"hanging" of pppoe server

hello,

Since nearly two weeks, I encounter problems with my pppoe server. The load of CPU goes quickly at 100% and that plants my server. My pppoe server turns on a Mikrotik’s RouterOS (v2.9.46, license level6). So for temporarily solve this problem which I am obliged to re-initializing all the router by one reboot.
PC’s config where is installed the routeros is the following one:
memory RAM: 756MB
frequency processor: 3Ghz
Disk hard: 80GB

The problem started when the number of our customers pppoe exceeded 500. Actually we border 700 pppoe custumers.

Any help would be appreciated.

Christian MIGNAN

PS: Please herewith find the configuration of my routeros

**********ADDRESS************

[admin@oti-pppoe]>/ip address
[admin@oti-pppoe] ip address>add address=10.130.2.252/24  interface=eth-pci-2
[admin@oti-pppoe] ip address>add address=10.81.91.10/29  interface=eth-pci-1



****POOL*********

[admin@MikroTik] > ip pool

[admin@MikroTik] ip pool>add name=all-pppoe-range ranges=10.4.251.1-10.4.255.253



*****RADIUS******

[admin@MikroTik] > radius

[admin@MikroTik] radius>add service=ppp address=10.x.y.9 secret=routeros




*******PPP PROFIL************

[admin@MikroTik] radius> /ppp profile

[admin@MikroTik] ppp profile> add  name="all-pppoe-profile" local-address=10.4.255.254 address=all-pppoe-range session-timeout=0s idle-timeout=0s use-compression=no use-vj-compression=no use-encryption=no only-one=no change-tcp-mss=yes incoming-filter="" outgoing-filter="" dns-server=41.X.Y.1,81.X.Y.3




**********INTERFACE PPPOE-SERVER *********

[admin@MikroTik] ppp profile> /interface

[admin@MikroTik] interface pppoe-server server>

[admin@oti-pppoe] interface pppoe-server server>add service-name="oti-pppoe" interface=pppoe-server max-mtu=1480 max-mru=1480 authentication=pap,chap,mschap1,mschap2 keepalive-timeout=disabled one-session-per-host=yes max-sessions=0 default-profile=all-pppoe-profil



*******IP FIREWALL NAT***********

[admin@MikroTik] interface pppoe-server server> /ip firewall nat

[admin@MikroTik] ip firewall nat>add  chain=srcnat action=src-nat to-addresses=41.X.Y.192 to-ports=0-65535 src-address=10.4.251.0/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.193 to-ports=0-65535 src-address=10.4.251.32/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.194 to-ports=0-65535 src-address=10.4.251.64/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.195 to-ports=0-65535 src-address=10.4.251.96/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.196 to-ports=0-65535 src-address=10.4.251.128/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.197 to-ports=0-65535 src-address=10.4.251.192/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.198 to-ports=0-65535 src-address=10.4.251.224/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.199 to-ports=0-65535 src-address=10.4.251.160/28 

add chain=srcnat action=src-nat to-addresses=41.X.Y.200 to-ports=0-65535 src-address=10.4.251.176/29 

add chain=srcnat action=src-nat to-addresses=41.X.Y.201 to-ports=0-65535 src-address=10.4.251.184/29 

add chain=srcnat action=src-nat to-addresses=41.X.Y.202 to-ports=0-65535 src-address=10.4.252.0/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.203 to-ports=0-65535 src-address=10.4.252.32/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.204 to-ports=0-65535 src-address=10.4.252.64/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.205 to-ports=0-65535 src-address=10.4.252.96/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.206 to-ports=0-65535 src-address=10.4.252.128/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.207 to-ports=0-65535 src-address=10.4.252.160/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.208 to-ports=0-65535 src-address=10.4.252.192/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.209 to-ports=0-65535 src-address=10.4.252.224/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.210 to-ports=0-65535 src-address=10.4.253.0/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.211 to-ports=0-65535 src-address=10.4.253.32/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.212 to-ports=0-65535 src-address=10.4.253.96/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.213 to-ports=0-65535 src-address=10.4.253.128/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.214 to-ports=0-65535 src-address=10.4.253.160/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.215 to-ports=0-65535 src-address=10.4.253.192/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.216 to-ports=0-65535 src-address=10.4.253.224/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.217 to-ports=0-65535 src-address=10.4.253.64/28 

add chain=srcnat action=src-nat to-addresses=41.X.Y.218 to-ports=0-65535 src-address=10.4.253.80/28 

add chain=srcnat action=src-nat to-addresses=41.X.Y.219 to-ports=0-65535 src-address=10.4.254.0/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.220 to-ports=0-65535 src-address=10.4.254.32/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.221 to-ports=0-65535 src-address=10.4.254.64/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.222 to-ports=0-65535 src-address=10.4.254.96/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.223 to-ports=0-65535 src-address=10.4.254.128/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.224 to-ports=0-65535 src-address=10.4.254.160/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.225 to-ports=0-65535 src-address=10.4.254.192/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.226 to-ports=0-65535 src-address=10.4.254.224/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.227 to-ports=0-65535 src-address=10.4.255.0/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.228 to-ports=0-65535 src-address=10.4.255.32/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.229 to-ports=0-65535 src-address=10.4.255.64/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.230 to-ports=0-65535 src-address=10.4.255.96/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.231 to-ports=0-65535 src-address=10.4.255.128/28 

add chain=srcnat action=src-nat to-addresses=41.X.Y.232 to-ports=0-65535 src-address=10.4.255.144/28
 
add chain=srcnat action=src-nat to-addresses=41.X.Y.233 to-ports=0-65535 src-address=10.4.255.160/27 

add chain=srcnat action=src-nat to-addresses=41.X.Y.234 to-ports=0-65535 src-address=10.4.255.224/27
 
add chain=srcnat action=src-nat to-addresses=41.X.Y.235 to-ports=0-65535 src-address=10.4.255.192/27 



*********DNS*************

[admin@oti-pppoe] >/ip dns
[admin@oti-pppoe] ip dns>add  primary-dns: 41.X.Y.1 secondary-dns: 81.X.Y.18

If we talk about pppoe servers with RADIUS authentication - I really suggest to update to RouterOS v3.3 - Even in RC versions I have less problems, than with 2.9

ok, thanks - I’ve updated to v3.3 and all seems go well. So we’ll have an eye on it (CPU Load).

See you