley Tongueower cycle/failure
Load averages: 1 minute 5 minute 15 minute
0.39 0.21 0.13

 

does it make any sense?

SRX Services Gateway

Re: SRX210H CPU exceedes, limitation of PPPoE tunnel bandwith

‎12-25-2017 02:57 PM

anyone?

SRX Services Gateway

Re: SRX210H CPU exceedes, limitation of PPPoE tunnel bandwith

‎12-25-2017 09:25 PM

Hi serdar, 

 

The messages you see are related to the dataplane CPU utilization. This is always related to the traffic pattern hitting the device at that point. It could be that the rate of traffic hitting the SRX is reaching its device limitation in terms of packets per second (pps) and bytes per second (bps) .

 

Do you know when you being the speed test , what are the pps and bps values of traffic hitting the SRX? 

 

When you run the speed test, capture the below data at least 3-5 times from the CLI of SRX and attach the outputs here, 

 

set cli timestamp

show security monitoring performance spu

show security monitoring performance session 

show interfaces extensive | no-more 

 

In Realtime you can run the command "monitor interface traffic" to see the pps / bps hitting each interface . 

 

SRX Services Gateway

Re: SRX210H CPU exceedes, limitation of PPPoE tunnel bandwith

‎12-26-2017 10:56 AM

Hi Folks,

 

My 2 cents on this…

 

We need to identify the top talkers and suggest customer to put in a firewall filter to discard this traffic to see if that helps to improve CPU/PPS

 

-Python JNCIE 3X [SP|DC|ENT] JNCIP-SEC JNCDS 3X [ WAN | DC|SEC] JNCIS-Cloud JNCIS-DevOps CCIP ITIL
#Please mark my solution as accepted if it helped, Kudos are appreciated as well.
SRX Services Gateway

Re: SRX210H CPU exceedes, limitation of PPPoE tunnel bandwith

‎12-26-2017 11:02 AM

Hi Folks,

 

To add Firewall performance (max) is 850 Mbps

 

https://www.juniper.net/sites/us/en/products-services/security/srx-series/srx210/index.page

 

 

-Python JNCIE 3X [SP|DC|ENT] JNCIP-SEC JNCDS 3X [ WAN | DC|SEC] JNCIS-Cloud JNCIS-DevOps CCIP ITIL
#Please mark my solution as accepted if it helped, Kudos are appreciated as well.