Community discussions

MikroTik App
 
Freedomwifi
just joined
Topic Author
Posts: 14
Joined: Fri Feb 06, 2009 7:48 pm

IPSEC High Cpu

Fri Jul 08, 2016 9:55 pm

RB-2011 v6.36rc37
Not using Ipsec at all.  Any ideas, reboot no success.  Using pptp connection moving 200kbps max.
Any help would be appreciated.
You do not have the required permissions to view the files attached to this post.
 
Zorro
Long time Member
Long time Member
Posts: 675
Joined: Wed Apr 16, 2014 2:43 pm

Re: IPSEC High Cpu

Fri Jul 08, 2016 11:03 pm

to troubleshoot things - try after backing up present config(its a Must IMHO)before - disable or even remove some packages in say order: "Security" then "ppp", "routing", "advanced", "mpls", "muticast", "hotspot".
if thats happens with "security" and you not rely much on remote monitoring(and thus not really need "secure" access from WAN interfaces) - you can safely remove that thing.
generally thats come from 3 causes, two most popular from them are: 1. corrupted RB config. 2. corrupted ROS itself(eg integrity issues). in first case - try dump you config and attempt to sanitise/cleanse it, de-obfuscate. in second - Netinstall would be great option to try. and third option - heavy stress from someone's traffic, trying bruteforcing access to you gear/network(implement detection and blocking. preferably combined with heavy whitelisting aswell. ROS didn't support 2/3-way auth yet, sadly).
 
Freedomwifi
just joined
Topic Author
Posts: 14
Joined: Fri Feb 06, 2009 7:48 pm

Re: IPSEC High Cpu

Sun Jul 10, 2016 4:21 pm

I've tried all of your recommendations, sent request to support so it's a waiting game now.  
 
Zorro
Long time Member
Long time Member
Posts: 675
Joined: Wed Apr 16, 2014 2:43 pm

Re: IPSEC High Cpu

Mon Jul 11, 2016 9:28 pm

if you really so desperate - i would started with Netinstall perhaps.
among unsual issues - malware sometimes cause that
some time ago - ROS wasn't affected(as well as majority other routers firmware, but nowadays even ROS apparently targeted by creators of).
but frequency -w its usually bruteforce impact. also there was version-specific issues on some RB's so upgrading/downgrading ROS may help somewhat.
 
Freedomwifi
just joined
Topic Author
Posts: 14
Joined: Fri Feb 06, 2009 7:48 pm

Re: IPSEC High Cpu

Wed Jul 13, 2016 3:07 am

Desperate?  You certainly have no problem reading things into what I posted.  Reset to factory again, reprogrammed and all seems to be well.  Do an export and look for errors, this may be a sure way to see if a package is corrupt.

 
You do not have the required permissions to view the files attached to this post.
 
Zorro
Long time Member
Long time Member
Posts: 675
Joined: Wed Apr 16, 2014 2:43 pm

Re: IPSEC High Cpu

Thu Jul 14, 2016 11:29 pm

if under "reset to factory" you mean "reset config" then yep, it may help in some cases.
but in more serious(whin integrity of ROS itself compromised, not config/settings)Netinstall remain the Only reliable option to fix that.
same about impact of flash storage wearing off and etc issues.

Who is online

Users browsing this forum: GoogleOther [Bot] and 191 guests