Cisco Cisco ASR 5000
Global Configuration Mode Commands (A-K)
congestion-control threshold service-control-cpu-utilization ▀
Command Line Interface Reference, StarOS Release 18 ▄
5369
Usage
Use this command to set the critical, major and minor threshold levels of average percent utilization of CPUs
on which a Demux Manager software task instance is running as measured in 10-second intervals.
Thresholds dictate the conditions for which congestion control is to be enabled and establish limits for
defining the state of the system (congested or clear). When these thresholds are crossed, an SNMP trap is
generated (starCongestion) and, if configured, a congestion action-profile is invoked as well.
When the service-control-cpu-utilization critical threshold setting is exceeded, ipsecmgrs running in the
congested CPU are notified of the congestion. The ipsecmgrs raise traps for service-congestion exceeded and
update the NPU so that no new calls are sent to those ipsecmgrs. The NPU does not send any new calls to the
congested ipsecmgrs. However, if all ipsecmgrs are congested the action is always drop regardless of the
setting for congestion policy action. The packet drops are silently done by the NPU.
When ipsecmgrs are congested and an NPU receives a packet whose Security Parameter Index, Initiator
(SPIi) in IKE_SA_INIT matches that of a currently established session, the packet is classified as belonging
to the existing session. Since congestion action is applied only on new sessions, such IKE_SA_INIT packets
are allowed to create sessions. If the IKE_SA_INIT uses an SPIi which does not match any of the existing
sessions, it is processed according to the congestion policy action.
This command requires a valid product license.
on which a Demux Manager software task instance is running as measured in 10-second intervals.
Thresholds dictate the conditions for which congestion control is to be enabled and establish limits for
defining the state of the system (congested or clear). When these thresholds are crossed, an SNMP trap is
generated (starCongestion) and, if configured, a congestion action-profile is invoked as well.
When the service-control-cpu-utilization critical threshold setting is exceeded, ipsecmgrs running in the
congested CPU are notified of the congestion. The ipsecmgrs raise traps for service-congestion exceeded and
update the NPU so that no new calls are sent to those ipsecmgrs. The NPU does not send any new calls to the
congested ipsecmgrs. However, if all ipsecmgrs are congested the action is always drop regardless of the
setting for congestion policy action. The packet drops are silently done by the NPU.
When ipsecmgrs are congested and an NPU receives a packet whose Security Parameter Index, Initiator
(SPIi) in IKE_SA_INIT matches that of a currently established session, the packet is classified as belonging
to the existing session. Since congestion action is applied only on new sessions, such IKE_SA_INIT packets
are allowed to create sessions. If the IKE_SA_INIT uses an SPIi which does not match any of the existing
sessions, it is processed according to the congestion policy action.
This command requires a valid product license.
Example
The following command configures a minor threshold level of 25%.
congestion-control threshold service-control-cpu-utilitization minor 25
This setting will remain in configuration unless you specify another minor threshold level in place of 25.
The following command returns the critical, major, and minor thresholds levels to their default values:
The following command returns the critical, major, and minor thresholds levels to their default values:
default congestion-control threshold service-control-cpu-utilization