Community discussions

 
User avatar
Maggiore81
Member Candidate
Member Candidate
Topic Author
Posts: 221
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Downgrade from 6.18 to 5.26 - IPSec 100% CPU

Tue Aug 19, 2014 11:31 am

Hello
If I downgrade from a plain RB750 6.18 (just NAT and some firewall rules) to 5.26, after about 30sec from boottime, the CPU goes 100% and IPSEC is using 100% CPU (according to profiler tool).

I need to unistall or disable "security" package.

re-upgrading to 6.18 with security enabled doesnt show this issue.
Dott. Elia Spadoni
---
Network Administrator,
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2946
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Downgrade from 6.18 to 5.26 - IPSec 100% CPU

Tue Aug 19, 2014 11:38 pm

It's already knowed problem.

The downgrade between so "distant" version prospect everytime problems...

Ciao.
I'm Italian, not English. Sorry for my imperfect grammar.
 
User avatar
richinuk
Member Candidate
Member Candidate
Posts: 142
Joined: Tue Jan 22, 2008 9:30 pm

Re: Downgrade from 6.18 to 5.26 - IPSec 100% CPU

Wed Aug 20, 2014 12:31 am

Same here. Best option I found was to export the config in 6.18, downgrade to 5.26, then nuke the config (/system reset) and re-apply from the export. Works fine from then onwards.

Rich
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2946
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Downgrade from 6.18 to 5.26 - IPSec 100% CPU

Wed Aug 20, 2014 4:43 am

On this case, system reset do not solve anything, because there is not "actual removable configuration" problem, but is like some system file are preserved between versions and use full cpu...

The best is use netinstall everytime, but obviously when is not easy use netinstall, downgrading is a risk...
I'm Italian, not English. Sorry for my imperfect grammar.
 
odie
Member Candidate
Member Candidate
Posts: 216
Joined: Wed Mar 23, 2005 8:31 am
Location: Austria
Contact:

Re: Downgrade from 6.18 to 5.26 - IPSec 100% CPU

Wed Aug 20, 2014 8:53 am

i had the same problem on a box (RB532) up a mountain - disabled security and advanced tools then cpu was normal...
 
User avatar
Maggiore81
Member Candidate
Member Candidate
Topic Author
Posts: 221
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: Downgrade from 6.18 to 5.26 - IPSec 100% CPU

Wed Aug 20, 2014 11:37 am

I have left the 5.26 without security package... and I have resolved. I enabled telnet access since I will access it from GUI and then from my backbone... so a secure network.
Dott. Elia Spadoni
---
Network Administrator,
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
ronniee
Member Candidate
Member Candidate
Posts: 123
Joined: Sun Jan 15, 2006 9:32 pm

Re: Downgrade from 6.18 to 5.26 - IPSec 100% CPU

Tue Sep 09, 2014 8:52 am

I had the same problem with an old RB192 model. I upgraded to the latest 6.18 or 19 i don't know exactly, but not worked.
Downgraded to 5.24 and CPU has all time 100%.
Now I disabled the "security" package is OK.

Who is online

Users browsing this forum: Bing [Bot] and 97 guests